last executing test programs: 1m54.550838692s ago: executing program 2 (id=234): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000fc0)={[{@nogrpid}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 1m54.532168322s ago: executing program 2 (id=235): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00)=r0, 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 1m53.654777643s ago: executing program 2 (id=236): statx(0xffffffffffffffff, 0x0, 0x800, 0x3db, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000001000)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x1504, &(0x7f0000004e00)="$eJzs3AlwlcWWOPA+3f1BwIjXiCyRPn0+uGLAJiIissgmi4iIiICIbCIgYkRERECEsCNiQERA1ojIEhARWWKIGPZ9kV3EyEOMiIiACIhI/ysuf94bfePMvJlianJ+VV3pk++ec7tzUrn93aqbb3qNqdeyfu1mRCT+JfDrl2QhRIwQYoQQ4hohRCCEqBhXMS73egEFyf/ak7D/Xs3TrvQK2JXE/c/buP95G/c/b+P+523c/7yN+5+3cf/zNu4/Y3nZjnnFr+WRdwe//5+X8ev//yE55aZ+sanc9b3/Eync/7yN+5+3cf/zNu5/3sb9z9u4///31fp3rnH/8zbuP2N52ZV+/5nHlR1X+vePMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxljecN5fpoUQv8//acJPf/UAxhhjjDHGGGOM/W/j81/pFTDGGGOMMcYYY+x/HggplNAiEPlEfhEjCoiC4ioRK64WhcQ1IiKuFXHiOlFYXC+KiKKimCgu4sUNooQwAoUVJEJRUpQSUXGjKC1uEgmijCgrbhZOlBOJ4hZRXtwqKojbREVxu6gk7hCVRRVRVVQTd4rqooaoKWqJ2uIuUUfUFfVEfXG3aCDuEQ3FvaKRuE80FveLJuIB0VQ8KJqJ5qKFeEi0FA+LVuIR0Vq0EW1FO9H+v5T/gugnXhT9xQCRLAaKQWKwGCKGimFiuBghXhIjxctilHhFpIjRYox4VYwVr4lx4nUxXkwQE8UbYpKYLKaIqWKamC5SxZtihnhLzBRvi1litpgj5oo0MU/MF++IBeJdsVC8JxaJ98VisUQsFctEuvhAZIjlIlN8KFaIj0SWWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih/hY7BS7xG6xR+wV+8R+8Yk4ID4VB8VnIlt8/p/MP/dv8nuDAAESJGjQkA/yQQzEQEEoCLEQC4WgEEQgAnEQB4WhMBSBIlAMikE8xEMJKAEICAQEJaEkRCEKpaE0JEAClIWy4MBBIiRCebgVKkAFqAgVoRJUgspQBapANagG1aE61ISaUBtqQx2oA/WgHtwNd8M90BAaQiNoBI2hMTSBJtAUmkIzaAYtoAW0hJbQClpBa2gNbaEttIf20AE6QEfoCJ2hM3SBLtAVukISJEE36AbdoTv0gB7QE3pCL+gFvaEP9IEX4AV4EV6EAVBHDoRBMAiGwBAYBsNhOLwEI+FleBlegRQYDWPgVXgVXoNxcBbGwwSYCBOhupwMU2AqkJwOqZAKM2AGzISZMAtmw2yYC2kwD+bDfFgA78K78B4sgvfhfVgCS2AZpEM6ZMByyIRMWAHnIAtWwipYDWtgLayB9bAB1sMm2AybYCtshe2wHT6Gj2EX7II9sAf2wT74BD6BT+FTSIFsyIZDcAgOw2E4AkcgB3LgKByFY3AMjsNxOAEn4CScgtNwCs7AGTgL5+A8nIcLcAEuwnPxX7XYV2ZjipC5tNQyn8wnY2SMLCgLylgZKwvJQjIiIzJOxsnCsrAsIovIYrKYjJfxsoQsIVGiJBnKkrKkjMqoLC1LywSZIMvKstJJJxNloiwvy8sKsoKsKG+XleQdsrKsIju5arKarC47u5qylqwta8s6sq6sJ+vL+rKBbCAbyoaykWwkG8vGsol8QDaVA2EYNJe5nWkpR0MrOQZayzayrWwnX4NHZQc5DjrKTrKzfFxOgPHQVXZwSfIp2U1Oge7yGTkVnpU95XToJZ+XvWUf2Ve+IPvJjq6/HCBnwUA5SM6FIXKoHCaHywVQV+Z2rJ58RabI0XKMfFUug9fkOPm6HC8nyInyDTlJTpZT5FQ5TU6XqfJNOUO+JWfKt+UsOVvOkXNlmpwn58t35AL5rlwo35OL5PtysVwil8plMl1+IDPkcpkpP5Qr5EcyS66Uq+RquUaulevkerlBbpSb5Ga5RW6V2+R2uUN+LHfKXXK33CP3yn1yv/xEHpCfyoPyM5ktP5eH5N/kYfmFPCK/lDnyK3lUfi2PyW/kcfmtPCG/kyflKXlafi/PyB/kWXlOnpc/ygvyJ3lR/iwvSS+FAiWVUloFKp/Kr2JUAVVQXaVi1dWqkLpGRdS1Kk5dpwqr61URVVQVU8VVvLpBlVBGobKKVKhKqlIqqm5UpdVNKkGVUWXVzcqpcipR3aLKq1tVBXWbqqhuV5XUHaqyqqKqqmrqTlVd1VA1VS1VW92l6qi6qp6qr+5WDdQ9qqG6VzVS96nG6n7VRD2gmqoHVTPVXLVQD6mW6mHVSj2iWqs2qq1qp9qrR1UH9ZjqqDqpzupx1UU9obqqJ1WSekp1U0+r7uoZ1UM9q3qq51Qv9bzqrfqovupndUl51V8NUMlqoBqkBqshaqgapoarEeolNVK9rEapV1SKGq3GqFfVWPWaGqdeV+PVBDVRvaEmqclqipqqpqnpKlW9qWaot9RM9baapWarOWquSlPz1LDfKi38D+S/9Sf5o3559u1qh/pY7VS71G61R+1V+9R+tV8dUAfUQXVQZatsdUgdUofVYXVEHVE5KkcdVUfVMXVMHVfH1Ql1Qp1Up9SP6nt1Rv2gzqpz6pz6UV1QF9TF334GQoOWWmmtA51P59cxuoAuqK/SsfpqXUhfoyP6Wh2nr9OF9fW6iC6qi+niOl7foEtoo1FbTTrUJXUpHdU36tL6Jp2gy+iy+mbtdDmdqG/5l/P/an3tdXvdQXfQHXVH3Vl31l10F91Vd9VJOkl30910d91d99A9dE/dU/fSvXRv3Vv31X11P91P99f9dbJO1oP0YD1ED9XD9HA9Qr+kR+qRepQepVN0ih6jx+ixeqwep8fp8Xq8nqgn6kl6kp6ip+hpeppO1al6hp6hZ+qZepaepefoOTpNp+n5er5eoBfohXqhXqQX6cV6sV6ql+p0na4zdIbO1Jl6hV6hs/RKvVKv1qv1Wr1Wr9fr9Ua9UW/Wm/VWvVVn6R16h96pd+rderfeq/fq/Xq/PqAP6IP6oM7W2fqQPqQP68P6iD6ic3SOPqqP6mP6mD6uj+sT+oQ+qU/q0/q0PqPP6LP6rD6vz+sL+oK+qC/qS/pS7rEvkIEMdKCDfEG+ICaICQoGBYPYIDYoFBQKIkEkiAvigsLB9UGRoGhQLCgexAc3BCUCE2BgAwrCoGRQKogGNwalg5uChKBMUDa4OXBBuSAxuCUoH9waVAhuCyoGtweVgjuCykGVoGpQLbgzqB7UCGoGtYLawV1BnaBuUC+oH9wdNAjuCRoGuefS+4LGwf1Bk+CBoGnwYNAsaB60CB4KWgYPB62CR4LWQZugbdAuaP9fqn9v0Cj4s/reny36mOtvBphkM9AMMoPNEDPUDDPDzQjzkhlpXjajzCsmxYw2Y8yrZqx5zYwzr5vxZoKZaN4wk8xkM8VMNdPMdJNq3jQzzFtmpnnbzDKzzRwz16SZeTV+O3SbheY9s8i8bxabJWapWWbSzQcmwyw3meZDs8J8ZLLMSrPKrDZrzFqzzqw3G8xGs8lsNlvMVrPNbDc7zMdmp9lldps9Zq/ZZ/abT8wB86k5aD4z2eZzc8j8zRw2X5gj5kuTY74yR83X5pj5xhw335oT5jtz0pwyp8335oz5wZw158x586O5YH4yF83P5pLxuYf73Jd31KgxH+bDGIzBglgQYzEWC2EhjGAE4zAOC2NhLIJFsBgWw3iMxxJYAnMREpbEkhjFKJbG0piACVgWy6JDh4mYiOWxPFbAClgRK2IlrISVsTJWxap4J96JNbAG1sJaeBfehXWxLtbH+tgAG2BDbIiNsBE2xsbYBJtgU2yKzbAZtsAW2BJbYitsha2xNbbFttge22MH7IAdsSN2xs7YBbtgV+yKSZiE3bAbdsfu2AN7YE/sib2wF/bG3tgX+2I/7If9sT8mYzIOwkE4BIfgMByGI3AEjsSROApHYQqm4Bgcg2NxLI7DcTgeJ+BEfAMn4WScglNxGk7HVEzFGTgDZ+JMnIWzcA7OwTRMw/k4HxfgAlyIC3ERLsLFuBiX4lJMx3TMwAzMxExcgSswC7NwFa7CNbgG1+E63IAbcBNuwi24BbfhNtyBO3An7sTduBv34l7cj/vxAB7Ag3gQszEbD+EhPIyH8QgewRzMwaN4FI/hMTyOx/EEnsCTeBJP42k8g2fwLJ7F83geL+BPeBF/xkvoMcZKUdBeZWPt1baQvcbG2AL27+NitriNtzfYEtbYIrboP8RorU2wZWxZe7N1tpxNtLf8Ia5sq9iqtpq901a3NWzNP8QN7D22ob3XNrL32fr27n+IG9v7bRP7sG1qH7HNbBvbwrazLe3DtpV9xLa2bWxb2852sU/YrvZJm2Sfst3s03+IM+xyu8FutJvsZnvAfmrP2x/tMfuNvWB/sv3tADvCvmRH2pftKPuKTbGj/xBPtG/YSXaynWKn2ml2+h/iOXauTbPz7Hz7jl1g3/1DnG4/sItspl1sl9ildtkvce6aMu2HdoX9yGbZlXaVXW3X2LV2nV3//9e62m612+x2u99+YnfaXXa33WP32n2/xLn7OGg/s9n2c3vUfm0P2y/sEXvc5tivfolz93fcfmtP2O/sSXvKnrbf2zP2B3vWnvtl/7l7/97+bC9ZbwUBSVKkKaB8lJ9iqAAVpKsolq6mQnQNRehaiqPrqDBdT0WoKBWj4hRPN1AJMoRkiSikklSKonQjlaabKIHKUFm6mRyVo0S6hcrTrVSBbqOKdDtVojuoMlWhqlSN7qTqVINqUi2qTXdRHapL9ag+3U0N6B5qSPdSI7qPGtP91IQeoKb0IDWj5tSCHqKW9DC1okeoNbWhttSO2tOj1IEeo47UiTrT49SFnqCu9CQl0VPUjZ6m7vQM9aBnqSc9R73oeepNfagvvUD96EXqTwMomQbSIBpMQ2goDaPhNIJeopH0Mo2iVyiFRtMYepXG0ms0jl6n8TSBJtIbNIkm0xSaStNoOqXSmzSD3qKZ9DbNotk0h+ZSGs2j+fQOLaB3aSG9R4vofVpMS2gpLaN0+oAyaDll0oe0gj6iLFpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMO+ph20i7aTXtoL+2j/fQJHaBP6SB9Rtn0OR2iv9Fh+oKO0JeUQ1/RUfqajtE3dJy+pRP0HZ2kU3Savqcz9AOdpXN0nn6kC/QTXaSf6RJ5EiGEMlShDoMwX5g/jAkLhAXDq8LY8OqwUHhNGAmvDePC68LC4fVhkbBoWCwsHsbnE0KEJsTQhhSGYcmwVBgNbwxLhzeFCWGZsGx4c+jCcmFieEtYPrw1rBDeFlYMbw8rhXeElcMq4cP3VQvvDKuHNcKaYa2wdnhXWCesG9YL64d3hw3Ce8KG4b1ho/C+sEJ4f9gkfCBsGj4YNgubhy3Ch8KW4cNhq/CRsHXYJmwbtgvbh4+GHcLHwo5hp7Bz+HjYJXwi7Bo+GSaFT4Xdwqf/8npyODAcFA4OB4fe36uWRpdF06MfRDOiy6OZ0Q+jK6IfRbOiK6Oroquja6Jro+ui66Mbohujm6Kbo1uiW6Pbotuj3tfPLxw46ZTTLnD5XH4X4wq4gu4qF+uudoXcNS7irnVx7jpX2F3viriirpgr7uLdDa6EMw6ddeRCV9KVclF3oyvtbnIJbnDzXw8Q5Vyia+fau/aug3vMdXSdXGf3uHvcPeGecE+6J91Trpt72nV3z7ge7lnX0z3nnnPPu96uj+vrXnD93Iuuvxvgkl2yG+QGuSFuiBvmhrkRboQb6Ua6UW6US3Epbowb48a6sW6cG+fGu/FuopvoJrlJboqb4qa5aS7VpboZboab6Wa6WW6Wm+PmuDSX5ua7+W6BW+AWuoVuUcIit9gtdkvdUpfu0l2Gy3CZLtOtcCtclstyq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfb7XZ73V633+13B9wBd9AddNku2x1yh9xhd9gdcV+6HPeVO+q+dsfcN+64+9adcN+5k+6UO+2+d2fcD+6sO+fOux/dBfeTu+h+dpecd6mRNyMzIm9FZkbejsyKzI7MicyNpEXmReZH3oksiLwbWRh5L7Io8n5kcWRJZGlkWSQ98kEkI7I8khn5MLIi8lEkK7IysiqyOrImsjbi/Q07Q1/Sl/JRf6Mv7W/yCb6ML+tv9s6X84n+Fl/e3+or+Nt8RX+7r+Tv8JV9FV/VP+Jb+za+rW/n2/tHfQf/mO/oO/nO/nHfxT/hu/onfZJ/ynfzT/vu/hnfwz/re/rnfC//vO/t+/i+/gXfz7/o+/sBPtkP9IP8YD/ED/XD/HA/wr/kR/qX/Sj/ik/xo/0Y/6of61/z4/zrfryf4Cf6N/wkP9lP8VP9ND/dp/o3/Qz/lp/p3/az/Gw/x8/1aX6en+/f8Qv8u36hf88v8u/7xX6JX+qX+XT/gc/wy32m/9Cv8B/5LL/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Q7/sd/pd/ndfo/f6/f5/f4Tf8B/6g/6z3y2/9wf8n/zh/0X/oj/0uf4r/xR/7U/5r/xx/23/oT/zp/0p/xp/70/43/wZ/05f97/6C/4n/xF/7O/xB9JY4wxxhj7D1F/cX3gn3xP/jZyDRJCXL2reM6/rbmlyK/zoTK+S0QI8dSAXs1/H3XqJCcn//bYLCWCUkuEEJHL+bm3kb/HK0Vn8YRIEp1E+T9d31DZ5wL9Rf3o7UIU/LucGHE5vlz/1n9S/9HHJ2ZUCs/H/Tv1lwiRUOpyTgFxOb5cv8I/qV+0w1+sv8AXqUJ0/LucWHE5vlw/UTwmnhZJ//BIxhhjjDHGGGPsV0Nl1R5/df+ce38ery/n5BeX47+6P2eMMcYYY4wxxtiV92yfvk8+mpTUqQdPeMKTPDlp2/vPLl3pv0yMMcYYY4yx/26XD/1XeiWMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlje9fvn/6fCr/H/xD8Yu9J7ZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxq60/xcAAP//En88uA==") statx(0xffffffffffffff9c, &(0x7f0000002e40)='./file0\x00', 0x800, 0x7ff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000003180)='./file0\x00', &(0x7f00000031c0), 0x2000) 1m53.558803485s ago: executing program 2 (id=237): socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x22a00, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0xe806}}, {@init_itable}, {@user_xattr}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x21, r3, 0x80000001, 0x4) 1m53.049206086s ago: executing program 2 (id=238): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x2, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x2, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x75, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r5, 0x1, 0x9, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m43.81905016s ago: executing program 2 (id=247): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210080, &(0x7f0000000ac0)={[{@nodelalloc}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@lazytime}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nombcache}, {@nogrpid}]}, 0x1, 0x5a0, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40042, 0x1cb) fallocate(r0, 0x10, 0x800, 0x8000) 1m43.79518369s ago: executing program 32 (id=247): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210080, &(0x7f0000000ac0)={[{@nodelalloc}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@lazytime}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nombcache}, {@nogrpid}]}, 0x1, 0x5a0, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40042, 0x1cb) fallocate(r0, 0x10, 0x800, 0x8000) 14.482621955s ago: executing program 5 (id=484): openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 14.348127838s ago: executing program 5 (id=489): syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 13.132186377s ago: executing program 5 (id=492): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd", @ANYRES32=r3, @ANYBLOB="08000900e10000000800080000010000080002007f00000108000a000200000008004100ac1414bb080009"], 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 13.065504428s ago: executing program 5 (id=493): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@user_xattr}, {@data_err_ignore}, {@nodioread_nolock}, {@test_dummy_encryption}, {@noacl}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpgid(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 12.97912224s ago: executing program 3 (id=494): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@chain) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000400)="4047dd", 0x3, r0) 12.962303551s ago: executing program 3 (id=495): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x440d4) prlimit64(0x0, 0x7, &(0x7f0000002680)={0x6, 0x6}, &(0x7f00000026c0)) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$pptp(0x18, 0x1, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 12.876922242s ago: executing program 3 (id=496): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='reno', 0x4) 12.770888655s ago: executing program 3 (id=497): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x2, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x2, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x75, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r5, 0x1, 0x9, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.711172316s ago: executing program 5 (id=498): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 12.504168531s ago: executing program 4 (id=500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) 12.301323296s ago: executing program 4 (id=503): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd", @ANYRES32=r3, @ANYBLOB="08000900e10000000800080000010000080002007f00000108000a000200000008004100ac1414bb080009"], 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12.275616946s ago: executing program 4 (id=504): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 12.183117499s ago: executing program 4 (id=505): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 12.176126629s ago: executing program 4 (id=506): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001400010126bd7000f8fbdf250a3878ff", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000000000000001140006000200000003"], 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) 9.859404862s ago: executing program 1 (id=516): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f0000001f80)) 9.799034314s ago: executing program 1 (id=517): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f007, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e24, 0x8a49, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, 0x0}, 0x44010) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000480)=""/142) 9.317644695s ago: executing program 1 (id=520): syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 8.169917481s ago: executing program 1 (id=521): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25", 0x38}, {&(0x7f0000000840)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b", 0x8d}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001180)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c562874239cf5b3f5cdf525f4b3284012edf5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb9be6d676ebd247ca9b63cba4fa04fc528b4a910cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9410100008000000000f388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1c72c76", 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1d", 0xa0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000200)="2a691c6b90dd639bca9c584d2af7e5aa8b1502a9b2088ed63c4e2767ef20e67cc361781c11511285d40a1673efbb99", 0x2f}, {&(0x7f0000000ac0)="475d8f64019a29b40c30fba0841a24f7ab67536718a38eb2789468ee0cf74004996f2ba79f54b03db7ce47", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="844e22a704ae9a9df5e82de739386d42dc26721f99af2bfac338990c88da2ec0e340ac3ce5df648f3c8d1ae0cb0a2d006e3153fe71aa48e6641fb51d0c1893b5e7ab18967710686ba92b70310b598df31d", 0x51}], 0x1}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 8.145726342s ago: executing program 1 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x2404c000) 4.840708468s ago: executing program 0 (id=530): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f007, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e24, 0x8a49, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, 0x0}, 0x44010) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000480)=""/142) 3.624220626s ago: executing program 0 (id=531): syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x50) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0xe309b000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 2.416063814s ago: executing program 0 (id=532): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25", 0x38}, {&(0x7f0000000840)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b", 0x8d}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001180)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c562874239cf5b3f5cdf525f4b3284012edf5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb9be6d676ebd247ca9b63cba4fa04fc528b4a910cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9410100008000000000f388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1c72c76", 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1d", 0xa0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000200)="2a691c6b90dd639bca9c584d2af7e5aa8b1502a9b2088ed63c4e2767ef20e67cc361781c11511285d40a1673efbb99", 0x2f}, {&(0x7f0000000ac0)="475d8f64019a29b40c30fba0841a24f7ab67536718a38eb2789468ee0cf74004996f2ba79f54b03db7ce47", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="844e22a704ae9a9df5e82de739386d42dc26721f99af2bfac338990c88da2ec0e340ac3ce5df648f3c8d1ae0cb0a2d006e3153fe71aa48e6641fb51d0c1893b5e7ab18967710686ba92b70310b598df31d", 0x51}], 0x1}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 2.397513145s ago: executing program 0 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, 0x0, 0x0, 0xffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPP(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) read$FUSE(r5, &(0x7f0000000740)={0x2020}, 0x2020) 74.000379ms ago: executing program 1 (id=534): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240), 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) shutdown(r3, 