last executing test programs: 1m49.254737041s ago: executing program 4 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, &(0x7f00000002c0), 0x2, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000009a80)={0x24, 0x1, 0x2}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 1m47.985634302s ago: executing program 4 (id=528): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r3, 0xd6fff000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) 1m46.637405176s ago: executing program 4 (id=535): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m43.051908517s ago: executing program 2 (id=554): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1m42.639350907s ago: executing program 2 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) clock_gettime(0x3, &(0x7f00000000c0)) 1m42.11957755s ago: executing program 4 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m41.896754306s ago: executing program 4 (id=564): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r1}, 0x18) writev(0xffffffffffffffff, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b905d6f66b8261f", 0xf}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)={'c', ' *:* ', 'rm\x00'}, 0x9) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f023}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffff}, 0x1c) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 1m41.70505113s ago: executing program 2 (id=567): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 1m41.666197432s ago: executing program 2 (id=568): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1m41.621305382s ago: executing program 2 (id=569): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x1100, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x16}, @fda={0x66646185, 0x400, 0x0, 0x14}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1m41.589275203s ago: executing program 2 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 1m41.477071406s ago: executing program 4 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'rose0\x00', {0x1}, 0x563f}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7fff}}}}}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x6, 0x300, 0xfc, 0x0, 0x0, 0x8}, 0x1c) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000001080)='syzkaller\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto(r5, &(0x7f00000005c0)="a1bfc48ba9", 0xfdef, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 1m26.56556835s ago: executing program 32 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 1m26.408329614s ago: executing program 33 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'rose0\x00', {0x1}, 0x563f}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7fff}}}}}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x6, 0x300, 0xfc, 0x0, 0x0, 0x8}, 0x1c) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000001080)='syzkaller\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto(r5, &(0x7f00000005c0)="a1bfc48ba9", 0xfdef, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 26.042692807s ago: executing program 3 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000008c0)={[{@rodir}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8no}, {@numtail}, {@fat=@tz_utc}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 24.648590172s ago: executing program 3 (id=823): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r3, 0xd6fff000) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) 23.664959357s ago: executing program 3 (id=828): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) preadv2(r1, &(0x7f0000001540)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20.976992564s ago: executing program 3 (id=834): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.74084672s ago: executing program 3 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 20.420497278s ago: executing program 3 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x3fe}, 0x4}}]}, {0xd}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)='\r', 0x5dc}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 16.604342954s ago: executing program 6 (id=853): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0', 0xb) 15.761493475s ago: executing program 0 (id=854): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x7}) r3 = io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x2, 0x2}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000940)=@add_del={0x2, &(0x7f0000000900)='syz_tun\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0xd4, 0x81}]}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="14010000210001000000000000000000058159800c000100"], 0x114}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000005500e502000000000000000007"], 0x38}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) 14.425557619s ago: executing program 6 (id=856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.210980129s ago: executing program 5 (id=858): r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) init_module(&(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x42, 0x9, 0x6, 0x6, 0x7e9, 0x2, 0x0, 0x3, 0x17e, 0x40, 0x1d0, 0x6, 0x4, 0x38, 0x1, 0x3, 0x29b, 0x5}, [{0x4, 0x7c, 0x7, 0xf, 0x5, 0x8c, 0xffff, 0x9}]}, 0x78, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x38f9, 0x0) splice(r3, 0x0, r0, 0x0, 0x7fffffffffffffff, 0x1) write(r1, &(0x7f0000000040), 0xffffff4a) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 12.264662253s ago: executing program 5 (id=859): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2400, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c00008008", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 3.695482228s ago: executing program 0 (id=860): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x3000008, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @private0, 0x1}, 0x1c) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 3.671152508s ago: executing program 34 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x3fe}, 0x4}}]}, {0xd}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)='\r', 0x5dc}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 3.636538009s ago: executing program 1 (id=863): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd3384870", 0x120}, {&(0x7f00000003c0)="641a6a2b863c0dd89801", 0xa}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8", 0xa4}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34987046e18afad35e79c363b701eb8455e1f4ea1c12e4a706789339df763dd4505497e474d21689760747e6d2c3c2d8", 0xba}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8c3292328dce4b38ecc0c6cbaed777b7d2f6f229a0ee04cc5", 0x68}], 0x2}}], 0x2, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.58354047s ago: executing program 1 (id=864): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) preadv2(r1, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x0, 0x0) 3.465671794s ago: executing program 5 (id=865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000500)="df0331754afc5f42cdb3aae5350c726985c71f06680fefc4ae18808fb67d7243e2a126e872f992ed7b68525a9c8e773cb57ef3ea2a83e0878d423b95549cf13e272badc271c89e40222401e118b91918835829b4260e2f9af6f76e065da8a9fd04252e94ba618bda8f60c2207c6be501122070198d79a09f"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.436371914s ago: executing program 6 (id=866): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0', 0xb) 3.20869353s ago: executing program 1 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 3.096563833s ago: executing program 1 (id=868): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.695882883s ago: executing program 0 (id=869): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x7}) r3 = io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x2, 0x2}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000940)=@add_del={0x2, &(0x7f0000000900)='syz_tun\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0xd4, 0x81}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) 2.268414973s ago: executing program 5 (id=870): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000580)={0x6, "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"}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4ef, &(0x7f00000003c0)="$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") ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000ec0)={'wg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}) 2.206353355s ago: executing program 6 (id=871): syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @remote}, {0x14, 0x0, 0x0, @broadcast, "64f9288f099b429702803e177ab6028b371a"}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) 1.083361353s ago: executing program 1 (id=872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000140), 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 1.081649693s ago: executing program 0 (id=873): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 954.090166ms ago: executing program 0 (id=874): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2400, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c00008008", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 604.751525ms ago: executing program 5 (id=875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 577.479806ms ago: executing program 6 (id=876): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) preadv2(r1, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x0, 0x0) 550.285836ms ago: executing program 0 (id=877): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r4, 0xd6fff000) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 64.457419ms ago: executing program 6 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x3000008, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @private0, 0x1}, 0x1c) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 55.868829ms ago: executing program 1 (id=879): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000500)="df0331754afc5f42cdb3aae5350c726985c71f06680fefc4ae18808fb67d7243e2a126e872f992ed7b68525a9c8e773cb57ef3ea2a83e0878d423b95549cf13e272badc271c89e40222401e118b91918835829b4260e2f9af6f76e065da8a9fd04252e94ba618bda8f60c2207c6be501122070198d79a09f"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=880): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0', 0xb) kernel console output (not intermixed with test programs): phys_seg 1 prio class 2 [ 73.879076][ T5281] netlink: 'syz.1.267': attribute type 4 has an invalid length. [ 74.235526][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 74.247863][ T5286] binder: BINDER_SET_CONTEXT_MGR already set [ 74.249115][ T5286] binder: 5285:5286 ioctl 4018620d 20004a80 returned -16 [ 74.332615][ T5290] loop0: detected capacity change from 0 to 1024 [ 74.339594][ T5292] loop4: detected capacity change from 0 to 128 [ 74.353941][ T5292] EXT4-fs (loop4): Test dummy encryption mode enabled [ 74.356273][ T4323] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.431980][ T5292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.526591][ T5298] overlayfs: missing 'workdir' [ 74.763706][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 74.869767][ T5302] device syzkaller0 entered promiscuous mode [ 74.872996][ T5302] tipc: Enabled bearer , priority 0 [ 74.884090][ T5302] tipc: Resetting bearer [ 74.888746][ T5301] tipc: Resetting bearer [ 74.895335][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 74.927638][ T5301] tipc: Disabling bearer [ 75.034578][ T5314] loop2: detected capacity change from 0 to 1024 [ 75.036496][ T5314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.107425][ T5314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 75.108875][ T5314] System zones: 0-1, 3-12 [ 75.109998][ T5314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.522478][ T5322] netlink: 'syz.2.282': attribute type 4 has an invalid length. [ 75.763319][ T5325] binder: 5324:5325 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 75.817068][ T5329] UDC core: g1: couldn't find an available UDC or it's busy [ 75.901459][ T5332] loop3: detected capacity change from 0 to 128 [ 75.913536][ T5332] EXT4-fs (loop3): Test dummy encryption mode enabled [ 75.917317][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 75.921017][ T5335] loop0: detected capacity change from 0 to 512 [ 75.923305][ T5335] EXT4-fs: Ignoring removed oldalloc option [ 75.927740][ T5335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.936374][ T5332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.947668][ T5335] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.949150][ T5335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 75.950875][ T5335] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.952052][ T5335] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 75.959159][ T5335] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 75.961957][ T5335] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 75.981195][ T5335] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.288: bg 0: block 40: padding at end of block bitmap is not set [ 75.983849][ T5335] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 75.985652][ T5335] EXT4-fs (loop0): 1 truncate cleaned up [ 75.986702][ T5335] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.064049][ T5343] Config c/1 of g1 needs at least one function. [ 76.065472][ T5343] udc dummy_udc.0: failed to start g1: -22 [ 76.066536][ T5343] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 76.068106][ T5343] UDC core: g1: couldn't find an available UDC or it's busy [ 76.097573][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 76.133633][ T5345] device syzkaller0 entered promiscuous mode [ 76.146403][ T5345] tipc: Enabled bearer , priority 0 [ 76.162339][ T5345] tipc: Resetting bearer [ 76.164170][ T5350] loop4: detected capacity change from 0 to 1024 [ 76.170505][ T5344] tipc: Resetting bearer [ 76.182859][ T5352] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.288: iget: bad i_size value: 360287970189639690 [ 76.189648][ T5352] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.288: iget: bad i_size value: 360287970189639690 [ 76.192945][ T5353] loop3: detected capacity change from 0 to 1024 [ 76.252673][ T4323] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.255197][ T5344] tipc: Disabling bearer [ 76.361660][ T5355] overlayfs: missing 'workdir' [ 76.856977][ T5361] binder: 5360:5361 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 77.329344][ T5369] loop4: detected capacity change from 0 to 512 [ 77.340522][ T5369] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.298: inode has both inline data and extents flags [ 77.344965][ T5369] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.298: couldn't read orphan inode 15 (err -117) [ 77.348320][ T5369] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.385634][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 77.405643][ T5374] EXT4-fs (loop3): Test dummy encryption mode enabled [ 77.414385][ T5374] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.497887][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 77.535299][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 77.535803][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 77.550204][ T5383] device bond1 entered promiscuous mode [ 77.596877][ T5389] device syzkaller0 entered promiscuous mode [ 77.608029][ T5389] tipc: Enabled bearer , priority 0 [ 77.621552][ T5389] tipc: Resetting bearer [ 77.631343][ T5388] tipc: Resetting bearer [ 77.705560][ T5392] Config c/1 of g1 needs at least one function. [ 77.706284][ T5388] tipc: Disabling bearer [ 77.706824][ T5392] udc dummy_udc.0: failed to start g1: -22 [ 77.709139][ T5392] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 77.710628][ T5392] UDC core: g1: couldn't find an available UDC or it's busy [ 77.732134][ T5394] binder: 5393:5394 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 77.851122][ T4322] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.855650][ T4323] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.144343][ T5403] overlayfs: missing 'workdir' [ 78.283043][ T5416] EXT4-fs (loop2): Test dummy encryption mode enabled [ 78.291161][ T5416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.385766][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 78.532141][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 78.541491][ T5423] device bond1 entered promiscuous mode [ 78.650707][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 78.791155][ T5436] binder: BINDER_SET_CONTEXT_MGR already set [ 78.792797][ T5436] binder: 5435:5436 ioctl 4018620d 20004a80 returned -16 [ 79.269612][ T5451] set_capacity_and_notify: 4 callbacks suppressed [ 79.269621][ T5451] loop1: detected capacity change from 0 to 128 [ 79.299805][ T5451] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.313830][ T5451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.424039][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 79.437754][ T5456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 79.449729][ T5456] device bond1 entered promiscuous mode [ 79.646870][ T5461] Config c/1 of g1 needs at least one function. [ 79.649064][ T5461] udc dummy_udc.0: failed to start g1: -22 [ 79.650661][ T5461] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 79.654726][ T5461] UDC core: g1: couldn't find an available UDC or it's busy [ 79.760823][ T5464] loop4: detected capacity change from 0 to 1024 [ 79.795998][ T5469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 80.215148][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 80.228868][ T5481] loop0: detected capacity change from 0 to 256 [ 80.273760][ T5485] device syzkaller0 entered promiscuous mode [ 80.278137][ T5485] tipc: Enabled bearer , priority 0 [ 80.283904][ T5485] tipc: Resetting bearer [ 80.294318][ T5484] tipc: Resetting bearer [ 80.328192][ T5489] loop0: detected capacity change from 0 to 128 [ 80.332876][ T5489] EXT4-fs (loop0): Test dummy encryption mode enabled [ 80.336578][ T5484] tipc: Disabling bearer [ 80.387599][ T5489] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.748715][ T5497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 80.759925][ T5497] device bond2 entered promiscuous mode [ 81.038371][ T5516] loop1: detected capacity change from 0 to 128 [ 81.051293][ T5516] EXT4-fs (loop1): Test dummy encryption mode enabled [ 81.061420][ T5516] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.503577][ T5529] loop3: detected capacity change from 0 to 256 [ 82.406349][ T5536] device syzkaller0 entered promiscuous mode [ 82.409489][ T5536] tipc: Enabled bearer , priority 0 [ 82.414150][ T5536] tipc: Resetting bearer [ 82.418841][ T5535] tipc: Resetting bearer [ 82.442406][ T5541] loop4: detected capacity change from 0 to 1024 [ 82.823348][ T5535] tipc: Disabling bearer [ 82.827586][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 82.849759][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 82.864075][ T5545] device bond1 entered promiscuous mode [ 82.916507][ T5550] loop3: detected capacity change from 0 to 2048 [ 82.948824][ T5550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.954976][ T5550] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.352: bg 0: block 240: padding at end of block bitmap is not set [ 82.977480][ T5550] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 82.979444][ T5550] EXT4-fs (loop3): This should not happen!! Data will be lost [ 82.979444][ T5550] [ 82.980777][ T5550] EXT4-fs (loop3): Total free blocks count 0 [ 82.981665][ T5550] EXT4-fs (loop3): Free/Dirty block details [ 82.982623][ T5550] EXT4-fs (loop3): free_blocks=0 [ 82.984021][ T5550] EXT4-fs (loop3): dirty_blocks=32 [ 82.985259][ T5550] EXT4-fs (loop3): Block reservation details [ 82.986442][ T5550] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 82.987120][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 82.989364][ T5550] EXT4-fs (loop3): shut down requested (1) [ 83.464833][ T5570] loop4: detected capacity change from 0 to 512 [ 83.466416][ T5570] EXT4-fs: inline encryption not supported [ 83.467806][ T5570] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.470029][ T5570] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.473950][ T5570] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 83.477281][ T5570] EXT4-fs (loop4): 1 truncate cleaned up [ 83.478328][ T5570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.594314][ T5575] loop3: detected capacity change from 0 to 8192 [ 84.464318][ T5575] loop3: p1 p2 p3 p4[EZD] [ 84.469602][ T5575] loop3: partition table partially beyond EOD, truncated [ 84.471022][ T5575] loop3: p1 start 16384 is beyond EOD, truncated [ 84.472072][ T5575] loop3: p2 size 150994944 extends beyond EOD, truncated [ 84.514327][ T5575] loop3: p3 start 67108864 is beyond EOD, truncated [ 84.516036][ T5575] loop3: p4 size 33555584 extends beyond EOD, truncated [ 84.621890][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 84.627929][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 84.731837][ T5581] device syzkaller0 entered promiscuous mode [ 84.735187][ T5581] tipc: Enabled bearer , priority 0 [ 84.740317][ T5581] tipc: Resetting bearer [ 84.743388][ T5582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 84.750535][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 84.754075][ T5589] device bond2 entered promiscuous mode [ 84.774391][ T5580] tipc: Resetting bearer [ 84.806914][ T5580] tipc: Disabling bearer [ 84.807033][ T5594] loop4: detected capacity change from 0 to 128 [ 84.824817][ T5594] EXT4-fs (loop4): Test dummy encryption mode enabled [ 84.836009][ T5598] loop3: detected capacity change from 0 to 2048 [ 84.842169][ T5600] binder: 5599:5600 ioctl c0306201 20000080 returned -14 [ 84.842428][ T5594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.850822][ T5600] binder: 5599:5600 tried to acquire reference to desc 0, got 1 instead [ 84.852910][ T5600] binder: 5599:5600 ioctl c0306201 200003c0 returned -14 [ 84.859238][ T5600] binder: 5599:5600 got transaction with out-of-order buffer fixup [ 84.890294][ T5600] binder: 5599:5600 transaction call to 5599:0 failed 30/29201/-22, size 112-24 line 3469 [ 84.935757][ T5598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.941165][ T5598] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.367: bg 0: block 240: padding at end of block bitmap is not set [ 84.950406][ T5598] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 84.952384][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.952525][ T5598] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.952525][ T5598] [ 84.955846][ T5598] EXT4-fs (loop3): Total free blocks count 0 [ 84.956945][ T5598] EXT4-fs (loop3): Free/Dirty block details [ 84.957970][ T5598] EXT4-fs (loop3): free_blocks=0 [ 84.958735][ T5598] EXT4-fs (loop3): dirty_blocks=32 [ 84.959764][ T5598] EXT4-fs (loop3): Block reservation details [ 84.960988][ T5598] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 84.979207][ T5598] EXT4-fs (loop3): shut down requested (1) [ 85.037299][ T5607] loop1: detected capacity change from 0 to 1024 [ 85.116890][ T4322] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.660932][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.785748][ T5624] device bridge_slave_1 left promiscuous mode [ 85.787544][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.811826][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 85.884107][ T5629] loop2: detected capacity change from 0 to 512 [ 85.885968][ T5629] EXT4-fs: Ignoring removed oldalloc option [ 85.889954][ T5629] EXT4-fs (loop2): Test dummy encryption mode enabled [ 85.910079][ T5629] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.913635][ T4341] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 85.926633][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 85.958543][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 85.973148][ T5627] device bond2 entered promiscuous mode [ 85.975891][ T5636] device syzkaller0 entered promiscuous mode [ 85.984781][ T5636] tipc: Enabled bearer , priority 0 [ 85.987677][ T5635] tipc: Resetting bearer [ 86.023240][ T5641] loop0: detected capacity change from 0 to 2048 [ 86.029673][ T5635] tipc: Disabling bearer [ 86.033640][ T5639] device syzkaller0 entered promiscuous mode [ 86.047223][ T5639] tipc: Enabled bearer , priority 0 [ 86.053428][ T5639] tipc: Resetting bearer [ 86.063187][ T5638] tipc: Resetting bearer [ 86.090256][ T5641] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.094520][ T5641] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.382: bg 0: block 240: padding at end of block bitmap is not set [ 86.105532][ T5641] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 86.107711][ T5641] EXT4-fs (loop0): This should not happen!! Data will be lost [ 86.107711][ T5641] [ 86.112523][ T5641] EXT4-fs (loop0): Total free blocks count 0 [ 86.115432][ T5638] tipc: Disabling bearer [ 86.118789][ T5641] EXT4-fs (loop0): Free/Dirty block details [ 86.123897][ T5641] EXT4-fs (loop0): free_blocks=0 [ 86.126334][ T5641] EXT4-fs (loop0): dirty_blocks=32 [ 86.127180][ T5641] EXT4-fs (loop0): Block reservation details [ 86.128139][ T5641] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 86.129693][ T5641] EXT4-fs (loop0): shut down requested (1) [ 86.202175][ T5657] loop0: detected capacity change from 0 to 128 [ 86.223860][ T5657] EXT4-fs (loop0): Test dummy encryption mode enabled [ 86.242579][ T5657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.361008][ T5664] loop3: detected capacity change from 0 to 128 [ 86.411357][ T5669] Config c/1 of g1 needs at least one function. [ 86.412521][ T5669] udc dummy_udc.0: failed to start g1: -22 [ 86.413620][ T5669] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 86.415212][ T5669] UDC core: g1: couldn't find an available UDC or it's busy [ 86.720202][ T5664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.031205][ T5665] loop4: detected capacity change from 0 to 1024 [ 87.124262][ T4322] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.420638][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 87.470775][ T5687] device syzkaller0 entered promiscuous mode [ 87.498726][ T5681] device bond3 entered promiscuous mode [ 87.503675][ T5687] tipc: Enabled bearer , priority 0 [ 87.580719][ T5682] tipc: Resetting bearer [ 87.609890][ T5691] loop2: detected capacity change from 0 to 2048 [ 87.625719][ T5682] tipc: Disabling bearer [ 87.647334][ T5693] device syzkaller0 entered promiscuous mode [ 87.650628][ T5693] tipc: Enabled bearer , priority 0 [ 87.656087][ T5691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.660584][ T5691] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.398: bg 0: block 240: padding at end of block bitmap is not set [ 87.669129][ T5693] tipc: Resetting bearer [ 87.675278][ T5692] tipc: Resetting bearer [ 87.676689][ T5691] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 87.678880][ T5691] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.678880][ T5691] [ 87.680392][ T5691] EXT4-fs (loop2): Total free blocks count 0 [ 87.681375][ T5691] EXT4-fs (loop2): Free/Dirty block details [ 87.682401][ T5691] EXT4-fs (loop2): free_blocks=0 [ 87.683256][ T5691] EXT4-fs (loop2): dirty_blocks=32 [ 87.684120][ T5691] EXT4-fs (loop2): Block reservation details [ 87.709326][ T5691] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 87.735137][ T5692] tipc: Disabling bearer [ 87.736913][ T5691] EXT4-fs (loop2): shut down requested (1) [ 88.488882][ T5706] Config c/1 of g1 needs at least one function. [ 88.490074][ T5706] udc dummy_udc.0: failed to start g1: -22 [ 88.491044][ T5706] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 88.492469][ T5706] UDC core: g1: couldn't find an available UDC or it's busy [ 88.525311][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 88.624208][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 88.629509][ T5716] loop0: detected capacity change from 0 to 1024 [ 88.650333][ T5717] device bond3 entered promiscuous mode [ 88.746468][ T5724] Invalid ELF header type: 2 != 1 [ 89.051004][ T5729] device syzkaller0 entered promiscuous mode [ 89.068300][ T5721] tipc: Enabled bearer , priority 0 [ 89.076785][ T5720] tipc: Resetting bearer [ 89.107479][ T5720] tipc: Disabling bearer [ 89.181131][ T5727] tipc: Enabling of bearer rejected, failed to enable media [ 89.247560][ T5737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.398936][ T5743] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.412: bg 0: block 240: padding at end of block bitmap is not set [ 89.405940][ T5743] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 89.408022][ T5743] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.408022][ T5743] [ 89.409524][ T5743] EXT4-fs (loop4): Total free blocks count 0 [ 89.410660][ T5737] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 89.412744][ T5737] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.412744][ T5737] [ 89.414319][ T5737] EXT4-fs (loop4): Total free blocks count 0 [ 89.416166][ T5743] EXT4-fs (loop4): Free/Dirty block details [ 89.442669][ T5743] EXT4-fs (loop4): free_blocks=0 [ 89.443660][ T5743] EXT4-fs (loop4): dirty_blocks=4128 [ 89.456338][ T5750] binder: 5749:5750 ioctl c0306201 20000080 returned -14 [ 89.464989][ T5750] binder: 5749:5750 ioctl c0306201 200003c0 returned -14 [ 89.466283][ T5750] binder: 5749:5750 got transaction to invalid handle, 1 [ 89.467460][ T5750] binder: 5750:5749 cannot find target node [ 89.468400][ T5750] binder: 5749:5750 transaction call to 0:0 failed 33/29201/-22, size 112-24 line 3062 [ 89.470214][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.500217][ T5754] EXT4-fs (loop2): Test dummy encryption mode enabled [ 89.518815][ T5754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.548328][ T5758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.420'. [ 89.613874][ T5759] Config c/1 of g1 needs at least one function. [ 89.615235][ T5759] udc dummy_udc.0: failed to start g1: -22 [ 89.616236][ T5759] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 89.617806][ T5759] UDC core: g1: couldn't find an available UDC or it's busy [ 89.725723][ T5765] device syzkaller0 entered promiscuous mode [ 89.728937][ T5765] tipc: Enabled bearer , priority 0 [ 89.752401][ T5764] tipc: Resetting bearer [ 89.760812][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 89.786413][ T5764] tipc: Disabling bearer [ 89.788731][ T5763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 89.806722][ T5763] device bond3 entered promiscuous mode [ 89.917337][ T5782] set_capacity_and_notify: 2 callbacks suppressed [ 89.917346][ T5782] loop4: detected capacity change from 0 to 1024 [ 89.985439][ T5767] tipc: Enabling of bearer rejected, failed to enable media [ 89.996460][ T4323] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.092570][ T5791] Invalid ELF header type: 2 != 1 [ 90.356279][ T5794] binder: 5789:5794 ioctl c0306201 20000080 returned -14 [ 90.366242][ T5794] binder: 5789:5794 ioctl c0306201 200003c0 returned -14 [ 90.382146][ T5794] binder: 5789:5794 got transaction to invalid handle, 1 [ 90.389061][ T5794] binder: 5794:5789 cannot find target node [ 90.390120][ T5794] binder: 5789:5794 transaction call to 0:0 failed 36/29201/-22, size 112-24 line 3062 [ 90.392781][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.452671][ T5800] loop1: detected capacity change from 0 to 2048 [ 90.467269][ T5803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.432'. [ 90.503959][ T5800] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.558397][ T5807] Config c/1 of g1 needs at least one function. [ 90.559577][ T5807] udc dummy_udc.0: failed to start g1: -22 [ 90.560603][ T5807] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 90.562057][ T5807] UDC core: g1: couldn't find an available UDC or it's busy [ 90.657141][ T5810] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.431: bg 0: block 240: padding at end of block bitmap is not set [ 90.684726][ T5810] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 90.687365][ T5800] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 90.689288][ T5813] device syzkaller0 entered promiscuous mode [ 90.690862][ T5810] EXT4-fs (loop1): This should not happen!! Data will be lost [ 90.690862][ T5810] [ 90.693684][ T5800] EXT4-fs (loop1): This should not happen!! Data will be lost [ 90.693684][ T5800] [ 90.696648][ T5810] EXT4-fs (loop1): Total free blocks count 0 [ 90.700100][ T5800] EXT4-fs (loop1): Total free blocks count 0 [ 90.701251][ T5810] EXT4-fs (loop1): Free/Dirty block details [ 90.704473][ T5800] EXT4-fs (loop1): Free/Dirty block details [ 90.706802][ T5810] EXT4-fs (loop1): free_blocks=0 [ 90.722277][ T5815] loop4: detected capacity change from 0 to 128 [ 90.733798][ T5813] tipc: Enabled bearer , priority 0 [ 90.745692][ T5811] tipc: Resetting bearer [ 90.747868][ T5815] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.808806][ T5818] loop0: detected capacity change from 0 to 512 [ 90.829924][ T5811] tipc: Disabling bearer [ 90.855707][ T5818] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.436: iget: bad i_size value: 38620345925642 [ 90.863008][ T5818] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.436: couldn't read orphan inode 15 (err -117) [ 90.948689][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'. [ 91.296355][ T5826] device bond4 entered promiscuous mode [ 91.402882][ T5833] binder: 5831:5833 ioctl c0306201 20000080 returned -14 [ 91.419567][ T5833] binder: 5831:5833 got transaction to invalid handle, 1 [ 91.432561][ T5833] binder: 5833:5831 cannot find target node [ 91.440761][ T5833] binder: 5831:5833 transaction call to 0:0 failed 40/29201/-22, size 112-24 line 3062 [ 91.457680][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.645774][ T5845] tipc: Enabling of bearer rejected, failed to enable media [ 92.333342][ T5859] Config c/1 of g1 needs at least one function. [ 92.334636][ T5859] udc dummy_udc.0: failed to start g1: -22 [ 92.335594][ T5859] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 92.337073][ T5859] UDC core: g1: couldn't find an available UDC or it's busy [ 92.635750][ T5863] Invalid ELF header type: 2 != 1 [ 93.027400][ T5867] loop0: detected capacity change from 0 to 2048 [ 93.039312][ T5869] loop3: detected capacity change from 0 to 128 [ 93.049099][ T5869] EXT4-fs (loop3): Test dummy encryption mode enabled [ 93.180719][ T5875] device syzkaller0 entered promiscuous mode [ 93.192445][ T5875] tipc: Enabled bearer , priority 0 [ 93.200348][ T5874] tipc: Resetting bearer [ 93.256315][ T5874] tipc: Disabling bearer [ 93.351165][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 93.372355][ T5881] device bond4 entered promiscuous mode [ 93.405330][ T5873] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.447: bg 0: block 240: padding at end of block bitmap is not set [ 93.416849][ T5873] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 93.418889][ T5873] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.418889][ T5873] [ 93.420508][ T5873] EXT4-fs (loop0): Total free blocks count 0 [ 93.462390][ T5867] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 93.464356][ T5867] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.464356][ T5867] [ 93.484718][ T5873] EXT4-fs (loop0): Free/Dirty block details [ 93.485682][ T5873] EXT4-fs (loop0): free_blocks=0 [ 93.502178][ T5889] loop1: detected capacity change from 0 to 512 [ 93.505060][ T5873] EXT4-fs (loop0): dirty_blocks=4128 [ 93.505973][ T5873] EXT4-fs (loop0): Block reservation details [ 93.510594][ T5873] EXT4-fs (loop0): i_reserved_data_blocks=258 [ 93.531995][ T5889] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.453: iget: bad i_size value: 38620345925642 [ 93.557936][ T5889] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.453: couldn't read orphan inode 15 (err -117) [ 94.431031][ T5895] loop2: detected capacity change from 0 to 512 [ 94.463462][ T5895] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.456: iget: bad i_size value: 38620345925642 [ 94.468378][ T5895] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.456: couldn't read orphan inode 15 (err -117) [ 94.612513][ T5897] tipc: Enabling of bearer rejected, failed to enable media [ 95.156936][ T11] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 95.360876][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 95.375887][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.375887][ T11] [ 95.399401][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 95.411593][ T11] EXT4-fs (loop2): Free/Dirty block details [ 95.432884][ T11] EXT4-fs (loop2): free_blocks=0 [ 95.433835][ T11] EXT4-fs (loop2): dirty_blocks=16024 [ 95.436208][ T11] EXT4-fs (loop2): Block reservation details [ 95.437296][ T11] EXT4-fs (loop2): i_reserved_data_blocks=16024 [ 95.488047][ T4448] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 95.491171][ T4448] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.491171][ T4448] [ 95.514942][ T5920] Config c/1 of g1 needs at least one function. [ 95.516226][ T5920] udc dummy_udc.0: failed to start g1: -22 [ 95.517507][ T5920] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 95.519039][ T5920] UDC core: g1: couldn't find an available UDC or it's busy [ 95.522800][ T5919] device syzkaller0 entered promiscuous mode [ 95.537776][ T5919] tipc: Enabled bearer , priority 0 [ 95.540087][ T5918] tipc: Resetting bearer [ 95.578105][ T5922] binder: 5921:5922 ioctl c0306201 20000080 returned -14 [ 95.580883][ T5922] binder: 5921:5922 got transaction to invalid handle, 1 [ 95.582206][ T5922] binder: 5922:5921 cannot find target node [ 95.583415][ T5922] binder: 5921:5922 transaction call to 0:0 failed 44/29201/-22, size 112-24 line 3062 [ 95.587688][ T5918] tipc: Disabling bearer [ 95.590474][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.612322][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 95.620703][ T5924] device bond4 entered promiscuous mode [ 95.759080][ T5932] loop1: detected capacity change from 0 to 512 [ 95.790657][ T5932] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.465: iget: bad i_size value: 38620345925642 [ 95.803876][ T5932] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.465: couldn't read orphan inode 15 (err -117) [ 96.020630][ T5938] Invalid ELF header type: 2 != 1 [ 96.724903][ T4330] EXT4-fs unmount: 14 callbacks suppressed [ 96.724914][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 96.751526][ T5946] loop0: detected capacity change from 0 to 512 [ 96.756656][ T5945] loop3: detected capacity change from 0 to 128 [ 96.767018][ T5945] EXT4-fs (loop3): Test dummy encryption mode enabled [ 97.047352][ T5945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.067983][ T5946] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.467: iget: bad i_size value: 38620345925642 [ 97.071675][ T5946] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.467: couldn't read orphan inode 15 (err -117) [ 97.073890][ T5946] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.470065][ T5966] tipc: Enabling of bearer rejected, failed to enable media [ 97.536061][ T5971] binder: 5970:5971 ioctl c0306201 20000080 returned -14 [ 97.540736][ T5971] binder: 5970:5971 ioctl c0306201 200003c0 returned -14 [ 97.542283][ T5971] binder: 5970:5971 got transaction to invalid handle, 1 [ 97.548323][ T5971] binder: 5971:5970 cannot find target node [ 97.549497][ T5971] binder: 5970:5971 transaction call to 0:0 failed 47/29201/-22, size 112-24 line 3062 [ 97.551938][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.615760][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 97.631981][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.474'. [ 97.657504][ T5977] loop1: detected capacity change from 0 to 128 [ 97.693039][ T5977] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.700933][ T5983] device bond5 entered promiscuous mode [ 97.801125][ T5986] tipc: Enabling of bearer rejected, failed to enable media [ 97.828357][ T5995] loop4: detected capacity change from 0 to 512 [ 97.837212][ T5996] loop2: detected capacity change from 0 to 512 [ 97.852997][ T5996] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.478: iget: bad i_size value: 38620345925642 [ 97.856835][ T5996] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.478: couldn't read orphan inode 15 (err -117) [ 97.861411][ T5996] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.861516][ T5995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.372781][ T6006] loop0: detected capacity change from 0 to 256 [ 98.902979][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 99.352891][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 100.742145][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 100.761786][ T6038] device bond5 entered promiscuous mode [ 100.885314][ T6035] tipc: Enabling of bearer rejected, failed to enable media [ 101.444319][ T6055] tipc: Enabling of bearer rejected, failed to enable media [ 101.530383][ T6065] loop3: detected capacity change from 0 to 128 [ 101.554656][ T6065] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.564507][ T6065] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.577474][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.493'. [ 102.317996][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 102.365208][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 102.379256][ T6087] device bond6 entered promiscuous mode [ 102.411145][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 102.512494][ T6100] tipc: Enabling of bearer rejected, failed to enable media [ 102.517213][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 102.863750][ T6110] loop3: detected capacity change from 0 to 512 [ 102.899312][ T6097] tipc: Enabling of bearer rejected, failed to enable media [ 102.908272][ T6110] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.503: iget: bad i_size value: 38620345925642 [ 102.911384][ T6110] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.503: couldn't read orphan inode 15 (err -117) [ 102.920101][ T6121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.504'. [ 102.971236][ T6110] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.489243][ T88] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 103.495659][ T88] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 103.498531][ T88] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.498531][ T88] [ 103.500807][ T88] EXT4-fs (loop3): Total free blocks count 0 [ 103.502058][ T88] EXT4-fs (loop3): Free/Dirty block details [ 103.503334][ T88] EXT4-fs (loop3): free_blocks=0 [ 103.504255][ T88] EXT4-fs (loop3): dirty_blocks=10116 [ 103.505948][ T88] EXT4-fs (loop3): Block reservation details [ 103.507166][ T88] EXT4-fs (loop3): i_reserved_data_blocks=10116 [ 103.620460][ T6140] loop2: detected capacity change from 0 to 256 [ 103.692351][ T6141] loop4: detected capacity change from 0 to 512 [ 104.833788][ T88] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 105.118859][ T6141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.130178][ T6147] loop0: detected capacity change from 0 to 1024 [ 107.136079][ T6147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.172830][ T6147] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 107.174466][ T6147] System zones: 0-1, 3-12 [ 107.177684][ T6147] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.191038][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 107.416993][ T6160] netlink: 'syz.0.511': attribute type 4 has an invalid length. [ 107.655238][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 107.788962][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.516'. [ 107.875936][ T6178] loop2: detected capacity change from 0 to 512 [ 107.877485][ T6178] ext4: Unknown parameter 'noacl' [ 108.035592][ T6183] loop3: detected capacity change from 0 to 128 [ 108.124180][ T6183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.996302][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 109.421541][ T6213] loop2: detected capacity change from 0 to 256 [ 109.958659][ T6209] loop1: detected capacity change from 0 to 1024 [ 109.982830][ T6209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.552218][ T6223] loop4: detected capacity change from 0 to 512 [ 110.558052][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.529'. [ 110.584211][ T6209] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 110.585972][ T6209] System zones: 0-1, 3-12 [ 110.587325][ T6209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.690087][ T6223] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.528: iget: bad i_size value: 38620345925642 [ 110.692452][ T6223] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.528: couldn't read orphan inode 15 (err -117) [ 110.695213][ T6223] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.820059][ T6233] netlink: 'syz.1.526': attribute type 4 has an invalid length. [ 111.026585][ T6231] loop0: detected capacity change from 0 to 512 [ 111.066685][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 111.110686][ T6238] loop3: detected capacity change from 0 to 128 [ 111.131136][ T6238] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.143853][ T6231] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.531: iget: bad i_size value: 38620345925642 [ 111.149984][ T6231] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.531: couldn't read orphan inode 15 (err -117) [ 111.152710][ T6238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.161211][ T6231] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.505443][ T39] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 111.508791][ T39] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1916 with error 28 [ 111.511089][ T39] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.511089][ T39] [ 111.513507][ T39] EXT4-fs (loop4): Total free blocks count 0 [ 111.515057][ T39] EXT4-fs (loop4): Free/Dirty block details [ 111.516140][ T39] EXT4-fs (loop4): free_blocks=0 [ 111.517066][ T39] EXT4-fs (loop4): dirty_blocks=1916 [ 111.518202][ T39] EXT4-fs (loop4): Block reservation details [ 