last executing test programs: 7.401951182s ago: executing program 4 (id=2719): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000001c0), 0x12) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x4, 0x2, 0x1, 0x3ffe}, 0x0, 0x0, 0x0) 7.267897402s ago: executing program 4 (id=2720): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x42e3, &(0x7f0000000300)={0x0, 0x78a2, 0x1000, 0x2, 0x41e0}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6f5d, &(0x7f0000000380)={0x0, 0xb72c, 0x2, 0x3, 0x12a, 0x0, r0}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks', @ANYRESDEC=r2]) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 6.786089795s ago: executing program 4 (id=2726): r0 = socket(0x200000000000011, 0x2, 0x10) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 4.091840869s ago: executing program 3 (id=2759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x1, 0x3, 0x8, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000740)="05032200", 0x4, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.912689832s ago: executing program 3 (id=2761): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)=ANY=[], 0x0, 0x200) 3.827942397s ago: executing program 3 (id=2762): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000000) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x401, 0x9, 0xfffffff9, 0x20b, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sync() r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r3, 0x100) 3.037234612s ago: executing program 3 (id=2771): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.989613365s ago: executing program 3 (id=2773): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x6, 0x1}, 0xe37, 0x3, 0x0, 0x0, 0x9, 0x3, 0x0, 0x804, 0x5, 0x0}) 2.861490214s ago: executing program 3 (id=2776): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) io_setup(0xff, 0x0) io_submit(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 1.60002555s ago: executing program 2 (id=2785): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) shutdown(r0, 0x0) 1.593554311s ago: executing program 2 (id=2786): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x183000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 1.524895605s ago: executing program 2 (id=2787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xe, 0x6, 0xc, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x3ef, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x5, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.363932206s ago: executing program 1 (id=2790): setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 1.363693076s ago: executing program 0 (id=2791): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"}) r2 = syz_open_pts(r1, 0x141601) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00050000008616cd6f00000000e7ff0a0000070600024000080000e75547c2113bb8a9f9bed0c539605f027d1b573943f5b0c7c3361c1f5d8e4df151464482419345a25e044746876a9c13a21fb4b7e6015a8f2c8820cc06af086d40dfa7ce4a842d8c58eb3a572dd3c17c1c68d06e8f7e79f63211ed163144a28aae0560ad8d90d6305849b93889ea3bff35aa59ca324120389cbf50b1c760c4e9c09cf1afaf344335b41a9cab48ba217a3e0000000000000000"], 0x1c}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000480)="1c0000001a009b8a140000003bffffff8000000081ff000000000000", 0x1c) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 1.246215894s ago: executing program 1 (id=2792): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=""/250}, 0x20) 1.15621686s ago: executing program 2 (id=2793): mlock(&(0x7f0000fed000/0x10000)=nil, 0x10000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0xb71, 0x9}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)) connect$can_bcm(r4, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400, 0x0, 0x1, 0x8, 0xe, 0x5}, 0x20) 1.089716835s ago: executing program 0 (id=2794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000020000000000000018e8ffff1f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 991.974992ms ago: executing program 1 (id=2795): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000400), 0xa5e) 991.758051ms ago: executing program 1 (id=2796): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 923.382737ms ago: executing program 1 (id=2797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="00080000000000000a004e2300000004ff0200000000000000000000a51528b40e8239860000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e22ffffff90fe8000000000000000000000000000aa0500"/272], 0x110) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) fchdir(r5) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e20, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x40004f1}}}, 0x108) 877.336209ms ago: executing program 4 (id=2726): r0 = socket(0x200000000000011, 0x2, 0x10) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 808.685924ms ago: executing program 0 (id=2798): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) 462.062528ms ago: executing program 0 (id=2799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r7, 0x33}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8a626319f48ffc54553d60508b9", 0xe}], 0x1}, 0x404481c) 335.092457ms ago: executing program 4 (id=2800): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f0000000180)=""/3, 0x3}], 0x2) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/17, 0x11, 0x0, 0xdc1e, 0xe}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 214.528505ms ago: executing program 4 (id=2801): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r1, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x200800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000200)='./file0/file0\x00', 0x0, 0xc91, 0x0) 213.625035ms ago: executing program 0 (id=2802): setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 158.633009ms ago: executing program 2 (id=2803): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1ec}], 0x1, 0x12040, 0x0) 126.653351ms ago: executing program 2 (id=2804): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"}) r2 = syz_open_pts(r1, 0x141601) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00050000008616cd6f00000000e7ff0a0000070600024000080000e75547c2113bb8a9f9bed0c539605f027d1b573943f5b0c7c3361c1f5d8e4df151464482419345a25e044746876a9c13a21fb4b7e6015a8f2c8820cc06af086d40dfa7ce4a842d8c58eb3a572dd3c17c1c68d06e8f7e79f63211ed163144a28aae0560ad8d90d6305849b93889ea3bff35aa59ca324120389cbf50b1c760c4e9c09cf1afaf344335b41a9cab48ba217a3e0000000000000000"], 0x1c}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000480)="1c0000001a009b8a140000003bffffff8000000081ff000000000000", 0x1c) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 125.373351ms ago: executing program 0 (id=2805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 0s ago: executing program 1 (id=2806): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101840, 0x19) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000080)=0x8) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.0.255'. [ 89.475631][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 89.713147][ T5292] SET target dimension over the limit! [ 89.996769][ T5296] device syzkaller0 entered promiscuous mode [ 90.918961][ T5311] loop1: detected capacity change from 0 to 128 [ 90.927809][ T5311] EXT4-fs: inline encryption not supported [ 90.939317][ T5311] EXT4-fs (loop1): Test dummy encryption mode enabled [ 91.008049][ T5311] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.028055][ T5311] 9pnet_fd: Insufficient options for proto=fd [ 93.007688][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 93.027763][ T5334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.027873][ T5334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.197864][ T5355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.202808][ T5355] netlink: 'syz.3.277': attribute type 72 has an invalid length. [ 94.437864][ T5367] SET target dimension over the limit! [ 94.604892][ T5373] loop4: detected capacity change from 0 to 128 [ 94.614828][ T5373] EXT4-fs: inline encryption not supported [ 94.617331][ T5373] EXT4-fs (loop4): Test dummy encryption mode enabled [ 94.677858][ T5373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.942793][ T5373] 9pnet_fd: Insufficient options for proto=fd [ 96.528797][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 96.571020][ T5408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.580760][ T5408] netlink: 'syz.3.296': attribute type 72 has an invalid length. [ 96.787100][ T111] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.998187][ T111] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 96.999727][ T111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.002339][ T111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.003947][ T111] usb 1-1: config 1 has no interface number 0 [ 97.013921][ T111] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.045385][ T111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.082098][ T111] usb 1-1: Product: syz [ 97.102023][ T111] usb 1-1: Manufacturer: syz [ 97.121746][ T111] usb 1-1: SerialNumber: syz [ 97.946260][ T5427] SET target dimension over the limit! [ 98.677980][ T5440] loop1: detected capacity change from 0 to 128 [ 98.716838][ T5440] EXT4-fs: inline encryption not supported [ 98.720428][ T5440] EXT4-fs (loop1): Test dummy encryption mode enabled [ 98.776253][ T5440] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.788413][ T5440] 9pnet_fd: Insufficient options for proto=fd [ 98.863986][ T5448] netlink: 40 bytes leftover after parsing attributes in process `syz.4.308'. [ 99.016778][ T5456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.018979][ T5456] netlink: 'syz.2.312': attribute type 72 has an invalid length. [ 99.530138][ T1987] usb 1-1: USB disconnect, device number 3 [ 100.065995][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 100.134704][ T5466] SET target dimension over the limit! [ 104.337741][ T5546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.344181][ T5546] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.341'. [ 105.305657][ T5563] fuse: Bad value for 'fd' [ 106.853737][ T5597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.856339][ T5597] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.357'. [ 107.807913][ T4366] libceph: connect (1)[c::]:6789 error -101 [ 107.809543][ T4366] libceph: mon0 (1)[c::]:6789 connect error [ 107.875297][ T5605] ceph: No mds server is up or the cluster is laggy [ 107.916515][ T5611] fuse: Bad value for 'fd' [ 108.617662][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 109.597039][ T5652] fuse: Bad value for 'fd' [ 109.824905][ T5661] SET target dimension over the limit! [ 110.872175][ T5670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.148150][ T5698] SET target dimension over the limit! [ 114.547818][ T5756] SET target dimension over the limit! [ 114.973092][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 115.117531][ T5774] device syzkaller0 entered promiscuous mode [ 115.714234][ T5798] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 115.748380][ T5798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.772956][ T5798] bond1: (slave gretap1): making interface the new active one [ 115.780743][ T5798] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 115.785657][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 115.795417][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 116.036252][ T5808] SET target dimension over the limit! [ 116.960112][ T5827] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.961719][ T5827] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 118.064807][ T5830] loop0: detected capacity change from 0 to 128 [ 118.066251][ T5830] EXT4-fs: inline encryption not supported [ 118.084539][ T5830] EXT4-fs (loop0): Test dummy encryption mode enabled [ 118.106696][ T5830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.427522][ T4322] EXT4-fs (loop0): unmounting filesystem. [ 119.875437][ T5854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.882322][ T5854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.177853][ T5876] netlink: 'syz.3.449': attribute type 2 has an invalid length. [ 121.180825][ T5877] netlink: 'syz.3.449': attribute type 2 has an invalid length. [ 121.183785][ T5879] loop4: detected capacity change from 0 to 128 [ 121.185109][ T5879] EXT4-fs: inline encryption not supported [ 121.188244][ T5879] EXT4-fs (loop4): Test dummy encryption mode enabled [ 121.198898][ T5879] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.231742][ T5879] 9pnet_fd: Insufficient options for proto=fd [ 121.283651][ T5883] usb usb7: usbfs: process 5883 (syz.1.452) did not claim interface 0 before use [ 122.226610][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 122.400163][ T5903] loop3: detected capacity change from 0 to 128 [ 122.406226][ T5903] EXT4-fs: inline encryption not supported [ 122.409901][ T5903] EXT4-fs (loop3): Test dummy encryption mode enabled [ 122.429282][ T5905] qfq: no options [ 122.472571][ T5903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.320556][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 123.918242][ T5925] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 123.947204][ T5925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.957904][ T5928] fuse: Bad value for 'fd' [ 123.959306][ T5925] bond1: (slave gretap1): making interface the new active one [ 123.965836][ T5925] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 123.970709][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 124.129200][ T5933] device syzkaller0 entered promiscuous mode [ 124.543984][ T5944] loop2: detected capacity change from 0 to 128 [ 124.557966][ T5944] EXT4-fs: inline encryption not supported [ 124.568741][ T5944] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.580026][ T5946] qfq: no options [ 124.580963][ T5944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.106856][ T5955] fuse: Bad value for 'fd' [ 125.985135][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 126.268732][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.271410][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.427363][ T5980] qfq: no options [ 126.627283][ T5998] loop1: detected capacity change from 0 to 128 [ 126.630019][ T5998] EXT4-fs: inline encryption not supported [ 126.645605][ T5998] EXT4-fs (loop1): Test dummy encryption mode enabled [ 126.658048][ T5998] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 127.388967][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.390396][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.597795][ T6020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.605413][ T6020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.687643][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 128.510280][ T6040] binder: 6039:6040 tried to acquire reference to desc 0, got 1 instead [ 128.513075][ T6040] binder: 6039:6040 got transaction with invalid fd, -1 [ 128.514717][ T6040] binder: 6040:6039 translate fd failed [ 128.515709][ T6040] binder: 6039:6040 transaction async to 6039:0 failed 12/29201/-9, size 72-24 line 3415 [ 128.524128][ T4366] binder: release 6039:6040 transaction 5 out, still active [ 128.525506][ T4366] binder: undelivered TRANSACTION_COMPLETE [ 128.534066][ T4366] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.535117][ T4366] binder: send failed reply for transaction 5, target dead [ 129.077208][ T6054] loop3: detected capacity change from 0 to 128 [ 129.080735][ T6054] EXT4-fs: inline encryption not supported [ 129.100814][ T6054] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.112051][ T6054] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 129.123239][ T6057] device syzkaller0 entered promiscuous mode [ 129.370033][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.372260][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.142495][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 131.527770][ T1987] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.720521][ T1987] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 131.722767][ T1987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.724160][ T1987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.725984][ T1987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.728051][ T1987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.731891][ T1987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.734804][ T1987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.737351][ T1987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.739939][ T1987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.742979][ T1987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.745671][ T1987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.747536][ T1987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.750432][ T1987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.752429][ T1987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.754715][ T1987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.756520][ T1987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.767032][ T1987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.780381][ T1987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.784644][ T1987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.789087][ T1987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.791571][ T1987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.801109][ T1987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.805772][ T1987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.808345][ T1987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.812246][ T1987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.819434][ T1987] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 131.822439][ T1987] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 131.825650][ T1987] usb 1-1: Product: syz [ 131.827080][ T1987] usb 1-1: Manufacturer: syz [ 131.830071][ T1987] usb 1-1: SerialNumber: syz [ 131.846468][ T1987] usb 1-1: config 0 descriptor?? [ 131.863156][ T1987] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 132.431293][ T6107] fuse: Bad value for 'fd' [ 132.957622][ T1987] usb 1-1: USB disconnect, device number 4 [ 132.963242][ T1987] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 133.127312][ T6122] binder: 6121:6122 got transaction to invalid handle, 3 [ 133.128682][ T6122] binder: 6122:6121 cannot find target node [ 133.129614][ T6122] binder: 6121:6122 transaction async to 0:0 failed 16/29201/-22, size 72-24 line 3045 [ 133.139556][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.210611][ T6123] SET target dimension over the limit! [ 134.989651][ T6159] fuse: Bad value for 'fd' [ 135.403113][ T6167] SET target dimension over the limit! [ 138.293902][ T6213] fuse: Bad value for 'fd' [ 138.621125][ T6217] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 138.666519][ T6217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.672167][ T6223] bond1: (slave gretap1): making interface the new active one [ 138.674738][ T6223] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 138.726079][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 138.754352][ T6217] netlink: 44 bytes leftover after parsing attributes in process `syz.0.562'. [ 138.766943][ T6230] netlink: 32 bytes leftover after parsing attributes in process `syz.4.566'. [ 138.928340][ T6231] Bluetooth: MGMT ver 1.22 [ 140.048136][ T6267] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 140.079150][ T6267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.106893][ T6267] bond1: (slave gretap1): making interface the new active one [ 140.119620][ T6267] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 140.120469][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.122570][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.124604][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 140.143705][ T6267] netlink: 44 bytes leftover after parsing attributes in process `syz.4.579'. [ 140.768649][ T6282] 9pnet_fd: Insufficient options for proto=fd [ 141.356541][ T6305] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 141.380775][ T6305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.399170][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.593'. [ 141.400573][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 141.814339][ T6321] loop4: detected capacity change from 0 to 128 [ 141.832186][ T6321] EXT4-fs: inline encryption not supported [ 141.837765][ T6321] EXT4-fs (loop4): Test dummy encryption mode enabled [ 141.868960][ T6321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.209391][ T6334] binder: 6333:6334 tried to acquire reference to desc 0, got 1 instead [ 142.214712][ T6334] binder: 6333:6334 got transaction to invalid handle, 3 [ 142.215783][ T6334] binder: 6334:6333 cannot find target node [ 142.224159][ T6334] binder: 6333:6334 transaction async to 0:0 failed 21/29201/-22, size 72-24 line 3045 [ 142.240168][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.405878][ T4368] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.787223][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 142.867317][ T4368] usb 1-1: Using ep0 maxpacket: 16 [ 142.870595][ T4368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.872355][ T4368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.874317][ T4368] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.876468][ T4368] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 142.877800][ T4368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.880398][ T4368] usb 1-1: config 0 descriptor?? [ 143.253229][ T6353] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 143.264101][ T6353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.272294][ T6353] bond1: (slave gretap1): making interface the new active one [ 143.274539][ T6353] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 143.276116][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 143.279155][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.609'. [ 143.280686][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 143.440651][ T4368] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 143.442065][ T4368] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 143.443375][ T4368] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 143.444486][ T4368] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 143.445636][ T4368] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 143.448637][ T4368] hid-generic 0003:0955:7214.0002: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 143.946249][ T24] usb 1-1: USB disconnect, device number 5 [ 143.974424][ T6372] binder: 6369:6372 Acquire 1 refcount change on invalid ref 1 ret -22 [ 144.020095][ T6377] loop3: detected capacity change from 0 to 128 [ 144.021410][ T6377] EXT4-fs: inline encryption not supported [ 144.026978][ T6377] EXT4-fs (loop3): Test dummy encryption mode enabled [ 144.047097][ T6377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 144.311342][ T6387] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 144.321411][ T6387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.346723][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'. [ 144.348162][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 144.764313][ T6402] device syzkaller0 entered promiscuous mode [ 144.779508][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.786241][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.984474][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 145.571675][ T6421] netlink: 'syz.3.631': attribute type 1 has an invalid length. [ 145.585414][ T6421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.589981][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 145.830878][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.832457][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.106752][ T6441] loop0: detected capacity change from 0 to 128 [ 146.108182][ T6441] EXT4-fs: inline encryption not supported [ 146.109522][ T6441] EXT4-fs (loop0): Test dummy encryption mode enabled [ 146.113148][ T6441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 146.168395][ T6446] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 146.175293][ T6449] fuse: Bad value for 'group_id' [ 146.195109][ T6446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.205232][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 146.388070][ T6456] netlink: 64 bytes leftover after parsing attributes in process `syz.1.644'. [ 146.775431][ T6465] loop4: detected capacity change from 0 to 128 [ 146.784719][ T6463] device syzkaller0 entered promiscuous mode [ 146.802066][ T6465] EXT4-fs: inline encryption not supported [ 146.814627][ T6465] EXT4-fs (loop4): Test dummy encryption mode enabled [ 146.818896][ T6465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.853894][ T6465] 9pnet_fd: Insufficient options for proto=fd [ 147.389345][ T4322] EXT4-fs (loop0): unmounting filesystem. [ 147.522522][ T6481] fuse: Bad value for 'group_id' [ 147.660371][ T6490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.661935][ T6490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.697661][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 147.741272][ T6495] netlink: 256 bytes leftover after parsing attributes in process `syz.3.656'. [ 147.805132][ T6490] netlink: 'syz.3.656': attribute type 5 has an invalid length. [ 147.869358][ T6499] loop1: detected capacity change from 0 to 128 [ 147.874340][ T6499] EXT4-fs: inline encryption not supported [ 147.882702][ T6499] EXT4-fs (loop1): Test dummy encryption mode enabled [ 147.887935][ T6499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.902833][ T6502] binder: 6501:6502 got transaction to invalid handle, 1 [ 147.904606][ T6502] binder: 6502:6501 cannot find target node [ 147.912474][ T6502] binder: 6501:6502 transaction call to 0:0 failed 27/29201/-22, size 72-24 line 3045 [ 147.916892][ T6502] binder: 6501:6502 got transaction to invalid handle, 3 [ 147.918063][ T6502] binder: 6502:6501 cannot find target node [ 147.919066][ T6502] binder: 6501:6502 transaction async to 0:0 failed 28/29201/-22, size 72-24 line 3045 [ 147.930473][ T1513] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.973918][ T4368] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.975074][ T4368] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.999917][ T6505] device syzkaller0 entered promiscuous mode [ 148.325873][ T1513] usb 1-1: Using ep0 maxpacket: 16 [ 148.328138][ T1513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.329949][ T1513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.331566][ T1513] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 148.333703][ T1513] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 148.335127][ T1513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.338452][ T1513] usb 1-1: config 0 descriptor?? [ 148.646072][ T6514] device syzkaller1 entered promiscuous mode [ 148.786626][ T1513] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 148.787829][ T1513] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 148.789068][ T1513] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 148.789410][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 148.791349][ T1513] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 148.792544][ T1513] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 148.826595][ T6523] loop1: detected capacity change from 0 to 128 [ 148.827899][ T6523] EXT4-fs: inline encryption not supported [ 148.828465][ T1513] hid-generic 0003:0955:7214.0003: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 148.831106][ T6523] EXT4-fs (loop1): Test dummy encryption mode enabled [ 148.847873][ T6523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 148.927048][ T6523] 9pnet_fd: Insufficient options for proto=fd [ 149.000237][ T1987] usb 1-1: USB disconnect, device number 6 [ 149.016566][ T6527] fido_id[6527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 149.047764][ T6534] binder: tried to use weak ref as strong ref [ 149.048730][ T6534] binder: 6533:6534 Acquire 1 refcount change on invalid ref 0 ret -22 [ 149.050751][ T6534] binder: 6533:6534 got transaction to invalid handle, 1 [ 149.052016][ T6534] binder: 6534:6533 cannot find target node [ 149.056676][ T6534] binder: 6533:6534 transaction call to 0:0 failed 31/29201/-22, size 72-24 line 3045 [ 149.059026][ T6534] binder: 6533:6534 got transaction to invalid handle, 3 [ 149.060035][ T6534] binder: 6534:6533 cannot find target node [ 149.329980][ T6534] binder: 6533:6534 transaction async to 0:0 failed 32/29201/-22, size 72-24 line 3045 [ 149.345218][ T6536] device syzkaller0 entered promiscuous mode [ 149.596705][ T6549] loop2: detected capacity change from 0 to 128 [ 149.602495][ T6549] EXT4-fs: inline encryption not supported [ 149.603965][ T6549] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.606667][ T6549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.169543][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 150.378262][ T1513] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 150.421087][ T6573] binder: tried to use weak ref as strong ref [ 150.422249][ T6573] binder: 6572:6573 Acquire 1 refcount change on invalid ref 0 ret -22 [ 150.425069][ T6573] binder: 6572:6573 got transaction to invalid handle, 1 [ 150.426907][ T6573] binder: 6572:6573 got transaction to invalid handle, 3 [ 150.522102][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 150.572792][ T1513] usb 1-1: config 0 has no interfaces? [ 150.573798][ T1513] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 150.575178][ T1513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.577585][ T1513] usb 1-1: config 0 descriptor?? [ 150.718139][ T6593] loop3: detected capacity change from 0 to 128 [ 150.719688][ T6593] EXT4-fs: inline encryption not supported [ 150.723164][ T6593] EXT4-fs (loop3): Test dummy encryption mode enabled [ 150.731453][ T6593] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 150.736289][ T6593] 9pnet_fd: Insufficient options for proto=fd [ 151.143522][ T6560] netlink: 256 bytes leftover after parsing attributes in process `syz.0.680'. [ 151.163000][ T6556] netlink: 'syz.0.680': attribute type 5 has an invalid length. [ 151.203077][ T4702] usb 1-1: USB disconnect, device number 7 [ 151.995553][ T6604] hfsplus: unable to find HFS+ superblock [ 152.002690][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.004242][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.012795][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 152.423927][ T6630] binder_alloc: 6629: binder_alloc_buf, no vma [ 152.661759][ T6636] loop2: detected capacity change from 0 to 128 [ 152.663389][ T6636] EXT4-fs: inline encryption not supported [ 152.665266][ T6636] EXT4-fs (loop2): Test dummy encryption mode enabled [ 152.669739][ T6636] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.679139][ T6636] 9pnet_fd: Insufficient options for proto=fd [ 153.832009][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 154.093224][ T6664] binder_user_error: 6 callbacks suppressed [ 154.093233][ T6664] binder: 6663:6664 tried to acquire reference to desc 0, got 1 instead [ 154.101578][ T6664] binder_alloc: 6663: binder_alloc_buf, no vma [ 154.102548][ T6664] binder_debug: 20 callbacks suppressed [ 154.102554][ T6664] binder: cannot allocate buffer: vma cleared, target dead or dying [ 154.103353][ T6664] binder: 6663:6664 transaction call to 6663:0 failed 51/29189/-3, size 72-24 line 3230 [ 154.107675][ T6664] binder: 6663:6664 got transaction to invalid handle, 3 [ 154.108954][ T6664] binder: 6664:6663 cannot find target node [ 154.109863][ T6664] binder: 6663:6664 transaction async to 0:0 failed 52/29201/-22, size 72-24 line 3045 [ 154.111843][ T4702] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.120201][ T4702] binder: undelivered TRANSACTION_ERROR: 29189 [ 154.423584][ T6676] loop2: detected capacity change from 0 to 128 [ 154.425078][ T6676] EXT4-fs: inline encryption not supported [ 154.426830][ T6676] EXT4-fs (loop2): Test dummy encryption mode enabled [ 154.434881][ T6676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.444317][ T6676] 9pnet_fd: Insufficient options for proto=fd [ 155.274443][ T6696] binder: 6695:6696 tried to acquire reference to desc 0, got 1 instead [ 155.276406][ T6696] binder_alloc: 6695: binder_alloc_buf, no vma [ 155.277470][ T6696] binder: cannot allocate buffer: vma cleared, target dead or dying [ 155.277519][ T6696] binder: 6695:6696 transaction call to 6695:0 failed 57/29189/-3, size 72-24 line 3230 [ 155.281225][ T6696] binder: 6695:6696 got transaction to invalid handle, 3 [ 155.282518][ T6696] binder: 6696:6695 cannot find target node [ 155.283569][ T6696] binder: 6695:6696 transaction async to 0:0 failed 58/29201/-22, size 72-24 line 3045 [ 155.564338][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 155.731423][ T6711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.733012][ T6711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.753679][ T6711] netlink: 'syz.4.736': attribute type 5 has an invalid length. [ 156.138206][ T6725] loop0: detected capacity change from 0 to 128 [ 156.144833][ T6725] EXT4-fs: inline encryption not supported [ 156.206981][ T6725] EXT4-fs (loop0): Test dummy encryption mode enabled [ 156.213464][ T6725] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.079061][ T4322] EXT4-fs (loop0): unmounting filesystem. [ 157.516503][ T6759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.517958][ T6759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.546378][ T6759] netlink: 'syz.2.753': attribute type 5 has an invalid length. [ 157.585882][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.587370][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.614331][ T6763] netlink: 'syz.1.754': attribute type 5 has an invalid length. [ 157.812616][ T6777] loop3: detected capacity change from 0 to 128 [ 157.814522][ T6777] EXT4-fs: inline encryption not supported [ 157.827420][ T6777] EXT4-fs (loop3): Test dummy encryption mode enabled [ 157.852370][ T6777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.406274][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'. [ 158.800247][ T6798] 9pnet_fd: Insufficient options for proto=fd [ 158.929697][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 158.949084][ T4327] Bluetooth: hci4: command 0x0406 tx timeout [ 158.949154][ T4323] Bluetooth: hci1: command 0x0406 tx timeout [ 158.951034][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 158.958865][ T4325] Bluetooth: hci2: command 0x0406 tx timeout [ 159.120052][ T6801] xt_hashlimit: size too large, truncated to 1048576 [ 159.767487][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.776'. [ 159.912218][ T6825] loop2: detected capacity change from 0 to 128 [ 159.919746][ T6825] EXT4-fs: inline encryption not supported [ 159.932152][ T6825] EXT4-fs (loop2): Test dummy encryption mode enabled [ 159.940145][ T6825] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.829155][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 162.384456][ T6862] loop3: detected capacity change from 0 to 512 [ 162.494683][ T6862] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.303923][ T6884] overlayfs: failed to resolve './bus': -2 [ 163.762828][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 164.002592][ T6898] device syzkaller0 entered promiscuous mode [ 164.524248][ T6920] loop2: detected capacity change from 0 to 512 [ 164.556517][ T6920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.783591][ T6924] overlayfs: failed to resolve './bus': -2 [ 165.442987][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 166.933073][ T6962] netlink: 64 bytes leftover after parsing attributes in process `syz.1.821'. [ 167.536918][ T6975] loop1: detected capacity change from 0 to 128 [ 167.538233][ T6975] EXT4-fs: inline encryption not supported [ 167.551587][ T6975] EXT4-fs (loop1): Test dummy encryption mode enabled [ 167.554733][ T6975] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.508623][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 169.330058][ T7010] netlink: 64 bytes leftover after parsing attributes in process `syz.1.836'. [ 173.090388][ T7049] netlink: 64 bytes leftover after parsing attributes in process `syz.1.850'. [ 177.014829][ T7053] device syzkaller0 entered promiscuous mode [ 177.273532][ T7081] fuse: Unknown parameter 'group_i00000000000000000000' [ 177.513405][ T7089] netlink: 64 bytes leftover after parsing attributes in process `syz.4.861'. [ 189.689100][ T7077] netlink: 'syz.2.852': attribute type 4 has an invalid length. [ 189.878967][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.880465][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.956275][ T7146] netlink: 64 bytes leftover after parsing attributes in process `syz.4.875'. [ 190.317876][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 190.332781][ T1987] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 190.402770][ T7170] device syzkaller0 entered promiscuous mode [ 190.547483][ T1987] usb 1-1: config 0 has no interfaces? [ 190.548414][ T1987] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 190.549983][ T1987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.552182][ T1987] usb 1-1: config 0 descriptor?? [ 190.826838][ T7139] netlink: 256 bytes leftover after parsing attributes in process `syz.0.872'. [ 191.536893][ T7194] loop2: detected capacity change from 0 to 128 [ 191.541166][ T7194] EXT4-fs: inline encryption not supported [ 191.544012][ T7194] EXT4-fs (loop2): Test dummy encryption mode enabled [ 191.546567][ T7194] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.466581][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 195.024413][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.025474][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.011349][ T7132] netlink: 'syz.0.872': attribute type 5 has an invalid length. [ 202.082182][ T4368] usb 1-1: USB disconnect, device number 8 [ 202.348340][ T7235] netlink: 64 bytes leftover after parsing attributes in process `syz.0.897'. [ 202.713540][ T7252] device syzkaller0 entered promiscuous mode [ 202.749550][ T7257] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 202.760341][ T7258] loop1: detected capacity change from 0 to 1024 [ 202.762027][ T7257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.775522][ T7258] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 202.791453][ T7258] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 202.793398][ T7258] EXT4-fs (loop1): orphan cleanup on readonly fs [ 202.798343][ T7258] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.906: Inode bitmap for bg 0 marked uninitialized [ 202.800847][ T7258] EXT4-fs (loop1): Remounting filesystem read-only [ 202.802133][ T7258] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 204.043187][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 215.109690][ T7261] netlink: 44 bytes leftover after parsing attributes in process `syz.3.907'. [ 215.118676][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 215.120164][ T7282] bridge: RTM_NEWNEIGH with invalid ether address [ 215.310002][ T7311] loop0: detected capacity change from 0 to 128 [ 215.315031][ T7311] EXT4-fs: inline encryption not supported [ 215.319992][ T7311] EXT4-fs (loop0): Test dummy encryption mode enabled [ 215.332056][ T7313] loop3: detected capacity change from 0 to 1024 [ 215.335347][ T7311] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 215.344971][ T7313] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 215.361593][ T7313] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 215.363262][ T7313] EXT4-fs (loop3): orphan cleanup on readonly fs [ 215.366261][ T7313] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.921: Inode bitmap for bg 0 marked uninitialized [ 215.368313][ T7313] EXT4-fs (loop3): Remounting filesystem read-only [ 215.369511][ T7313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 215.467593][ T7319] netlink: 64 bytes leftover after parsing attributes in process `syz.2.919'. [ 215.674541][ T4322] EXT4-fs (loop0): unmounting filesystem. [ 215.802679][ T7325] netlink: 'syz.1.923': attribute type 49 has an invalid length. [ 215.856003][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.858038][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.859318][ T7327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.916916][ T7327] device bridge_slave_0 left promiscuous mode [ 215.918886][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.007590][ T7327] device bridge_slave_1 left promiscuous mode [ 216.008739][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.080829][ T7327] bond0: (slave bond_slave_0): Releasing backup interface [ 216.162869][ T7327] bond0: (slave bond_slave_1): Releasing backup interface [ 216.434211][ T7327] team0: Port device team_slave_0 removed [ 216.465138][ T7327] team0: Port device team_slave_1 removed [ 216.474126][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.475687][ T7327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.492921][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.497871][ T7327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.533711][ T7327] bond1: (slave gretap1): Releasing active interface [ 216.620559][ T7329] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 216.668528][ T7329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.691950][ T7332] netlink: 44 bytes leftover after parsing attributes in process `syz.1.925'. [ 216.893363][ T7351] device syzkaller0 entered promiscuous mode [ 216.993170][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 217.103683][ T7363] loop2: detected capacity change from 0 to 128 [ 217.105068][ T7363] EXT4-fs: inline encryption not supported [ 217.123809][ T7363] EXT4-fs (loop2): Test dummy encryption mode enabled [ 217.135395][ T7363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 218.054641][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 218.263373][ T7382] netlink: 64 bytes leftover after parsing attributes in process `syz.3.936'. [ 229.614743][ T7392] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 229.732927][ T7398] netlink: 44 bytes leftover after parsing attributes in process `syz.3.939'. [ 229.753237][ T7409] device syzkaller0 entered promiscuous mode [ 230.116596][ T7429] netlink: 64 bytes leftover after parsing attributes in process `syz.1.949'. [ 230.820485][ T7449] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 230.960523][ T7449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.975798][ T7459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.956'. [ 231.363380][ T7464] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 231.428540][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.430859][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.526213][ T7472] binder: 7470:7472 tried to acquire reference to desc 0, got 1 instead [ 231.530043][ T7472] binder: 7470:7472 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 231.532347][ T7472] binder: 7472 RLIMIT_NICE not set [ 231.533502][ T7472] binder: 7472 RLIMIT_NICE not set [ 231.534834][ T4702] binder_debug: 2 callbacks suppressed [ 231.534843][ T4702] binder: release 7470:7472 transaction 65 out, still active [ 231.537018][ T4702] binder: undelivered TRANSACTION_COMPLETE [ 231.546476][ T4702] binder: release 7470:7472 transaction 65 in, still active [ 231.547726][ T4702] binder: send failed reply for transaction 65, target dead [ 232.269906][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.271390][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.303150][ T7489] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 232.312882][ T7489] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.317351][ T7489] netlink: 44 bytes leftover after parsing attributes in process `syz.0.969'. [ 233.263366][ T4334] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 233.265126][ T4334] CPU: 1 PID: 4334 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 233.266278][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 233.267860][ T4334] Workqueue: hci4 hci_rx_work [ 233.268637][ T4334] Call trace: [ 233.269171][ T4334] dump_backtrace+0x1c0/0x1ec [ 233.269955][ T4334] show_stack+0x2c/0x3c [ 233.270614][ T4334] __dump_stack+0x30/0x40 [ 233.271336][ T4334] dump_stack_lvl+0xf4/0x15c [ 233.272155][ T4334] dump_stack+0x1c/0x5c [ 233.272826][ T4334] sysfs_create_dir_ns+0x244/0x264 [ 233.273628][ T4334] kobject_add_internal+0x598/0xb08 [ 233.274441][ T4334] kobject_add+0x140/0x20c [ 233.275103][ T4334] device_add+0x3f0/0xf90 [ 233.275770][ T4334] hci_conn_add_sysfs+0xbc/0x1c8 [ 233.276497][ T4334] le_conn_complete_evt+0xcc8/0x1244 [ 233.277326][ T4334] hci_le_conn_complete_evt+0x114/0x3f4 [ 233.278138][ T4334] hci_le_meta_evt+0x2c0/0x4a0 [ 233.278915][ T4334] hci_event_packet+0x6b8/0xf18 [ 233.279750][ T4334] hci_rx_work+0x328/0xa84 [ 233.280453][ T4334] process_one_work+0x7f8/0x13a4 [ 233.281247][ T4334] worker_thread+0x8c4/0xfec [ 233.281974][ T4334] kthread+0x250/0x2d8 [ 233.282633][ T4334] ret_from_fork+0x10/0x20 [ 233.285213][ T4334] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 233.287383][ T4334] Bluetooth: hci4: failed to register connection device [ 233.464536][ T7523] netlink: 'syz.4.981': attribute type 1 has an invalid length. [ 233.477909][ T7523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.485253][ T7523] netlink: 44 bytes leftover after parsing attributes in process `syz.4.981'. [ 233.539697][ T7528] 9pnet_virtio: no channels available for device syz [ 234.038904][ T7539] binder: 7538:7539 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 234.040844][ T7539] binder: 7538:7539 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 234.546977][ T7557] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 234.565542][ T7557] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.596568][ T7557] netlink: 44 bytes leftover after parsing attributes in process `syz.0.993'. [ 236.688179][ T7593] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 236.699810][ T7593] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.704945][ T7593] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1005'. [ 238.333997][ T7627] 9pnet_virtio: no channels available for device syz [ 239.054460][ T7634] device syzkaller0 entered promiscuous mode [ 239.353011][ T7638] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 239.363355][ T7638] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.369975][ T7644] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1017'. [ 239.892510][ T7662] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 240.528662][ T7675] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 241.017498][ T7682] loop0: detected capacity change from 0 to 512 [ 241.060562][ T7682] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 241.151346][ T4322] EXT4-fs (loop0): unmounting filesystem. [ 241.498836][ T7696] device syzkaller0 entered promiscuous mode [ 242.604466][ T7727] syzkaller0: mtu greater than device maximum [ 242.620635][ T7729] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 243.014504][ T7740] device syzkaller0 entered promiscuous mode [ 243.963873][ T7770] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1057'. [ 244.323628][ T7795] device syzkaller0 entered promiscuous mode [ 245.112862][ T7821] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1073'. [ 245.280038][ T7827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1078'. [ 246.155484][ T7857] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1091'. [ 246.205066][ T7857] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1091'. [ 246.220104][ T7857] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1091'. [ 246.276316][ T7855] device syzkaller0 entered promiscuous mode [ 246.524839][ T7867] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1093'. [ 246.694682][ T7878] fuse: Unknown parameter 'fd0x0000000000000003' [ 247.626149][ T7907] fuse: Unknown parameter 'fd0x0000000000000003' [ 248.433197][ T7941] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1124'. [ 248.434729][ T7941] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 248.456625][ T7932] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1117'. [ 248.559849][ T7948] binder: 7947:7948 