0x1) 73.749728ms ago: executing program 0 (id=535): openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 73.648819ms ago: executing program 4 (id=536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) 72.760679ms ago: executing program 3 (id=537): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000ffdbdf", @ANYRES32=r3, @ANYBLOB="08000900e10000000800080000010000080002007f00000108000a000200000008004100ac1414bb080009"], 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 44.712749ms ago: executing program 5 (id=538): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xfe, 0x1d0, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) 6.91121ms ago: executing program 0 (id=539): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usbip_server_init(0x6) mknodat$loop(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001100)=""/216, 0xd8, 0x401) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x4000084) r6 = syz_open_dev$evdev(&(0x7f0000000280), 0x10040, 0x501000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000400)=[{r6, 0x400}, {r3, 0x200}, {r7}, {r5, 0x2040}, {r1}, {r3, 0x200}], 0x6, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f0000000480)={[0x100]}, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x120) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002340)={0x2020}, 0xffffffffffffffc7) 0s ago: executing program 3 (id=540): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fcntl$lock(r0, 0x5, &(0x7f00000002c0)={0x1, 0x1, 0x73f0, 0xf8}) kernel console output (not intermixed with test programs): DDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.673506][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.674695][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.677750][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.685885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.687546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.689048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.690745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.692439][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.693651][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.700758][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.713524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.715632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.717040][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.718242][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.719562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.721966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.729098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.730731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.732594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.734178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.738094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.739667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.741775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.743271][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.744559][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.747160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.752399][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.756559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.757934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.759969][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.766587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.768145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.769592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.771402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.772869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.778916][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.782971][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.797675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.799328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.801047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.802503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.804137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.809974][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.811034][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.812463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.813919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.820077][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.821761][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.841358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.843322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.844793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.847000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.855847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.857774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.859632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.861152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.864685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.866576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.868448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.869949][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.871208][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.875582][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.878120][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.884520][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.888686][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.890093][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.891246][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.892595][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.894315][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.901939][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.903569][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.905970][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.908442][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.921367][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.923038][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.924518][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.925788][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.928495][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.930810][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.932417][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.934211][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.939260][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.940909][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.942408][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.947732][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.949620][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.958013][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.959651][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.961338][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.965675][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.966942][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.968729][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.970354][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.972083][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.973650][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.978621][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.979710][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.981129][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.982932][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.984839][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.986905][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.992793][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.002926][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.006765][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.008627][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.009920][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.011203][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.012874][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.014757][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.018894][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.020897][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.022526][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.024308][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.037919][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.039598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.041203][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.042628][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.044781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.047095][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.053541][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.057428][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.067088][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.069790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.071379][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.072940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.074561][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.082385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.084199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.091552][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.099932][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.102155][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.111830][ T4326] device veth0_vlan entered promiscuous mode [ 33.114924][ T4326] device veth1_vlan entered promiscuous mode [ 33.127772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.129198][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.130522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.132196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.133884][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.142594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.144318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.148024][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.149474][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.151844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.153272][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.154771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.157455][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.162371][ T4330] device veth0_vlan entered promiscuous mode [ 33.168703][ T4330] device veth1_vlan entered promiscuous mode [ 33.182230][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.183840][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.187344][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.188958][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.199257][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.204505][ T4326] device veth0_macvtap entered promiscuous mode [ 33.208386][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.210114][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.211784][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.219777][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.221431][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.223081][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.224471][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.229015][ T4332] device veth0_vlan entered promiscuous mode [ 33.236250][ T4326] device veth1_macvtap entered promiscuous mode [ 33.241490][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.242832][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.244215][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.246372][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.247682][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.251350][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.252648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.254251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.260312][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.262577][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.264209][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.270390][ T4330] device veth0_macvtap entered promiscuous mode [ 33.272785][ T4330] device veth1_macvtap entered promiscuous mode [ 33.276076][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.277279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.279038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.280432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.282206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.284559][ T4332] device veth1_vlan entered promiscuous mode [ 33.288570][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.299117][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.300488][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.301935][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.303298][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.309016][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.310630][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.312838][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.323140][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.324701][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.327816][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.329528][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.337036][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.338888][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.341784][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.343326][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.346167][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.351271][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.352935][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.354560][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.358439][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.363953][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.366662][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.368411][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.369922][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.376603][ T4327] device veth0_vlan entered promiscuous mode [ 33.380428][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.381841][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.383311][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.384712][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.390581][ T4332] device veth0_macvtap entered promiscuous mode [ 33.395724][ T4327] device veth1_vlan entered promiscuous mode [ 33.398660][ T4332] device veth1_macvtap entered promiscuous mode [ 33.423507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.425364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.426899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.429582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.431069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.432592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.443249][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.445871][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.447646][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.449407][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.451688][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.454066][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.456128][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.457665][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.459214][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.476136][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.477919][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.479622][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.481203][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.483865][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.483908][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.486524][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.489439][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.490935][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.492384][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.493785][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.499047][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.502495][ T4337] device veth0_vlan entered promiscuous mode [ 33.506571][ T4337] device veth1_vlan entered promiscuous mode [ 33.512762][ T4327] device veth0_macvtap entered promiscuous mode [ 33.517923][ T4327] device veth1_macvtap entered promiscuous mode [ 33.520031][ T4332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.521368][ T4332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.522681][ T4332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.524056][ T4332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.528914][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.530487][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.531986][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.533594][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.535588][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.539627][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.548478][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.550213][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.551799][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.553401][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.554938][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.558233][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.560536][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.568638][ T4337] device veth0_macvtap entered promiscuous mode [ 33.571740][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.573547][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.575698][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.577349][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.578877][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.589106][ T4337] device veth1_macvtap entered promiscuous mode [ 33.592382][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.594009][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.599068][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.600719][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.602410][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.603923][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.606888][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.610069][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.611333][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.614674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.616375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.617821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.619472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.623865][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.626667][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.628338][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.630103][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.631770][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.633497][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.635303][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.636992][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.639374][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.641763][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.643130][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.644751][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.646851][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.647904][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.648163][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.655987][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.657998][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.659583][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.669274][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.671071][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.672803][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.674565][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.679298][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.681063][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.682577][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.684197][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.688239][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.690258][ T1734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.691577][ T1734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.706296][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.707849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.709523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.739257][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.740658][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.742226][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.752207][ T4337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.753567][ T4337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.754946][ T4337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.767493][ T4337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.778228][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.779512][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.780972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.782424][ T4413] loop2: detected capacity change from 0 to 512 [ 33.815444][ T4413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.838487][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.839904][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.841378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.875921][ T1734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.877263][ T1734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.879422][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.903595][ T1734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.905320][ T1734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.907154][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.917071][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 33.960114][ T4418] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 33.995785][ T1734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.997107][ T1734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.998527][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.056844][ T4425] loop4: detected capacity change from 0 to 1024 [ 34.058761][ T4425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.067955][ T4425] EXT4-fs: Ignoring removed i_version option [ 34.068780][ T4425] EXT4-fs: quotafile must be on filesystem root [ 34.555324][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 34.575333][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 34.585454][ T4344] Bluetooth: hci0: command 0x041b tx timeout [ 34.586855][ T4344] Bluetooth: hci2: command 0x041b tx timeout [ 34.588178][ T4344] Bluetooth: hci4: command 0x041b tx timeout [ 35.428203][ T4434] loop2: detected capacity change from 0 to 1024 [ 35.434372][ T4434] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 35.440271][ T4434] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (40000) [ 35.501142][ T4436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.504832][ T4436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.564085][ T4412] loop1: detected capacity change from 0 to 131072 [ 35.571168][ T4412] F2FS-fs (loop1): Zoned block device path is missing [ 35.573080][ T4412] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 35.586866][ T4412] F2FS-fs (loop1): invalid crc value [ 35.593487][ T4412] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.604191][ T4412] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 35.608022][ T4412] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 35.819340][ T4427] loop3: detected capacity change from 0 to 131072 [ 35.863048][ T4427] F2FS-fs (loop3): Test dummy encryption mode enabled [ 35.864932][ T4427] F2FS-fs (loop3): invalid crc value [ 35.871368][ T4427] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.880110][ T4427] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.893719][ T4427] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 35.976348][ T4450] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 36.042600][ T4452] loop2: detected capacity change from 0 to 512 [ 36.058433][ T4452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.595068][ T4344] Bluetooth: hci3: command 0x040f tx timeout [ 36.665029][ T4328] Bluetooth: hci4: command 0x040f tx timeout [ 36.666346][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 36.667516][ T4344] Bluetooth: hci2: command 0x040f tx timeout [ 36.668693][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 37.230815][ T4463] ======================================================= [ 37.230815][ T4463] WARNING: The mand mount option has been deprecated and [ 37.230815][ T4463] and is ignored by this kernel. Remove the mand [ 37.230815][ T4463] option from the mount to silence this warning. [ 37.230815][ T4463] ======================================================= [ 38.125055][ T4466] loop0: detected capacity change from 0 to 40427 [ 38.129749][ T4466] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 38.131055][ T4466] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 38.133225][ T4466] F2FS-fs (loop0): invalid crc value [ 38.134779][ T4466] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 38.145446][ T4466] F2FS-fs (loop0): Start checkpoint disabled! [ 38.148723][ T4466] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 38.149842][ T4466] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 39.313023][ T4340] Bluetooth: hci3: command 0x0419 tx timeout [ 39.315124][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 39.316210][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 39.317216][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 39.318159][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 39.319177][ T9] kworker/u4:0: attempt to access beyond end of device [ 39.319177][ T9] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.695109][ T111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.878409][ T111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.880180][ T111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 39.883812][ T111] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.885408][ T111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.886659][ T111] usb 1-1: Product: syz [ 39.887344][ T111] usb 1-1: Manufacturer: syz [ 39.888053][ T111] usb 1-1: SerialNumber: syz [ 39.893632][ T111] cdc_mbim 1-1:1.0: skipping garbage [ 40.509353][ T111] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 40.510640][ T111] cdc_mbim 1-1:1.0: bind() failure [ 40.513410][ T111] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 40.514504][ T111] cdc_ncm 1-1:1.1: bind() failure [ 40.519374][ T111] usb 1-1: USB disconnect, device number 2 [ 41.155179][ T4479] loop0: detected capacity change from 0 to 40427 [ 41.160936][ T4479] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 41.163118][ T4479] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 41.167738][ T4479] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 41.170216][ T4479] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.178337][ T4479] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 41.179693][ T4479] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 41.264011][ T4479] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 41.264055][ T4479] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 41.266183][ T4479] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 41.267476][ T4479] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 41.268728][ T4479] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 41.269938][ T4479] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 41.271235][ T4479] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 41.272474][ T4479] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 41.273805][ T4479] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 41.275947][ T4479] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 42.247565][ T4488] loop0: detected capacity change from 0 to 128 [ 42.265471][ T4488] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.274440][ T27] audit: type=1326 audit(42.250:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.16" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb77fe8 code=0x7ffc0000 [ 42.279951][ T27] audit: type=1326 audit(42.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.16" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=175 compat=0 ip=0xffffadb77fe8 code=0x7ffc0000 [ 42.283988][ T27] audit: type=1326 audit(42.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.16" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffadb77fe8 code=0x7ffc0000 [ 42.297583][ T27] audit: type=1326 audit(42.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.16" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffadb77fe8 code=0x7ffc0000 [ 42.301946][ T27] audit: type=1326 audit(42.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.16" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffadb77ce0 code=0x7ffc0000 [ 42.308789][ T27] audit: type=1326 audit(42.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.16" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffadb5aeac code=0x7ffc0000 [ 42.312495][ T27] audit: type=1326 audit(42.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.16" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffadb77d8c code=0x7ffc0000 [ 42.316385][ T27] audit: type=1326 audit(42.