111.519215][ T39] EXT4-fs (loop4): i_reserved_data_blocks=1916 [ 111.536874][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 111.876437][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 112.025749][ T6271] Invalid ELF header type: 2 != 1 [ 112.091357][ T6272] loop0: detected capacity change from 0 to 128 [ 112.302608][ T6276] loop4: detected capacity change from 0 to 128 [ 112.316776][ T6276] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.801919][ T6282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'. [ 112.884914][ T6290] loop1: detected capacity change from 0 to 512 [ 112.977894][ T6290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.133128][ T6295] loop0: detected capacity change from 0 to 256 [ 113.986290][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 114.052390][ T6298] loop2: detected capacity change from 0 to 4096 [ 114.053950][ T6298] EXT4-fs: inline encryption not supported [ 114.240538][ T6298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.242116][ T6298] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.265422][ T6298] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 114.266979][ T6298] System zones: 0-5 [ 114.268410][ T6298] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.467408][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 114.483657][ T6320] tipc: Enabling of bearer rejected, failed to enable media [ 114.520730][ T6324] loop3: detected capacity change from 0 to 512 [ 114.539224][ T6326] loop0: detected capacity change from 0 to 1024 [ 114.556432][ T6324] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.551: iget: bad i_size value: 38620345925642 [ 114.559144][ T6324] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.551: couldn't read orphan inode 15 (err -117) [ 114.580673][ T6324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.104869][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 115.233467][ T6336] loop1: detected capacity change from 0 to 128 [ 115.464880][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 115.470629][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 115.997648][ T6357] loop1: detected capacity change from 0 to 128 [ 115.997670][ T6355] loop0: detected capacity change from 0 to 8192 [ 116.002992][ T6357] EXT4-fs (loop1): Test dummy encryption mode enabled [ 116.007420][ T6357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.021417][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 116.027550][ T6355] loop0: p1 p2 p3 p4[EZD] [ 116.028367][ T6355] loop0: partition table partially beyond EOD, truncated [ 116.032713][ T6355] loop0: p1 start 16384 is beyond EOD, truncated [ 116.040289][ T6355] loop0: p2 size 150994944 extends beyond EOD, truncated [ 116.048013][ T6355] loop0: p3 start 67108864 is beyond EOD, truncated [ 116.053025][ T6355] loop0: p4 size 33555584 extends beyond EOD, truncated [ 116.166532][ T6361] tipc: Enabling of bearer rejected, failed to enable media [ 116.219615][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 116.228240][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 116.480908][ T6384] loop0: detected capacity change from 0 to 512 [ 116.498697][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 116.502737][ T6384] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.565: iget: bad i_size value: 38620345925642 [ 116.512956][ T6384] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.565: couldn't read orphan inode 15 (err -117) [ 116.531290][ T6389] binder: 6388:6389 ioctl c0306201 20000080 returned -14 [ 116.533635][ T6389] binder: BINDER_SET_CONTEXT_MGR already set [ 116.534872][ T6389] binder: 6388:6389 ioctl 4018620d 20000040 returned -16 [ 116.536275][ T6389] binder: 6388:6389 ioctl c0306201 200003c0 returned -14 [ 116.537730][ T6389] binder: 6388:6389 got transaction to invalid handle, 1 [ 116.538879][ T6389] binder: 6389:6388 cannot find target node [ 116.539854][ T6389] binder: 6388:6389 transaction call to 0:0 failed 50/29201/-22, size 112-24 line 3062 [ 116.542007][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.542358][ T6384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.595292][ T6391] device syzkaller0 entered promiscuous mode [ 118.063901][ T6401] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 118.092432][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 118.208823][ T6403] loop3: detected capacity change from 0 to 128 [ 118.350262][ T6403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 118.398244][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 118.453769][ T6412] loop0: detected capacity change from 0 to 512 [ 118.459154][ T6412] EXT4-fs: inline encryption not supported [ 118.467200][ T6412] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.480794][ T6412] EXT4-fs (loop0): 1 truncate cleaned up [ 118.481924][ T6412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 119.597229][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 119.696447][ T6434] loop0: detected capacity change from 0 to 512 [ 119.721780][ T6434] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.578: iget: bad i_size value: 38620345925642 [ 119.727455][ T6434] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.578: couldn't read orphan inode 15 (err -117) [ 119.731901][ T6434] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.373260][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 120.572064][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 120.588648][ T6444] binder: 6443:6444 ioctl c0306201 20000080 returned -14 [ 120.591059][ T6444] binder: BINDER_SET_CONTEXT_MGR already set [ 120.592028][ T6444] binder: 6443:6444 ioctl 4018620d 20000040 returned -16 [ 120.593259][ T6444] binder: 6443:6444 ioctl c0306201 200003c0 returned -14 [ 120.594490][ T6444] binder: 6443:6444 got transaction to invalid handle, 1 [ 120.596238][ T6444] binder: 6444:6443 cannot find target node [ 120.597348][ T6444] binder: 6443:6444 transaction call to 0:0 failed 53/29201/-22, size 112-24 line 3062 [ 120.599558][ T4519] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.811887][ T6454] loop0: detected capacity change from 0 to 128 [ 120.819969][ T6454] EXT4-fs (loop0): Test dummy encryption mode enabled [ 120.822924][ T6454] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.713713][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 121.871909][ T6465] loop0: detected capacity change from 0 to 512 [ 121.873395][ T6465] EXT4-fs: inline encryption not supported [ 121.877749][ T6465] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.881090][ T6465] EXT4-fs (loop0): 1 truncate cleaned up [ 121.882184][ T6465] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.059839][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 123.110768][ T6472] loop0: detected capacity change from 0 to 512 [ 123.119150][ T6472] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.590: iget: bad i_size value: 38620345925642 [ 123.121728][ T6472] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.590: couldn't read orphan inode 15 (err -117) [ 123.123872][ T6472] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 123.973245][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 123.993635][ T6477] binder: 6476:6477 ioctl c0306201 20000080 returned -14 [ 123.996109][ T6477] binder: BINDER_SET_CONTEXT_MGR already set [ 123.997228][ T6477] binder: 6476:6477 ioctl 4018620d 20000040 returned -16 [ 123.998630][ T6477] binder: 6476:6477 ioctl c0306201 200003c0 returned -14 [ 123.999916][ T6477] binder: 6476:6477 got transaction to invalid handle, 1 [ 124.001160][ T6477] binder: 6477:6476 cannot find target node [ 124.002248][ T6477] binder: 6476:6477 transaction call to 0:0 failed 56/29201/-22, size 112-24 line 3062 [ 124.011750][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.202743][ T6487] loop0: detected capacity change from 0 to 128 [ 124.205172][ T6487] EXT4-fs (loop0): Test dummy encryption mode enabled [ 124.207972][ T6487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.114360][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 125.243823][ T6496] loop0: detected capacity change from 0 to 512 [ 125.251721][ T6496] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.598: iget: bad i_size value: 38620345925642 [ 125.260702][ T6496] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.598: couldn't read orphan inode 15 (err -117) [ 125.273931][ T6496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.868317][ T39] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 125.871068][ T39] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 125.873308][ T39] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.873308][ T39] [ 125.875118][ T39] EXT4-fs (loop0): Total free blocks count 0 [ 125.876152][ T39] EXT4-fs (loop0): Free/Dirty block details [ 125.877185][ T39] EXT4-fs (loop0): free_blocks=0 [ 125.878057][ T39] EXT4-fs (loop0): dirty_blocks=16024 [ 125.879040][ T39] EXT4-fs (loop0): Block reservation details [ 125.880078][ T39] EXT4-fs (loop0): i_reserved_data_blocks=16024 [ 125.927774][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.928857][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.112353][ T39] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 126.264991][ T6503] loop0: detected capacity change from 0 to 512 [ 126.266504][ T6503] EXT4-fs: inline encryption not supported [ 126.275515][ T6503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.279808][ T6503] EXT4-fs (loop0): 1 truncate cleaned up [ 126.280863][ T6503] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.475938][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 127.495680][ T6508] loop0: detected capacity change from 0 to 512 [ 127.498921][ T6508] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.601: iget: bad i_size value: 38620345925642 [ 127.501488][ T6508] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.601: couldn't read orphan inode 15 (err -117) [ 127.503766][ T6508] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.370967][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 128.389572][ T6513] binder: 6512:6513 ioctl c0306201 200003c0 returned -14 [ 128.391110][ T6513] binder: 6512:6513 got transaction to invalid handle, 1 [ 128.392277][ T6513] binder: 6513:6512 cannot find target node [ 128.393429][ T6513] binder: 6512:6513 transaction call to 0:0 failed 60/29201/-22, size 112-24 line 3062 [ 128.395988][ T4409] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.616770][ T6523] loop0: detected capacity change from 0 to 128 [ 128.618572][ T6523] EXT4-fs (loop0): Test dummy encryption mode enabled [ 128.633268][ T6523] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.523609][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 129.650531][ T6533] loop0: detected capacity change from 0 to 512 [ 129.668674][ T6533] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.609: iget: bad i_size value: 38620345925642 [ 129.671081][ T6533] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.609: couldn't read orphan inode 15 (err -117) [ 129.673403][ T6533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.289131][ T11] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 130.291853][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 130.294217][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.294217][ T11] [ 130.296034][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 130.297039][ T11] EXT4-fs (loop0): Free/Dirty block details [ 130.298040][ T11] EXT4-fs (loop0): free_blocks=0 [ 130.298817][ T11] EXT4-fs (loop0): dirty_blocks=16000 [ 130.299802][ T11] EXT4-fs (loop0): Block reservation details [ 130.300799][ T11] EXT4-fs (loop0): i_reserved_data_blocks=16000 [ 130.522618][ T4496] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 130.699340][ T6543] loop0: detected capacity change from 0 to 512 [ 130.707310][ T6543] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.612: iget: bad i_size value: 38620345925642 [ 130.709747][ T6543] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.612: couldn't read orphan inode 15 (err -117) [ 130.711776][ T6543] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 131.570293][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 131.629713][ T4343] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.632166][ T4343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.633848][ T4343] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.638000][ T4343] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.639502][ T4343] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 131.640895][ T4343] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.770440][ T4341] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.772810][ T4341] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.774927][ T4341] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.818068][ T4341] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.820775][ T4341] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 131.822793][ T4341] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.747608][ T6424] tipc: Enabling of bearer rejected, failed to enable media [ 132.938745][ T6573] binder: 6570:6573 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 132.965646][ T6573] binder: 6570:6573 got transaction to invalid handle, 1 [ 132.971626][ T6573] binder: 6573:6570 cannot find target node [ 132.972854][ T6573] binder: 6570:6573 transaction async to 0:0 failed 63/29201/-22, size 0-0 line 3062 [ 132.977299][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.335431][ T6576] loop1: detected capacity change from 0 to 128 [ 133.351865][ T6576] EXT4-fs (loop1): Test dummy encryption mode enabled [ 133.357986][ T6576] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 133.604290][ T6587] loop3: detected capacity change from 0 to 256 [ 133.722050][ T4343] Bluetooth: hci5: command 0x0409 tx timeout [ 134.087438][ T4343] Bluetooth: hci6: command 0x0409 tx timeout [ 134.400731][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 134.488980][ T88] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.502173][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 134.508880][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 134.930950][ T88] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.979509][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.981080][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.982919][ T6557] device bridge_slave_0 entered promiscuous mode [ 135.068044][ T88] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.071213][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.072547][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.074049][ T6550] device bridge_slave_0 entered promiscuous mode [ 135.076523][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.078013][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.079769][ T6557] device bridge_slave_1 entered promiscuous mode [ 135.083304][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.085000][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.086678][ T6550] device bridge_slave_1 entered promiscuous mode [ 135.222386][ T6608] loop1: detected capacity change from 0 to 256 [ 135.765233][ T4343] Bluetooth: hci5: command 0x041b tx timeout [ 135.953378][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.979660][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.982353][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.038795][ T6550] team0: Port device team_slave_0 added [ 136.044044][ T6550] team0: Port device team_slave_1 added [ 136.062121][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.063412][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.071341][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.073949][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.078266][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.082827][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.137959][ T6550] device hsr_slave_0 entered promiscuous mode [ 136.164686][ T4341] Bluetooth: hci6: command 0x041b tx timeout [ 136.175081][ T6550] device hsr_slave_1 entered promiscuous mode [ 136.243468][ T6550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.255499][ T6550] Cannot create hsr debugfs directory [ 136.345610][ T88] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.349387][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.383987][ T6619] Config c/1 of g1 needs at least one function. [ 136.385409][ T6619] udc dummy_udc.0: failed to start g1: -22 [ 136.386438][ T6619] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 136.389565][ T6619] UDC core: g1: couldn't find an available UDC or it's busy [ 136.397059][ T6557] team0: Port device team_slave_0 added [ 136.399097][ T6557] team0: Port device team_slave_1 added [ 136.408652][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.409926][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.414501][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.420005][ T6617] device syzkaller0 entered promiscuous mode [ 136.423386][ T6617] tipc: Enabled bearer , priority 0 [ 136.425645][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.426950][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.431442][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.448615][ T6617] tipc: Resetting bearer [ 136.458577][ T6616] tipc: Resetting bearer [ 136.495235][ T6616] tipc: Disabling bearer [ 136.533664][ T6623] loop1: detected capacity change from 0 to 512 [ 136.535819][ T6557] device hsr_slave_0 entered promiscuous mode [ 136.542114][ T6623] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.629: iget: bad i_size value: 38620345925642 [ 136.544303][ T6623] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.629: couldn't read orphan inode 15 (err -117) [ 136.547076][ T6623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.565165][ T6557] device hsr_slave_1 entered promiscuous mode [ 136.664697][ T6557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.666019][ T6557] Cannot create hsr debugfs directory [ 137.067411][ T6550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.130220][ T6550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.143384][ T39] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 137.146837][ T39] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 137.151192][ T39] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.151192][ T39] [ 137.153184][ T39] EXT4-fs (loop1): Total free blocks count 0 [ 137.154247][ T39] EXT4-fs (loop1): Free/Dirty block details [ 137.163245][ T39] EXT4-fs (loop1): free_blocks=0 [ 137.164325][ T39] EXT4-fs (loop1): dirty_blocks=16024 [ 137.191366][ T39] EXT4-fs (loop1): Block reservation details [ 137.192523][ T39] EXT4-fs (loop1): i_reserved_data_blocks=16024 [ 137.196566][ T6550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.209287][ T6631] loop0: detected capacity change from 0 to 128 [ 137.211049][ T6631] EXT4-fs (loop0): Test dummy encryption mode enabled [ 137.231161][ T88] tipc: Left network mode [ 137.232150][ T6550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.257333][ T6631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.261831][ T6634] loop3: detected capacity change from 0 to 512 [ 137.376198][ T6634] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.632: iget: bad i_size value: 38620345925642 [ 137.378922][ T6634] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.632: couldn't read orphan inode 15 (err -117) [ 137.381068][ T6634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.420435][ T4467] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 137.653799][ T6557] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.680450][ T6654] loop1: detected capacity change from 0 to 512 [ 137.683963][ T6654] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.633: iget: bad i_size value: 38620345925642 [ 137.688811][ T6654] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.633: couldn't read orphan inode 15 (err -117) [ 137.691318][ T6654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.797064][ T6557] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.854724][ T4343] Bluetooth: hci5: command 0x040f tx timeout [ 138.251942][ T4341] Bluetooth: hci6: command 0x040f tx timeout [ 138.330565][ T4467] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:9: bg 0: block 5: invalid block bitmap [ 138.333106][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.333465][ T4467] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 138.335214][ T6557] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.338756][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 138.340800][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 138.365186][ T4467] EXT4-fs (loop1): This should not happen!! Data will be lost [ 138.365186][ T4467] [ 138.367236][ T4467] EXT4-fs (loop1): Total free blocks count 0 [ 138.368240][ T4467] EXT4-fs (loop1): Free/Dirty block details [ 138.369297][ T4467] EXT4-fs (loop1): free_blocks=0 [ 138.370178][ T4467] EXT4-fs (loop1): dirty_blocks=16012 [ 138.371078][ T4467] EXT4-fs (loop1): Block reservation details [ 138.376045][ T6557] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.376303][ T4467] EXT4-fs (loop1): i_reserved_data_blocks=16012 [ 138.423242][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.425052][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.501500][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.505301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.507221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.509001][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.510263][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.522307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.541585][ T6550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.543446][ T6550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.610674][ T4840] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 138.649144][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.651012][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.652533][ T4552] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.653752][ T4552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.655690][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.659552][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.667138][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.674415][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.679840][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.688395][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.704754][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.709292][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.713776][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.719494][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.729104][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.736931][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.867033][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.868559][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.871704][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.976794][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.046915][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.048713][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.052042][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.060554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.062699][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.066623][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.067975][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.071598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.080820][ T6697] device syzkaller0 entered promiscuous mode [ 139.083545][ T6701] Config c/1 of g1 needs at least one function. [ 139.084954][ T6701] udc dummy_udc.0: failed to start g1: -22 [ 139.085653][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.085969][ T6701] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 139.087910][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.088798][ T6701] UDC core: g1: couldn't find an available UDC or it's busy [ 139.090188][ T4552] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.092320][ T4552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.104956][ T6697] tipc: Enabled bearer , priority 0 [ 139.106478][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.118306][ T6697] tipc: Resetting bearer [ 139.119646][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.121672][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.124412][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.128751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.133927][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.140968][ T6696] tipc: Resetting bearer [ 139.185269][ T6696] tipc: Disabling bearer [ 139.500183][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.502090][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.503881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.508770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.511709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.519326][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.623354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.627283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.641097][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.642844][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.644488][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.646824][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.738451][ T6735] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 140.754760][ T4343] Bluetooth: hci5: command 0x0419 tx timeout [ 140.845256][ T4341] Bluetooth: hci6: command 0x0419 tx timeout [ 140.853243][ T6738] loop1: detected capacity change from 0 to 512 [ 140.888908][ T6738] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.644: iget: bad i_size value: 38620345925642 [ 140.891447][ T6738] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.644: couldn't read orphan inode 15 (err -117) [ 140.900661][ T6738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.020308][ T6550] device veth0_vlan entered promiscuous mode [ 141.023592][ T6550] device veth1_vlan entered promiscuous mode [ 141.028784][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.057150][ T6550] device veth0_macvtap entered promiscuous mode [ 141.063423][ T6550] device veth1_macvtap entered promiscuous mode [ 141.076469][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.083228][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.093644][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.100871][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.106953][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.108971][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.111919][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.115972][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.120496][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.122748][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.126033][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.127870][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.130190][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.132040][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.133606][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.135660][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.137257][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.235547][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.238739][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.240625][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.242095][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.243796][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.255932][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.257907][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.259611][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.264119][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.274894][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.276670][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.283497][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.332183][ T6760] loop0: detected capacity change from 0 to 256 [ 141.462518][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.497527][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.533871][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.597491][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.844985][ T6535] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 142.397105][ T6550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.398790][ T6550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.400285][ T6550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.401824][ T6550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.408402][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 142.433388][ T88] device hsr_slave_0 left promiscuous mode [ 142.453479][ T6764] loop0: detected capacity change from 0 to 512 [ 142.457114][ T6764] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.649: iget: bad i_size value: 38620345925642 [ 142.459304][ T6764] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.649: couldn't read orphan inode 15 (err -117) [ 142.461780][ T6764] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.465537][ T88] device hsr_slave_1 left promiscuous mode [ 142.574771][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.576322][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.578702][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.580046][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.582186][ T88] device bridge_slave_1 left promiscuous mode [ 142.583856][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.946269][ T88] device bridge_slave_0 left promiscuous mode [ 142.949604][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.065065][ T88] device veth1_macvtap left promiscuous mode [ 143.070158][ T88] device veth0_macvtap left promiscuous mode [ 143.073762][ T88] device veth1_vlan left promiscuous mode [ 143.075544][ T88] device veth0_vlan left promiscuous mode [ 143.091085][ T9] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 143.095182][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 143.097413][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 143.097413][ T9] [ 143.101281][ T9] EXT4-fs (loop0): Total free blocks count 0 [ 143.103437][ T9] EXT4-fs (loop0): Free/Dirty block details [ 143.104351][ T9] EXT4-fs (loop0): free_blocks=0 [ 143.109269][ T9] EXT4-fs (loop0): dirty_blocks=16004 [ 143.110302][ T9] EXT4-fs (loop0): Block reservation details [ 143.111388][ T9] EXT4-fs (loop0): i_reserved_data_blocks=16004 [ 143.158288][ T88] bond5 (unregistering): Released all slaves [ 143.162200][ T88] bond4 (unregistering): Released all slaves [ 143.168482][ T88] bond3 (unregistering): Released all slaves [ 143.172027][ T88] bond2 (unregistering): Released all slaves [ 143.177080][ T88] bond1 (unregistering): Released all slaves [ 143.323504][ T4418] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 143.590465][ T6788] Config c/1 of g1 needs at least one function. [ 143.591772][ T6788] udc dummy_udc.0: failed to start g1: -22 [ 143.592827][ T6788] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 143.594382][ T6788] UDC core: g1: couldn't find an available UDC or it's busy [ 144.645311][ T6793] loop0: detected capacity change from 0 to 256 [ 146.636665][ T6800] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 147.246443][ T88] team0 (unregistering): Port device team_slave_1 removed [ 147.415616][ T88] team0 (unregistering): Port device team_slave_0 removed [ 147.585008][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.785574][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.325489][ T88] bond0 (unregistering): Released all slaves [ 149.683911][ T6779] tipc: Enabling of bearer rejected, failed to enable media [ 149.790663][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.792146][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.793545][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.841804][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.843245][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.848431][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.864265][ T6809] loop3: detected capacity change from 0 to 8192 [ 149.864463][ T6816] binder: 6815:6816 tried to acquire reference to desc 0, got 1 instead [ 149.867390][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.869740][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.901849][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.903591][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.907470][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.909038][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.911927][ T6557] device veth0_vlan entered promiscuous mode [ 149.917700][ T6557] device veth1_vlan entered promiscuous mode [ 149.929227][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.931000][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.932576][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.934266][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.939794][ T6557] device veth0_macvtap entered promiscuous mode [ 149.942509][ T6557] device veth1_macvtap entered promiscuous mode [ 149.953444][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.963926][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.969102][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.971137][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.976952][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.979082][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.980808][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.982640][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.984253][ T6825] loop5: detected capacity change from 0 to 512 [ 149.984324][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.990498][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.994223][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.131433][ T6828] loop0: detected capacity change from 0 to 256 [ 151.097506][ T6809] loop3: p1 p2 p3 p4[EZD] [ 151.098342][ T6809] loop3: partition table partially beyond EOD, truncated [ 151.099719][ T6809] loop3: p1 start 16384 is beyond EOD, truncated [ 151.100746][ T6809] loop3: p2 size 150994944 extends beyond EOD, truncated [ 151.118559][ T14] binder: release 6815:6816 transaction 68 out, still active [ 151.119941][ T14] binder: undelivered TRANSACTION_COMPLETE [ 151.120956][ T14] binder: send failed reply for transaction 75 to 6815:6821 [ 151.122230][ T14] binder: undelivered TRANSACTION_COMPLETE [ 151.123200][ T14] binder: undelivered TRANSACTION_ERROR: 29189 [ 151.124297][ T14] binder: send failed reply for transaction 68, target dead [ 151.127096][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.128790][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.130257][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.131880][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.135383][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.137000][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.138478][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.140086][ T6809] loop3: p3 start 67108864 is beyond EOD, truncated [ 151.140550][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.141540][ T6809] loop3: p4 size 33555584 extends beyond EOD, [ 151.143123][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.144940][ T6809] truncated [ 151.146154][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.148563][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.150376][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.151883][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.153547][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.183483][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.190299][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.192259][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.196120][ T6557] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.197702][ T6557] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.199335][ T6557] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.201815][ T6557] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.219604][ T6825] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 151.293520][ T1654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.295028][ T1654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.299910][ T4840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.302394][ T4840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.312729][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.324277][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.476883][ T6857] loop1: detected capacity change from 0 to 512 [ 151.629734][ T6857] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.661: iget: bad i_size value: 38620345925642 [ 151.786276][ T6857] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.661: couldn't read orphan inode 15 (err -117) [ 151.789425][ T6857] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.865021][ T6829] udevd[6829]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 151.887757][ T6843] udevd[6843]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 152.173696][ T6870] loop3: detected capacity change from 0 to 256 [ 153.270121][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 153.376829][ T6876] overlayfs: missing 'workdir' [ 153.434316][ T6883] binder: 6882:6883 tried to acquire reference to desc 0, got 1 instead [ 153.510586][ T6881] device syzkaller0 entered promiscuous mode [ 153.516169][ T6881] tipc: Enabled bearer , priority 0 [ 153.523272][ T6881] tipc: Resetting bearer [ 153.582756][ T6879] tipc: Resetting bearer [ 153.611812][ T6889] loop1: detected capacity change from 0 to 8192 [ 153.619655][ T6879] tipc: Disabling bearer [ 153.655529][ T6889] loop1: p1 p2 p3 p4[EZD] [ 153.656408][ T6889] loop1: partition table partially beyond EOD, truncated [ 153.657733][ T6889] loop1: p1 start 16384 is beyond EOD, truncated [ 153.658765][ T6889] loop1: p2 size 150994944 extends beyond EOD, truncated [ 153.660278][ T6889] loop1: p3 start 67108864 is beyond EOD, truncated [ 153.661452][ T6889] loop1: p4 size 33555584 extends beyond EOD, truncated [ 153.685119][ T4343] Bluetooth: hci1: command 0x0406 tx timeout [ 153.685143][ T4341] Bluetooth: hci0: command 0x0406 tx timeout [ 153.685207][ T4335] Bluetooth: hci3: command 0x0406 tx timeout [ 153.927346][ T6902] loop6: detected capacity change from 0 to 256 [ 154.628949][ T4379] binder: release 6882:6883 transaction 80 out, still active [ 154.630344][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 154.631455][ T4379] binder: send failed reply for transaction 87 to 6882:6891 [ 154.632789][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 154.977031][ T6921] loop0: detected capacity change from 0 to 256 [ 156.960129][ T6844] udevd[6844]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 156.970617][ T6945] loop1: detected capacity change from 0 to 1024 [ 156.971309][ T6843] udevd[6843]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 157.039975][ T6945] overlayfs: missing 'workdir' [ 157.077007][ T88] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.091371][ T6940] netlink: 'syz.0.677': attribute type 10 has an invalid length. [ 157.104355][ T6940] team0: Port device dummy0 added [ 157.179713][ T88] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.185999][ T6956] binder: 6954:6956 tried to acquire reference to desc 0, got 1 instead [ 157.199986][ T6955] device syzkaller0 entered promiscuous mode [ 157.210153][ T6955] tipc: Enabled bearer , priority 0 [ 157.216700][ T6955] tipc: Resetting bearer [ 157.291559][ T88] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.295045][ T6953] tipc: Resetting bearer [ 157.315151][ T6953] tipc: Disabling bearer [ 157.348179][ T6958] loop0: detected capacity change from 0 to 8192 [ 157.355720][ T88] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.378647][ T6973] binder: 6971:6973 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 157.412609][ T6958] loop0: p1 p2 p3 p4[EZD] [ 157.413450][ T6958] loop0: partition table partially beyond EOD, truncated [ 157.414742][ T6958] loop0: p1 start 16384 is beyond EOD, truncated [ 157.415857][ T6958] loop0: p2 size 150994944 extends beyond EOD, truncated [ 157.419613][ T6958] loop0: p3 start 67108864 is beyond EOD, truncated [ 157.423038][ T6958] loop0: p4 size 33555584 extends beyond EOD, truncated [ 157.441317][ T6977] device syzkaller0 entered promiscuous mode [ 157.448593][ T6977] tipc: Enabled bearer , priority 0 [ 157.455605][ T6979] loop6: detected capacity change from 0 to 512 [ 157.456502][ T6977] tipc: Resetting bearer [ 157.469141][ T6976] tipc: Resetting bearer [ 157.480597][ T6979] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.686: iget: bad i_size value: 38620345925642 [ 157.483172][ T6979] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.686: couldn't read orphan inode 15 (err -117) [ 157.509574][ T6979] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 157.515420][ T6976] tipc: Disabling bearer [ 158.025450][ T6802] udevd[6802]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 158.096258][ T88] tipc: Left network mode [ 158.123303][ T6843] udevd[6843]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 158.136194][ T6992] loop1: detected capacity change from 0 to 512 [ 158.145283][ T3902] binder_debug: 2 callbacks suppressed [ 158.145295][ T3902] binder: release 6954:6956 transaction 92 out, still active [ 158.168330][ T39] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 158.174369][ T39] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 158.181790][ T39] EXT4-fs (loop6): This should not happen!! Data will be lost [ 158.181790][ T39] [ 158.183493][ T39] EXT4-fs (loop6): Total free blocks count 0 [ 158.201716][ T39] EXT4-fs (loop6): Free/Dirty block details [ 158.202768][ T39] EXT4-fs (loop6): free_blocks=0 [ 158.203810][ T39] EXT4-fs (loop6): dirty_blocks=16012 [ 158.216742][ T39] EXT4-fs (loop6): Block reservation details [ 158.218021][ T39] EXT4-fs (loop6): i_reserved_data_blocks=16012 [ 158.272282][ T6996] loop0: detected capacity change from 0 to 256 [ 159.054804][ T3902] binder: undelivered TRANSACTION_COMPLETE [ 159.055946][ T3902] binder: send failed reply for transaction 99 to 6954:6960 [ 159.057290][ T3902] binder: undelivered TRANSACTION_COMPLETE [ 159.058277][ T3902] binder: undelivered TRANSACTION_ERROR: 29189 [ 159.059384][ T3902] binder: send failed reply for transaction 92, target dead [ 159.111188][ T7000] loop3: detected capacity change from 0 to 1024 [ 159.119908][ T39] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 159.236871][ T6992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.282225][ T6844] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.286195][ T7000] overlayfs: missing 'workdir' [ 159.473266][ T7013] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.689: iget: bad i_size value: 2533274857506816 [ 160.730197][ T7020] loop3: detected capacity change from 0 to 512 [ 160.764191][ T7020] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.694: iget: bad i_size value: 38620345925642 [ 160.768502][ T7020] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.694: couldn't read orphan inode 15 (err -117) [ 160.771042][ T7020] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 160.886911][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 160.918789][ T6550] EXT4-fs (loop5): unmounting filesystem. [ 161.252443][ T7036] loop0: detected capacity change from 0 to 1024 [ 161.253836][ T7035] binder: 7033:7035 Acquire 1 refcount change on invalid ref 0 ret -22 [ 161.253994][ T7036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.258596][ T7035] binder: 7033:7035 ioctl c0306201 20000080 returned -14 [ 161.284312][ T7036] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c028, mo2=0102] [ 161.286308][ T7036] System zones: 0-1, 3-12 [ 161.287416][ T7036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 161.289202][ T7041] binder: 7038:7041 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 161.296250][ T7035] binder: 7033:7035 ioctl c0306201 200003c0 returned -14 [ 161.748241][ T7052] netlink: 'syz.0.698': attribute type 4 has an invalid length. [ 161.807250][ T7056] loop6: detected capacity change from 0 to 256 [ 161.810090][ T7005] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 162.047128][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 162.380444][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 162.439787][ T7060] loop1: detected capacity change from 0 to 2048 [ 162.568554][ T7060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.069486][ T7086] EXT4-fs (loop1): shut down requested (1) [ 163.131813][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 163.138896][ T7087] tipc: Started in network mode [ 163.139779][ T7087] tipc: Node identity 760a6b40e25f, cluster identity 4711 [ 163.141044][ T7087] tipc: Enabled bearer , priority 0 [ 163.144185][ T7050] tipc: Resetting bearer [ 163.271617][ T7095] loop6: detected capacity change from 0 to 512 [ 163.647457][ T7095] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 164.176418][ T7048] tipc: Disabling bearer [ 164.249004][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'. [ 164.256722][ T4380] tipc: Node number set to 2488625984 [ 164.346476][ T6557] EXT4-fs (loop6): unmounting filesystem. [ 164.401751][ T7113] binder: 7112:7113 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 164.552304][ T7122] loop6: detected capacity change from 0 to 512 [ 164.796723][ T7122] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.714: iget: bad i_size value: 38620345925642 [ 164.799310][ T7122] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.714: couldn't read