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 249.322278][ T7975] binder: 7974:7975 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 249.892968][ T8004] loop4: detected capacity change from 0 to 128 [ 249.899744][ T8004] EXT4-fs: inline encryption not supported [ 249.922418][ T8004] EXT4-fs (loop4): Test dummy encryption mode enabled [ 249.935705][ T8004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 250.814472][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 251.371259][ T8045] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1166'. [ 251.373155][ T8045] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1166'. [ 251.375256][ T8045] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1166'. [ 251.460356][ T8053] loop2: detected capacity change from 0 to 128 [ 251.468292][ T8053] EXT4-fs: inline encryption not supported [ 251.474473][ T8053] EXT4-fs (loop2): Test dummy encryption mode enabled [ 251.481332][ T8053] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 251.990628][ T8065] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1172'. [ 252.383018][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 253.186318][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.188369][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.264131][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.266385][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.267809][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.269844][ T8097] device bridge_slave_0 left promiscuous mode [ 253.271024][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.307810][ T8097] device bridge_slave_1 left promiscuous mode [ 253.308946][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.360902][ T8097] bond0: (slave bond_slave_0): Releasing backup interface [ 253.397066][ T8097] bond0: (slave bond_slave_1): Releasing backup interface [ 253.454073][ T8097] team0: Port device team_slave_0 removed [ 253.480381][ T8097] team0: Port device team_slave_1 removed [ 253.482939][ T8097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.484348][ T8097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.486125][ T8097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.489986][ T8097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.496204][ T8097] bond1: (slave gretap1): Releasing active interface [ 253.562853][ T8112] binder: 8111:8112 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 253.597980][ T8116] loop3: detected capacity change from 0 to 128 [ 253.599327][ T8116] EXT4-fs: inline encryption not supported [ 253.602264][ T8116] EXT4-fs (loop3): Test dummy encryption mode enabled [ 253.604708][ T8116] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 254.205252][ T8135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.207189][ T8135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.580520][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 255.155531][ T8146] binder: 8145:8146 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 255.157535][ T8146] binder: 8145:8146 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 255.193491][ T8151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.217297][ T8151] bond0: (slave batadv0): Releasing backup interface [ 255.234042][ T8156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.236610][ T8156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.276849][ T8151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.278292][ T8151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.282527][ T8151] device bridge_slave_0 left promiscuous mode [ 255.287068][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.337839][ T8151] device bridge_slave_1 left promiscuous mode [ 255.339098][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.380558][ T8151] bond0: (slave bond_slave_0): Releasing backup interface [ 255.425809][ T8151] bond0: (slave bond_slave_1): Releasing backup interface [ 255.478186][ T8151] team0: Port device team_slave_0 removed [ 255.485360][ T8151] team0: Port device team_slave_1 removed [ 255.490223][ T8151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.491467][ T8151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.497096][ T8151] bond1: (slave gretap1): Releasing active interface [ 255.620216][ T8163] loop3: detected capacity change from 0 to 128 [ 255.621729][ T8163] EXT4-fs: inline encryption not supported [ 255.629845][ T8163] EXT4-fs (loop3): Test dummy encryption mode enabled [ 255.652568][ T8163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 256.536956][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 256.571016][ T8191] binder: 8190:8191 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 256.572953][ T8191] binder: 8190:8191 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 256.635216][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.646110][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.647325][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.299500][ T8208] binder: 8206:8208 ioctl c018620c 20000040 returned -1 [ 257.697796][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 257.728933][ T8219] loop3: detected capacity change from 0 to 128 [ 257.733110][ T8219] EXT4-fs: inline encryption not supported [ 257.736705][ T8219] EXT4-fs (loop3): Test dummy encryption mode enabled [ 257.748613][ T8219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 258.175370][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.187283][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.188523][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.665576][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 259.001427][ T111] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 259.193887][ T111] usb 1-1: Using ep0 maxpacket: 32 [ 259.332768][ T111] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 259.334208][ T111] usb 1-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config [ 259.335810][ T111] usb 1-1: config 0 has no interface number 0 [ 259.336741][ T111] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 259.340054][ T111] usb 1-1: config 0 interface 196 has no altsetting 0 [ 259.349986][ T111] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 259.353823][ T111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.355445][ T111] usb 1-1: Product: syz [ 259.356133][ T111] usb 1-1: Manufacturer: syz [ 259.359238][ T111] usb 1-1: SerialNumber: syz [ 259.359879][ T8260] device syzkaller1 entered promiscuous mode [ 259.362053][ T111] usb 1-1: config 0 descriptor?? [ 259.771871][ T111] ipheth 1-1:0.196: Unable to find endpoints [ 259.775476][ T111] usb 1-1: USB disconnect, device number 9 [ 259.797996][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.799688][ T8270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.811339][ T8270] device bridge_slave_0 left promiscuous mode [ 259.812574][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.857448][ T8270] device bridge_slave_1 left promiscuous mode [ 259.858717][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.900240][ T8270] infiniband syz2: set active [ 259.902587][ T8270] bond0: (slave bond_slave_0): Releasing backup interface [ 259.945313][ T8270] bond0: (slave bond_slave_1): Releasing backup interface [ 259.996691][ T8270] team0: Port device team_slave_0 removed [ 260.009303][ T8270] team0: Port device team_slave_1 removed [ 260.010484][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.011621][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.013216][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.014301][ T8270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.019289][ T8270] bond1: (slave gretap1): Releasing active interface [ 260.151457][ T8275] tmpfs: Bad value for 'nr_blocks' [ 260.377132][ T8285] loop3: detected capacity change from 0 to 128 [ 260.378522][ T8285] EXT4-fs: inline encryption not supported [ 260.387397][ T8285] EXT4-fs (loop3): Test dummy encryption mode enabled [ 260.423474][ T8285] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 260.968115][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.972630][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.277489][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 261.354496][ T8307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.357023][ T8307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.358442][ T8307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.392359][ T8309] tmpfs: Bad value for 'nr_blocks' [ 262.154065][ T6532] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 262.170795][ C1] hrtimer: interrupt took 29093 ns [ 262.401079][ T6532] usb 1-1: unable to get BOS descriptor or descriptor too short [ 262.405434][ T6532] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 262.406885][ T6532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.408215][ T6532] usb 1-1: Product: syz [ 262.408889][ T6532] usb 1-1: Manufacturer: syz [ 262.409568][ T6532] usb 1-1: SerialNumber: syz [ 262.712664][ T8337] loop1: detected capacity change from 0 to 128 [ 262.718752][ T8337] EXT4-fs: inline encryption not supported [ 262.749380][ T8337] EXT4-fs (loop1): Test dummy encryption mode enabled [ 262.812539][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.815193][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.816951][ T8343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.818863][ T8343] device bridge_slave_0 left promiscuous mode [ 262.819850][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.821516][ T8337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 262.860328][ T8343] device bridge_slave_1 left promiscuous mode [ 263.333227][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.384092][ T8343] bond0: (slave bond_slave_0): Releasing backup interface [ 263.430000][ T8343] bond0: (slave bond_slave_1): Releasing backup interface [ 263.486798][ T8343] team0: Port device team_slave_0 removed [ 263.494839][ T8343] team0: Port device team_slave_1 removed [ 263.496147][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.497471][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.499215][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.500932][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.506252][ T8343] bond1: (slave gretap1): Releasing active interface [ 263.641504][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 264.085005][ T8363] tmpfs: Bad value for 'nr_blocks' [ 264.187057][ T6532] usb 1-1: current rate 516674 is different from the runtime rate 48000 [ 264.683082][ T4366] usb 1-1: USB disconnect, device number 10 [ 266.522573][ T8426] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1286'. [ 266.524661][ T8426] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 267.311037][ T8436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.321897][ T8436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.323803][ T8436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.328352][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.331203][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.397690][ T8443] binder: 8442:8443 ioctl c0306201 200001c0 returned -14 [ 269.181994][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.190915][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.815271][ T8514] loop1: detected capacity change from 0 to 128 [ 269.823644][ T8514] EXT4-fs: inline encryption not supported [ 269.834676][ T8514] EXT4-fs (loop1): Test dummy encryption mode enabled [ 269.859677][ T8514] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 270.736065][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 271.418490][ T1513] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 271.530873][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.534156][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.622858][ T1513] usb 1-1: Using ep0 maxpacket: 32 [ 271.633022][ T1513] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 271.634586][ T1513] usb 1-1: config 0 has no interface number 0 [ 271.639125][ T1513] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 271.641587][ T1513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.645085][ T1513] usb 1-1: Product: syz [ 271.645742][ T1513] usb 1-1: Manufacturer: syz [ 271.647542][ T1513] usb 1-1: SerialNumber: syz [ 271.669778][ T1513] usb 1-1: config 0 descriptor?? [ 271.682090][ T1513] smsc95xx v2.0.0 [ 271.690639][ T8551] tmpfs: Bad value for 'nr_blocks' [ 272.036395][ T8557] loop2: detected capacity change from 0 to 128 [ 272.038058][ T8557] EXT4-fs: inline encryption not supported [ 272.041005][ T8557] EXT4-fs (loop2): Test dummy encryption mode enabled [ 272.043218][ T8557] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 272.997895][ T1513] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 272.999610][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 272.999661][ T1513] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 274.046074][ T8592] tmpfs: Bad value for 'nr_blocks' [ 274.461625][ T8601] loop2: detected capacity change from 0 to 128 [ 274.469826][ T8601] EXT4-fs: inline encryption not supported [ 274.473112][ T8601] EXT4-fs (loop2): Test dummy encryption mode enabled [ 274.481665][ T8601] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 274.896720][ T1513] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 274.899066][ T1513] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 274.901901][ T1513] usb 1-1: USB disconnect, device number 11 [ 274.909224][ T8605] device syzkaller0 entered promiscuous mode [ 275.440112][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 275.632117][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.633616][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.895968][ T4458] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 276.088353][ T4458] usb 1-1: Using ep0 maxpacket: 32 [ 276.090489][ T4458] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 276.092237][ T4458] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.093642][ T4458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.097839][ T4458] usb 1-1: config 0 descriptor?? [ 276.099722][ T8629] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 276.101504][ T4458] hub 1-1:0.0: bad descriptor, ignoring hub [ 276.102414][ T4458] hub: probe of 1-1:0.0 failed with error -5 [ 276.104269][ T4458] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 278.834754][ T1513] usb 1-1: USB disconnect, device number 12 [ 287.843544][ T8687] loop1: detected capacity change from 0 to 128 [ 287.844941][ T8687] EXT4-fs: inline encryption not supported [ 287.852812][ T8687] EXT4-fs (loop1): Test dummy encryption mode enabled [ 287.880666][ T8687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 288.765174][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 288.847378][ T8704] device syzkaller0 entered promiscuous mode [ 289.179319][ T8709] tmpfs: Bad value for 'nr_blocks' [ 291.826501][ T8758] fuse: root generation should be zero [ 291.915564][ T8762] tmpfs: Bad value for 'nr_blocks' [ 304.186024][ T8805] tmpfs: Bad value for 'nr_blocks' [ 306.229403][ T8841] input: syz0 as /devices/virtual/input/input7 [ 306.330879][ T8847] serio: Serial port ptm0 [ 307.370168][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.371631][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.739539][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.865352][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.744969][ T4371] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 308.787714][ T8901] device syzkaller1 entered promiscuous mode [ 309.215205][ T4371] usb 1-1: device descriptor read/64, error -71 [ 309.504171][ T4371] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 309.676335][ T4371] usb 1-1: device descriptor read/64, error -71 [ 309.753126][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.754825][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.867288][ T4371] usb usb1-port1: attempt power cycle [ 310.379886][ T4371] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 310.423732][ T4371] usb 1-1: device descriptor read/8, error -71 [ 310.721908][ T4371] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 