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.16" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffadb5aeac code=0x7ffc0000 [ 42.320054][ T27] audit: type=1326 audit(42.260:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.16" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffadb77c10 code=0x7ffc0000 [ 42.323857][ T27] audit: type=1326 audit(42.260:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4487 comm="syz.0.16" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffadb77c10 code=0x7ffc0000 [ 43.543037][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 44.448122][ T4498] loop0: detected capacity change from 0 to 1024 [ 44.452940][ T4498] EXT4-fs: Ignoring removed orlov option [ 44.454422][ T4498] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.469498][ T4498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.554339][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 47.652294][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 47.709404][ T4511] loop2: detected capacity change from 0 to 4096 [ 47.752912][ T4511] EXT4-fs (loop2): Test dummy encryption mode enabled [ 47.776956][ T4511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.261376][ T4524] loop1: detected capacity change from 0 to 256 [ 48.290031][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 48.330697][ T4528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.332433][ T4528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.545093][ T4508] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 48.772520][ T4508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 48.775750][ T4508] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 48.778817][ T4508] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 48.780962][ T4508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.979396][ T4508] usb 1-1: config 0 descriptor?? [ 49.021437][ T4526] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.061207][ T4546] binder: 4545:4546 tried to acquire reference to desc 0, got 1 instead [ 49.063891][ T4546] binder: 4545:4546 got reply transaction with no transaction stack [ 49.066379][ T4546] binder: 4545:4546 transaction reply to 0:0 failed 6/29201/-71, size 0-24 line 2946 [ 49.068596][ T22] binder: release 4545:4546 transaction 5 out, still active [ 49.070579][ T22] binder: undelivered TRANSACTION_COMPLETE [ 49.080395][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.081493][ T22] binder: send failed reply for transaction 5, target dead [ 49.151367][ T4549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.153199][ T4549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.373427][ T4551] loop1: detected capacity change from 0 to 40427 [ 49.389857][ T4551] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 49.392273][ T4551] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 49.394436][ T4551] F2FS-fs (loop1): invalid crc value [ 49.402677][ T4551] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.415689][ T4551] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 49.417167][ T4551] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 49.450320][ T4508] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x2 [ 49.455738][ T4508] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0xd [ 49.459300][ T4508] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x1 [ 49.463865][ T4508] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x3 [ 49.468519][ T4557] loop4: detected capacity change from 0 to 128 [ 49.469741][ T4508] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x1 [ 49.484063][ T4508] konepure 0003:1E7D:2DB4.0001: hidraw0: USB HID v80.09 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 49.541956][ T4561] loop4: detected capacity change from 0 to 256 [ 49.652848][ T4377] usb 1-1: USB disconnect, device number 3 [ 50.160931][ T4575] loop3: detected capacity change from 0 to 1024 [ 50.165068][ T4575] EXT4-fs: Ignoring removed oldalloc option [ 50.166254][ T4575] EXT4-fs: Ignoring removed bh option [ 50.210485][ T4575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 50.214856][ T4575] devtmpfs: Unknown parameter '{' [ 50.462924][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 50.462934][ T27] audit: type=1326 audit(50.440:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.1.41" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ff77fe8 code=0x7ffc0000 [ 50.482289][ T27] audit: type=1326 audit(50.460:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.1.41" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff8ff77fe8 code=0x7ffc0000 [ 50.487387][ T27] audit: type=1326 audit(50.460:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.1.41" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ff77fe8 code=0x7ffc0000 [ 50.491089][ T27] audit: type=1326 audit(50.460:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.1.41" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ff77fe8 code=0x7ffc0000 [ 50.856471][ T4586] binder: 4585:4586 tried to acquire reference to desc 0, got 1 instead [ 50.858241][ T4586] binder: 4585:4586 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.860529][ T4586] binder: 4586 RLIMIT_NICE not set [ 50.861701][ T4586] binder: 4585:4586 got reply transaction with no transaction stack [ 50.862981][ T4586] binder: 4585:4586 transaction reply to 0:0 failed 12/29201/-71, size 0-24 line 2946 [ 50.875265][ T24] binder: release 4585:4586 transaction 11 out, still active [ 50.876540][ T24] binder: undelivered TRANSACTION_COMPLETE [ 50.884038][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.885109][ T24] binder: send failed reply for transaction 11, target dead [ 50.913018][ T4588] loop1: detected capacity change from 0 to 128 [ 50.934561][ T4588] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 50.945071][ T4588] FAT-fs (loop1): Filesystem has been set read-only [ 51.000646][ T4590] loop1: detected capacity change from 0 to 512 [ 51.014503][ T4590] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 51.041183][ T4590] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 51.101375][ T4592] netlink: 'syz.1.46': attribute type 4 has an invalid length. [ 51.107427][ T4594] loop4: detected capacity change from 0 to 256 [ 51.128639][ T4592] netlink: 'syz.1.46': attribute type 4 has an invalid length. [ 51.142714][ T4594] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 51.253240][ T4602] capability: warning: `syz.0.50' uses deprecated v2 capabilities in a way that may be insecure [ 51.361543][ T4608] binder: 4607:4608 tried to acquire reference to desc 0, got 1 instead [ 51.363436][ T4608] binder: 4607:4608 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 51.366398][ T4608] binder: 4608 RLIMIT_NICE not set [ 51.367604][ T4608] binder: 4607:4608 got reply transaction with no transaction stack [ 51.687802][ T4612] capability: warning: `syz.0.54' uses 32-bit capabilities (legacy support in use) [ 51.867392][ T4578] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 51.882017][ T4578] EXT4-fs (loop3): Remounting filesystem read-only [ 52.184001][ T4621] loop2: detected capacity change from 0 to 128 [ 52.203056][ T4621] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 52.217725][ T4621] syz.2.57: attempt to access beyond end of device [ 52.217725][ T4621] loop2: rw=2051, sector=64, nr_sectors = 98 limit=128 [ 52.481898][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 52.556462][ T4624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.558004][ T4624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.566380][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 52.617898][ T4629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.733478][ T4632] loop3: detected capacity change from 0 to 256 [ 52.944002][ T4641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.947896][ T4641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.440951][ T4645] tipc: Started in network mode [ 53.441932][ T4645] tipc: Node identity 4, cluster identity 4711 [ 53.442936][ T4645] tipc: Node number set to 4 [ 53.519879][ T4634] loop1: detected capacity change from 0 to 131072 [ 53.532151][ T4634] F2FS-fs (loop1): Test dummy encryption mode enabled [ 53.533761][ T4634] F2FS-fs (loop1): invalid crc value [ 53.548340][ T4634] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.560775][ T4634] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 53.772593][ T4659] loop1: detected capacity change from 0 to 128 [ 53.791547][ T4659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 53.808764][ T4662] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 53.811530][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 53.845561][ T1966] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 54.030870][ T1966] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 54.032584][ T1966] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 54.033832][ T1966] usb 1-1: Product: syz [ 54.034445][ T1966] usb 1-1: Manufacturer: syz [ 54.036244][ T1966] usb 1-1: SerialNumber: syz [ 54.041568][ T1966] usb 1-1: config 0 descriptor?? [ 54.077937][ T4673] binder_user_error: 10 callbacks suppressed [ 54.077946][ T4673] binder: 4672:4673 tried to acquire reference to desc 0, got 1 instead [ 54.080692][ T4673] binder: 4672:4673 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 54.086794][ T4673] binder: 4673 RLIMIT_NICE not set [ 54.087772][ T4673] binder: 4672:4673 got reply transaction with no transaction stack [ 54.093570][ T4673] binder_debug: 16 callbacks suppressed [ 54.093581][ T4673] binder: 4672:4673 transaction reply to 0:0 failed 54/29201/-71, size 0-24 line 2946 [ 54.098914][ T1966] binder: release 4672:4673 transaction 53 out, still active [ 54.100202][ T1966] binder: undelivered TRANSACTION_COMPLETE [ 54.113785][ T1966] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.115087][ T1966] binder: send failed reply for transaction 53, target dead [ 54.124282][ T4669] loop4: detected capacity change from 0 to 40427 [ 54.135584][ T4669] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 54.138199][ T4669] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 54.142537][ T4669] F2FS-fs (loop4): invalid crc value [ 54.212244][ T4669] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 54.225412][ T4669] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 54.226804][ T4669] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.084768][ T22] binder: release 4663:4664 transaction 41 out, still active [ 55.086272][ T22] binder: undelivered TRANSACTION_COMPLETE [ 55.087350][ T22] binder: send failed reply for transaction 48 to 4663:4664 [ 55.090023][ T22] binder: undelivered TRANSACTION_COMPLETE [ 55.091170][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 55.284528][ T4685] loop2: detected capacity change from 0 to 256 [ 55.303523][ T4685] exfat: Deprecated parameter 'utf8' [ 55.304435][ T4685] exfat: Deprecated parameter 'utf8' [ 55.332735][ T4685] exfat: Deprecated parameter 'namecase' [ 55.342222][ T4685] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 55.487655][ T4693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.490225][ T4693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.142414][ T4704] loop1: detected capacity change from 0 to 256 [ 56.155311][ T4704] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 56.156017][ T4702] Zero length message leads to an empty skb [ 56.198111][ T4706] binder: 4705:4706 tried to acquire reference to desc 0, got 1 instead [ 56.204508][ T4706] binder: 4705:4706 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.209449][ T4706] binder: 4706 RLIMIT_NICE not set [ 56.211840][ T4706] binder: 4705:4706 got reply transaction with no transaction stack [ 56.250523][ T4710] binder: 4709:4710 tried to acquire reference to desc 0, got 1 instead [ 56.253045][ T4710] binder: 4709:4710 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.570322][ T4715] xt_hashlimit: size too large, truncated to 1048576 [ 56.573213][ T3899] usb 1-1: USB disconnect, device number 4 [ 56.975043][ T3899] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 57.067865][ T4721] loop1: detected capacity change from 0 to 128 [ 57.101371][ T4721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.110061][ T27] audit: type=1326 audit(57.090:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ff77fe8 code=0x7ffc0000 [ 57.113795][ T27] audit: type=1326 audit(57.090:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=175 compat=0 ip=0xffff8ff77fe8 code=0x7ffc0000 [ 57.157268][ T3899] usb 1-1: Using ep0 maxpacket: 32 [ 57.159546][ T3899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.161703][ T3899] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 57.163114][ T3899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.165929][ T3899] usb 1-1: config 0 descriptor?? [ 57.185144][ T27] audit: type=1326 audit(57.090:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ff77fe8 code=0x7ffc0000 [ 57.195790][ T27] audit: type=1326 audit(57.090:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff8ff77fe8 code=0x7ffc0000 [ 57.206388][ T27] audit: type=1326 audit(57.090:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8ff77ce0 code=0x7ffc0000 [ 57.215216][ T27] audit: type=1326 audit(57.090:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8ff5aeac code=0x7ffc0000 [ 57.218769][ T27] audit: type=1326 audit(57.090:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff8ff77d8c code=0x7ffc0000 [ 57.230165][ T27] audit: type=1326 audit(57.090:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8ff5aeac code=0x7ffc0000 [ 57.326340][ T27] audit: type=1326 audit(57.090:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8ff77c10 code=0x7ffc0000 [ 57.524618][ T27] audit: type=1326 audit(57.090:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4720 comm="syz.1.91" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8ff77c10 code=0x7ffc0000 [ 58.070403][ T4729] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 58.221349][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 58.275872][ T4732] overlayfs: missing 'workdir' [ 58.297371][ T3899] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x7 [ 58.298723][ T3899] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 58.300008][ T3899] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 58.301275][ T3899] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x4 [ 58.302392][ T3899] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x7 [ 58.303558][ T3899] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x3 [ 58.304705][ T3899] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x2 [ 58.315054][ T3899] hid-picolcd 0003:04D8:C002.0002: item fetching failed at offset 40/41 [ 58.316569][ T3899] hid-picolcd 0003:04D8:C002.0002: device report parse failed [ 58.317762][ T3899] hid-picolcd: probe of 0003:04D8:C002.0002 failed with error -22 [ 58.356663][ T1966] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.359009][ T1966] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.498328][ T1966] usb 1-1: USB disconnect, device number 5 [ 59.075288][ T4754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.086650][ T4754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.554246][ T4761] binder_user_error: 5 callbacks suppressed [ 59.554254][ T4761] binder: 4760:4761 tried to acquire reference to desc 0, got 1 instead [ 59.559292][ T4761] binder: 4760:4761 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.563662][ T4761] binder: 4761 RLIMIT_NICE not set [ 59.859520][ T4765] overlayfs: missing 'lowerdir' [ 59.974691][ T4773] loop3: detected capacity change from 0 to 512 [ 60.023099][ T4773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.039463][ T4773] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 13: comm syz.3.108: lblock 0 mapped to illegal pblock 13 (length 1) [ 60.043445][ T4773] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.108: Failed to acquire dquot type 0 [ 60.070049][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 60.111925][ T4781] binder: 4780:4781 tried to acquire reference to desc 0, got 1 instead [ 60.114184][ T4781] binder: 4780:4781 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 60.117521][ T4781] binder: 4781 RLIMIT_NICE not set [ 60.118634][ T4781] binder: 4780:4781 got reply transaction with no transaction stack [ 60.120132][ T4781] binder_debug: 17 callbacks suppressed [ 60.120144][ T4781] binder: 4780:4781 transaction reply to 0:0 failed 96/29201/-71, size 0-24 line 2946 [ 60.122986][ T4380] binder: release 4780:4781 transaction 95 out, still active [ 60.124605][ T4380] binder: undelivered TRANSACTION_COMPLETE [ 60.155946][ T4409] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.157128][ T4409] binder: send failed reply for transaction 95, target dead [ 60.173467][ T4784] loop4: detected capacity change from 0 to 2048 [ 60.204173][ T4786] device syzkaller0 entered promiscuous mode [ 60.210516][ T4784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.234703][ T4784] EXT4-fs error (device loop4): ext4_resize_begin:62: comm syz.4.111: resize_inode disabled but reserved GDT blocks non-zero [ 60.242863][ T4789] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 60.263095][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 60.382087][ T4376] binder: release 4760:4761 transaction 83 out, still active [ 60.383358][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 60.384436][ T4376] binder: send failed reply for transaction 90 to 4760:4761 [ 60.386170][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 60.387224][ T4376] binder: undelivered TRANSACTION_ERROR: 29189 [ 62.232574][ T4822] overlayfs: missing 'lowerdir' [ 64.506336][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.507620][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.622612][ T7] cfg80211: failed to load regulatory.db [ 71.148466][ T4832] tipc: Started in network mode [ 71.149472][ T4832] tipc: Node identity 