orphan inode 15 (err -117) [ 164.802548][ T7122] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 165.037025][ T7146] loop5: detected capacity change from 0 to 512 [ 165.059886][ T7146] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.719: iget: bad i_size value: 38620345925642 [ 165.087422][ T7146] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.719: couldn't read orphan inode 15 (err -117) [ 165.106633][ T7146] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 165.198322][ T7157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.720'. [ 165.514789][ T7167] binder: tried to use weak ref as strong ref [ 165.515990][ T7167] binder: 7166:7167 Acquire 1 refcount change on invalid ref 0 ret -22 [ 165.517931][ T7167] binder: 7166:7167 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 165.590401][ T6557] EXT4-fs (loop6): unmounting filesystem. [ 165.662536][ T7186] loop3: detected capacity change from 0 to 128 [ 165.668540][ T7186] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.671356][ T7186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.034182][ T7195] loop6: detected capacity change from 0 to 256 [ 166.901123][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 166.901154][ T6550] EXT4-fs (loop5): unmounting filesystem. [ 166.943744][ T7188] tipc: Enabled bearer , priority 0 [ 166.962426][ T7200] tipc: Resetting bearer [ 167.021833][ T7174] tipc: Disabling bearer [ 167.521224][ T7221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.732'. [ 167.644021][ T7226] binder: tried to use weak ref as strong ref [ 167.645520][ T7226] binder: 7225:7226 Acquire 1 refcount change on invalid ref 0 ret -22 [ 167.647264][ T7226] binder: 7225:7226 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 167.677774][ T7228] loop1: detected capacity change from 0 to 512 [ 167.681260][ T7228] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.735: iget: bad i_size value: 38620345925642 [ 167.683918][ T7228] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.735: couldn't read orphan inode 15 (err -117) [ 167.688068][ T7228] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.165773][ T88] device hsr_slave_0 left promiscuous mode [ 168.239626][ T7239] loop6: detected capacity change from 0 to 512 [ 168.264514][ T88] device hsr_slave_1 left promiscuous mode [ 168.269319][ T7240] loop3: detected capacity change from 0 to 512 [ 168.298704][ T39] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 168.301502][ T39] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 168.304300][ T39] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.304300][ T39] [ 168.313614][ T39] EXT4-fs (loop1): Total free blocks count 0 [ 168.320426][ T7239] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.738: iget: bad i_size value: 38620345925642 [ 168.322868][ T7239] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.738: couldn't read orphan inode 15 (err -117) [ 168.326070][ T7239] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 168.329123][ T7247] loop0: detected capacity change from 0 to 128 [ 168.332170][ T7240] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.334659][ T7247] EXT4-fs (loop0): Test dummy encryption mode enabled [ 168.335939][ T39] EXT4-fs (loop1): Free/Dirty block details [ 168.341812][ T7247] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 168.352250][ T39] EXT4-fs (loop1): free_blocks=0 [ 168.354829][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.356393][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.358907][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.360343][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.362495][ T88] device bridge_slave_1 left promiscuous mode [ 168.365737][ T7250] loop5: detected capacity change from 0 to 512 [ 168.371428][ T39] EXT4-fs (loop1): dirty_blocks=16000 [ 168.374468][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.385100][ T39] EXT4-fs (loop1): Block reservation details [ 168.387932][ T39] EXT4-fs (loop1): i_reserved_data_blocks=16000 [ 168.428916][ T7250] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.740: iget: bad i_size value: 38620345925642 [ 168.477161][ T7250] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.740: couldn't read orphan inode 15 (err -117) [ 168.698951][ T7258] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.737: iget: bad i_size value: 2533274857506816 [ 169.466492][ T7250] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 169.474896][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 169.513243][ T6557] EXT4-fs (loop6): unmounting filesystem. [ 169.897615][ T88] device bridge_slave_0 left promiscuous mode [ 169.898962][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.924234][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 169.929082][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 169.959339][ T7271] binder: 7270:7271 ioctl 4018620d 0 returned -22 [ 169.960816][ T7271] binder: tried to use weak ref as strong ref [ 169.961906][ T7271] binder: 7270:7271 Acquire 1 refcount change on invalid ref 0 ret -22 [ 169.963477][ T7271] binder: 7270:7271 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 170.055727][ T7276] loop0: detected capacity change from 0 to 2048 [ 170.087511][ T7276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 170.126730][ T88] device veth1_macvtap left promiscuous mode [ 170.127845][ T88] device veth0_macvtap left promiscuous mode [ 170.128918][ T88] device veth1_vlan left promiscuous mode [ 170.129897][ T88] device veth0_vlan left promiscuous mode [ 170.221732][ T7292] EXT4-fs (loop0): shut down requested (1) [ 170.258211][ T6550] EXT4-fs (loop5): unmounting filesystem. [ 170.307527][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 170.335603][ T88] bond6 (unregistering): Released all slaves [ 170.340500][ T88] bond5 (unregistering): Released all slaves [ 170.347599][ T88] bond4 (unregistering): Released all slaves [ 170.359126][ T88] bond3 (unregistering): Released all slaves [ 170.363250][ T88] bond2 (unregistering): Released all slaves [ 170.369973][ T88] bond1 (unregistering): Released all slaves [ 170.902515][ T7282] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 171.414170][ T7317] loop0: detected capacity change from 0 to 256 [ 174.067370][ T88] team0 (unregistering): Port device team_slave_1 removed [ 174.226105][ T88] team0 (unregistering): Port device team_slave_0 removed [ 174.385011][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.587898][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.056501][ T88] bond0 (unregistering): Released all slaves [ 176.394116][ T7287] tipc: Enabling of bearer rejected, failed to enable media [ 176.548401][ T7335] loop5: detected capacity change from 0 to 128 [ 176.550206][ T7335] EXT4-fs (loop5): Test dummy encryption mode enabled [ 176.844909][ T7335] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 176.900872][ T7341] binder: 7340:7341 ioctl 4018620d 0 returned -22 [ 176.902377][ T7341] binder: tried to use weak ref as strong ref [ 176.904511][ T7341] binder: 7340:7341 Acquire 1 refcount change on invalid ref 0 ret -22 [ 176.911836][ T7341] binder: 7340:7341 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 176.930148][ T6550] EXT4-fs (loop5): unmounting filesystem. [ 177.044467][ T7349] loop3: detected capacity change from 0 to 512 [ 177.133416][ T7349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.864713][ T7347] loop5: detected capacity change from 0 to 2048 [ 177.900527][ T7347] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 178.043181][ T7362] EXT4-fs (loop5): shut down requested (1) [ 178.104275][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 178.192363][ T7368] loop3: detected capacity change from 0 to 512 [ 178.198706][ T6550] EXT4-fs (loop5): unmounting filesystem. [ 178.210762][ T7368] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.760: iget: bad i_size value: 38620345925642 [ 178.216637][ T7368] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.760: couldn't read orphan inode 15 (err -117) [ 178.221303][ T7368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 179.363537][ T7353] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 179.752940][ T7337] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 179.799730][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 179.919545][ T7396] device syzkaller0 entered promiscuous mode [ 179.958379][ T7396] tipc: Enabled bearer , priority 0 [ 179.964425][ T7396] tipc: Resetting bearer [ 180.008903][ T7395] tipc: Resetting bearer [ 180.013320][ T7404] loop5: detected capacity change from 0 to 128 [ 180.140541][ T7395] tipc: Disabling bearer [ 180.289465][ T7404] EXT4-fs (loop5): Test dummy encryption mode enabled [ 180.299652][ T7404] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 180.441943][ T6550] EXT4-fs (loop5): unmounting filesystem. [ 180.770962][ T7420] loop3: detected capacity change from 0 to 2048 [ 180.793556][ T7420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.288057][ T7439] EXT4-fs (loop3): shut down requested (1) [ 181.343045][ T7441] loop1: detected capacity change from 0 to 512 [ 181.390139][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 181.401181][ T7441] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 181.550311][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'. [ 181.644377][ T7455] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.775: iget: bad i_size value: 2533274857506816 [ 182.352551][ T7449] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 182.797006][ T7469] loop5: detected capacity change from 0 to 256 [ 183.375110][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 183.379320][ T7472] device syzkaller0 entered promiscuous mode [ 183.814213][ T27] audit: type=1326 audit(183.670:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7474 comm="syz.3.783" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9837a168 code=0x0 [ 183.981861][ T7486] loop6: detected capacity change from 0 to 128 [ 183.994860][ T7486] EXT4-fs (loop6): Test dummy encryption mode enabled [ 184.014372][ T7486] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 184.125807][ T7494] loop5: detected capacity change from 0 to 2048 [ 184.407577][ T7497] Config c/1 of g1 needs at least one function. [ 184.408728][ T7497] udc dummy_udc.0: failed to start g1: -22 [ 184.409718][ T7497] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 184.411099][ T7497] UDC core: g1: couldn't find an available UDC or it's busy [ 184.442427][ T7494] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 184.903133][ T6557] EXT4-fs (loop6): unmounting filesystem. [ 184.995753][ T7494] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.786: bg 0: block 240: padding at end of block bitmap is not set [ 185.002098][ T7494] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 185.005061][ T7494] EXT4-fs (loop5): This should not happen!! Data will be lost [ 185.005061][ T7494] [ 185.006876][ T7494] EXT4-fs (loop5): Total free blocks count 0 [ 185.008328][ T7494] EXT4-fs (loop5): Free/Dirty block details [ 185.009890][ T7494] EXT4-fs (loop5): free_blocks=0 [ 185.010956][ T7494] EXT4-fs (loop5): dirty_blocks=2240 [ 185.012186][ T7494] EXT4-fs (loop5): Block reservation details [ 185.013275][ T7494] EXT4-fs (loop5): i_reserved_data_blocks=140 [ 185.027224][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 185.109313][ T39] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 187.375805][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.377020][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.881260][ T7544] loop3: detected capacity change from 0 to 512 [ 188.921948][ T7548] device syzkaller0 entered promiscuous mode [ 189.377118][ T7548] tipc: Started in network mode [ 189.378240][ T7548] tipc: Node identity fed01853126d, cluster identity 4711 [ 189.379611][ T7548] tipc: Enabled bearer , priority 0 [ 189.387432][ T7548] tipc: Resetting bearer [ 189.389916][ T7551] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 189.403704][ T7556] loop0: detected capacity change from 0 to 128 [ 189.424717][ T7556] EXT4-fs (loop0): Test dummy encryption mode enabled [ 189.505184][ T7547] tipc: Resetting bearer [ 189.540174][ T7544] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.797: iget: bad i_size value: 38620345925642 [ 189.542768][ T7556] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 189.552109][ T7544] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.797: couldn't read orphan inode 15 (err -117) [ 189.565239][ T7547] tipc: Disabling bearer [ 189.628310][ T7544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.195787][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 190.261372][ T7577] Config c/1 of g1 needs at least one function. [ 190.262638][ T7577] udc dummy_udc.0: failed to start g1: -22 [ 190.263679][ T7577] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 190.265199][ T7577] UDC core: g1: couldn't find an available UDC or it's busy [ 190.282279][ T7576] device syzkaller0 entered promiscuous mode [ 190.292352][ T7576] tipc: Enabled bearer , priority 0 [ 190.310885][ T7576] tipc: Resetting bearer [ 190.335659][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 190.338711][ T7575] tipc: Resetting bearer [ 190.375467][ T7575] tipc: Disabling bearer [ 190.451348][ T7588] loop0: detected capacity change from 0 to 512 [ 190.458271][ T7588] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.803: iget: bad i_size value: 38620345925642 [ 190.460943][ T7588] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.803: couldn't read orphan inode 15 (err -117) [ 190.464702][ T7588] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 190.812403][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.804'. [ 191.222491][ T27] audit: type=1326 audit(191.130:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.6.807" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f7a168 code=0x0 [ 191.262561][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.809'. [ 191.277065][ T7620] loop3: detected capacity change from 0 to 512 [ 191.354481][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 191.372744][ T7620] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.812: iget: bad i_size value: 38620345925642 [ 191.383134][ T7624] loop1: detected capacity change from 0 to 128 [ 191.385228][ T7624] EXT4-fs (loop1): Test dummy encryption mode enabled [ 191.395048][ T7624] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.399489][ T7620] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.812: couldn't read orphan inode 15 (err -117) [ 191.460941][ T7627] device syzkaller0 entered promiscuous mode [ 191.469975][ T7620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.964994][ T7644] device syzkaller0 entered promiscuous mode [ 191.972572][ T7644] tipc: Enabled bearer , priority 0 [ 191.980934][ T7644] tipc: Resetting bearer [ 191.983237][ T7643] tipc: Resetting bearer [ 192.016192][ T7643] tipc: Disabling bearer [ 192.028868][ T7651] loop0: detected capacity change from 0 to 1024 [ 192.091393][ T7328] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.158367][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 192.162128][ T7657] loop6: detected capacity change from 0 to 512 [ 192.249754][ T7657] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.818: iget: bad i_size value: 38620345925642 [ 