310.785480][ T4371] usb 1-1: device descriptor read/8, error -71 [ 310.915465][ T4371] usb usb1-port1: unable to enumerate USB device [ 311.124805][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.133940][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.290613][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.292212][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.495191][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.497693][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.596197][ T9024] tmpfs: Bad value for 'nr_blocks' [ 313.774300][ T9036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.775921][ T9036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.965864][ T9045] device syzkaller0 entered promiscuous mode [ 314.280383][ T4370] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 314.729121][ T4370] usb 1-1: device descriptor read/64, error -71 [ 315.017686][ T4370] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 315.177917][ T4370] usb 1-1: device descriptor read/64, error -71 [ 315.306798][ T4370] usb usb1-port1: attempt power cycle [ 315.744270][ T4370] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 315.785192][ T4370] usb 1-1: device descriptor read/8, error -71 [ 316.064849][ T4370] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 316.097650][ T4370] usb 1-1: device descriptor read/8, error -71 [ 316.225233][ T4370] usb usb1-port1: unable to enumerate USB device [ 326.399228][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.405438][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.797632][ T6532] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 327.258620][ T9108] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1497'. [ 327.260315][ T9108] 0ªî{X¹¦: renamed from gretap0 [ 327.264664][ T9107] 9pnet: p9_errstr2errno: server reported unknown error [ 327.285299][ T6532] usb 1-1: Using ep0 maxpacket: 16 [ 327.287500][ T6532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.289193][ T6532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.290996][ T6532] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 327.293081][ T6532] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 327.296193][ T6532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.300271][ T6532] usb 1-1: config 0 descriptor?? [ 327.301786][ T9111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.304457][ T9111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.308463][ T9108] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 327.398587][ T9113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.400979][ T9113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.950581][ T6532] usbhid 1-1:0.0: can't add hid device: -71 [ 327.951618][ T6532] usbhid: probe of 1-1:0.0 failed with error -71 [ 327.957335][ T6532] usb 1-1: USB disconnect, device number 21 [ 329.472317][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.474167][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.691774][ T9165] netlink: 'syz.3.1520': attribute type 4 has an invalid length. [ 330.242432][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.243947][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.372825][ T9180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1525'. [ 330.695544][ T9194] tmpfs: Bad value for 'uid' [ 330.820452][ T9202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1536'. [ 330.884528][ T9204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.917641][ T9204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.646792][ T4334] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 331.655794][ T4325] Bluetooth: hci5: command 0x1003 tx timeout [ 332.178237][ T9230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.193059][ T9230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.579611][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.581452][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.611270][ T9235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.616751][ T9235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.285620][ T9247] netlink: 'syz.4.1551': attribute type 4 has an invalid length. [ 334.357397][ T9240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.358582][ T9240] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 334.368895][ T9240] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 334.370277][ T9240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.371289][ T9240] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 334.374120][ T9240] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 334.375235][ T9240] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.376203][ T9240] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 334.377571][ T9240] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 334.378794][ T9240] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.379662][ T9240] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 334.381188][ T9240] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 334.385266][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.386587][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.386742][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.390008][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.744119][ T4367] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 334.899971][ T9278] qfq: no options [ 334.947199][ T4367] usb 1-1: Using ep0 maxpacket: 16 [ 334.965044][ T4367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.966748][ T4367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.971626][ T4367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 334.973642][ T4367] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 334.975083][ T4367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.984062][ T4367] usb 1-1: config 0 descriptor?? [ 335.179962][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.181588][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.395959][ T4334] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.875025][ T4367] usbhid 1-1:0.0: can't add hid device: -71 [ 335.876192][ T4367] usbhid: probe of 1-1:0.0 failed with error -71 [ 335.884804][ T4367] usb 1-1: USB disconnect, device number 22 [ 336.593444][ T4334] Bluetooth: hci4: command 0x0c1a tx timeout [ 336.594546][ T4334] Bluetooth: hci3: command 0x0c1a tx timeout [ 336.595585][ T4334] Bluetooth: hci2: command 0x0c1a tx timeout [ 336.695668][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.708845][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.715441][ T9319] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1576'. [ 336.874562][ T9323] qfq: no options [ 336.892076][ T6532] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 337.060954][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.067973][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.084385][ T6532] usb 1-1: Using ep0 maxpacket: 16 [ 337.087864][ T6532] usb 1-1: unable to get BOS descriptor or descriptor too short [ 337.089937][ T6532] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.091664][ T6532] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.094869][ T6532] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 337.096935][ T6532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.098239][ T6532] usb 1-1: Product: syz [ 337.098920][ T6532] usb 1-1: Manufacturer: syz [ 337.099830][ T6532] usb 1-1: SerialNumber: syz [ 337.324550][ T6532] usb 1-1: 0:1 : does not exist [ 337.333807][ T6532] usb 1-1: USB disconnect, device number 23 [ 337.378619][ T9330] loop3: detected capacity change from 0 to 128 [ 337.379931][ T9330] EXT4-fs: inline encryption not supported [ 337.381630][ T9330] EXT4-fs (loop3): Test dummy encryption mode enabled [ 337.385469][ T9330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 337.618675][ T4323] Bluetooth: hci1: command 0x0406 tx timeout [ 337.791271][ T9075] udevd[9075]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.891292][ T9340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.892812][ T9340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.310234][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 338.760490][ T9357] qfq: no options [ 338.821722][ T9362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.823218][ T9362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.826347][ T4323] Bluetooth: hci2: command 0x0406 tx timeout [ 338.827650][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 338.827665][ T4325] Bluetooth: hci4: command 0x0406 tx timeout [ 339.412105][ T9377] loop0: detected capacity change from 0 to 128 [ 339.421910][ T9377] EXT4-fs: inline encryption not supported [ 339.424005][ T9377] EXT4-fs (loop0): Test dummy encryption mode enabled [ 339.430020][ T9377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 340.244361][ T9390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.259466][ T9390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.331983][ T4322] EXT4-fs (loop0): unmounting filesystem. [ 340.360818][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.362375][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.951540][ T9403] qfq: no options [ 341.516117][ T9408] device syzkaller1 entered promiscuous mode [ 342.076892][ T9425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.080050][ T9425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.510898][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.513820][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.999135][ T9436] qfq: no options [ 344.390420][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.391927][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.766716][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.769315][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.840244][ T9489] qfq: no options [ 345.504266][ T9505] loop3: detected capacity change from 0 to 128 [ 345.511581][ T9505] EXT4-fs: inline encryption not supported [ 345.514768][ T9505] EXT4-fs (loop3): Test dummy encryption mode enabled [ 345.541035][ T9505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 346.509678][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 346.610327][ T9531] qfq: no options [ 346.727264][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.729701][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.159181][ T9547] loop2: detected capacity change from 0 to 128 [ 347.165625][ T9547] EXT4-fs: inline encryption not supported [ 347.167122][ T9547] EXT4-fs (loop2): Test dummy encryption mode enabled [ 347.180416][ T9547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 348.411121][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 348.463332][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.466165][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.494757][ T9573] qfq: no options [ 349.462728][ T9591] loop3: detected capacity change from 0 to 128 [ 349.466587][ T9591] EXT4-fs: inline encryption not supported [ 349.480942][ T9591] EXT4-fs (loop3): Test dummy encryption mode enabled [ 349.489704][ T9591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 350.028946][ T9607] qfq: no options [ 350.486107][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 350.550159][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.556241][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.671874][ T9646] loop3: detected capacity change from 0 to 128 [ 351.674764][ T9646] EXT4-fs: inline encryption not supported [ 351.679075][ T9646] EXT4-fs (loop3): Test dummy encryption mode enabled [ 351.685628][ T9646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 352.593872][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 353.347288][ T9681] Illegal XDP return value 1016850956 on prog (id 88) dev N/A, expect packet loss! [ 365.070535][ T9703] loop4: detected capacity change from 0 to 1024 [ 365.098917][ T9703] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 365.104030][ T9711] binder: 9707:9711 tried to acquire reference to desc 0, got 1 instead [ 365.105848][ T9711] binder_alloc: 9707: binder_alloc_buf, no vma [ 365.106819][ T9711] binder: cannot allocate buffer: vma cleared, target dead or dying [ 365.106850][ T9711] binder: 9707:9711 transaction async to 9707:0 failed 75/29189/-3, size -486-24 line 3230 [ 365.111857][ T9703] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 365.114883][ T9703] EXT4-fs (loop4): orphan cleanup on readonly fs [ 365.118388][ T9703] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.1708: Inode bitmap for bg 0 marked uninitialized [ 365.120886][ T4458] binder: undelivered TRANSACTION_ERROR: 29189 [ 365.125450][ T9703] EXT4-fs (loop4): Remounting filesystem read-only [ 365.126527][ T9703] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 366.480914][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 366.853538][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.858644][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.180400][ T9747] qfq: no options [ 367.184387][ T9747] qfq: no options [ 368.200782][ T9777] qfq: no options [ 368.203116][ T9777] qfq: no options [ 368.637653][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.646580][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.825171][ T9799] usb usb5: usbfs: process 9799 (syz.1.1745) did not claim interface 0 before use [ 368.888111][ T9801] qfq: no options [ 370.060613][ T9840] qfq: no options [ 371.126508][ T9876] qfq: no options [ 372.063392][ T9909] qfq: no options [ 373.576691][ T9957] tmpfs: Bad value for 'nr_blocks' [ 374.245483][ T9980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1817'. [ 374.460618][ T9985] qfq: no options [ 374.744796][T10005] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1828'. [ 374.750630][T10000] tmpfs: Bad value for 'nr_blocks' [ 375.911488][T10033] qfq: no options [ 376.450847][T10043] tmpfs: Bad value for 'nr_blocks' [ 376.476150][T10047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1840'. [ 377.615799][T10078] qfq: no options [ 377.673461][T10080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1853'. [ 377.857312][T10082] tmpfs: Bad value for 'nr_blocks' [ 378.621958][T10105] loop3: detected capacity change from 0 to 128 [ 378.626946][T10105] EXT4-fs: inline encryption not supported [ 378.636796][T10105] EXT4-fs (loop3): Test dummy encryption mode enabled [ 378.715958][T10105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 378.719143][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1864'. [ 379.493349][T10119] qfq: no options [ 379.589379][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 380.240267][T10129] tmpfs: Bad value for 'nr_blocks' [ 380.337220][T10124] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1867'. [ 381.211618][T10157] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1879'. [ 381.351931][T10163] tmpfs: Bad value for 'nr_blocks' [ 381.433646][T10170] qfq: no options [ 382.273923][T10196] tmpfs: Bad value for 'nr_blocks' [ 382.445012][T10210] loop2: detected capacity change from 0 to 128 [ 382.452136][T10210] EXT4-fs: inline encryption not supported [ 382.471095][T10210] EXT4-fs (loop2): Test dummy encryption mode enabled [ 382.785333][T10210] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 383.506674][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 383.886480][T10250] tmpfs: Bad value for 'nr_blocks' [ 383.924320][T10255] loop2: detected capacity change from 0 to 128 [ 383.942535][T10255] EXT4-fs: inline encryption not supported [ 383.955790][T10255] EXT4-fs (loop2): Test dummy encryption mode enabled [ 383.970137][T10255] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 384.679604][T10270] tipc: Failed to remove unknown binding: 66,0,0/0:3518563981/3518563983 [ 384.689191][T10270] tipc: Failed to remove unknown binding: 66,0,0/0:3518563981/3518563982 [ 384.695736][T10270] tipc: Failed to remove unknown binding: 66,0,0/0:3518563981/3518563983 [ 384.703077][T10270] tipc: Failed to remove unknown binding: 66,0,0/0:3518563981/3518563982 [ 384.721647][T10272] qfq: no options [ 384.722612][T10272] qfq: no options [ 384.837715][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 