7a4e36cc, cluster identity 9 [ 71.150594][ T4832] tipc: Node number set to 2051946188 [ 71.242250][ T4842] binder: 4841:4842 tried to acquire reference to desc 0, got 1 instead [ 71.244528][ T4839] binder: 4838:4839 tried to acquire reference to desc 0, got 1 instead [ 71.247810][ T4842] binder: 4841:4842 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 71.251947][ T4839] binder: 4838:4839 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 71.253942][ T4839] binder: 4839 RLIMIT_NICE not set [ 71.257057][ T4842] binder: 4842 RLIMIT_NICE not set [ 71.259188][ T4839] binder: 4838:4839 got reply transaction with no transaction stack [ 71.260506][ T4839] binder_debug: 1 callbacks suppressed [ 71.260518][ T4839] binder: 4838:4839 transaction reply to 0:0 failed 114/29201/-71, size 0-24 line 2946 [ 71.269439][ T7] binder: release 4838:4839 transaction 112 out, still active [ 71.270595][ T7] binder: undelivered TRANSACTION_COMPLETE [ 71.277866][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.278985][ T7] binder: send failed reply for transaction 112, target dead [ 71.337242][ T4848] binder: 4847:4848 tried to acquire reference to desc 0, got 1 instead [ 71.349248][ T4848] binder: 4847:4848 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 71.351565][ T4848] binder: 4848 RLIMIT_NICE not set [ 71.352430][ T4848] binder: send failed reply for transaction 119 to 4847:4848 [ 71.353859][ T4848] binder: 4847:4848 ioctl c0306201 20000680 returned -14 [ 71.378063][ T4854] overlayfs: missing 'lowerdir' [ 71.626713][ T4855] loop2: detected capacity change from 0 to 256 [ 72.277031][ T4508] binder: release 4841:4842 transaction 105 out, still active [ 72.278419][ T4508] binder: undelivered TRANSACTION_COMPLETE [ 72.279630][ T4508] binder: send failed reply for transaction 113 to 4841:4842 [ 72.281081][ T4508] binder: undelivered TRANSACTION_COMPLETE [ 72.366711][ T4863] loop1: detected capacity change from 0 to 16 [ 72.381916][ T4863] erofs: (device loop1): mounted with root inode @ nid 36. [ 73.290288][ T4878] loop0: detected capacity change from 0 to 512 [ 73.294894][ T4878] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.0.134: corrupted xattr block 95 [ 73.301724][ T4878] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 73.304629][ T4878] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.134: bg 0: block 7: invalid block bitmap [ 73.321144][ T4876] device syzkaller0 entered promiscuous mode [ 73.326082][ T4878] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 73.332771][ T4883] device syzkaller0 entered promiscuous mode [ 73.348940][ T4878] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #11: comm syz.0.134: corrupted xattr block 95 [ 73.355731][ T4878] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 73.357424][ T4878] EXT4-fs (loop0): 1 orphan inode deleted [ 73.358356][ T4878] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 73.378744][ T4878] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 73.918268][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 84.182659][ T4918] netlink: 'syz.2.139': attribute type 32 has an invalid length. [ 84.229646][ T4924] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.231089][ T4924] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.270803][ T4926] binder_user_error: 5 callbacks suppressed [ 84.270812][ T4926] binder: 4925:4926 tried to acquire reference to desc 0, got 1 instead [ 84.274356][ T4926] binder: 4925:4926 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.276819][ T4926] binder: 4926 RLIMIT_NICE not set [ 84.344717][ T4928] binder: 4927:4928 tried to acquire reference to desc 0, got 1 instead [ 84.352713][ T4930] input: syz1 as /devices/virtual/input/input2 [ 84.353911][ T4930] input: failed to attach handler leds to device input2, error: -6 [ 84.386979][ T4928] binder: 4927:4928 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.392993][ T4928] binder: 4928 RLIMIT_NICE not set [ 84.393873][ T4928] binder: 4928 RLIMIT_NICE not set [ 84.397667][ T4928] binder_debug: 9 callbacks suppressed [ 84.397681][ T4928] binder: send failed reply for transaction 142 to 4927:4928 [ 84.402121][ T4928] binder: 4927:4928 ioctl c0306201 20000680 returned -14 [ 84.735612][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 84.736709][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.783299][ T4945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.788772][ T4945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.804370][ T4945] loop4: detected capacity change from 0 to 1024 [ 84.806576][ T4945] journal_path: Lookup failure for './file0' [ 84.807786][ T4945] EXT4-fs: error: could not find journal device path [ 84.822258][ T4947] loop3: detected capacity change from 0 to 4096 [ 84.836281][ T4916] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.843966][ T4947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.871104][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 85.107484][ T7] binder: release 4925:4926 transaction 130 out, still active [ 85.108887][ T7] binder: undelivered TRANSACTION_COMPLETE [ 85.110722][ T7] binder: send failed reply for transaction 137 to 4925:4926 [ 85.112103][ T7] binder: undelivered TRANSACTION_COMPLETE [ 85.113312][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 85.114402][ T7] binder: send failed reply for transaction 130, target dead [ 85.138247][ T4955] loop2: detected capacity change from 0 to 16 [ 85.150092][ T4955] erofs: (device loop2): mounted with root inode @ nid 36. [ 85.262668][ T4960] device syzkaller0 entered promiscuous mode [ 85.443272][ T4967] device syzkaller0 entered promiscuous mode [ 85.494652][ T4976] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 85.496027][ T4952] loop3: detected capacity change from 0 to 131072 [ 85.497270][ T4976] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 85.538186][ T4952] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.548117][ T4952] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.580097][ T4982] binder: 4980:4982 tried to acquire reference to desc 0, got 1 instead [ 85.618067][ T4982] binder: 4980:4982 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.637318][ T4982] binder: 4982 RLIMIT_NICE not set [ 85.638270][ T4982] binder: send failed reply for transaction 147 to 4980:4982 [ 85.639420][ T4982] binder: 4980:4982 ioctl c0306201 20000680 returned -14 [ 85.678122][ T4992] binder: BINDER_SET_CONTEXT_MGR already set [ 85.679274][ T4992] binder: 4991:4992 ioctl 4018620d 20004a80 returned -16 [ 85.736386][ T4996] loop4: detected capacity change from 0 to 256 [ 86.205113][ T4409] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.405048][ T4409] usb 1-1: Using ep0 maxpacket: 16 [ 86.409760][ T4409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.411431][ T4409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.413164][ T4409] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.415986][ T4409] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.417601][ T4409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.422426][ T4409] usb 1-1: config 0 descriptor?? [ 86.633296][ T4990] loop0: detected capacity change from 0 to 2048 [ 86.684000][ T4990] loop0: p1 < > p3 [ 86.694057][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated [ 86.699557][ T3937] loop0: p1 < > p3 [ 86.700904][ T3937] loop0: p3 size 134217728 extends beyond EOD, truncated [ 86.899626][ T4409] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 86.901118][ T4409] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 86.906939][ T4409] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input3 [ 86.977507][ T4409] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 87.109538][ T4409] usb 1-1: USB disconnect, device number 6 [ 87.690258][ T5033] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 87.691997][ T5033] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 87.724665][ T5035] loop0: detected capacity change from 0 to 1024 [ 87.734546][ T5035] EXT4-fs: inline encryption not supported [ 87.736107][ T5035] EXT4-fs: Ignoring removed bh option [ 87.750549][ T5035] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 87.792566][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 88.140125][ T5040] loop0: detected capacity change from 0 to 131072 [ 88.146802][ T5040] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.160911][ T5040] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.401491][ T5048] binder: 5047:5048 ioctl c0306201 20000680 returned -14 [ 88.522566][ T5053] binder: BINDER_SET_CONTEXT_MGR already set [ 88.523617][ T5053] binder: 5052:5053 ioctl 4018620d 20000100 returned -16 [ 88.529707][ T5053] binder: BINDER_SET_CONTEXT_MGR already set [ 88.530942][ T5053] binder: 5052:5053 ioctl 4018620d 20004a80 returned -16 [ 90.505031][ T4409] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.705092][ T4409] usb 1-1: Using ep0 maxpacket: 16 [ 90.707469][ T4409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 53, changing to 9 [ 90.709312][ T4409] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 134 [ 90.710945][ T4409] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 90.713020][ T4409] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 90.714416][ T4409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.717422][ T4409] usb 1-1: config 0 descriptor?? [ 90.718824][ T5060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.125165][ T4409] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 91.126445][ T4409] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 91.127693][ T4409] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 91.128765][ T4409] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 91.129833][ T4409] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 91.130930][ T4409] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 91.132050][ T4409] apple 0003:05AC:0247.0005: unknown main item tag 0x0 [ 91.134213][ T4409] apple 0003:05AC:0247.0005: hidraw0: USB HID v0.08 Device [HID 05ac:0247] on usb-dummy_hcd.0-1/input0 [ 91.331084][ T4409] usb 1-1: USB disconnect, device number 7 [ 96.479967][ T5067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'. [ 96.503686][ T5070] Bluetooth: MGMT ver 1.22 [ 96.526116][ T5072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.546311][ T5072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.558861][ T5074] loop0: detected capacity change from 0 to 512 [ 96.569034][ T5076] binder_user_error: 19 callbacks suppressed [ 96.569043][ T5076] binder: 5075:5076 tried to acquire reference to desc 0, got 1 instead [ 96.576685][ T5079] loop3: detected capacity change from 0 to 128 [ 96.589743][ T5074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.607912][ T5076] binder: 5075:5076 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 96.610037][ T5076] binder: 5076 RLIMIT_NICE not set [ 96.610843][ T5076] binder: 5076 RLIMIT_NICE not set [ 96.620759][ T5076] binder_debug: 17 callbacks suppressed [ 96.620777][ T5076] binder: send failed reply for transaction 164 to 5075:5076 [ 96.622973][ T5076] binder: 5075:5076 ioctl c0306201 20000680 returned -14 [ 96.630332][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 96.636835][ T5086] binder: 5085:5086 tried to acquire reference to desc 0, got 1 instead [ 96.649231][ T5086] binder: 5085:5086 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 96.651513][ T5086] binder: 5086 RLIMIT_NICE not set [ 96.743742][ T4409] binder: undelivered TRANSACTION_COMPLETE [ 96.744919][ T4409] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.207058][ T5097] loop2: detected capacity change from 0 to 512 [ 97.243918][ T5097] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.288774][ T5097] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.190: reserved inode found cleared - inode=9 [ 97.331227][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 97.371024][ T5101] binder: 5100:5101 tried to acquire reference to desc 0, got 1 instead [ 97.372922][ T5101] binder: 5100:5101 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 97.377135][ T5101] binder: 5101 RLIMIT_NICE not set [ 97.378446][ T5101] binder: 5100:5101 ioctl c0306201 0 returned -14 [ 97.380773][ T4409] binder: release 5100:5101 transaction 181 out, still active [ 97.382103][ T4409] binder: undelivered TRANSACTION_COMPLETE [ 97.392538][ T4380] binder: release 5100:5101 transaction 181 in, still active [ 97.393983][ T4380] binder: send failed reply for transaction 181, target dead [ 97.444243][ T5091] loop0: detected capacity change from 0 to 131072 [ 97.444260][ T5103] device syzkaller0 entered promiscuous mode [ 97.451608][ T5091] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 97.453329][ T5091] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 97.471563][ T5091] F2FS-fs (loop0): invalid crc value [ 97.472930][ T4409] binder: release 5085:5086 transaction 169 out, still active [ 97.474098][ T4409] binder: undelivered TRANSACTION_COMPLETE [ 97.474931][ T4409] binder: send failed reply for transaction 176 to 5085:5086 [ 97.506808][ T5091] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.520847][ T5091] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 97.522078][ T5091] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 97.721379][ T5127] raw_sendmsg: syz.1.198 forgot to set AF_INET. Fix it! [ 98.620321][ T5134] binder: 5133:5134 ioctl c0306201 0 returned -14 [ 100.040234][ T5144] binder: 5143:5144 ioctl c0306201 0 returned -14 [ 100.067764][ T5146] loop0: detected capacity change from 0 to 128 [ 100.081869][ T5146] syz.0.203: attempt to access beyond end of device [ 100.081869][ T5146] loop0: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 101.513878][ T5152] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 101.516672][ T4617] Bluetooth: hci5: Frame reassembly failed (-84) [ 103.535323][ T4340] Bluetooth: hci5: command 0x1003 tx timeout [ 103.535497][ T4344] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 103.740223][ T5162] binder_user_error: 11 callbacks suppressed [ 103.740234][ T5162] binder: 5161:5162 tried to acquire reference to desc 0, got 1 instead [ 103.750871][ T5162] binder: 5161:5162 ioctl c0306201 0 returned -14 [ 103.752167][ T5162] binder: 5161:5162 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 103.754228][ T5162] binder: 5162 RLIMIT_NICE not set [ 104.010063][ T5165] loop0: detected capacity change from 0 to 256 [ 109.437530][ T5170] loop4: detected capacity change from 0 to 512 [ 109.444784][ T5170] EXT4-fs (loop4): Test dummy encryption mode enabled [ 109.447199][ T5173] loop1: detected capacity change from 0 to 512 [ 109.452368][ T5174] input: syz0 as /devices/virtual/input/input4 [ 109.482040][ T5170] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.212: inode has both inline data and extents flags [ 109.487025][ T5176] binder: 5175:5176 tried to acquire reference to desc 0, got 1 instead [ 109.489394][ T5176] binder: 5175:5176 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 109.495793][ T5170] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.212: couldn't read orphan inode 15 (err -117) [ 109.502830][ T5173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.510624][ T5170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.514903][ T5176] binder: 5176 RLIMIT_NICE not set [ 109.539129][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 109.577168][ T5188] loop3: detected capacity change from 0 to 128 [ 109.596230][ T5188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.647480][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 109.647490][ T27] audit: type=1326 audit(109.630:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.3.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3377fe8 code=0x7ffc0000 [ 109.654336][ T27] audit: type=1326 audit(109.630:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.3.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=175 compat=0 ip=0xffffa3377fe8 code=0x7ffc0000 [ 109.663433][ T27] audit: type=1326 audit(109.640:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.3.