192.259711][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 192.358923][ T7664] loop3: detected capacity change from 0 to 256 [ 193.069747][ T7657] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.818: couldn't read orphan inode 15 (err -117) [ 193.078657][ T7657] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 193.184310][ T7667] overlayfs: missing 'workdir' [ 193.587985][ T6557] EXT4-fs (loop6): unmounting filesystem. [ 193.618692][ T7675] Config c/1 of g1 needs at least one function. [ 193.619902][ T7675] udc dummy_udc.0: failed to start g1: -22 [ 193.620906][ T7675] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 193.622443][ T7675] UDC core: g1: couldn't find an available UDC or it's busy [ 193.637991][ T7681] loop3: detected capacity change from 0 to 512 [ 193.680816][ T7681] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.823: iget: bad i_size value: 38620345925642 [ 193.713215][ T7681] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.823: couldn't read orphan inode 15 (err -117) [ 194.018457][ T7688] fuse: Bad value for 'fd' [ 194.022186][ T7681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.546175][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 195.751509][ T7703] loop1: detected capacity change from 0 to 512 [ 195.756285][ T7702] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 195.846079][ T7708] loop6: detected capacity change from 0 to 128 [ 195.864113][ T7708] EXT4-fs (loop6): Test dummy encryption mode enabled [ 195.905531][ T7703] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.829: iget: bad i_size value: 38620345925642 [ 195.908029][ T7703] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.829: couldn't read orphan inode 15 (err -117) [ 195.910460][ T7708] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 195.922182][ T7703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.335892][ T7715] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 196.800046][ T6557] EXT4-fs (loop6): unmounting filesystem. [ 197.305400][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 197.308902][ T7740] binder: 7737:7740 ioctl 4018620d 20004a80 returned -16 [ 197.310490][ T7740] binder: tried to use weak ref as strong ref [ 197.311544][ T7740] binder: 7737:7740 Acquire 1 refcount change on invalid ref 0 ret -22 [ 197.313170][ T7740] binder: 7737:7740 got transaction to invalid handle, 1 [ 197.314397][ T7740] binder: 7740:7737 cannot find target node [ 197.315620][ T7740] binder: 7737:7740 transaction call to 0:0 failed 120/29201/-22, size 72-24 line 3062 [ 197.317977][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 197.321263][ T7740] binder: 7737:7740 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 197.323339][ T7740] binder: 7740 RLIMIT_NICE not set [ 197.373721][ T7746] binder: 7737:7746 got transaction to invalid handle, 3 [ 197.375039][ T7746] binder: 7746:7737 cannot find target node [ 197.376040][ T7746] binder: 7737:7746 transaction call to 0:0 failed 121/29201/-22, size 0-0 line 3062 [ 197.658450][ T7763] loop1: detected capacity change from 0 to 256 [ 197.660372][ T7762] Config c/1 of g1 needs at least one function. [ 197.661644][ T7762] udc dummy_udc.0: failed to start g1: -22 [ 197.662776][ T7762] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 197.665168][ T7762] UDC core: g1: couldn't find an available UDC or it's busy [ 198.361125][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.905541][ T7766] device syzkaller0 entered promiscuous mode [ 198.907411][ T27] audit: type=1326 audit(198.665:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.6.841" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f7a168 code=0x0 [ 198.931184][ T7775] loop0: detected capacity change from 0 to 128 [ 198.949217][ T7775] EXT4-fs (loop0): Test dummy encryption mode enabled [ 198.979302][ T7775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 199.078566][ T7786] loop5: detected capacity change from 0 to 1024 [ 201.214917][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 201.311071][ T7811] overlayfs: missing 'workdir' [ 201.463669][ T7815] loop0: detected capacity change from 0 to 512 [ 201.490958][ T7815] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.846: iget: bad i_size value: 38620345925642 [ 201.493352][ T7815] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.846: couldn't read orphan inode 15 (err -117) [ 201.498655][ T7819] fuse: Bad value for 'fd' [ 201.503394][ T7815] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 201.555566][ T7823] binder: 7820:7823 tried to acquire reference to desc 0, got 1 instead [ 201.713992][ T7828] binder: 7820:7828 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 201.716339][ T7828] binder: 7828 RLIMIT_NICE not set [ 201.749640][ T7830] Config c/1 of g1 needs at least one function. [ 201.751022][ T7830] udc dummy_udc.0: failed to start g1: -22 [ 201.752006][ T7830] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 201.753809][ T7830] UDC core: g1: couldn't find an available UDC or it's busy [ 202.379428][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 202.444631][ T4519] binder: release 7820:7823 transaction 126 out, still active [ 202.446263][ T4519] binder: undelivered TRANSACTION_COMPLETE [ 202.447414][ T4519] binder: send failed reply for transaction 133 to 7820:7828 [ 202.453751][ T4519] binder: undelivered TRANSACTION_COMPLETE [ 202.455059][ T4519] binder: undelivered TRANSACTION_ERROR: 29189 [ 202.480258][ T7835] loop5: detected capacity change from 0 to 512 [ 202.499764][ T7835] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 202.746645][ T7841] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.855: iget: bad i_size value: 2533274857506816 [ 203.025853][ T27] audit: type=1326 audit(202.488:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.0.854" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad97a168 code=0x0 [ 203.936305][ T6550] EXT4-fs (loop5): unmounting filesystem. [ 203.973930][ T7853] loop5: detected capacity change from 0 to 128 [ 203.987502][ T7853] EXT4-fs (loop5): Test dummy encryption mode enabled [ 203.994214][ T7853] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 204.931043][ T6550] EXT4-fs (loop5): unmounting filesystem. [ 205.071619][ T7867] Invalid ELF header type: 2 != 1 [ 214.473658][ T7881] loop0: detected capacity change from 0 to 1024 [ 214.613998][ T4343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.618730][ T4343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.620272][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.622171][ T4343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.623755][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.625632][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.634001][ T7859] tipc: Enabling of bearer rejected, failed to enable media [ 214.640195][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.859'. [ 214.684138][ T7904] binder: 7903:7904 tried to acquire reference to desc 0, got 1 instead [ 214.742163][ T7905] binder: 7903:7905 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 214.744653][ T7905] binder: 7905 RLIMIT_NICE not set [ 214.768896][ T7907] overlayfs: missing 'workdir' [ 215.072967][ T7915] Config c/1 of g1 needs at least one function. [ 215.074342][ T7915] udc dummy_udc.0: failed to start g1: -22 [ 215.075354][ T7915] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 215.090309][ T7915] UDC core: g1: couldn't find an available UDC or it's busy [ 215.131494][ T7899] chnl_net:caif_netlink_parms(): no params data found [ 215.148519][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.177043][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.418885][ T7899] device bridge_slave_0 entered promiscuous mode [ 215.512445][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.516161][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.518864][ T7899] device bridge_slave_1 entered promiscuous mode [ 215.527445][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.530342][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.538718][ T7899] team0: Port device team_slave_0 added [ 215.540942][ T7899] team0: Port device team_slave_1 added [ 215.546961][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.548259][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.552379][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.554824][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.556435][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.560733][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.718163][ T27] audit: type=1326 audit(214.517:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.0.869" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad97a168 code=0x0 [ 215.853256][ T7899] device hsr_slave_0 entered promiscuous mode [ 215.861820][ T6145] binder_debug: 1 callbacks suppressed [ 215.861830][ T6145] binder: release 7903:7904 transaction 138 out, still active [ 215.864121][ T6145] binder: undelivered TRANSACTION_COMPLETE [ 215.865097][ T6145] binder: send failed reply for transaction 145 to 7903:7905 [ 215.866539][ T6145] binder: undelivered TRANSACTION_COMPLETE [ 215.867499][ T6145] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.868692][ T6145] binder: send failed reply for transaction 138, target dead [ 215.903033][ T7899] device hsr_slave_1 entered promiscuous mode [ 215.937760][ T7899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.034619][ T7899] Cannot create hsr debugfs directory [ 216.059259][ T7937] loop5: detected capacity change from 0 to 512 [ 216.667413][ T7937] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 216.877301][ T4338] Bluetooth: hci2: command 0x0409 tx timeout [ 217.177651][ T7946] dummy_hcd dummy_hcd.0: remove, state 4 [ 217.179064][ T7946] usb usb1: USB disconnect, device number 1 [ 217.214556][ T7946] dummy_hcd dummy_hcd.0: stopped [ 217.215477][ T7946] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 217.532797][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 217.535777][ T6550] EXT4-fs (loop5): unmounting filesystem. [ 217.583708][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.607758][ T7959] loop0: detected capacity change from 0 to 512 [ 217.630819][ T7954] device syzkaller0 entered promiscuous mode [ 217.634306][ T7959] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.877: iget: bad i_size value: 38620345925642 [ 217.642384][ T7959] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.877: couldn't read orphan inode 15 (err -117) [ 217.645477][ T7959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 217.734325][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.737785][ T7954] tipc: Enabled bearer , priority 0 [ 217.742036][ T7954] tipc: Resetting bearer [ 217.758897][ T7953] tipc: Resetting bearer [ 218.070867][ T7953] tipc: Disabling bearer [ 218.109008][ T7976] binder: 7975:7976 tried to acquire reference to desc 0, got 1 instead [ 218.140086][ T7978] loop6: detected capacity change from 0 to 1024 [ 218.145264][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.149685][ T7899] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 218.170517][ T7983] binder: 7975:7983 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 218.174317][ T7983] binder: 7983 RLIMIT_NICE not set [ 218.178141][ T7883] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.210956][ T7899] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 218.307037][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.310321][ T7899] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 218.316888][ T7985] Unable to handle kernel paging request at virtual address dfff800000000000 [ 218.318176][ T7985] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 218.319528][ T7985] Mem abort info: [ 218.320175][ T7985] ESR = 0x0000000096000006 [ 218.320910][ T7985] EC = 0x25: DABT (current EL), IL = 32 bits [ 218.321926][ T7985] SET = 0, FnV = 0 [ 218.322687][ T7985] EA = 0, S1PTW = 0 [ 218.323350][ T7985] FSC = 0x06: level 2 translation fault [ 218.324290][ T7985] Data abort info: [ 218.324897][ T7985] ISV = 0, ISS = 0x00000006 [ 218.325679][ T7985] CM = 0, WnR = 0 [ 218.326382][ T7985] [dfff800000000000] address between user and kernel address ranges [ 218.327961][ T7985] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 218.329146][ T7985] Modules linked in: [ 218.329800][ T7985] CPU: 0 PID: 7985 Comm: syz.5.880 Not tainted syzkaller #0 [ 218.330932][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 218.332510][ T7985] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 218.333768][ T7985] pc : dummy_set_selfpowered+0xb0/0x158 [ 218.334727][ T7985] lr : dummy_set_selfpowered+0x80/0x158 [ 218.335653][ T7985] sp : ffff800021937570 [ 218.336422][ T7985] x29: ffff800021937570 x28: 1fffe0001bdaa095 x27: 1fffe0001a26a98b [ 218.337860][ T7985] x26: dfff800000000000 x25: ffff0000d430ec10 x24: ffff0000d430ec48 [ 218.339353][ T7985] x23: ffff0000ded50510 x22: dfff800000000000 x21: 0000000000000003 [ 218.340721][ T7985] x20: 0000000000000000 x19: 0000000000000001 x18: 0000000000000000 [ 218.342065][ T7985] x17: 0000000000000000 x16: ffff800011b90080 x15: 0000000000000000 [ 218.343519][ T7985] x14: 0000000000000001 x13: 1fffe0001800461b x12: 0000000000080000 [ 218.344997][ T7985] x11: ff0080000dceb44c x10: 0000000000000002 x9 : 0000000000000658 [ 218.346290][ T7985] x8 : 0000000000000000 x7 : ffff800008bdb66c x6 : 0000000000000000 [ 218.347709][ T7985] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d66b4 [ 218.349134][ T7985] x2 : 0000000000000001 x1 : 0000000000000003 x0 : 0000000000000005 [ 218.350467][ T7985] Call trace: [ 218.351013][ T7985] dummy_set_selfpowered+0xb0/0x158 [ 218.351910][ T7985] usb_gadget_set_selfpowered+0x70/0x388 [ 218.352883][ T7985] composite_dev_prepare+0x28c/0x2bc [ 218.354012][ T7985] configfs_composite_bind+0xa0/0xce4 [ 218.355001][ T7985] gadget_bind_driver+0x26c/0x684 [ 218.356010][ T7985] really_probe+0x3a0/0xac4 [ 218.356899][ T7985] __driver_probe_device+0x1c8/0x368 [ 218.357854][ T7985] driver_probe_device+0x78/0x324 [ 218.358749][ T7985] __driver_attach+0x3bc/0x614 [ 218.359623][ T7985] bus_for_each_dev+0x148/0x1d0 [ 218.360433][ T7985] driver_attach+0x50/0x60 [ 218.361201][ T7985] bus_add_driver+0x2c0/0x518 [ 218.362045][ T7985] driver_register+0x200/0x37c [ 218.362894][ T7985] usb_gadget_register_driver_owner+0xf0/0x25c [ 218.363927][ T7985] gadget_dev_desc_UDC_store+0x168/0x268 [ 218.364783][ T7985] configfs_write_iter+0x260/0x338 [ 218.365588][ T7985] vfs_write+0x3c8/0x7c8 [ 218.366340][ T7985] ksys_write+0x12c/0x228 [ 218.367114][ T7985] __arm64_sys_write+0x7c/0x90 [ 218.367960][ T7985] invoke_syscall+0x98/0x290 [ 218.368716][ T7985] el0_svc_common+0x13c/0x258 [ 218.369517][ T7985] do_el0_svc+0x5c/0x134 [ 218.370337][ T7985] el0_svc+0x58/0x128 [ 218.371024][ T7985] el0t_64_sync_handler+0x84/0xf0 [ 218.371855][ T7985] el0t_64_sync+0x18c/0x190 [ 218.372559][ T7985] Code: aa1403e0 96b02530 f9400294 d343fe88 (38766908) [ 218.373605][ T7985] ---[ end trace 0000000000000000 ]--- [ 218.617353][ T7985] Kernel panic - not syncing: Oops: Fatal exception [ 218.618484][ T7985] SMP: stopping secondary CPUs [ 218.619206][ T7985] Kernel Offset: disabled [ 218.619900][ T7985] CPU features: 0x0a0000,000f0097,a65bfea7 [ 218.620833][ T7985] Memory Limit: none [ 218.882251][ T7985] Rebooting in 86400 seconds..