384.970192][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 385.117118][T10294] tmpfs: Bad value for 'nr_blocks' [ 385.504467][T10300] device syzkaller0 entered promiscuous mode [ 385.681389][T10303] delete_channel: no stack [ 385.748078][T10307] qfq: no options [ 385.750272][T10307] qfq: no options [ 385.846969][T10309] device syzkaller0 entered promiscuous mode [ 385.926975][T10319] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 386.316057][T10349] xt_hashlimit: size too large, truncated to 1048576 [ 387.030220][T10358] netlink: 'syz.0.1953': attribute type 3 has an invalid length. [ 387.031629][T10358] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1953'. [ 387.381599][T10368] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1956'. [ 387.498904][T10372] tmpfs: Bad value for 'nr_blocks' [ 388.297493][T10406] tmpfs: Bad value for 'nr_blocks' [ 388.950463][T10421] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1977'. [ 389.509082][T10432] device syzkaller1 entered promiscuous mode [ 389.680423][T10439] tmpfs: Bad value for 'nr_blocks' [ 390.571584][T10445] device syzkaller0 entered promiscuous mode [ 391.181002][T10457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1991'. [ 391.253383][T10460] tipc: Started in network mode [ 391.254254][T10460] tipc: Node identity fa5100e5941c, cluster identity 4711 [ 391.255503][T10460] tipc: Enabled bearer , priority 0 [ 391.342713][T10460] device syzkaller0 entered promiscuous mode [ 391.343068][T10460] tipc: Resetting bearer [ 391.350568][T10466] device syzkaller1 entered promiscuous mode [ 391.369653][T10466] C: renamed from lo [ 391.682341][T10466] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 391.706644][T10459] tipc: Resetting bearer [ 391.989645][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.990712][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.876505][T10459] tipc: Disabling bearer [ 403.949134][ T4457] tipc: Node number set to 1850540261 [ 404.550397][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2010'. [ 404.614826][T10524] device syzkaller0 entered promiscuous mode [ 404.701215][T10528] device syzkaller0 entered promiscuous mode [ 404.739738][T10535] tmpfs: Bad value for 'nr_blocks' [ 405.171001][T10567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2029'. [ 405.223608][T10569] tmpfs: Bad value for 'nr_blocks' [ 405.695356][T10587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.814256][T10593] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 405.957965][T10598] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 406.521108][T10623] tmpfs: Bad value for 'nr_blocks' [ 406.811382][T10642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2052'. [ 407.481290][T10666] tipc: Enabling of bearer rejected, failed to enable media [ 407.540250][T10674] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 407.567627][T10670] tmpfs: Bad value for 'nr_blocks' [ 407.593826][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2066'. [ 408.105972][T10692] device syzkaller0 entered promiscuous mode [ 408.123072][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.129269][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.206698][T10695] device syzkaller0 entered promiscuous mode [ 408.442760][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2077'. [ 408.492176][T10710] tmpfs: Bad value for 'nr_blocks' [ 408.982049][T10728] device syzkaller0 entered promiscuous mode [ 409.358011][T10758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.359566][T10758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.436015][T10760] tmpfs: Bad value for 'nr_blocks' [ 409.652074][T10771] device syzkaller0 entered promiscuous mode [ 410.137826][T10777] device syzkaller0 entered promiscuous mode [ 410.156839][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'. [ 411.566136][ T4323] Bluetooth: hci1: command 0x0401 tx timeout [ 412.447460][T10744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.465514][T10804] tmpfs: Bad value for 'nr_blocks' [ 413.637115][T10810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.639960][T10810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.740790][T10821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.742116][T10821] IPv6: NLM_F_CREATE should be set when creating new route [ 421.743216][T10821] IPv6: NLM_F_CREATE should be set when creating new route [ 421.744323][T10821] IPv6: NLM_F_CREATE should be set when creating new route [ 421.751218][T10821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.846486][T10829] veth1_vlan: mtu less than device minimum [ 421.913109][T10829] netlink: 'syz.2.2117': attribute type 24 has an invalid length. [ 421.927593][T10839] tmpfs: Bad value for 'nr_blocks' [ 422.300103][T10835] device syzkaller0 entered promiscuous mode [ 422.306165][T10844] device syzkaller0 entered promiscuous mode [ 422.320738][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.322033][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.323088][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.324251][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.325294][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.326387][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.327498][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.328675][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.329821][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.330924][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.331954][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.333087][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.334216][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.335297][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.336442][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.337622][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.338729][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.339855][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.340871][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.342013][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.343064][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.344165][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.345298][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.346366][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.347365][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.348459][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.349447][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.350547][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.351708][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.352784][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.353819][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.355007][T10835] tc action pedit offset must be on 32 bit boundaries [ 422.356134][T10835] TC_ACT_REPEAT abuse ? [ 422.695640][T10867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.697367][T10867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.821481][T10877] tmpfs: Bad value for 'nr_blocks' [ 422.889897][T10881] device syzkaller0 entered promiscuous mode [ 422.911639][T10887] loop2: detected capacity change from 0 to 1024 [ 422.946142][T10887] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 422.950215][T10887] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.2138: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 423.026919][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 423.687973][T10913] loop4: detected capacity change from 0 to 128 [ 423.690662][T10913] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 423.813203][T10922] device syzkaller0 entered promiscuous mode [ 423.815850][T10919] tmpfs: Bad value for 'nr_blocks' [ 424.185379][T10943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2158'. [ 424.249141][T10951] loop2: detected capacity change from 0 to 128 [ 424.303166][T10951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.442959][ T4367] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 424.467570][T10959] tmpfs: Bad value for 'nr_blocks' [ 424.603257][ T4367] usb 1-1: device descriptor read/64, error -71 [ 424.891636][ T4367] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 425.051917][ T4367] usb 1-1: device descriptor read/64, error -71 [ 425.181188][ T4367] usb usb1-port1: attempt power cycle [ 425.501675][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2169'. [ 425.767891][ T4367] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 425.801627][ T4367] usb 1-1: device descriptor read/8, error -71 [ 425.989944][T10991] tmpfs: Bad value for 'nr_blocks' [ 426.073359][T10997] loop1: detected capacity change from 0 to 512 [ 426.075166][T10997] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 426.088652][ T4367] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 426.175603][ T4367] usb 1-1: device descriptor read/8, error -71 [ 426.302385][ T4367] usb usb1-port1: unable to enumerate USB device [ 426.354256][T11004] device syzkaller0 entered promiscuous mode [ 426.405249][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2182'. [ 427.894437][ T4327] Bluetooth: hci5: command 0x1003 tx timeout [ 427.896626][ T4323] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 429.444490][T11059] loop0: detected capacity change from 0 to 1024 [ 429.448194][T11059] EXT4-fs: Ignoring removed bh option [ 429.472356][T11059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 429.490465][ T4322] EXT4-fs (loop0): unmounting filesystem. [ 438.162348][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2199'. [ 438.196617][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.198005][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.612831][T11098] loop2: detected capacity change from 0 to 7 [ 438.618905][T11072] Dev loop2: unable to read RDB block 7 [ 438.619861][T11072] loop2: AHDI p1 p2 p3 [ 438.622833][T11072] loop2: partition table partially beyond EOD, truncated [ 438.626845][T11072] loop2: p1 start 1818582900 is beyond EOD, truncated [ 438.628105][T11072] loop2: p3 start 335544320 is beyond EOD, truncated [ 438.644793][T11098] Dev loop2: unable to read RDB block 7 [ 438.646902][T11098] loop2: AHDI p1 p2 p3 [ 438.647525][T11098] loop2: partition table partially beyond EOD, truncated [ 438.651803][T11098] loop2: p1 start 1818582900 is beyond EOD, truncated [ 438.654244][T11098] loop2: p3 start 335544320 is beyond EOD, truncated [ 438.746106][T11101] device syzkaller0 entered promiscuous mode [ 438.822445][T11101] tipc: Started in network mode [ 438.823298][T11101] tipc: Node identity 927983d7d53a, cluster identity 4711 [ 438.824779][T11101] tipc: Enabled bearer , priority 0 [ 438.829841][T11100] tipc: Resetting bearer [ 438.934797][T11100] tipc: Disabling bearer [ 439.012091][T11104] device syzkaller0 entered promiscuous mode [ 441.417619][T11146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.420172][T11146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.305881][T11140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2215'. [ 450.496679][ T27] audit: type=1326 audit(426.412:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11153 comm="syz.1.2221" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb771a8 code=0x0 [ 450.541034][T11166] tmpfs: Bad value for 'nr_blocks' [ 451.357517][T11187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.359113][T11187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.406036][T11189] device syzkaller0 entered promiscuous mode [ 451.506414][T11194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.508894][T11194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.889465][T11210] tmpfs: Bad value for 'nr_blocks' [ 457.645611][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.646644][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.685576][T11193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2233'. [ 462.703324][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.709830][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.404198][ T111] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 463.596659][ T111] usb 1-1: Using ep0 maxpacket: 32 [ 463.599468][ T111] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 463.601230][ T111] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 463.602892][ T111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.606020][ T111] usb 1-1: config 0 descriptor?? [ 463.610730][T11229] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 463.617708][ T111] hub 1-1:0.0: bad descriptor, ignoring hub [ 463.623438][ T111] hub: probe of 1-1:0.0 failed with error -5 [ 463.627576][ T111] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 463.668286][T11250] tmpfs: Bad value for 'nr_blocks' [ 463.928486][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2251'. [ 463.937512][T11263] infiniband syz2: set active [ 463.938785][T11263] infiniband syz2: set active [ 464.021493][T11265] device syzkaller0 entered promiscuous mode [ 464.157647][T11271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.159716][T11271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.065308][ T6532] usb 1-1: USB disconnect, device number 28 [ 466.176616][T11282] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2256'. [ 477.066837][T11360] device syzkaller0 entered promiscuous mode [ 477.222714][T11368] loop2: detected capacity change from 0 to 7 [ 477.225489][T11330] Dev loop2: unable to read RDB block 7 [ 477.226434][T11330] loop2: unable to read partition table [ 477.227453][T11330] loop2: partition table beyond EOD, truncated [ 477.235906][T11368] Dev loop2: unable to read RDB block 7 [ 477.236823][T11368] loop2: unable to read partition table [ 477.237717][T11368] loop2: partition table beyond EOD, truncated [ 477.242160][T11368] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 477.645270][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 477.728343][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.729752][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.745162][T11380] device syzkaller0 entered promiscuous mode [ 477.770917][T11383] device syzkaller0 entered promiscuous mode [ 489.777570][T11421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2294'. [ 490.100848][T11462] device syzkaller0 entered promiscuous mode [ 490.430187][ T6532] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 490.589518][ T6532] usb 1-1: device descriptor read/64, error -71 [ 490.878079][ T6532] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 491.038468][ T6532] usb 1-1: device descriptor read/64, error -71 [ 491.166733][ T6532] usb usb1-port1: attempt power cycle [ 491.604697][ T6532] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 491.637332][ T6532] usb 1-1: device descriptor read/8, error -71 [ 491.925368][ T6532] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 491.968389][ T6532] usb 1-1: device descriptor read/8, error -71 [ 492.096919][ T6532] usb usb1-port1: unable to enumerate USB device [ 495.439428][T11531] loop4: detected capacity change from 0 to 512 [ 495.489558][T11531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 495.592867][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 495.724842][T11537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.726391][T11537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.902282][T11472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2308'. [ 502.251322][ T27] audit: type=1326 audit(474.849:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11567 comm="syz.0.2332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817771a8 code=0x7ffc0000 [ 502.255715][ T27] audit: type=1326 audit(474.849:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11567 comm="syz.0.2332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffff817771a8 code=0x7ffc0000 [ 502.271170][ T27] audit: type=1326 audit(474.867:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11567 comm="syz.0.2332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817771a8 code=0x7ffc0000 [ 502.274559][ T27] audit: type=1326 audit(474.867:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11567 