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3377fe8 code=0x7ffc0000 [ 109.670230][ T27] audit: type=1326 audit(109.640:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.3.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3377fe8 code=0x7ffc0000 [ 109.674466][ T27] audit: type=1326 audit(109.640:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.3.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffa3377fe8 code=0x7ffc0000 [ 109.679287][ T27] audit: type=1326 audit(109.640:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.3.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa3377ce0 code=0x7ffc0000 [ 109.683851][ T27] audit: type=1326 audit(109.640:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.3.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa335aeac code=0x7ffc0000 [ 109.689051][ T27] audit: type=1326 audit(109.640:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.3.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffa3377d8c code=0x7ffc0000 [ 109.692777][ T5195] loop0: detected capacity change from 0 to 16 [ 109.693284][ T27] audit: type=1326 audit(109.640:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.3.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa335aeac code=0x7ffc0000 [ 109.698938][ T27] audit: type=1326 audit(109.640:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.3.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa3377c10 code=0x7ffc0000 [ 109.705321][ T5195] erofs: (device loop0): mounted with root inode @ nid 36. [ 111.214158][ T5193] loop1: detected capacity change from 0 to 256 [ 111.366622][ T5197] /dev/loop0: Can't open blockdev [ 111.715880][ T111] binder_debug: 13 callbacks suppressed [ 111.715890][ T111] binder: release 5175:5176 transaction 218 out, still active [ 111.725378][ T111] binder: undelivered TRANSACTION_COMPLETE [ 111.726793][ T111] binder: send failed reply for transaction 211 to 5175:5176 [ 111.728524][ T111] binder: undelivered TRANSACTION_COMPLETE [ 111.729642][ T111] binder: undelivered TRANSACTION_ERROR: 29189 [ 111.731057][ T111] binder: send failed reply for transaction 218, target dead [ 112.090901][ T5199] binder: 5198:5199 tried to acquire reference to desc 0, got 1 instead [ 112.110001][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 112.131559][ T5199] binder: 5198:5199 ioctl c0306201 0 returned -14 [ 112.132838][ T5199] binder: 5198:5199 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.155852][ T5199] binder: 5199 RLIMIT_NICE not set [ 112.352992][ T5216] device syzkaller0 entered promiscuous mode [ 112.649305][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 112.777744][ T5224] loop2: detected capacity change from 0 to 512 [ 112.779315][ T5224] EXT4-fs: Ignoring removed oldalloc option [ 112.805892][ T5224] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c018, mo2=0003] [ 112.808576][ T5224] EXT4-fs (loop2): orphan cleanup on readonly fs [ 112.811393][ T5224] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 112.815736][ T5224] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 112.824882][ T5224] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 112.834074][ T5224] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.227: couldn't read orphan inode 13 (err -117) [ 113.084325][ T5235] loop4: detected capacity change from 0 to 512 [ 113.090675][ T5235] EXT4-fs: Ignoring removed orlov option [ 113.109611][ T5235] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.111905][ T5235] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.343544][ T5235] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 113.347559][ T5235] EXT4-fs (loop4): orphan cleanup on readonly fs [ 113.350740][ T5235] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.222: inode #1: comm syz.4.222: iget: illegal inode # [ 113.355126][ T5235] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.222: error while reading EA inode 1 err=-117 [ 113.358370][ T5235] EXT4-fs (loop4): 1 orphan inode deleted [ 113.359401][ T5235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.680615][ T5224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.713125][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 113.924827][ T5243] loop2: detected capacity change from 0 to 1024 [ 113.933084][ T5243] EXT4-fs: Ignoring removed bh option [ 113.943197][ T5243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.963898][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 113.983102][ T5248] binder: 5247:5248 tried to acquire reference to desc 0, got 1 instead [ 113.989090][ T5248] binder: 5247:5248 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 113.991269][ T5248] binder: 5248 RLIMIT_NICE not set [ 113.992237][ T5248] binder: 5248 RLIMIT_NICE not set [ 113.993298][ T5248] binder: 5247:5248 ioctl c0306201 0 returned -14 [ 114.819734][ T111] binder: release 5247:5248 transaction 227 in, still active [ 114.821132][ T111] binder: send failed reply for transaction 227 to 5247:5248 [ 114.822522][ T111] binder: undelivered TRANSACTION_COMPLETE [ 114.823532][ T111] binder: undelivered TRANSACTION_ERROR: 29189 [ 114.862569][ T5252] loop2: detected capacity change from 0 to 512 [ 114.864127][ T5252] EXT4-fs: Ignoring removed oldalloc option [ 114.873822][ T5252] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 114.876647][ T5252] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.878046][ T5252] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 114.880874][ T5252] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 114.882313][ T5252] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.234: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 114.887460][ T5252] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.234: couldn't read orphan inode 13 (err -117) [ 114.889554][ T5252] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.894412][ T5252] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.234: deleted inode referenced: 12 [ 114.906460][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 115.797648][ T5260] loop2: detected capacity change from 0 to 256 [ 115.810633][ T5260] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x20403d78, utbl_chksum : 0xe619d30d) [ 115.846077][ T5262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.848857][ T5262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.854407][ T5262] loop2: detected capacity change from 0 to 512 [ 115.857717][ T5262] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.864633][ T5262] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.237: bad orphan inode 131083 [ 115.866700][ T5262] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 116.404855][ T4959] EXT4-fs (loop2): unmounting filesystem. [ 125.291872][ T5233] netlink: 'syz.4.222': attribute type 4 has an invalid length. [ 125.293273][ T5233] netlink: 'syz.4.222': attribute type 5 has an invalid length. [ 125.294553][ T5233] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.222'. [ 125.332017][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 125.398298][ T5269] syz.4.240 uses obsolete (PF_INET,SOCK_PACKET) [ 125.400913][ T5269] loop4: detected capacity change from 0 to 128 [ 125.404751][ T5274] loop3: detected capacity change from 0 to 512 [ 125.415170][ T5274] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.422496][ T5274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.447745][ T5274] EXT4-fs (loop3): 1 truncate cleaned up [ 125.449707][ T5274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.490787][ T5283] binder: 5281:5283 tried to acquire reference to desc 0, got 1 instead [ 125.493154][ T5283] binder: 5281:5283 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 125.519104][ T5283] binder: 5283 RLIMIT_NICE not set [ 125.520152][ T5283] binder: 5283 RLIMIT_NICE not set [ 125.521283][ T5283] binder: 5281:5283 ioctl c0306201 0 returned -14 [ 125.552658][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 125.663963][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.673516][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.720666][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.723448][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.725724][ T4328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.727547][ T4328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.740694][ T4328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 125.742097][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.768263][ T5288] loop1: detected capacity change from 0 to 40427 [ 125.781217][ T5288] F2FS-fs (loop1): invalid crc value [ 125.782675][ T5288] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.067151][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.068344][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.090618][ T5288] F2FS-fs (loop1): recover fsync data on readonly fs [ 126.098456][ T5288] F2FS-fs (loop1): checkpoint=disable on readonly fs [ 126.177377][ T5296] chnl_net:caif_netlink_parms(): no params data found [ 126.308053][ T111] binder: release 5281:5283 transaction 238 out, still active [ 126.309555][ T111] binder: undelivered TRANSACTION_COMPLETE [ 126.310536][ T111] binder: release 5281:5283 transaction 238 in, still active [ 126.311993][ T111] binder: send failed reply for transaction 238, target dead [ 126.466728][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.506179][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.507375][ T5296] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.521860][ T5296] device bridge_slave_0 entered promiscuous mode [ 126.526135][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.542683][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.552013][ T5296] device bridge_slave_1 entered promiscuous mode [ 126.563106][ T5322] device syzkaller0 entered promiscuous mode [ 126.563798][ T5330] loop3: detected capacity change from 0 to 2048 [ 126.594259][ T5330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.621689][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.657701][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 126.668081][ T5334] loop0: detected capacity change from 0 to 4096 [ 126.672608][ T5334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.682054][ T5336] loop4: detected capacity change from 0 to 256 [ 126.700262][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 126.863879][ T5349] xt_NFQUEUE: number of total queues is 0 [ 128.161200][ T4328] Bluetooth: hci2: command 0x0409 tx timeout [ 128.287585][ T5359] binder: 5358:5359 tried to acquire reference to desc 0, got 1 instead [ 128.289878][ T5359] binder: 5358:5359 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 128.292217][ T5359] binder: 5359 RLIMIT_NICE not set [ 128.293116][ T5359] binder: 5359 RLIMIT_NICE not set [ 128.294200][ T5359] binder: 5358:5359 ioctl c0306201 0 returned -14 [ 129.152246][ T111] binder: release 5358:5359 transaction 249 out, still active [ 129.153785][ T111] binder: undelivered TRANSACTION_COMPLETE [ 129.157279][ T111] binder: release 5358:5359 transaction 249 in, still active [ 129.158532][ T111] binder: send failed reply for transaction 249, target dead [ 129.284972][ C0] sched: RT throttling activated [ 130.066857][ T5369] loop4: detected capacity change from 0 to 2048 [ 130.070097][ T5369] EXT2-fs (loop4): error: couldn't mount because of unsupported optional features (140c0) [ 130.175008][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 132.255515][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 134.345421][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 139.475834][ T5296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.526864][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.571599][ T5296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.592662][ T5296] team0: Port device team_slave_0 added [ 139.594586][ T5296] team0: Port device team_slave_1 added [ 139.643835][ T5392] loop3: detected capacity change from 0 to 256 [ 139.654894][ T5392] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 139.658388][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.681367][ T5296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.682658][ T5296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.702906][ T5296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.705867][ T5296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.707118][ T5296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.711722][ T5296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.734058][ T5399] binder: 5398:5399 tried to acquire reference to desc 0, got 1 instead [ 139.763871][ T5399] binder: 5398:5399 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 139.766802][ T5399] binder: 5399 RLIMIT_NICE not set [ 139.777073][ T5296] device hsr_slave_0 entered promiscuous mode [ 139.791912][ T5404] binder: 5403:5404 tried to acquire reference to desc 0, got 1 instead [ 139.798754][ T5404] binder: 5403:5404 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 139.800816][ T5404] binder: 5404 RLIMIT_NICE not set [ 139.801651][ T5404] binder: 5404 RLIMIT_NICE not set [ 139.815642][ T5296] device hsr_slave_1 entered promiscuous mode [ 139.865074][ T7] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 139.866513][ T5296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.867942][ T5296] Cannot create hsr debugfs directory [ 139.901324][ T5401] loop4: detected capacity change from 0 to 40427 [ 139.903502][ T5401] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 139.907876][ T5401] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.920373][ T5296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.940939][ T5401] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.946318][ T5296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.955511][ T5401] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.956927][ T5401] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.997150][ T5296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.017712][ T5296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.049819][ T7] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 140.051097][ T7] usb 1-1: config 2 has no interface number 0 [ 140.052073][ T7] usb 1-1: config 2 interface 88 altsetting 25 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 140.053781][ T7] usb 1-1: config 2 interface 88 altsetting 25 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 140.069480][ T7] usb 1-1: config 2 interface 88 has no altsetting 0 [ 140.073511][ T7] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 140.078551][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 140.084541][ T7] usb 1-1: Product: syz [ 140.091768][ T7] usb 1-1: Manufacturer: syz [ 140.092551][ T7] usb 1-1: SerialNumber: syz [ 140.111289][ T5385] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.112698][ T5385] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.158551][ T5296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.170528][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.172479][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.176278][ T5296] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.189522][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.194861][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.204578][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.205948][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.211785][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.220943][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.230928][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.232234][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.621919][ T5385] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.623340][ T5385] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.624369][ T5404] binder: 5403:5404 ioctl c0306201 20002cc0 returned -14 [ 140.636061][ T4378] binder: release 5403:5404 transaction 264 out, still active [ 140.637571][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 140.638791][ T4378] binder: release 5403:5404 transaction 264 in, still active [ 140.640182][ T4378] binder: send failed reply for transaction 264, target dead [ 140.653615][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.655875][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.661330][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.664694][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.674058][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.679812][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.682908][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.693006][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.694707][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.697607][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.699408][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.744228][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.043667][ T5296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.048722][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.050027][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.144243][ T5475] binder: 5474:5475 tried to acquire reference to desc 0, got 1 instead [ 142.023780][ T5475] binder: 5474:5475 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 142.036456][ T5475] binder: 5475 RLIMIT_NICE not set [ 142.384714][ T7] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 142.386749][ T7] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 142.393048][ T7] asix: probe of 1-1:2.88 failed with error -71 [ 142.403910][ T7] usb 1-1: USB disconnect, device number 8 [ 142.452010][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.454050][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.457259][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.458844][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.460836][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.468309][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.475865][ T5296] device veth0_vlan entered promiscuous mode [ 142.480836][ T5296] device veth1_vlan entered promiscuous mode [ 142.548179][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.549913][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.551378][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.553089][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.556840][ T5296] device veth0_macvtap entered promiscuous mode [ 142.561784][ T5296] device veth1_macvtap entered promiscuous mode [ 142.569845][ T5514] loop3: detected capacity change from 0 to 512 [ 142.588507][ T5514] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.590567][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.595424][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.597012][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.598584][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.600119][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.601827][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.603504][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.609916][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.611458][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.625212][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.629062][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 142.643092][ T5296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.644481][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.646419][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.648137][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.649733][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.096809][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.104799][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.106550][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.108286][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.109899][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.111675][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.113233][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.114886][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.117129][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.119006][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.121495][ T5296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.126992][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.128592][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.135617][ T5296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.137124][ T5296] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.138639][ T5296] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.140949][ T5296] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.166356][ T22] binder: release 5494:5498 transaction 279 out, still active [ 143.168037][ T22] binder: undelivered TRANSACTION_COMPLETE [ 143.169306][ T22] binder: release 5494:5498 transaction 279 in, still active [ 143.171192][ T22] binder: send failed reply for transaction 279, target dead [ 143.173308][ T5546] input: syz0 as /devices/virtual/input/input5 [ 144.289722][ T5569] loop4: detected capacity change from 0 to 512 [ 144.320351][ T5569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.364467][ T5544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.378650][ T5544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.386593][ T39] device hsr_slave_0 left promiscuous mode [ 144.392485][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 144.437725][ T39] device hsr_slave_1 left promiscuous mode [ 144.535236][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.536684][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.540450][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.541701][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.544708][ T39] device bridge_slave_1 left promiscuous mode [ 144.548104][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.654555][ T39] device bridge_slave_0 left promiscuous mode [ 144.699749][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.895405][ T39] device veth1_macvtap left promiscuous mode [ 144.896723][ T39] device veth0_macvtap left promiscuous mode [ 145.364072][ T4508] binder: release 5580:5581 transaction 294 in, still active [ 145.365538][ T4508] binder: send failed reply for transaction 294 to 5580:5581 [ 146.439936][ T39] team0 (unregistering): Port device team_slave_1 removed [ 146.636831][ T39] team0 (unregistering): Port device team_slave_0 removed [ 146.795496][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.995468][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.486172][ T39] bond0 (unregistering): Released all slaves [ 148.798036][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.858407][ T4856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.859790][ T4856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.861241][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.915087][ T5601] binder_user_error: 11 callbacks suppressed [ 148.915097][ T5601] binder: 5600:5601 tried to acquire reference to desc 0, got 1 instead [ 148.939011][ T5601] binder: 5600:5601 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 148.941372][ T5601] binder: 5601 RLIMIT_NICE not set [ 149.241243][ T5601] binder: 5601 RLIMIT_NICE not set [ 149.242120][ T5601] binder_debug: 2 callbacks suppressed [ 149.242133][ T5601] binder: send failed reply for transaction 305 to 5600:5601 [ 149.252816][ T5607] loop5: detected capacity change from 0 to 256 [ 149.258511][ T5605] loop1: detected capacity change from 0 to 512 [ 149.268353][ T5601] binder: 5600:5601 ioctl c0306201 20000680 returned -14 [ 149.288918][ T5607] FAT-fs (loop5): Directory bread(block 64) failed [ 149.291908][ T5605] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 149.293737][ T5607] FAT-fs (loop5): Directory bread(block 65) failed [ 149.308519][ T5607] FAT-fs (loop5): Directory bread(block 66) failed [ 149.309914][ T5607] FAT-fs (loop5): Directory bread(block 67) failed [ 149.323409][ T5607] FAT-fs (loop5): Directory bread(block 68) failed [ 149.335120][ T5607] FAT-fs (loop5): Directory bread(block 69) failed [ 149.336459][ T5607] FAT-fs (loop5): Directory bread(block 70) failed [ 149.337539][ T5607] FAT-fs (loop5): Directory bread(block 71) failed [ 149.338756][ T5607] FAT-fs (loop5): Directory bread(block 72) failed [ 149.339841][ T5607] FAT-fs (loop5): Directory bread(block 73) failed [ 149.396362][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 150.309673][ T5635] binder: BINDER_SET_CONTEXT_MGR already set [ 150.310754][ T5635] binder: 5633:5635 ioctl 4018620d 20004a80 returned -16 [ 150.760419][ T5640] binder: 5633:5640 got transaction to invalid handle, 1 [ 150.761670][ T5640] binder: 5640:5633 cannot find target node [ 150.762611][ T5640] binder: 5633:5640 transaction call to 0:0 failed 308/29201/-22, size 72-24 line 3045 [ 150.764917][ T5635] binder: 5633:5635 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 150.766905][ T5636] loop4: detected capacity change from 0 to 256 [ 150.767229][ T5635] binder: 5635 RLIMIT_NICE not set [ 150.795239][ T7] binder: undelivered TRANSACTION_COMPLETE [ 150.796317][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.057219][ T5643] loop3: detected capacity change from 0 to 1024 [ 151.059210][ T5640] binder: 5633:5640 ioctl c0306201 20002cc0 returned -14 [ 151.130426][ T5643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.233392][ T5586] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:19: bg 0: block 112: padding at end of block bitmap is not set [ 151.255346][ T5586] EXT4-fs (loop3): Remounting filesystem read-only [ 151.270618][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 151.452170][ T5664] loop0: detected capacity change from 0 to 256 [ 151.456330][ T5664] exfat: Deprecated parameter 'namecase' [ 151.457281][ T5664] exfat: Deprecated parameter 'namecase' [ 151.459237][ T5664] exfat: Deprecated parameter 'namecase' [ 151.473871][ T5664] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 151.529804][ T5668] binder: 5667:5668 tried to acquire reference to desc 0, got 1 instead [ 151.529929][ T5660] loop3: detected capacity change from 0 to 256 [ 151.579402][ T5615] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.582557][ T5668] binder: 5667:5668 ioctl c0306201 0 returned -14 [ 151.996233][ T4508] binder: send failed reply for transaction 313 to 5667:5668 [ 152.073731][ T4508] binder: undelivered TRANSACTION_COMPLETE [ 152.074828][ T4508] binder: undelivered TRANSACTION_ERROR: 29189 [ 152.126251][ T5701] binder: BINDER_SET_CONTEXT_MGR already set [ 152.127578][ T5701] binder: 5700:5701 ioctl 4018620d 20004a80 returned -16 [ 152.882327][ T5701] binder: 5700:5701 got transaction to invalid handle, 1 [ 152.883497][ T5701] binder: 5701:5700 cannot find target node [ 152.884522][ T5701] binder: 5700:5701 transaction call to 0:0 failed 316/29201/-22, size 72-24 line 3045 [ 152.964549][ T5701] binder: 5700:5701 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 153.675091][ T4344] Bluetooth: hci4: command 0x0406 tx timeout [ 153.676493][ T4344] Bluetooth: hci0: command 0x0406 tx timeout [ 153.755590][ T4328] Bluetooth: hci3: command 0x0406 tx timeout [ 153.755623][ T4344] Bluetooth: hci1: command 0x0406 tx timeout [ 153.994689][ T5731] loop3: detected capacity change from 0 to 256 [ 154.036334][ T5731] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 155.130374][ T5758] netlink: 27 bytes leftover after parsing attributes in process `syz.4.341'. [ 155.346595][ T5769] loop3: detected capacity change from 0 to 256 [ 155.384211][ T5769] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x13601927, utbl_chksum : 0xe619d30d) [ 155.429168][ T5769] exFAT-fs (loop3): hint_cluster is invalid (17) [ 155.466640][ T5777] binder_user_error: 3 callbacks suppressed [ 155.466649][ T5777] binder: 5776:5777 tried to acquire reference to desc 0, got 1 instead [ 155.513872][ T5777] binder: 5776:5777 ioctl c0306201 0 returned -14 [ 155.676620][ T4409] binder_debug: 1 callbacks suppressed [ 155.676632][ T4409] binder: release 5776:5777 transaction 321 out, still active [ 155.743488][ T5765] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 155.745360][ T4409] binder: undelivered TRANSACTION_COMPLETE [ 155.746494][ T4409] binder: send failed reply for transaction 321, target dead [ 156.144720][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.161149][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.199935][ T5807] loop0: detected capacity change from 0 to 512 [ 156.218896][ T5809] device syzkaller0 entered promiscuous mode [ 156.222669][ T5807] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 156.262328][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 157.905844][ T5832] binder: 5831:5832 tried to acquire reference to desc 0, got 1 instead [ 157.920076][ T5832] binder: 5831:5832 ioctl c0306201 0 returned -14 [ 158.100492][ T4378] binder: send failed reply for transaction 326 to 5831:5832 [ 158.165531][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 158.166745][ T4378] binder: undelivered TRANSACTION_ERROR: 29189 [ 159.821090][ T5859] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 163.208642][ T5874] binder: 5873:5874 tried to acquire reference to desc 0, got 1 instead [ 163.375183][ T4377] binder: send failed reply for transaction 331 to 5873:5874 [ 163.425218][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 163.426425][ T4377] binder: undelivered TRANSACTION_ERROR: 29189 [ 163.646254][ T5883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.648046][ T5883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.620344][ T5892] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 168.918035][ T5817] netlink: 48 bytes leftover after parsing attributes in process `syz.0.355'. [ 168.931915][ T5818] netlink: 91 bytes leftover after parsing attributes in process `syz.0.355'. [ 170.279259][ T5915] binder: 5913:5915 tried to acquire reference to desc 0, got 1 instead [ 170.660210][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.662023][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.779205][ T24] binder: send failed reply for transaction 336 to 5913:5915 [ 170.838155][ T24] binder: undelivered TRANSACTION_COMPLETE [ 170.839245][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 170.847042][ T5933] netlink: 48 bytes leftover after parsing attributes in process `syz.0.390'. [ 170.849730][ T5933] netlink: 91 bytes leftover after parsing attributes in process `syz.0.390'. [ 170.883429][ T5937] device syzkaller0 entered promiscuous mode [ 171.403773][ T5942] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 171.517033][ T5919] loop3: detected capacity change from 0 to 131072 [ 171.520731][ T5919] F2FS-fs (loop3): Invalid log sectorsize (0) [ 171.521966][ T5919] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 171.523900][ T5919] F2FS-fs (loop3): invalid crc value [ 171.530431][ T5919] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.540878][ T5919] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 171.542268][ T5919] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 172.547872][ T5968] binder: 5967:5968 tried to acquire reference to desc 0, got 1 instead [ 172.713758][ T4409] binder: send failed reply for transaction 341 to 5967:5968 [ 172.758904][ T4409] binder: undelivered TRANSACTION_COMPLETE [ 172.760007][ T4409] binder: undelivered TRANSACTION_ERROR: 29189 [ 182.958123][ T5982] netlink: 48 bytes leftover after parsing attributes in process `syz.1.401'. [ 182.959934][ T5983] netlink: 91 bytes leftover after parsing attributes in process `syz.1.401'. [ 183.004386][ T5991] loop4: detected capacity change from 0 to 512 [ 183.367138][ T5991] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.402663][ T6004] loop5: detected capacity change from 0 to 8192 [ 183.680515][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 183.741237][ T6028] binder: 