comm="syz.0.2332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817771a8 code=0x7ffc0000 [ 502.277822][ T27] audit: type=1326 audit(474.867:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11567 comm="syz.0.2332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=283 compat=0 ip=0xffff817771a8 code=0x7ffc0000 [ 502.306635][ T27] audit: type=1326 audit(474.895:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11567 comm="syz.0.2332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817771a8 code=0x7ffc0000 [ 502.309912][ T27] audit: type=1326 audit(474.895:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11567 comm="syz.0.2332" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff817771a8 code=0x7ffc0000 [ 502.682260][T11580] device syzkaller0 entered promiscuous mode [ 502.893376][T11586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.894817][T11586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.210072][T11606] loop3: detected capacity change from 0 to 128 [ 514.221505][T11606] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 514.232959][T11608] device syzkaller0 entered promiscuous mode [ 514.892689][T11635] device syzkaller1 entered promiscuous mode [ 515.464681][T11654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2355'. [ 515.499677][T11650] loop1: detected capacity change from 0 to 8192 [ 516.232209][T11670] xt_hashlimit: size too large, truncated to 1048576 [ 516.259786][T11672] device syzkaller0 entered promiscuous mode [ 518.720453][T11696] device syzkaller0 entered promiscuous mode [ 518.726951][T11702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.728381][T11702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.310515][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.311592][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 529.918856][T11706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 529.921062][T11706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 529.922295][T11706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.797522][T11768] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 532.802888][T11768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.806515][T11768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.851620][T11771] device syzkaller0 entered promiscuous mode [ 533.534881][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.537152][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.664314][T11783] device syzkaller0 entered promiscuous mode [ 535.700495][T11810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 535.710045][T11810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.711792][T11810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.716163][T11808] tmpfs: Bad value for 'nr_blocks' [ 535.823213][T11812] device syzkaller0 entered promiscuous mode [ 536.190032][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.191541][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.240894][T11826] device syzkaller0 entered promiscuous mode [ 537.351052][T11848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 537.353612][T11848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 537.354951][T11848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 537.819861][T11857] device syzkaller0 entered promiscuous mode [ 538.839457][T11861] tmpfs: Bad value for 'nr_blocks' [ 539.113418][T11868] device syzkaller0 entered promiscuous mode [ 539.641580][T11881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.645275][T11881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.658310][T11883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 539.661610][T11883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 539.662987][T11883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.650646][T11901] tmpfs: Bad value for 'nr_blocks' [ 540.933919][T11910] device syzkaller0 entered promiscuous mode [ 541.048416][T11920] infiniband syz2: set active [ 542.285554][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.288278][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.203978][T11981] tmpfs: Unknown parameter '00000000000000000010' [ 553.220961][T11980] infiniband syz2: set active [ 554.101907][T12006] device syzkaller0 entered promiscuous mode [ 554.628424][T12014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.630295][T12014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.018515][T12025] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 555.020854][T12025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 555.022294][T12025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 555.470494][T12034] tmpfs: Unknown parameter '00000000000000000010' [ 556.048819][T12045] device syzkaller0 entered promiscuous mode [ 556.438334][T12052] device syzkaller0 entered promiscuous mode [ 556.770957][T12059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 556.775880][T12059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 556.781723][T12059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.541353][T12076] tmpfs: Unknown parameter '00000000000000000010' [ 557.741247][T12089] device syzkaller0 entered promiscuous mode [ 558.167587][T12094] infiniband syz2: set active [ 558.221761][T12096] device syzkaller0 entered promiscuous mode [ 559.282183][T12117] tmpfs: Unknown parameter '00000000000000000010' [ 559.966301][T12131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 559.968907][T12131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.970328][T12131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 560.007993][T12134] device syzkaller0 entered promiscuous mode [ 560.703781][T12149] device syzkaller0 entered promiscuous mode [ 560.964717][T12154] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2500'. [ 560.966485][T12154] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2500'. [ 561.532021][T12166] tmpfs: Unknown parameter '00000000000000000010' [ 561.540587][T12169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 561.580118][T12169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 561.581451][T12169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 561.664468][T12174] device syzkaller0 entered promiscuous mode [ 562.609849][T12194] device syzkaller0 entered promiscuous mode [ 562.875310][T12198] device syzkaller0 entered promiscuous mode [ 563.982116][T12226] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2520'. [ 563.983919][T12226] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2520'. [ 565.255159][T12233] tmpfs: Unknown parameter '00000000000000000010' [ 574.918357][T12221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 574.920588][T12221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 574.921841][T12221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 575.096337][T12259] device syzkaller0 entered promiscuous mode [ 575.722560][T12277] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2531'. [ 575.724365][T12277] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2531'. [ 576.301409][T12280] tmpfs: Bad value for 'huge' [ 576.910064][T12289] device syzkaller0 entered promiscuous mode [ 576.921184][T12291] device syzkaller0 entered promiscuous mode [ 577.162143][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 577.164534][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 577.165705][T12295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 577.291221][T12300] device syzkaller0 entered promiscuous mode [ 577.885533][T12314] device syzkaller0 entered promiscuous mode [ 578.132096][T12322] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2546'. [ 578.674310][T12324] tmpfs: Bad value for 'huge' [ 578.895334][T12336] device syzkaller0 entered promiscuous mode [ 579.362495][T12341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 579.365286][T12341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.369681][T12341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 579.384563][T12343] device syzkaller0 entered promiscuous mode [ 579.609590][T12348] device syzkaller0 entered promiscuous mode [ 579.630432][T12358] device syzkaller0 entered promiscuous mode [ 580.345341][T12369] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2560'. [ 580.640003][T12371] tmpfs: Bad value for 'huge' [ 588.965651][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.966758][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.375027][T12437] tmpfs: Unknown parameter 'n00000000000000000010' [ 592.383241][T12441] loop0: detected capacity change from 0 to 512 [ 592.471920][T12441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 592.486276][T12435] device syzkaller0 entered promiscuous mode [ 592.518511][ T4322] EXT4-fs (loop0): unmounting filesystem. [ 592.682953][T12453] device syzkaller0 entered promiscuous mode [ 592.799002][T12457] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2576'. [ 593.574940][T12470] device syzkaller0 entered promiscuous mode [ 593.748008][T12472] device syzkaller0 entered promiscuous mode [ 593.842700][T12484] tmpfs: Unknown parameter 'n00000000000000000010' [ 596.239044][T12522] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2592'. [ 605.788932][T12540] device syzkaller0 entered promiscuous mode [ 605.804788][T12542] tmpfs: Unknown parameter 'n00000000000000000010' [ 606.359929][T12561] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2603'. [ 606.974625][T12574] device syzkaller0 entered promiscuous mode [ 607.083210][T12578] loop2: detected capacity change from 0 to 7 [ 607.090848][T12578] Dev loop2: unable to read RDB block 7 [ 607.091737][T12578] loop2: AHDI p1 p2 p3 [ 607.094128][T12578] loop2: partition table partially beyond EOD, truncated [ 607.095335][T12578] loop2: p1 start 1818582900 is beyond EOD, truncated [ 607.096461][T12578] loop2: p3 start 335544320 is beyond EOD, truncated [ 607.120195][T12581] device syzkaller0 entered promiscuous mode [ 607.153960][T12582] tmpfs: Unknown parameter 'nr_blo00000000000000000010' [ 607.259133][T12586] device syzkaller0 entered promiscuous mode [ 608.235135][T12614] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2620'. [ 608.619343][T12623] loop1: detected capacity change from 0 to 512 [ 608.641680][T12624] device syzkaller0 entered promiscuous mode [ 608.673172][T12623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 608.858231][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 608.929505][T12631] device syzkaller0 entered promiscuous mode [ 608.985949][T12634] tmpfs: Unknown parameter 'nr_blo00000000000000000010' [ 609.198143][T12645] capability: warning: `syz.0.2632' uses deprecated v2 capabilities in a way that may be insecure [ 609.293890][T12653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2637'. [ 609.323675][T12658] device syzkaller0 entered promiscuous mode [ 609.464702][T12667] device syzkaller0 entered promiscuous mode [ 609.629692][T12676] tmpfs: Unknown parameter 'nr_blo00000000000000000010' [ 609.647100][T12674] netlink: 'syz.0.2645': attribute type 3 has an invalid length. [ 609.716775][T12684] loop3: detected capacity change from 0 to 512 [ 609.737092][T12688] loop2: detected capacity change from 0 to 128 [ 609.805838][T12534] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 609.925936][T12702] device syzkaller0 entered promiscuous mode [ 610.013489][T12705] device syzkaller0 entered promiscuous mode [ 610.285387][T12724] tmpfs: Unknown parameter 'nr_block00000000000000000010' [ 610.567786][T12747] device syzkaller0 entered promiscuous mode [ 610.943771][T12756] device syzkaller0 entered promiscuous mode [ 610.952717][T12760] loop0: detected capacity change from 0 to 764 [ 610.995407][T12691] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 611.050844][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'. [ 611.052821][T12766] tipc: New replicast peer: 0.0.0.0 [ 611.055534][T12766] tipc: Enabled bearer , priority 10 [ 611.102830][T12769] tmpfs: Unknown parameter 'nr_block00000000000000000010' [ 611.426043][T12782] device syzkaller0 entered promiscuous mode [ 611.905164][T12798] device syzkaller0 entered promiscuous mode [ 612.000702][T12803] tmpfs: Unknown parameter 'nr_block00000000000000000010' [ 612.066353][T12809] usb usb8: usbfs: process 12809 (syz.4.2702) did not claim interface 0 before use [ 612.113280][T12811] device syzkaller0 entered promiscuous mode [ 612.190234][T12817] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2706'. [ 612.570249][T12843] netlink: 'syz.0.2713': attribute type 3 has an invalid length. [ 612.842902][T12855] cgroup: fork rejected by pids controller in /syz4 [ 613.047939][T12859] device syzkaller0 entered promiscuous mode [ 613.575081][T12873] loop2: detected capacity change from 0 to 512 [ 613.583572][T12875] netlink: 'syz.3.2729': attribute type 4 has an invalid length. [ 613.623647][T12873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 613.669180][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 613.692784][ T4327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.695865][ T4327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.701183][ T4327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.704060][ T4327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.705538][ T4327] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 613.706810][ T4327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.775075][T12892] device syzkaller0 entered promiscuous mode [ 614.142488][T12886] chnl_net:caif_netlink_parms(): no params data found [ 614.245997][T12886] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.247468][T12886] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.249097][T12886] device bridge_slave_0 entered promiscuous mode [ 614.254860][T12886] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.258273][T12886] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.260890][T12886] device bridge_slave_1 entered promiscuous mode [ 614.280489][T12886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.287981][T12886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.410624][T12886] team0: Port device team_slave_0 added [ 614.418409][T12886] team0: Port device team_slave_1 added [ 614.433797][T12886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.439310][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.449866][T12886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.456246][T12886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.458178][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.462795][T12886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.916345][T12886] device hsr_slave_0 entered promiscuous mode [ 614.942098][T12886] device hsr_slave_1 entered promiscuous mode [ 614.997957][T12886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.000056][T12886] Cannot create hsr debugfs directory [ 615.249119][T12886] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.250966][T12886] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.444542][T12886] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.453884][T12886] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.554713][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'. [ 615.738815][ T4323] Bluetooth: hci2: command 0x0409 tx timeout [ 615.809074][T12886] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.810783][T12886] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.952280][T12886] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.954302][T12886] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.067906][T12970] device syzkaller0 entered promiscuous mode [ 616.259887][T12886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 616.272377][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2760'. [ 616.295889][T12886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 616.297921][T12974] loop3: detected capacity change from 0 to 128 [ 616.332222][T12886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 616.427474][T12886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 616.792594][T12987] loop2: detected capacity change from 0 to 512 [ 616.809633][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 616.830905][T12988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 616.879297][T12988] bond4: (slave batadv9): Error -99 calling set_mac_address [ 616.978909][T12886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.998778][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.000661][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.010946][T12886] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.027102][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 617.028901][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 617.030538][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.031635][ T4615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.036440][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 617.047314][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 617.052210][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 617.057020][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.058191][ T7641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.061689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 617.114795][T12998] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.164348][T12984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 617.184498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 617.187383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 617.190116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 617.192949][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 617.196995][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 617.214953][T13004] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 617.221638][T13004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 617.224223][T13004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 617.236196][T13006] loop3: detected capacity change from 0 to 512 [ 617.345869][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 617.347453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 617.349001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 617.360167][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 617.368234][T12886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 617.417072][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2777'. [ 617.418663][T13016] netlink: 'syz.0.2777': attribute type 2 has an invalid length. [ 617.420080][T13016] netlink: 'syz.0.2777': attribute type 2 has an invalid length. [ 617.422233][T13016] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 617.423446][T13016] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2777'. [ 617.465789][T13019] loop0: detected capacity change from 0 to 512 [ 617.472423][T13019] EXT4-fs: journaled quota format not specified [ 617.551145][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 617.552526][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 617.567551][T12886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.703523][ T4323] Bluetooth: hci2: command 0x041b tx timeout [ 618.376526][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.378326][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 618.409665][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 618.411919][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 618.415023][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 618.418187][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 618.449085][T12886] device veth0_vlan entered promiscuous mode [ 618.477373][T12886] device veth1_vlan entered promiscuous mode [ 618.657015][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 618.658772][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 618.660475][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 618.662073][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 618.701113][T12886] device veth0_macvtap entered promiscuous mode [ 618.709233][T12886] device veth1_macvtap entered promiscuous mode [ 618.718269][T13053] netlink: 'syz.0.2788': attribute type 3 has an invalid length. [ 618.727652][T12886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.730198][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 618.732528][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 618.734095][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 618.735765][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 618.750147][T12886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.753680][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 618.755455][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 618.797583][T12886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.800130][T12886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.802598][T12886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.805075][T12886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.846211][T13055] device syzkaller0 entered promiscuous mode [ 619.175325][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.176698][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.178049][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 619.221437][ T4615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.222779][ T4615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.224382][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 619.689262][ T4327] Bluetooth: hci2: command 0x040f tx timeout [ 619.924711][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.926682][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.927970][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.929063][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.930386][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.931710][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.932986][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.934237][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.935472][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.936719][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.937912][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.939256][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.940524][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.941715][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.942879][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.944120][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.945363][ T111] hid-generic 0000:DC1E:000E.0004: unknown main item tag 0x0 [ 619.949290][ T111] hid-generic 0000:DC1E:000E.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 620.019415][T13089] fido_id[13089]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 620.196056][T13103] loop1: detected capacity change from 0 to 512 [ 620.199448][T13103] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 620.276546][T13103] [ 620.276934][T13103] ====================================================== [ 620.278102][T13103] WARNING: possible circular locking dependency detected [ 620.279175][T13103] syzkaller #0 Not tainted [ 620.279840][T13103] ------------------------------------------------------ [ 620.280901][T13103] syz.1.2806/13103 is trying to acquire lock: [ 620.281808][T13103] ffff0000f5e4e6d8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x278/0x1778 [ 620.283431][T13103] [ 620.283431][T13103] but task is already holding lock: [ 620.284643][T13103] ffff0000cdfa2208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x114/0x180 [ 620.286296][T13103] [ 620.286296][T13103] which lock already depends on the new lock. [ 620.286296][T13103] [ 620.288024][T13103] [ 620.288024][T13103] the existing dependency chain (in reverse order) is: [ 620.289521][T13103] [ 620.289521][T13103] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 620.290845][T13103] down_read+0x64/0x300 [ 620.291638][T13103] v2_read_dquot+0x4c/0x118 [ 620.292422][T13103] dquot_acquire+0x120/0x4d8 [ 620.293230][T13103] ext4_acquire_dquot+0x270/0x428 [ 620.294146][T13103] dqget+0x654/0xcc4 [ 620.294861][T13103] __dquot_initialize+0x2fc/0xacc [ 620.295781][T13103] dquot_file_open+0x90/0xc8 [ 620.296675][T13103] ext4_file_open+0x21c/0x53c [ 620.297507][T13103] do_dentry_open+0x72c/0xf98 [ 620.298358][T13103] vfs_open+0x7c/0x90 [ 620.299028][T13103] path_openat+0x1f8c/0x26bc [ 620.299838][T13103] do_filp_open+0x194/0x384 [ 620.300680][T13103] do_sys_openat2+0x134/0x3f4 [ 620.301562][T13103] __arm64_sys_openat+0x118/0x14c [ 620.302536][T13103] invoke_syscall+0x98/0x2b4 [ 620.303455][T13103] el0_svc_common+0x138/0x258 [ 620.304340][T13103] do_el0_svc+0x58/0x130 [ 620.305175][T13103] el0_svc+0x58/0x128 [ 620.305893][T13103] el0t_64_sync_handler+0x84/0xf0 [ 620.306745][T13103] el0t_64_sync+0x18c/0x190 [ 620.307572][T13103] [ 620.307572][T13103] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 620.308818][T13103] __mutex_lock_common+0x190/0x1f60 [ 620.309788][T13103] mutex_lock_nested+0x38/0x44 [ 620.310693][T13103] dquot_commit+0x50/0x1c4 [ 620.311520][T13103] ext4_write_dquot+0x1b4/0x31c [ 620.312465][T13103] ext4_mark_dquot_dirty+0xe8/0x140 [ 620.313380][T13103] mark_all_dquot_dirty+0x108/0x424 [ 620.314346][T13103] __dquot_alloc_space+0x560/0xce0 [ 620.315280][T13103] ext4_mb_new_blocks+0xd38/0x4254 [ 620.316171][T13103] ext4_ext_map_blocks+0x13ac/0x570c [ 620.317096][T13103] ext4_map_blocks+0x860/0x1778 [ 620.317892][T13103] _ext4_get_block+0x19c/0x4d8 [ 620.318748][T13103] ext4_get_block+0x4c/0x60 [ 620.319665][T13103] ext4_block_write_begin+0x50c/0x10e4 [ 620.320726][T13103] ext4_write_begin+0x5f4/0x131c [ 620.321682][T13103] ext4_da_write_begin+0x348/0x990 [ 620.322646][T13103] generic_perform_write+0x234/0x4f4 [ 620.323568][T13103] ext4_buffered_write_iter+0x2c4/0x528 [ 620.324523][T13103] ext4_file_write_iter+0x18c/0x1574 [ 620.325484][T13103] vfs_write+0x3ec/0x7f0 [ 620.326248][T13103] __arm64_sys_pwrite64+0x174/0x20c [ 620.327125][T13103] invoke_syscall+0x98/0x2b4 [ 620.327889][T13103] el0_svc_common+0x138/0x258 [ 620.328637][T13103] do_el0_svc+0x58/0x130 [ 620.329406][T13103] el0_svc+0x58/0x128 [ 620.330066][T13103] el0t_64_sync_handler+0x84/0xf0 [ 620.330924][T13103] el0t_64_sync+0x18c/0x190 [ 620.331753][T13103] [ 620.331753][T13103] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 620.333052][T13103] __lock_acquire+0x2880/0x6800 [ 620.333932][T13103] lock_acquire+0x20c/0x63c [ 620.334736][T13103] down_read+0x64/0x300 [ 620.335480][T13103] ext4_map_blocks+0x278/0x1778 [ 620.336404][T13103] ext4_getblk+0x178/0x664 [ 620.337234][T13103] ext4_bread+0x3c/0x1a8 [ 620.337990][T13103] ext4_quota_write+0x204/0x534 [ 620.338914][T13103] get_free_dqblk+0x284/0x574 [ 620.339694][T13103] do_insert_tree+0x1c4/0xc34 [ 620.340478][T13103] do_insert_tree+0x790/0xc34 [ 620.341321][T13103] do_insert_tree+0x790/0xc34 [ 620.342081][T13103] do_insert_tree+0x790/0xc34 [ 620.342960][T13103] qtree_write_dquot+0x3d4/0x4f0 [ 620.343927][T13103] v2_write_dquot+0xf0/0x180 [ 620.344752][T13103] dquot_acquire+0x2a8/0x4d8 [ 620.345541][T13103] ext4_acquire_dquot+0x270/0x428 [ 620.346352][T13103] dqget+0x654/0xcc4 [ 620.347103][T13103] __dquot_initialize+0x2fc/0xacc [ 620.348041][T13103] dquot_initialize+0x24/0x34 [ 620.348922][T13103] ext4_process_orphan+0x5c/0x2b4 [ 620.349791][T13103] ext4_orphan_cleanup+0x920/0x1060 [ 620.350686][T13103] ext4_fill_super+0x6188/0x660c [ 620.351574][T13103] get_tree_bdev+0x358/0x544 [ 620.352347][T13103] ext4_get_tree+0x28/0x38 [ 620.353147][T13103] vfs_get_tree+0x90/0x274 [ 620.353931][T13103] do_new_mount+0x228/0x810 [ 620.354662][T13103] path_mount+0x5bc/0xe80 [ 620.355362][T13103] __arm64_sys_mount+0x49c/0x59c [ 620.356185][T13103] invoke_syscall+0x98/0x2b4 [ 620.356951][T13103] el0_svc_common+0x138/0x258 [ 620.357746][T13103] do_el0_svc+0x58/0x130 [ 620.358496][T13103] el0_svc+0x58/0x128 [ 620.359250][T13103] el0t_64_sync_handler+0x84/0xf0 [ 620.360197][T13103] el0t_64_sync+0x18c/0x190 [ 620.361045][T13103] [ 620.361045][T13103] other info that might help us debug this: [ 620.361045][T13103] [ 620.362701][T13103] Chain exists of: [ 620.362701][T13103] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 620.362701][T13103] [ 620.364897][T13103] Possible unsafe locking scenario: [ 620.364897][T13103] [ 620.366025][T13103] CPU0 CPU1 [ 620.366841][T13103] ---- ---- [ 620.367644][T13103] lock(&s->s_dquot.dqio_sem); [ 620.368380][T13103] lock(&dquot->dq_lock); [ 620.369527][T13103] lock(&s->s_dquot.dqio_sem); [ 620.370634][T13103] lock(&ei->i_data_sem/2); [ 620.371333][T13103] [ 620.371333][T13103] *** DEADLOCK *** [ 620.371333][T13103] [ 620.372523][T13103] 3 locks held by syz.1.2806/13103: [ 620.373254][T13103] #0: ffff0000cdfa20e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x800 [ 620.374862][T13103] #1: ffff0000e1518428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x60/0x4d8 [ 620.376447][T13103] #2: ffff0000cdfa2208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x114/0x180 [ 620.378036][T13103] [ 620.378036][T13103] stack backtrace: [ 620.378997][T13103] CPU: 0 PID: 13103 Comm: syz.1.2806 Not tainted syzkaller #0 [ 620.380119][T13103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 620.381733][T13103] Call trace: [ 620.382276][T13103] dump_backtrace+0x1c0/0x1ec [ 620.383008][T13103] show_stack+0x2c/0x3c [ 620.383732][T13103] __dump_stack+0x30/0x40 [ 620.384482][T13103] dump_stack_lvl+0xf4/0x15c [ 620.385234][T13103] dump_stack+0x1c/0x5c [ 620.385902][T13103] print_circular_bug+0x148/0x1b0 [ 620.386769][T13103] check_noncircular+0x264/0x2f8 [ 620.387607][T13103] __lock_acquire+0x2880/0x6800 [ 620.388432][T13103] lock_acquire+0x20c/0x63c [ 620.389200][T13103] down_read+0x64/0x300 [ 620.389893][T13103] ext4_map_blocks+0x278/0x1778 [ 620.390563][T13103] ext4_getblk+0x178/0x664 [ 620.391260][T13103] ext4_bread+0x3c/0x1a8 [ 620.391887][T13103] ext4_quota_write+0x204/0x534 [ 620.392698][T13103] get_free_dqblk+0x284/0x574 [ 620.393428][T13103] do_insert_tree+0x1c4/0xc34 [ 620.394115][T13103] do_insert_tree+0x790/0xc34 [ 620.394881][T13103] do_insert_tree+0x790/0xc34 [ 620.395612][T13103] do_insert_tree+0x790/0xc34 [ 620.396350][T13103] qtree_write_dquot+0x3d4/0x4f0 [ 620.397191][T13103] v2_write_dquot+0xf0/0x180 [ 620.397993][T13103] dquot_acquire+0x2a8/0x4d8 [ 620.398789][T13103] ext4_acquire_dquot+0x270/0x428 [ 620.399589][T13103] dqget+0x654/0xcc4 [ 620.400313][T13103] __dquot_initialize+0x2fc/0xacc [ 620.401207][T13103] dquot_initialize+0x24/0x34 [ 620.402052][T13103] ext4_process_orphan+0x5c/0x2b4 [ 620.402874][T13103] ext4_orphan_cleanup+0x920/0x1060 [ 620.403657][T13103] ext4_fill_super+0x6188/0x660c [ 620.404422][T13103] get_tree_bdev+0x358/0x544 [ 620.405144][T13103] ext4_get_tree+0x28/0x38 [ 620.405877][T13103] vfs_get_tree+0x90/0x274 [ 620.406565][T13103] do_new_mount+0x228/0x810 [ 620.407279][T13103] path_mount+0x5bc/0xe80 [ 620.407933][T13103] __arm64_sys_mount+0x49c/0x59c [ 620.408780][T13103] invoke_syscall+0x98/0x2b4 [ 620.409614][T13103] el0_svc_common+0x138/0x258 [ 620.410366][T13103] do_el0_svc+0x58/0x130 [ 620.411082][T13103] el0_svc+0x58/0x128 [ 620.411692][T13103] el0t_64_sync_handler+0x84/0xf0 [ 620.412494][T13103] el0t_64_sync+0x18c/0x190 [ 620.429551][T13103] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.2806: corrupted inode contents [ 620.432739][T13103] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #16: comm syz.1.2806: mark_inode_dirty error [ 620.434898][T13103] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.2806: corrupted inode contents [ 620.440326][T13103] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2806: mark_inode_dirty error [ 620.444553][T13103] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.2806: corrupted inode contents [ 620.450740][T13103] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 620.452387][T13103] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.2806: corrupted inode contents [ 620.454439][T13103] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.2806: mark_inode_dirty error [ 620.456641][T13103] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 620.458541][T13103] EXT4-fs (loop1): 1 truncate cleaned up [ 620.459495][T13103] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 620.495121][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 621.655230][ T4323] Bluetooth: hci2: command 0x0419 tx timeout