6026:6028 tried to acquire reference to desc 0, got 1 instead [ 183.869769][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.5.405'. [ 183.930718][ T6045] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 183.944480][ T22] binder: send failed reply for transaction 346 to 6026:6028 [ 183.975127][ T4377] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 183.985411][ T22] binder: undelivered TRANSACTION_COMPLETE [ 183.986730][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 185.087797][ T4377] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 185.089333][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 185.090757][ T4377] usb 1-1: Product: syz [ 185.091427][ T4377] usb 1-1: Manufacturer: syz [ 185.092220][ T4377] usb 1-1: SerialNumber: syz [ 185.098431][ T4377] usb 1-1: config 0 descriptor?? [ 185.147432][ T4377] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 185.149419][ T4377] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.237955][ T6068] device syzkaller0 entered promiscuous mode [ 185.302543][ T4377] usb 1-1: USB disconnect, device number 9 [ 185.954382][ T6088] netlink: 60 bytes leftover after parsing attributes in process `syz.0.419'. [ 186.519230][ T6094] binder: 6093:6094 tried to acquire reference to desc 0, got 1 instead [ 186.625485][ T6097] loop0: detected capacity change from 0 to 512 [ 186.637017][ T6097] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 186.649215][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 186.682644][ T4508] binder: send failed reply for transaction 351 to 6093:6094 [ 186.715285][ T4508] binder: undelivered TRANSACTION_COMPLETE [ 186.720487][ T4508] binder: undelivered TRANSACTION_ERROR: 29189 [ 187.395446][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.396640][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.892571][ T6113] loop0: detected capacity change from 0 to 512 [ 188.102322][ T6120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.103867][ T6120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.131478][ T6121] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 188.772361][ T6128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.431'. [ 188.936600][ T6130] binder: 6129:6130 tried to acquire reference to desc 0, got 1 instead [ 189.054071][ T6133] loop1: detected capacity change from 0 to 512 [ 189.082167][ T6133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.094303][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 189.099420][ T4377] binder: send failed reply for transaction 356 to 6129:6130 [ 189.135551][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 189.136585][ T4377] binder: undelivered TRANSACTION_ERROR: 29189 [ 189.398472][ T6141] loop1: detected capacity change from 0 to 256 [ 190.326495][ T6145] loop0: detected capacity change from 0 to 128 [ 190.328358][ T6145] EXT4-fs (loop0): Test dummy encryption mode enabled [ 190.330766][ T6145] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 199.185610][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 199.223534][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.227503][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.273059][ T6179] netlink: 60 bytes leftover after parsing attributes in process `syz.5.442'. [ 200.319873][ T6182] loop5: detected capacity change from 0 to 512 [ 200.415863][ T6182] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.472367][ T5296] EXT4-fs (loop5): unmounting filesystem. [ 200.578696][ T6204] device syzkaller0 entered promiscuous mode [ 200.733956][ T6218] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 201.091034][ T6222] loop5: detected capacity change from 0 to 512 [ 201.094735][ T6222] EXT4-fs: Ignoring removed orlov option [ 201.814860][ T6222] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 201.834746][ T6222] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 201.836667][ T6222] EXT4-fs (loop5): orphan cleanup on readonly fs [ 201.838355][ T6222] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.451: inode #1: comm syz.5.451: iget: illegal inode # [ 201.840728][ T6222] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.451: error while reading EA inode 1 err=-117 [ 201.842856][ T6222] EXT4-fs (loop5): 1 orphan inode deleted [ 201.843874][ T6222] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 203.266858][ T6242] netlink: 60 bytes leftover after parsing attributes in process `syz.3.454'. [ 203.270228][ T6241] loop0: detected capacity change from 0 to 4096 [ 203.330745][ T6241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 203.362499][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 203.401513][ T6248] loop3: detected capacity change from 0 to 4096 [ 203.409683][ T6248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 203.414584][ T6248] __quota_error: 32 callbacks suppressed [ 203.414595][ T6248] Quota error (device loop3): do_check_range: Getting block 262148 out of range 1-5 [ 203.420268][ T6248] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 203.421714][ T6248] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.456: Failed to acquire dquot type 0 [ 203.440954][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 203.534085][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.536425][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.118943][ T6268] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 207.574346][ T6276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.466'. [ 207.762824][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.764558][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.526721][ T6288] loop3: detected capacity change from 0 to 2048 [ 208.562694][ T6288] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 209.565121][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 210.672999][ T6303] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 211.885915][ T6306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.888097][ T6306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.519821][ T6309] netlink: 60 bytes leftover after parsing attributes in process `syz.3.477'. [ 213.907720][ T6315] loop3: detected capacity change from 0 to 2048 [ 213.924207][ T6315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 214.003037][ T6319] fs-verity: sha512 using implementation "sha512-ce" [ 214.045214][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 214.124411][ T6325] loop3: detected capacity change from 0 to 512 [ 214.146718][ T6325] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.184832][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 214.909603][ T6219] netlink: 'syz.5.451': attribute type 4 has an invalid length. [ 214.911029][ T6219] netlink: 'syz.5.451': attribute type 5 has an invalid length. [ 214.912318][ T6219] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.451'. [ 214.997591][ T6337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.999200][ T6337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.023744][ T5296] EXT4-fs (loop5): unmounting filesystem. [ 215.237689][ T6346] netlink: 60 bytes leftover after parsing attributes in process `syz.4.488'. [ 216.191481][ T6370] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 216.342695][ T6380] loop3: detected capacity change from 0 to 256 [ 216.432529][ T6384] loop5: detected capacity change from 0 to 4096 [ 216.449436][ T6384] ext4: Unknown parameter 'noacl' [ 216.680713][ T6400] device syzkaller0 entered promiscuous mode [ 216.989321][ T6419] netlink: 60 bytes leftover after parsing attributes in process `syz.4.500'. [ 217.020482][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.024497][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.138828][ T6437] loop1: detected capacity change from 0 to 131072 [ 218.144129][ T6437] F2FS-fs (loop1): Test dummy encryption mode enabled [ 218.149324][ T6437] F2FS-fs (loop1): invalid crc value [ 218.151301][ T6437] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.160525][ T6437] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 218.751945][ T6456] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 219.409332][ T6461] netlink: 60 bytes leftover after parsing attributes in process `syz.1.514'. [ 219.609915][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.611482][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.011683][ T6477] tipc: Failed to remove unknown binding: 66,0,0/2051946188:3146106472/3146106473 [ 221.018681][ T6477] tipc: Failed to remove unknown binding: 66,0,0/2051946188:3146106472/3146106473 [ 222.924327][ T6490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.525'. [ 223.107823][ T6494] loop0: detected capacity change from 0 to 512 [ 223.117118][ T6494] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.527: invalid indirect mapped block 256 (level 2) [ 223.120783][ T6494] EXT4-fs (loop0): Remounting filesystem read-only [ 223.122177][ T6494] EXT4-fs (loop0): 2 truncates cleaned up [ 223.123269][ T6494] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 223.135456][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 223.324697][ T6500] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 224.529467][ T6502] loop0: detected capacity change from 0 to 512 [ 224.557756][ T6502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 224.571023][ T6502] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 224.573252][ T6502] EXT4-fs error (device loop0): ext4_ext_tree_init:879: inode #18: comm syz.0.529: mark_inode_dirty error [ 224.576330][ T6502] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 224.577913][ T6502] EXT4-fs error (device loop0): __ext4_new_inode:1355: inode #18: comm syz.0.529: mark_inode_dirty error [ 224.580824][ T6502] EXT4-fs error (device loop0) in __ext4_new_inode:1357: Corrupt filesystem [ 224.582454][ T6502] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 224.584111][ T6502] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #18: comm syz.0.529: mark_inode_dirty error [ 224.589002][ T6502] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 224.599879][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 224.885025][ T6111] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 225.088238][ T6111] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 225.089930][ T6111] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 225.091638][ T6111] usb 1-1: Product: syz [ 225.092379][ T6111] usb 1-1: Manufacturer: syz [ 225.093177][ T6111] usb 1-1: SerialNumber: syz [ 225.096016][ T6111] usb 1-1: config 0 descriptor?? [ 225.301739][ T7] usb 1-1: USB disconnect, device number 10 [ 229.298793][ T6435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.506'. [ 229.448082][ T6531] loop5: detected capacity change from 0 to 16 [ 229.466068][ T6531] erofs: (device loop5): mounted with root inode @ nid 36. [ 229.483912][ T6531] syz.5.538: attempt to access beyond end of device [ 229.483912][ T6531] loop5: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 229.494306][ T6532] netlink: 60 bytes leftover after parsing attributes in process `syz.4.536'. [ 229.503843][ T6531] syz.5.538: attempt to access beyond end of device [ 229.503843][ T6531] loop5: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 229.522688][ T6531] ================================================================== [ 229.524166][ T6531] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x39c/0x494 [ 229.525611][ T6531] Read of size 4096 at addr ffff0000eee89000 by task syz.5.538/6531 [ 229.526977][ T6531] [ 229.527366][ T6531] CPU: 0 PID: 6531 Comm: syz.5.538 Not tainted syzkaller #0 [ 229.528587][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 229.530287][ T6531] Call trace: [ 229.530885][ T6531] dump_backtrace+0x1c4/0x1f0 [ 229.531737][ T6531] show_stack+0x2c/0x3c [ 229.532441][ T6531] __dump_stack+0x30/0x40 [ 229.533201][ T6531] dump_stack_lvl+0xf4/0x15c [ 229.533976][ T6531] print_address_description+0x88/0x218 [ 229.534921][ T6531] print_report+0x50/0x68 [ 229.535696][ T6531] kasan_report+0xa8/0xfc [ 229.536452][ T6531] kasan_check_range+0x258/0x290 [ 229.537300][ T6531] memcpy+0x48/0x90 [ 229.537993][ T6531] z_erofs_transform_plain+0x39c/0x494 [ 229.538950][ T6531] z_erofs_decompress+0x9c/0xd4 [ 229.539868][ T6531] z_erofs_decompress_queue+0x103c/0x1bf4 [ 229.540888][ T6531] z_erofs_runqueue+0x1540/0x16a8 [ 229.541736][ T6531] z_erofs_read_folio+0x2dc/0x5cc [ 229.542602][ T6531] filemap_read_folio+0x134/0x384 [ 229.543527][ T6531] filemap_fault+0x990/0xe98 [ 229.544315][ T6531] __do_fault+0x11c/0x3d8 [ 229.545073][ T6531] handle_mm_fault+0x1d04/0x3018 [ 229.545939][ T6531] do_page_fault+0x310/0x99c [ 229.546799][ T6531] do_translation_fault+0x94/0xc8 [ 229.547624][ T6531] do_mem_abort+0x70/0x198 [ 229.548389][ T6531] el1_abort+0x3c/0x5c [ 229.549087][ T6531] el1h_64_sync_handler+0x50/0xac [ 229.549911][ T6531] el1h_64_sync+0x64/0x68 [ 229.550609][ T6531] __arch_copy_from_user+0xc8/0x230 [ 229.551452][ T6531] l2cap_sock_setsockopt+0x454/0x1ac0 [ 229.552431][ T6531] __sys_setsockopt+0x2fc/0x50c [ 229.553237][ T6531] __arm64_sys_setsockopt+0xc0/0xdc [ 229.554101][ T6531] invoke_syscall+0x98/0x290 [ 229.554919][ T6531] el0_svc_common+0x13c/0x258 [ 229.555714][ T6531] do_el0_svc+0x5c/0x134 [ 229.556432][ T6531] el0_svc+0x58/0x128 [ 229.557250][ T6531] el0t_64_sync_handler+0x84/0xf0 [ 229.558127][ T6531] el0t_64_sync+0x18c/0x190 [ 229.559036][ T6531] [ 229.559454][ T6531] Allocated by task 3992: [ 229.560275][ T6531] kasan_set_track+0x4c/0x80 [ 229.561141][ T6531] kasan_save_alloc_info+0x24/0x30 [ 229.562029][ T6531] __kasan_slab_alloc+0x70/0x88 [ 229.562841][ T6531] slab_post_alloc_hook+0x74/0x430 [ 229.563759][ T6531] kmem_cache_alloc+0x234/0x310 [ 229.564641][ T6531] anon_vma_fork+0xd8/0x45c [ 229.565414][ T6531] copy_mm+0x8d0/0x1208 [ 229.566108][ T6531] copy_process+0x1718/0x38f4 [ 229.566919][ T6531] kernel_clone+0x1ec/0x938 [ 229.567667][ T6531] __arm64_sys_clone+0x15c/0x1c8 [ 229.568531][ T6531] invoke_syscall+0x98/0x290 [ 229.569351][ T6531] el0_svc_common+0x13c/0x258 [ 229.570116][ T6531] do_el0_svc+0x5c/0x134 [ 229.570866][ T6531] el0_svc+0x58/0x128 [ 229.571552][ T6531] el0t_64_sync_handler+0x84/0xf0 [ 229.572403][ T6531] el0t_64_sync+0x18c/0x190 [ 229.573164][ T6531] [ 229.573567][ T6531] The buggy address belongs to the object at ffff0000eee89000 [ 229.573567][ T6531] which belongs to the cache anon_vma of size 208 [ 229.575918][ T6531] The buggy address is located 0 bytes inside of [ 229.575918][ T6531] 208-byte region [ffff0000eee89000, ffff0000eee890d0) [ 229.578164][ T6531] [ 229.578536][ T6531] The buggy address belongs to the physical page: [ 229.579622][ T6531] page:00000000f3a509e4 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12ee89 [ 229.581427][ T6531] memcg:ffff0000cdb23601 [ 229.582314][ T6531] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 229.583548][ T6531] raw: 05ffc00000000200 fffffc0003d28280 dead000000000005 ffff0000c03dea80 [ 229.584917][ T6531] raw: 0000000000000000 00000000000f000f 00000001ffffffff ffff0000cdb23601 [ 229.586347][ T6531] page dumped because: kasan: bad access detected [ 229.587430][ T6531] [ 229.587849][ T6531] Memory state around the buggy address: [ 229.588795][ T6531] ffff0000eee88f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.590141][ T6531] ffff0000eee89000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.591492][ T6531] >ffff0000eee89080: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 229.592889][ T6531] ^ [ 229.594059][ T6531] ffff0000eee89100: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.595438][ T6531] ffff0000eee89180: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 229.596775][ T6531] ================================================================== [ 229.677344][ T6531] Disabling lock debugging due to kernel taint [ 229.687583][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.690348][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.813317][ T6561] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus