last executing test programs: 6.206364979s ago: executing program 0 (id=950): r0 = io_uring_setup(0x2dc9, &(0x7f0000000280)={0x0, 0xcc5, 0x100, 0x0, 0x351}) syz_io_uring_setup(0x30bb, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 5.307509927s ago: executing program 0 (id=956): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x2, 0x7ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x200d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x21c01, 0x3c) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) mount$bpf(0x0, 0x0, 0x0, 0xc4062, 0x0) 3.8098322s ago: executing program 1 (id=965): r0 = io_uring_setup(0x2dc9, &(0x7f0000000280)={0x0, 0xcc5, 0x100, 0x0, 0x351}) r1 = syz_io_uring_setup(0x30bb, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b0000000000011907800000000e000000100004e21009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf3625830f2dbccdf6a8698d0a881c51852e4451ab7d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f13754e3e5aa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe093a39bdcbc9b3fcf03d8dc034b41cc873d842305f7e8aab40f4e6b35ee5b8"], 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x401, &(0x7f0000000000)={0x0}) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='call_site.function ==', 0x15) 2.948913183s ago: executing program 1 (id=974): r0 = io_uring_setup(0x2dc9, &(0x7f0000000280)={0x0, 0xcc5, 0x100, 0x0, 0x351}) syz_io_uring_setup(0x30bb, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 2.642492179s ago: executing program 3 (id=981): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20850, &(0x7f00000004c0)={[{@user_xattr}, {@nodiscard}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inlinecrypt}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fadvise64(r1, 0x2, 0x6, 0x4) 2.452063702s ago: executing program 3 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, 0x0, 0x0) 2.39168621s ago: executing program 3 (id=984): r0 = gettid() migrate_pages(r0, 0x3, &(0x7f0000000100)=0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_dump={0x3e, 0x1ff, 0x7}}) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) mremap(&(0x7f00002ca000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f000080b000/0x3000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) 1.969411629s ago: executing program 1 (id=986): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x100, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0xfffffe76}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x53b, 0x70bd29, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, ' '}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.947350334s ago: executing program 1 (id=988): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080) syz_emit_ethernet(0x9e, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0xc0448d4) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setfsgid(0xee00) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x40047452, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x8, 0x9, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000008180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000000000000100000002"], 0x48, 0xc0}}], 0x2, 0x0) 1.862248519s ago: executing program 4 (id=991): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x12) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x30, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000181000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002200)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3e}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001600)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1000, 0x0, &(0x7f0000000600)="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"}) 1.858218964s ago: executing program 0 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1.806702218s ago: executing program 4 (id=993): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x8) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x7, 0x10000}) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffe0c, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xa}]}}}]}, 0x44}}, 0x0) 1.762383483s ago: executing program 4 (id=995): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000400)={0x9, {"d92750a502b96afad641ca31d71a1dec", "a30ce614d92f5d3ffa032452405d0d3a", "edf412bb7c0cc990bea80c38654a90a5"}, 0x100, 0xfa60f8efec9f968}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x1c9}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x80, 0x0, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x26d}}], 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$Q_SETINFO(r6, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x9}) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fddbdf251b00000008001500000019000700190090dfdc0008000100f4"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r11 = dup3(r10, r7, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) ioctl$KDGETLED(r12, 0x4b31, &(0x7f0000000000)) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 1.393932873s ago: executing program 3 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r0, &(0x7f0000000900), 0x0) 1.375433227s ago: executing program 2 (id=997): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) (async, rerun: 32) io_setup(0xff, &(0x7f0000000380)=0x0) (rerun: 32) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) fadvise64(r3, 0x81, 0x2, 0x4) (async, rerun: 32) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000000)={0x0, 0x1, [0x3, 0x4, 0x7ffc, 0x101, 0x7fff, 0x49e3b8c8, 0x0, 0xffb]}) (async, rerun: 32) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000002b00)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000002680)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/247, 0xf7}, {&(0x7f0000002580)=""/236, 0xec}], 0x3, &(0x7f00000026c0)=""/156, 0x9c}, 0x1}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002780)=""/47, 0x2f}, {&(0x7f00000027c0)=""/206, 0xce}, {&(0x7f00000028c0)=""/144, 0x90}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=""/224, 0xe0}, 0x3}], 0x3, 0x40000100, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001200)=@nat={'nat\x00', 0x19, 0x4, 0x12e, [0x200000000240, 0x0, 0x0, 0x200000000270, 0x2000000002a0], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]}, 0x104) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f00000001c0)=0x4) (rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r6 = socket$kcm(0x2, 0x0, 0x2) syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @local, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@arp={0x86dd, @generic={0x200, 0x890d, 0x6, 0x0, 0x2, @remote, "", @broadcast}}}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="016f0800010027000000270000004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400f502000000001cce07004002d58838068b910000001a26aa08eb0683122ec9d2a86e33108bd608304f9eb0c179b6bebad5bc5a4ce6661a896d2fe454f0dac160c1f0a2c32b3ca3be7755d6101af85f9f935e1b64f2356bd0306172e4b085a72a072bf482b57eed9b4af64d08504fbb3b45b3eafccd05022517078149f0b8ab6c5aaddffba4e1c8b0"], 0xfd6c) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4fe, &(0x7f0000000ac0)="$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") 1.352421s ago: executing program 3 (id=998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) fsopen(0x0, 0x1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000040)={0xc000003, 0x1, &(0x7f0000000080)=[0xd107]}) 961.041009ms ago: executing program 1 (id=999): r0 = io_uring_setup(0x2dc9, &(0x7f0000000280)={0x0, 0xcc5, 0x100, 0x0, 0x351}) syz_io_uring_setup(0x30bb, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b0000000000011907800000000e000000100004e21009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf3625830f2dbccdf6a8698d0a881c51852e4451ab7d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f13754e3e5aa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe093a39bdcbc9b3fcf03d8dc034b41cc873d842305f7e8aab40f4e6b35ee5b8"], 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r5, 0x401, &(0x7f0000000000)={0x0}) 957.430503ms ago: executing program 0 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c433ecd45036a2762bb626c65640a", 0x10) 945.998121ms ago: executing program 2 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000000300000200000014000180050002"], 0x28}}, 0x0) 923.14513ms ago: executing program 2 (id=1002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) 919.851247ms ago: executing program 0 (id=1003): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000000)={0x2}) write$P9_RREADLINK(r2, 0x0, 0x0) 899.773452ms ago: executing program 4 (id=1004): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 885.386163ms ago: executing program 2 (id=1005): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7c", 0x3c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5", 0x4c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000740)=""/53, 0x35}], 0x2, 0x0, 0x4000}, 0x100) 864.59876ms ago: executing program 4 (id=1006): r0 = io_uring_setup(0x2dc9, &(0x7f0000000280)={0x0, 0xcc5, 0x100, 0x0, 0x351}) syz_io_uring_setup(0x30bb, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 765.937424ms ago: executing program 2 (id=1007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa4}}, 0x0) 733.939526ms ago: executing program 2 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) io_setup(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0xfffffffd) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xc, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x24, 0x2, 0x20}, 0xe) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="2b000e0080000000fffffffffffa080211000000b92e35ac622e0000000000000000000064000b000301950008000c006420000009153a9d8d0d5323dc325fedbbb0fa498057ff4e0096d12225a86e36ee10c9d80730e21e6fe46af69d72b43c3464c8d22c564684040580832eb5fee5933675bc00af4031be9b4e89419698b29eaf7f1d54c55c5b193dc53cd8bfadca5a3ba0244cb9948484e06a62cb541a51850c28bc07a8cef78ab523a439a735815d1e9d5a9206c7e83cc6d976ba7c8cffa0dfcbaa8c1918ce44b7dfeb8c616ee532ff8b56b5a0c9a06fd8bbe5f94df17ef5a0c64aafaeca"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 479.223274ms ago: executing program 3 (id=1009): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x10022, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x588) 102.099266ms ago: executing program 1 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 24.562301ms ago: executing program 0 (id=1011): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) (fail_nth: 4) 0s ago: executing program 4 (id=1012): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0xdd, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 22.170598][ T4700] cgroup: Unknown subsys name 'net' [ 22.320241][ T4700] cgroup: Unknown subsys name 'cpuset' [ 22.322258][ T4700] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 22.498364][ T4700] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 23.319712][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 23.321442][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 23.322862][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 23.324916][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 23.327281][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 23.334117][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 23.335743][ T4717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 23.338655][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 23.345997][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 23.346358][ T4717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 23.346413][ T4717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 23.350250][ T4717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 23.352158][ T4717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 23.355222][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 23.356038][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 23.357155][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 23.359422][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 23.361750][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 23.363987][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 23.365799][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 23.375041][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 23.387529][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 23.390578][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 23.404672][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 23.406636][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 23.604884][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.605114][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.605174][ T4727] bridge_slave_0: entered allmulticast mode [ 23.605622][ T4727] bridge_slave_0: entered promiscuous mode [ 23.625155][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.626807][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.628357][ T4727] bridge_slave_1: entered allmulticast mode [ 23.629387][ T4727] bridge_slave_1: entered promiscuous mode [ 23.638834][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.640152][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.657908][ T4727] team0: Port device team_slave_0 added [ 23.658709][ T4727] team0: Port device team_slave_1 added [ 23.676272][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.676301][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.676324][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.677041][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.677049][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.677060][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.715288][ T4727] hsr_slave_0: entered promiscuous mode [ 23.717067][ T4727] hsr_slave_1: entered promiscuous mode [ 23.753933][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.754007][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.754062][ T4714] bridge_slave_0: entered allmulticast mode [ 23.754478][ T4714] bridge_slave_0: entered promiscuous mode [ 23.763627][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.763681][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.763732][ T4714] bridge_slave_1: entered allmulticast mode [ 23.764454][ T4714] bridge_slave_1: entered promiscuous mode [ 23.794199][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.795174][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.811824][ T4714] team0: Port device team_slave_0 added [ 23.816371][ T4714] team0: Port device team_slave_1 added [ 23.849933][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.851320][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.852637][ T4716] bridge_slave_0: entered allmulticast mode [ 23.853073][ T4716] bridge_slave_0: entered promiscuous mode [ 23.853928][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.853950][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.853998][ T4716] bridge_slave_1: entered allmulticast mode [ 23.854370][ T4716] bridge_slave_1: entered promiscuous mode [ 23.859914][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.861228][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.865961][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.868640][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.870058][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.874693][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.892381][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.892642][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.892701][ T4719] bridge_slave_0: entered allmulticast mode [ 23.893154][ T4719] bridge_slave_0: entered promiscuous mode [ 23.901692][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.902597][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.903498][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.903559][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.903611][ T4719] bridge_slave_1: entered allmulticast mode [ 23.904035][ T4719] bridge_slave_1: entered promiscuous mode [ 23.914699][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.916088][ T4729] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.917551][ T4729] bridge_slave_0: entered allmulticast mode [ 23.919403][ T4729] bridge_slave_0: entered promiscuous mode [ 23.932097][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.932177][ T4729] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.932238][ T4729] bridge_slave_1: entered allmulticast mode [ 23.932651][ T4729] bridge_slave_1: entered promiscuous mode [ 23.934342][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.935239][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.946109][ T4714] hsr_slave_0: entered promiscuous mode [ 23.946451][ T4714] hsr_slave_1: entered promiscuous mode [ 23.946654][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 23.946688][ T4714] Cannot create hsr debugfs directory [ 23.951223][ T4716] team0: Port device team_slave_0 added [ 23.953151][ T4716] team0: Port device team_slave_1 added [ 23.956214][ T4719] team0: Port device team_slave_0 added [ 23.957091][ T4719] team0: Port device team_slave_1 added [ 23.961374][ T4729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.967734][ T4727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.971227][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.975396][ T4727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.977795][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.979713][ T4729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.994584][ T4727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.996872][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.997447][ T4727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.998841][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.003220][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.003243][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.003255][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.003714][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.003721][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.003733][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.004632][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.004641][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.004652][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.012953][ T4729] team0: Port device team_slave_0 added [ 24.013568][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.013577][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.013591][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.022357][ T4729] team0: Port device team_slave_1 added [ 24.055348][ T4719] hsr_slave_0: entered promiscuous mode [ 24.055650][ T4719] hsr_slave_1: entered promiscuous mode [ 24.056151][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 24.056161][ T4719] Cannot create hsr debugfs directory [ 24.060172][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.060239][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.060250][ T4729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.060820][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.060827][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.060840][ T4729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.070635][ T4729] hsr_slave_0: entered promiscuous mode [ 24.070937][ T4729] hsr_slave_1: entered promiscuous mode [ 24.071119][ T4729] debugfs: 'hsr0' already exists in 'hsr' [ 24.071127][ T4729] Cannot create hsr debugfs directory [ 24.078631][ T4716] hsr_slave_0: entered promiscuous mode [ 24.080054][ T4716] hsr_slave_1: entered promiscuous mode [ 24.080269][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 24.080278][ T4716] Cannot create hsr debugfs directory [ 24.081999][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.082029][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.082160][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.082188][ T4727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.177514][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.179916][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.181535][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.183681][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.185333][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.187237][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.191818][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.194089][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.213059][ T4729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.215435][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.219579][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.221432][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.221489][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.221583][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.221620][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.226383][ T4729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.228608][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.230541][ T4729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.231529][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.236254][ T4729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.238292][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.252465][ T599] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.253876][ T599] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.257012][ T599] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.258310][ T599] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.265522][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.273150][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.273197][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.280171][ T4719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.282269][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.283863][ T4719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.286105][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.287488][ T4719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.290500][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.292436][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.292479][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.303124][ T4719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.305225][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.328752][ T4727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.337576][ T4729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.341489][ T4716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.343609][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.345352][ T4716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.347495][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.354523][ T4729] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.357784][ T4716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.360697][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.360996][ T4716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.364559][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.367374][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.370792][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.370832][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.398640][ T4729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.401607][ T4729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.406913][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.417948][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.417985][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.422988][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.423030][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.425828][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.425860][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.448391][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.448422][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.472373][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.476087][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.480690][ T599] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.480730][ T599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.487477][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.487522][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.517439][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.526115][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.540086][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.546066][ T1902] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.546113][ T1902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.550364][ T1902] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.550407][ T1902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.567063][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.567097][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.604014][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.618622][ T4729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.626599][ T4727] veth0_vlan: entered promiscuous mode [ 24.630845][ T4727] veth1_vlan: entered promiscuous mode [ 24.656737][ T4729] veth0_vlan: entered promiscuous mode [ 24.665140][ T4727] veth0_macvtap: entered promiscuous mode [ 24.667356][ T4727] veth1_macvtap: entered promiscuous mode [ 24.673197][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.676658][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.687612][ T169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.687705][ T169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.687790][ T169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.687835][ T169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.697825][ T4729] veth1_vlan: entered promiscuous mode [ 24.727193][ T4729] veth0_macvtap: entered promiscuous mode [ 24.729808][ T4729] veth1_macvtap: entered promiscuous mode [ 24.735868][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.738260][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.759557][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.773078][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.773108][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.779531][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.779745][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.779884][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.779988][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.785553][ T1888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.785578][ T1888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.795801][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.827863][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.834077][ T4727] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.843364][ T1888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.843440][ T1888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.868119][ T4719] veth0_vlan: entered promiscuous mode [ 24.881071][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.881095][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.884039][ T4716] veth0_vlan: entered promiscuous mode [ 24.886599][ T4719] veth1_vlan: entered promiscuous mode [ 24.897043][ T4716] veth1_vlan: entered promiscuous mode [ 24.915681][ T4714] veth0_vlan: entered promiscuous mode [ 24.920403][ T4714] veth1_vlan: entered promiscuous mode [ 24.924982][ T4716] veth0_macvtap: entered promiscuous mode [ 24.927707][ T4716] veth1_macvtap: entered promiscuous mode [ 24.933168][ T4719] veth0_macvtap: entered promiscuous mode [ 24.956638][ T4719] veth1_macvtap: entered promiscuous mode [ 24.959178][ T4714] veth0_macvtap: entered promiscuous mode [ 24.962434][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.964939][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.971813][ T4714] veth1_macvtap: entered promiscuous mode [ 24.975668][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.982215][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.983193][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.995347][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.162514][ T4900] hub 8-0:1.0: USB hub found [ 25.163493][ T4900] hub 8-0:1.0: 8 ports detected [ 25.311389][ T1888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.311562][ T1888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.311671][ T1888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.312229][ T1888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.312300][ T1888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.312368][ T1888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.312491][ T1888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.312608][ T1888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.312715][ T1888] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.312829][ T1888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.312896][ T1888] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.312995][ T1888] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.351408][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.351442][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.362834][ T599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.362861][ T599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.374205][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.374238][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.379385][ T4720] Bluetooth: hci1: command tx timeout [ 25.379388][ T4722] Bluetooth: hci3: command tx timeout [ 25.388072][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.388102][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.390358][ T4722] Bluetooth: hci2: command tx timeout [ 25.390363][ T4720] Bluetooth: hci0: command tx timeout [ 25.409728][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.409757][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.424900][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.424924][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.468971][ T4720] Bluetooth: hci4: command tx timeout [ 26.521789][ T4912] Zero length message leads to an empty skb [ 26.663967][ T4915] loop1: detected capacity change from 0 to 256 [ 26.743148][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.762594][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.470930][ T4720] Bluetooth: hci0: command tx timeout [ 27.472503][ T4720] Bluetooth: hci1: command tx timeout [ 27.472690][ T4720] Bluetooth: hci2: command tx timeout [ 27.472828][ T4720] Bluetooth: hci3: command tx timeout [ 27.539258][ T4722] Bluetooth: hci4: command tx timeout [ 27.752394][ T4949] syzkaller0: entered promiscuous mode [ 27.752428][ T4949] syzkaller0: entered allmulticast mode [ 28.234969][ T4965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.235346][ T4965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.611362][ T4978] syzkaller0: entered promiscuous mode [ 28.612407][ T4978] syzkaller0: entered allmulticast mode [ 28.695876][ T4980] loop0: detected capacity change from 0 to 256 [ 29.448308][ T5010] syzkaller0: entered promiscuous mode [ 29.448337][ T5010] syzkaller0: entered allmulticast mode [ 29.539140][ T4720] Bluetooth: hci3: command tx timeout [ 29.539323][ T4722] Bluetooth: hci2: command tx timeout [ 29.539343][ T4722] Bluetooth: hci1: command tx timeout [ 29.539356][ T4722] Bluetooth: hci0: command tx timeout [ 29.619133][ T4720] Bluetooth: hci4: command tx timeout [ 30.083093][ T26] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 30.249663][ T26] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 30.250793][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.250807][ T26] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 30.250825][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.254147][ T26] usb 1-1: config 0 descriptor?? [ 30.294004][ T5038] ======================================================= [ 30.294004][ T5038] WARNING: The mand mount option has been deprecated and [ 30.294004][ T5038] and is ignored by this kernel. Remove the mand [ 30.294004][ T5038] option from the mount to silence this warning. [ 30.294004][ T5038] ======================================================= [ 30.461348][ T1094] usb 1-1: USB disconnect, device number 2 [ 30.463037][ T5041] syzkaller0: entered promiscuous mode [ 30.464000][ T5041] syzkaller0: entered allmulticast mode [ 30.526702][ T5043] loop4: detected capacity change from 0 to 256 [ 31.625006][ T4715] Bluetooth: hci0: command tx timeout [ 31.625105][ T4715] Bluetooth: hci1: command tx timeout [ 31.625177][ T4715] Bluetooth: hci2: command tx timeout [ 31.630847][ T4720] Bluetooth: hci3: command tx timeout [ 31.700341][ T4720] Bluetooth: hci4: command tx timeout [ 31.843693][ T5075] syzkaller0: entered promiscuous mode [ 31.844970][ T5075] syzkaller0: entered allmulticast mode [ 32.042061][ T5091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.044047][ T5091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.339178][ T5095] loop4: detected capacity change from 0 to 256 [ 33.221741][ T5113] syzkaller0: entered promiscuous mode [ 33.221776][ T5113] syzkaller0: entered allmulticast mode [ 33.354869][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.355124][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.846185][ T5139] loop3: detected capacity change from 0 to 256 [ 34.230876][ T5147] syzkaller0: entered promiscuous mode [ 34.230907][ T5147] syzkaller0: entered allmulticast mode [ 34.953667][ T5167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.953864][ T5167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.537837][ T5177] syzkaller0: entered promiscuous mode [ 35.537873][ T5177] syzkaller0: entered allmulticast mode [ 35.862819][ T5192] loop0: detected capacity change from 0 to 256 [ 36.468433][ T5204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.468645][ T5204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.903993][ T5217] syzkaller0: entered promiscuous mode [ 36.904025][ T5217] syzkaller0: entered allmulticast mode [ 37.535815][ T5238] loop1: detected capacity change from 0 to 256 [ 37.855233][ T5243] syz.0.132 (5243): /proc/5242/oom_adj is deprecated, please use /proc/5242/oom_score_adj instead. [ 37.902384][ T5247] syzkaller0: entered promiscuous mode [ 37.903981][ T5247] syzkaller0: entered allmulticast mode [ 38.230962][ T5252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.232268][ T5252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.133591][ T5280] syzkaller0: entered promiscuous mode [ 39.133621][ T5280] syzkaller0: entered allmulticast mode [ 39.642905][ T5295] loop4: detected capacity change from 0 to 256 [ 40.041610][ T5303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.041809][ T5303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.683708][ T5316] syzkaller0: entered promiscuous mode [ 40.683743][ T5316] syzkaller0: entered allmulticast mode [ 41.716082][ T5341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.716265][ T5341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.753210][ T5342] binder: 5338:5342 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 41.753242][ T5342] binder: 5342 RLIMIT_NICE not set [ 41.809009][ T5344] loop1: detected capacity change from 0 to 256 [ 41.828664][ T5346] syzkaller0: entered promiscuous mode [ 41.828695][ T5346] syzkaller0: entered allmulticast mode [ 43.216512][ T5382] syzkaller0: entered promiscuous mode [ 43.216540][ T5382] syzkaller0: entered allmulticast mode [ 43.624797][ T5390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.624996][ T5390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.983046][ T5397] binder: 5395:5397 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.985496][ T5397] binder: 5397 RLIMIT_NICE not set [ 43.989255][ T5399] loop0: detected capacity change from 0 to 256 [ 44.532975][ T5407] syzkaller0: entered promiscuous mode [ 44.533009][ T5407] syzkaller0: entered allmulticast mode [ 45.515222][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.518830][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.021455][ T5446] syzkaller0: entered promiscuous mode [ 46.022584][ T5446] syzkaller0: entered allmulticast mode [ 46.100807][ T5449] binder: tried to use weak ref as strong ref [ 46.100840][ T5449] binder: 5447:5449 Acquire 1 refcount change on invalid ref 0 ret -22 [ 46.101082][ T5449] binder: 5447:5449 got transaction to invalid handle, 1 [ 46.101140][ T5449] binder: 5447:5449 cannot find target node [ 46.101161][ T5449] binder: 5447:5449 transaction call to 0:0 failed 9/29201/-22, code 0 size 0-0 line 3252 [ 46.101314][ T5449] binder: 5447:5449 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 46.101326][ T5449] binder: 5449 RLIMIT_NICE not set [ 46.126448][ T5451] loop3: detected capacity change from 0 to 256 [ 46.895348][ T5017] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.427778][ T5480] syzkaller0: entered promiscuous mode [ 47.427810][ T5480] syzkaller0: entered allmulticast mode [ 47.578153][ T5489] syzkaller0: entered promiscuous mode [ 47.578773][ T5489] syzkaller0: entered allmulticast mode [ 47.581991][ T5489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 47.669019][ T4477] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 47.819733][ T4477] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 47.820842][ T4477] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.820852][ T4477] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 47.820869][ T4477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.824313][ T4477] usb 1-1: config 0 descriptor?? [ 47.828602][ T4477] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 47.828704][ T4477] dvb-usb: bulk message failed: -22 (3/0) [ 47.834956][ T4477] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 47.835864][ T4477] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 47.835884][ T4477] usb 1-1: media controller created [ 47.836365][ T4477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 47.842403][ T4477] dvb-usb: bulk message failed: -22 (6/0) [ 47.842459][ T4477] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 47.846311][ T4477] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 47.849308][ T4477] dvb-usb: schedule remote query interval to 150 msecs. [ 47.849336][ T4477] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 48.012934][ T5502] binder: tried to use weak ref as strong ref [ 48.012964][ T5502] binder: 5500:5502 Acquire 1 refcount change on invalid ref 0 ret -22 [ 48.012996][ T5502] binder: 5500:5502 got transaction to invalid handle, 1 [ 48.013007][ T5502] binder: 5500:5502 cannot find target node [ 48.013020][ T5502] binder: 5500:5502 transaction call to 0:0 failed 12/29201/-22, code 0 size 0-0 line 3252 [ 48.013140][ T5502] binder: 5500:5502 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 48.013151][ T5502] binder: 5502 RLIMIT_NICE not set [ 48.019521][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 48.019540][ T10] dvb-usb: error while querying for an remote control event. [ 48.031202][ T1094] usb 1-1: USB disconnect, device number 3 [ 48.094696][ T1094] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 48.365539][ T5504] loop1: detected capacity change from 0 to 256 [ 48.680624][ T5510] syzkaller0: entered promiscuous mode [ 48.681895][ T5510] syzkaller0: entered allmulticast mode [ 48.814603][ T1094] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.261808][ T5527] syzkaller0: entered promiscuous mode [ 49.263144][ T5527] syzkaller0: entered allmulticast mode [ 49.266106][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 49.984489][ T5548] syzkaller0: entered promiscuous mode [ 49.984517][ T5548] syzkaller0: entered allmulticast mode [ 50.144075][ T5552] binder: tried to use weak ref as strong ref [ 50.144101][ T5552] binder: 5550:5552 Acquire 1 refcount change on invalid ref 0 ret -22 [ 50.144122][ T5552] binder: 5550:5552 got transaction to invalid handle, 1 [ 50.144133][ T5552] binder: 5550:5552 cannot find target node [ 50.144156][ T5552] binder: 5550:5552 transaction call to 0:0 failed 15/29201/-22, code 0 size 0-0 line 3252 [ 50.151346][ T5552] binder: 5550:5552 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.151370][ T5552] binder: 5552 RLIMIT_NICE not set [ 50.410858][ T5560] loop0: detected capacity change from 0 to 256 [ 50.939740][ T1094] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.971004][ T5570] syzkaller0: entered promiscuous mode [ 50.971036][ T5570] syzkaller0: entered allmulticast mode [ 50.972371][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 51.133020][ T5577] syzkaller0: entered promiscuous mode [ 51.134119][ T5577] syzkaller0: entered allmulticast mode [ 52.157004][ T5607] binder_alloc: 5605: binder_alloc_buf, no vma [ 52.157030][ T5607] binder: cannot allocate buffer: vma cleared, target dead or dying [ 52.157085][ T5607] binder: 5605:5607 transaction call to 5605:0 failed 20/29189/-3, code 0 size 0-0 line 3408 [ 52.210890][ T5609] syzkaller0: entered promiscuous mode [ 52.210916][ T5609] syzkaller0: entered allmulticast mode [ 52.213029][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 52.263775][ T5613] syzkaller0: entered promiscuous mode [ 52.263801][ T5613] syzkaller0: entered allmulticast mode [ 52.301829][ T5615] loop0: detected capacity change from 0 to 256 [ 53.101414][ T1094] binder: undelivered TRANSACTION_ERROR: 29189 [ 53.762480][ T5655] syzkaller0: entered promiscuous mode [ 53.763666][ T5655] syzkaller0: entered allmulticast mode [ 53.766549][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 53.852982][ T5659] syzkaller0: entered promiscuous mode [ 53.853024][ T5659] syzkaller0: entered allmulticast mode [ 54.918812][ T5673] binder_user_error: 3 callbacks suppressed [ 54.918844][ T5673] binder: 5670:5673 tried to acquire reference to desc 0, got 1 instead [ 54.918915][ T5673] binder_alloc: 5670: binder_alloc_buf, no vma [ 54.918922][ T5673] binder: cannot allocate buffer: vma cleared, target dead or dying [ 54.918939][ T5673] binder: 5670:5673 transaction call to 5670:0 failed 25/29189/-3, code 0 size 0-0 line 3408 [ 54.919891][ T5673] binder: 5670:5673 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 54.919904][ T5673] binder: 5673 RLIMIT_NICE not set [ 55.437334][ T5684] loop4: detected capacity change from 0 to 256 [ 55.645166][ T4817] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.262122][ T5632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.680425][ T5691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 56.685006][ T5695] syzkaller0: entered promiscuous mode [ 56.685987][ T5695] syzkaller0: entered allmulticast mode [ 57.616352][ T5720] binder: 5718:5720 tried to acquire reference to desc 0, got 1 instead [ 57.616391][ T5720] binder_alloc: 5718: binder_alloc_buf, no vma [ 57.616399][ T5720] binder: cannot allocate buffer: vma cleared, target dead or dying [ 57.616417][ T5720] binder: 5718:5720 transaction call to 5718:0 failed 30/29189/-3, code 0 size 0-0 line 3408 [ 57.622928][ T5720] binder: 5718:5720 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 57.622980][ T5720] binder: 5720 RLIMIT_NICE not set [ 58.453854][ T10] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.474781][ T5741] loop0: detected capacity change from 0 to 256 [ 59.355776][ T5745] syzkaller0: entered promiscuous mode [ 59.355811][ T5745] syzkaller0: entered allmulticast mode [ 59.357518][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 59.444978][ T5749] syzkaller0: entered promiscuous mode [ 59.445006][ T5749] syzkaller0: entered allmulticast mode [ 60.667655][ T5722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.816036][ T5771] binder: tried to use weak ref as strong ref [ 60.816060][ T5771] binder: 5767:5771 Acquire 1 refcount change on invalid ref 0 ret -22 [ 60.816079][ T5771] binder: 5767:5771 got transaction to invalid handle, 1 [ 60.816089][ T5771] binder: 5767:5771 cannot find target node [ 60.816101][ T5771] binder: 5767:5771 transaction call to 0:0 failed 33/29201/-22, code 0 size 0-0 line 3252 [ 60.902192][ T5774] loop3: detected capacity change from 0 to 256 [ 61.306114][ T5778] syzkaller0: entered promiscuous mode [ 61.306144][ T5778] syzkaller0: entered allmulticast mode [ 61.309376][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 61.413177][ T5782] syzkaller0: entered promiscuous mode [ 61.413263][ T5782] syzkaller0: entered allmulticast mode [ 61.592419][ T4477] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.573047][ T5815] syzkaller0: entered promiscuous mode [ 62.573082][ T5815] syzkaller0: entered allmulticast mode [ 62.577059][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.329'. [ 62.722762][ T5821] syzkaller0: entered promiscuous mode [ 62.724162][ T5821] syzkaller0: entered allmulticast mode [ 63.449328][ T5832] binder: tried to use weak ref as strong ref [ 63.449351][ T5832] binder: 5828:5832 Acquire 1 refcount change on invalid ref 0 ret -22 [ 63.449370][ T5832] binder: 5828:5832 got transaction to invalid handle, 1 [ 63.449379][ T5832] binder: 5828:5832 cannot find target node [ 63.449392][ T5832] binder: 5828:5832 transaction call to 0:0 failed 36/29201/-22, code 0 size 0-0 line 3252 [ 63.724906][ T5836] loop4: detected capacity change from 0 to 256 [ 64.173165][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.500137][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.500201][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.555018][ T9] cfg80211: failed to load regulatory.db [ 65.172027][ T5855] syzkaller0: entered promiscuous mode [ 65.172062][ T5855] syzkaller0: entered allmulticast mode [ 65.173459][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 65.249850][ T5859] syzkaller0: entered promiscuous mode [ 65.249883][ T5859] syzkaller0: entered allmulticast mode [ 65.277089][ T5802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.674444][ T5877] loop0: detected capacity change from 0 to 256 [ 66.214649][ T5885] syzkaller0: entered promiscuous mode [ 66.214682][ T5885] syzkaller0: entered allmulticast mode [ 66.216359][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 66.591245][ T5892] binder: tried to use weak ref as strong ref [ 66.591280][ T5892] binder: 5888:5892 Acquire 1 refcount change on invalid ref 0 ret -22 [ 66.591302][ T5892] binder: 5888:5892 got transaction to invalid handle, 1 [ 66.591313][ T5892] binder: 5888:5892 cannot find target node [ 66.591326][ T5892] binder: 5888:5892 transaction call to 0:0 failed 39/29201/-22, code 0 size 0-0 line 3252 [ 67.109672][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.633813][ T5896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.700010][ T5934] loop0: detected capacity change from 0 to 256 [ 69.826652][ T5942] syzkaller0: entered promiscuous mode [ 69.827845][ T5942] syzkaller0: entered allmulticast mode [ 69.830273][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 70.330118][ T5955] binder: 5949:5955 tried to acquire reference to desc 0, got 1 instead [ 70.332287][ T5955] binder: 5949:5955 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 70.335045][ T5955] binder: 5955 RLIMIT_NICE not set [ 70.336376][ T5955] binder: 5955 RLIMIT_NICE not set [ 70.337622][ T5955] binder: send failed reply for transaction 44 to 5949:5955 [ 70.339319][ T5955] binder: 5949:5955 ioctl c0306201 20000680 returned -14 [ 71.090154][ T26] binder: undelivered TRANSACTION_COMPLETE [ 71.090191][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.068074][ T5994] syzkaller0: entered promiscuous mode [ 72.070122][ T5994] syzkaller0: entered allmulticast mode [ 72.071592][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 72.167957][ T6000] loop2: detected capacity change from 0 to 256 [ 72.750881][ T6008] binder: 6005:6008 tried to acquire reference to desc 0, got 1 instead [ 72.752834][ T6008] binder: 6005:6008 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 72.753138][ T6008] binder: 6008 RLIMIT_NICE not set [ 72.753157][ T6008] binder: 6008 RLIMIT_NICE not set [ 72.753174][ T6008] binder: send failed reply for transaction 49 to 6005:6008 [ 72.753192][ T6008] binder: 6005:6008 ioctl c0306201 20000680 returned -14 [ 73.475552][ T4477] binder: undelivered TRANSACTION_COMPLETE [ 73.475587][ T4477] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.933453][ T6028] syzkaller0: entered promiscuous mode [ 73.933480][ T6028] syzkaller0: entered allmulticast mode [ 74.263363][ T5974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.309220][ T6037] syzkaller0: entered promiscuous mode [ 74.310427][ T6037] syzkaller0: entered allmulticast mode [ 74.313703][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 74.771854][ T6048] loop4: detected capacity change from 0 to 256 [ 75.357047][ T6068] syzkaller0: entered promiscuous mode [ 75.358302][ T6068] syzkaller0: entered allmulticast mode [ 75.463481][ T6071] binder: 6069:6071 tried to acquire reference to desc 0, got 1 instead [ 75.465595][ T6071] binder: 6069:6071 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 75.465629][ T6071] binder: 6071 RLIMIT_NICE not set [ 75.465649][ T6071] binder: 6071 RLIMIT_NICE not set [ 75.465673][ T6071] binder: send failed reply for transaction 54 to 6069:6071 [ 75.465698][ T6071] binder: 6069:6071 ioctl c0306201 20000680 returned -14 [ 75.680702][ T6075] syzkaller0: entered promiscuous mode [ 75.680733][ T6075] syzkaller0: entered allmulticast mode [ 75.684241][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 76.239372][ T9] binder: undelivered TRANSACTION_COMPLETE [ 76.239411][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.123340][ T6104] syzkaller0: entered promiscuous mode [ 77.123371][ T6104] syzkaller0: entered allmulticast mode [ 77.165289][ T6106] loop1: detected capacity change from 0 to 256 [ 78.347019][ T6122] syzkaller0: entered promiscuous mode [ 78.347052][ T6122] syzkaller0: entered allmulticast mode [ 78.351720][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'. [ 78.494537][ T6131] binder: 6125:6131 tried to acquire reference to desc 0, got 1 instead [ 78.494702][ T6131] binder: 6125:6131 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 78.494714][ T6131] binder: 6131 RLIMIT_NICE not set [ 78.494724][ T6131] binder: 6131 RLIMIT_NICE not set [ 78.494738][ T6131] binder: send failed reply for transaction 59 to 6125:6131 [ 78.494755][ T6131] binder: 6125:6131 ioctl c0306201 20000680 returned -14 [ 78.699721][ T6078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.775661][ T6136] syzkaller0: entered promiscuous mode [ 78.776850][ T6136] syzkaller0: entered allmulticast mode [ 78.961394][ T6146] loop2: detected capacity change from 0 to 256 [ 79.279456][ T5017] binder: undelivered TRANSACTION_COMPLETE [ 79.279493][ T5017] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.793731][ T6165] syzkaller0: entered promiscuous mode [ 79.795037][ T6165] syzkaller0: entered allmulticast mode [ 79.797716][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 79.902150][ T6176] syzkaller0: entered promiscuous mode [ 79.902190][ T6176] syzkaller0: entered allmulticast mode [ 80.324051][ T6187] loop4: detected capacity change from 0 to 1024 [ 80.325833][ T6187] EXT4-fs: Ignoring removed orlov option [ 80.354902][ T6187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.359042][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 80.360926][ T6187] bridge_slave_0: default FDB implementation only supports local addresses [ 80.379683][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.063366][ T6204] binder: 6201:6204 tried to acquire reference to desc 0, got 1 instead [ 82.065128][ T6204] binder: 6201:6204 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 82.065156][ T6204] binder: 6204 RLIMIT_NICE not set [ 82.065167][ T6204] binder: 6204 RLIMIT_NICE not set [ 82.065182][ T6204] binder: send failed reply for transaction 64 to 6201:6204 [ 82.065198][ T6204] binder: 6201:6204 ioctl c0306201 20000680 returned -14 [ 82.789766][ T10] binder: undelivered TRANSACTION_COMPLETE [ 82.789796][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.814007][ T6167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.188209][ T6213] syzkaller0: entered promiscuous mode [ 83.188250][ T6213] syzkaller0: entered allmulticast mode [ 83.193275][ T6216] syzkaller0: entered promiscuous mode [ 83.194280][ T6216] syzkaller0: entered allmulticast mode [ 83.197129][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 83.216572][ T6219] loop3: detected capacity change from 0 to 256 [ 83.626552][ T6233] loop0: detected capacity change from 0 to 1024 [ 83.627239][ T6233] EXT4-fs: Ignoring removed orlov option [ 83.680046][ T6233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.684206][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 83.686644][ T6233] bridge_slave_0: default FDB implementation only supports local addresses [ 83.711322][ T4729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.146681][ T6243] Bluetooth: MGMT ver 1.23 [ 84.346151][ T6251] binder: 6247:6251 tried to acquire reference to desc 0, got 1 instead [ 84.346319][ T6251] binder: 6247:6251 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.346330][ T6251] binder: 6251 RLIMIT_NICE not set [ 84.346340][ T6251] binder: 6251 RLIMIT_NICE not set [ 84.346354][ T6251] binder: send failed reply for transaction 69 to 6247:6251 [ 84.346367][ T6251] binder: 6247:6251 ioctl c0306201 20000680 returned -14 [ 85.050278][ T4477] binder: undelivered TRANSACTION_COMPLETE [ 85.050311][ T4477] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.094502][ T6281] syzkaller0: entered promiscuous mode [ 85.095563][ T6281] syzkaller0: entered allmulticast mode [ 85.097785][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 85.784243][ T6291] loop1: detected capacity change from 0 to 256 [ 86.178927][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.179513][ T4720] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 86.284079][ T6298] loop4: detected capacity change from 0 to 1024 [ 86.284727][ T6298] EXT4-fs: Ignoring removed orlov option [ 86.295130][ T6298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.297883][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'. [ 86.297974][ T6298] bridge_slave_0: default FDB implementation only supports local addresses [ 86.316957][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 86.341571][ T6303] syzkaller0: entered promiscuous mode [ 86.341600][ T6303] syzkaller0: entered allmulticast mode [ 86.394659][ T6305] netlink: 60 bytes leftover after parsing attributes in process `syz.4.477'. [ 87.159898][ T6325] binder: BINDER_SET_CONTEXT_MGR already set [ 87.159923][ T6325] binder: 6316:6325 ioctl 4018620d 20001000 returned -16 [ 87.160093][ T6325] binder: 6316:6325 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 87.160107][ T6325] binder: 6325 RLIMIT_NICE not set [ 87.201088][ T6327] syzkaller0: entered promiscuous mode [ 87.202395][ T6327] syzkaller0: entered allmulticast mode [ 87.205373][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 87.941380][ T6271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.060406][ T6338] loop4: detected capacity change from 0 to 1024 [ 88.063667][ T6338] EXT4-fs: Ignoring removed orlov option [ 88.102974][ T6338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.105743][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 88.106024][ T6338] bridge_slave_0: default FDB implementation only supports local addresses [ 88.107568][ T6344] netlink: 60 bytes leftover after parsing attributes in process `syz.3.490'. [ 88.417434][ T6347] syzkaller0: entered promiscuous mode [ 88.418446][ T6347] syzkaller0: entered allmulticast mode [ 88.440454][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.450463][ T6352] loop0: detected capacity change from 0 to 256 [ 88.551731][ T6361] syzkaller0: entered promiscuous mode [ 88.552912][ T6361] syzkaller0: entered allmulticast mode [ 88.555659][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 88.736461][ T6366] binder: BINDER_SET_CONTEXT_MGR already set [ 88.736488][ T6366] binder: 6364:6366 ioctl 4018620d 20001000 returned -16 [ 88.737467][ T6366] binder: 6364:6366 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 88.737489][ T6366] binder: 6366 RLIMIT_NICE not set [ 89.777915][ T6389] netlink: 60 bytes leftover after parsing attributes in process `syz.1.502'. [ 89.836097][ T6391] loop1: detected capacity change from 0 to 1024 [ 89.836546][ T6391] EXT4-fs: Ignoring removed orlov option [ 89.851806][ T6391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.857483][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'. [ 89.857589][ T6391] bridge_slave_0: default FDB implementation only supports local addresses [ 89.880039][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.246581][ T6401] syzkaller0: entered promiscuous mode [ 90.246611][ T6401] syzkaller0: entered allmulticast mode [ 90.359939][ T6405] syzkaller0: entered promiscuous mode [ 90.359973][ T6405] syzkaller0: entered allmulticast mode [ 90.362692][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 91.321820][ T6414] loop0: detected capacity change from 0 to 256 [ 91.858945][ T4722] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 91.859074][ T4720] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.879188][ T6425] binder: BINDER_SET_CONTEXT_MGR already set [ 91.879210][ T6425] binder: 6417:6425 ioctl 4018620d 20001000 returned -16 [ 91.881262][ T6425] binder: 6417:6425 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 91.881279][ T6425] binder: 6425 RLIMIT_NICE not set [ 92.300475][ T6431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.514'. [ 92.303191][ T6431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.514'. [ 92.320092][ T6375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.415067][ T6436] syzkaller0: entered promiscuous mode [ 92.415106][ T6436] syzkaller0: entered allmulticast mode [ 92.677565][ T6439] loop4: detected capacity change from 0 to 1024 [ 92.679199][ T6439] EXT4-fs: Ignoring removed orlov option [ 92.698820][ T6439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.707349][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 92.707436][ T6439] bridge_slave_0: default FDB implementation only supports local addresses [ 92.733339][ T6445] syzkaller0: entered promiscuous mode [ 92.733372][ T6445] syzkaller0: entered allmulticast mode [ 92.735387][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 92.753224][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.425850][ T6465] loop0: detected capacity change from 0 to 256 [ 93.638475][ T6469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.526'. [ 93.638850][ T6469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.526'. [ 93.756921][ T6479] syzkaller0: entered promiscuous mode [ 93.757968][ T6479] syzkaller0: entered allmulticast mode [ 93.924306][ T4720] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 93.996500][ T6485] binder: 6482:6485 got transaction to invalid handle, 1 [ 93.996528][ T6485] binder: 6482:6485 cannot find target node [ 93.996554][ T6485] binder: 6482:6485 transaction call to 0:0 failed 79/29201/-22, code 0 size 0-0 line 3252 [ 93.997086][ T6485] binder: 6482:6485 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 93.997100][ T6485] binder: 6485 RLIMIT_NICE not set [ 94.720686][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.894717][ T6496] syzkaller0: entered promiscuous mode [ 95.894746][ T6496] syzkaller0: entered allmulticast mode [ 95.897392][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 95.939061][ T4722] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 95.987676][ T6498] loop2: detected capacity change from 0 to 1024 [ 95.989019][ T6498] EXT4-fs: Ignoring removed orlov option [ 96.002908][ T6498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.003996][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 96.004064][ T6498] bridge_slave_0: default FDB implementation only supports local addresses [ 96.015408][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.656560][ T6471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.726867][ T6510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.538'. [ 96.730804][ T6510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.538'. [ 96.755757][ T6514] syzkaller0: entered promiscuous mode [ 96.755789][ T6514] syzkaller0: entered allmulticast mode [ 97.347587][ T6525] loop4: detected capacity change from 0 to 256 [ 97.663267][ T6537] syzkaller0: entered promiscuous mode [ 97.663301][ T6537] syzkaller0: entered allmulticast mode [ 97.666816][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 97.762644][ T6546] loop3: detected capacity change from 0 to 1024 [ 97.764720][ T6546] EXT4-fs: Ignoring removed orlov option [ 97.773659][ T6546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 97.776720][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 97.776815][ T6546] bridge_slave_0: default FDB implementation only supports local addresses [ 97.803707][ T4719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.943814][ T6552] binder: 6549:6552 got transaction to invalid handle, 1 [ 97.943848][ T6552] binder: 6549:6552 cannot find target node [ 97.943861][ T6552] binder: 6549:6552 transaction call to 0:0 failed 83/29201/-22, code 0 size 0-0 line 3252 [ 97.943977][ T6552] binder: 6549:6552 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 97.943987][ T6552] binder: 6552 RLIMIT_NICE not set [ 98.686894][ T1094] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.338936][ T4720] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.339517][ T4722] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.453318][ T6566] syzkaller0: entered promiscuous mode [ 100.453345][ T6566] syzkaller0: entered allmulticast mode [ 100.533629][ T6568] netlink: 60 bytes leftover after parsing attributes in process `syz.2.553'. [ 100.535603][ T6568] netlink: 60 bytes leftover after parsing attributes in process `syz.2.553'. [ 100.689275][ T6539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.817213][ T6581] loop1: detected capacity change from 0 to 1024 [ 100.820990][ T6581] EXT4-fs: Ignoring removed orlov option [ 100.852578][ T6581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.854913][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 100.854973][ T6581] bridge_slave_0: default FDB implementation only supports local addresses [ 100.923466][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.372503][ T6597] netlink: 'syz.1.562': attribute type 13 has an invalid length. [ 101.542452][ T6600] syzkaller0: entered promiscuous mode [ 101.542488][ T6600] syzkaller0: entered allmulticast mode [ 101.630327][ T6602] netlink: 60 bytes leftover after parsing attributes in process `syz.4.565'. [ 101.632331][ T6602] netlink: 60 bytes leftover after parsing attributes in process `syz.4.565'. [ 101.670953][ T6604] netlink: 'syz.3.564': attribute type 13 has an invalid length. [ 101.727723][ T6609] binder: 6605:6609 got transaction to invalid handle, 1 [ 101.727753][ T6609] binder: 6605:6609 cannot find target node [ 101.727782][ T6609] binder: 6605:6609 transaction call to 0:0 failed 87/29201/-22, code 0 size 0-0 line 3252 [ 101.727897][ T6609] binder: 6605:6609 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 101.727913][ T6609] binder: 6609 RLIMIT_NICE not set [ 101.914982][ T6626] netlink: 'syz.3.572': attribute type 13 has an invalid length. [ 102.492515][ T4817] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.534192][ T6640] netlink: 'syz.4.576': attribute type 29 has an invalid length. [ 102.536177][ T6640] netlink: 'syz.4.576': attribute type 29 has an invalid length. [ 102.575590][ T6642] syzkaller0: entered promiscuous mode [ 102.575621][ T6642] syzkaller0: entered allmulticast mode [ 102.966149][ T6649] 0x000000000006-0x000000020000 : "" [ 102.971497][ T6649] ftl_cs: FTL header corrupt! [ 103.598193][ T6661] binder: tried to use weak ref as strong ref [ 103.598217][ T6661] binder: 6660:6661 Acquire 1 refcount change on invalid ref 0 ret -22 [ 103.599809][ T6661] binder: 6660:6661 got transaction to invalid handle, 1 [ 103.599826][ T6661] binder: 6660:6661 cannot find target node [ 103.599841][ T6661] binder: 6660:6661 transaction call to 0:0 failed 90/29201/-22, code 0 size 0-24 line 3252 [ 103.651341][ T6662] binder: 6660:6662 got transaction to invalid handle, 1 [ 103.652729][ T6662] binder: 6660:6662 cannot find target node [ 103.654010][ T6662] binder: 6660:6662 transaction call to 0:0 failed 91/29201/-22, code 0 size 0-0 line 3252 [ 103.843364][ T6661] syz.4.582 (6661): drop_caches: 2 [ 103.864700][ T5017] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.866041][ T5017] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.894237][ T6664] netlink: 'syz.4.583': attribute type 13 has an invalid length. [ 103.895605][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 103.913980][ T6666] xt_hashlimit: size too large, truncated to 1048576 [ 103.939086][ T4722] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 103.939624][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.267509][ T6680] 0x000000000006-0x000000020000 : "" [ 104.310823][ T6680] ftl_cs: FTL header corrupt! [ 104.733717][ T6611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.909912][ T6688] netlink: 'syz.4.593': attribute type 29 has an invalid length. [ 104.911745][ T6688] netlink: 'syz.4.593': attribute type 29 has an invalid length. [ 104.976404][ T6690] 0x000000000006-0x000000020000 : "" [ 104.987606][ T6690] ftl_cs: FTL header corrupt! [ 105.190382][ T6692] 0x000000000006-0x000000020000 : "" [ 105.201328][ T6692] ftl_cs: FTL header corrupt! [ 105.357258][ T6708] binder: BINDER_SET_CONTEXT_MGR already set [ 105.357285][ T6708] binder: 6701:6708 ioctl 4018620d 20001000 returned -16 [ 105.357417][ T6708] binder: 6701:6708 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 105.357434][ T6708] binder: 6708 RLIMIT_NICE not set [ 106.136446][ T6719] netlink: 'syz.1.599': attribute type 13 has an invalid length. [ 106.197437][ T6724] netlink: 'syz.4.602': attribute type 13 has an invalid length. [ 106.295359][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.603'. [ 106.376190][ T6737] 0x000000000006-0x000000020000 : "" [ 106.618705][ T6737] ftl_cs: FTL header corrupt! [ 106.682750][ T6744] netlink: 'syz.4.606': attribute type 13 has an invalid length. [ 106.803699][ T6747] 0x000000000006-0x000000020000 : "" [ 107.152878][ T6747] ftl_cs: FTL header corrupt! [ 107.860876][ T6755] binder: tried to use weak ref as strong ref [ 107.860912][ T6755] binder: 6752:6755 Acquire 1 refcount change on invalid ref 0 ret -22 [ 107.861242][ T6755] binder: 6752:6755 got transaction to invalid handle, 1 [ 107.861253][ T6755] binder: 6752:6755 cannot find target node [ 107.861266][ T6755] binder: 6752:6755 transaction call to 0:0 failed 95/29201/-22, code 0 size 0-24 line 3252 [ 108.724949][ T6765] binder: 6752:6765 got transaction to invalid handle, 1 [ 108.724988][ T6765] binder: 6752:6765 cannot find target node [ 108.725017][ T6765] binder: 6752:6765 transaction call to 0:0 failed 96/29201/-22, code 0 size 0-0 line 3252 [ 108.806024][ T6768] binder: BINDER_SET_CONTEXT_MGR already set [ 108.809077][ T6768] binder: 6767:6768 ioctl 4018620d 20000040 returned -16 [ 108.813435][ T6768] syz.4.614 (6768): drop_caches: 2 [ 108.868015][ T6755] syz.0.610 (6755): drop_caches: 2 [ 108.875151][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.875193][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.919053][ T6770] netlink: 'syz.3.615': attribute type 13 has an invalid length. [ 108.981073][ T6778] binder: 6777:6778 ioctl c0306201 0 returned -14 [ 108.984168][ T6778] binder: 6777:6778 got transaction to invalid handle, 1 [ 108.985757][ T6778] binder: 6777:6778 cannot find target node [ 108.986912][ T6778] binder: 6777:6778 transaction call to 0:0 failed 102/29201/-22, code 0 size 0-24 line 3252 [ 108.991107][ T6778] syz.2.619 (6778): drop_caches: 2 [ 108.995608][ T1094] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.594410][ T6787] netlink: 'syz.2.620': attribute type 13 has an invalid length. [ 109.775179][ T6790] 0x000000000006-0x000000020000 : "" [ 109.792158][ T6792] binder: 6791:6792 tried to acquire reference to desc 0, got 1 instead [ 109.795774][ T6790] ftl_cs: FTL header corrupt! [ 109.818765][ T6797] binder: 6794:6797 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 109.823123][ T6797] binder: 6794:6797 got transaction to invalid handle, 1 [ 109.823696][ T6792] syz.2.622 (6792): drop_caches: 2 [ 109.825544][ T6797] binder: 6794:6797 cannot find target node [ 109.827946][ T6797] syz.0.623 (6797): drop_caches: 2 [ 109.863188][ T6799] netlink: 'syz.4.624': attribute type 13 has an invalid length. [ 110.026082][ T6803] 0x000000000006-0x000000020000 : "" [ 110.027920][ T6803] ftl_cs: FTL header corrupt! [ 110.061498][ T6811] UBIFS error (pid: 6811): cannot open "ubi0:testvol", error -19 [ 110.184369][ T6816] netlink: 'syz.0.631': attribute type 13 has an invalid length. [ 110.801164][ T6830] hub 8-0:1.0: USB hub found [ 110.805270][ T6830] hub 8-0:1.0: 8 ports detected [ 111.849074][ T6840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.849272][ T6840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.865405][ T6840] i2c i2c-0: delete_device: Can't find device in list [ 111.886303][ T6840] netlink: 'syz.3.637': attribute type 12 has an invalid length. [ 111.887995][ T6840] netlink: 132 bytes leftover after parsing attributes in process `syz.3.637'. [ 111.893147][ T6844] syzkaller0: entered promiscuous mode [ 111.893183][ T6844] syzkaller0: entered allmulticast mode [ 111.903914][ T6843] syzkaller0: entered promiscuous mode [ 111.903953][ T6843] syzkaller0: entered allmulticast mode [ 112.373808][ T6851] binder: tried to use weak ref as strong ref [ 112.373842][ T6851] binder: 6850:6851 Acquire 1 refcount change on invalid ref 0 ret -22 [ 112.375434][ T6851] binder: 6850:6851 got transaction to invalid handle, 1 [ 112.380021][ T6851] syz.2.642 (6851): drop_caches: 2 [ 112.420648][ T6859] binder: 6858:6859 tried to acquire reference to desc 0, got 1 instead [ 112.422678][ T6859] binder: 6858:6859 ioctl c0306201 0 returned -14 [ 112.426449][ T6859] syz.2.644 (6859): drop_caches: 2 [ 112.446645][ T6857] 0x000000000006-0x000000020000 : "" [ 112.448709][ T6857] ftl_cs: FTL header corrupt! [ 112.482246][ T6862] netlink: 'syz.2.645': attribute type 13 has an invalid length. [ 112.596168][ T6865] 0x000000000006-0x000000020000 : "" [ 112.599074][ T6865] ftl_cs: FTL header corrupt! [ 112.686268][ T6872] netlink: 52 bytes leftover after parsing attributes in process `syz.4.648'. [ 112.983161][ T6876] UBIFS error (pid: 6876): cannot open "ubi0:testvol", error -19 [ 112.994610][ T6878] binder: 6877:6878 tried to acquire reference to desc 0, got 1 instead [ 113.000934][ T6878] syz.3.650 (6878): drop_caches: 2 [ 113.003376][ T6881] netlink: 52 bytes leftover after parsing attributes in process `syz.1.652'. [ 113.006902][ T10] binder_debug: 11 callbacks suppressed [ 113.006936][ T10] binder: release 6877:6878 transaction 123 out, still active [ 113.006955][ T10] binder: undelivered TRANSACTION_COMPLETE [ 113.015478][ T10] binder: send failed reply for transaction 123, target dead [ 113.057421][ T6886] binder: 6885:6886 ioctl c0306201 0 returned -14 [ 113.066733][ T6886] syz.3.653 (6886): drop_caches: 2 [ 113.088186][ T1094] binder: release 6885:6886 transaction 128 out, still active [ 113.088218][ T1094] binder: undelivered TRANSACTION_COMPLETE [ 113.107026][ T10] binder: send failed reply for transaction 128, target dead [ 113.145845][ T6892] binder: 6891:6892 cannot find target node [ 113.147506][ T6892] binder: 6891:6892 transaction call to 0:0 failed 132/29201/-22, code 0 size 0-24 line 3252 [ 113.210107][ T6892] syz.3.657 (6892): drop_caches: 2 [ 113.213961][ T1094] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.258865][ T6894] 0x000000000006-0x000000020000 : "" [ 113.260928][ T6901] tipc: Started in network mode [ 113.260940][ T6901] tipc: Node identity 4, cluster identity 4711 [ 113.260948][ T6901] tipc: Node number set to 4 [ 113.265295][ T6894] ftl_cs: FTL header corrupt! [ 113.479872][ T6910] 0x000000000006-0x000000020000 : "" [ 113.481102][ T6910] ftl_cs: FTL header corrupt! [ 113.582511][ T6913] 0x000000000006-0x000000020000 : "" [ 113.583588][ T6913] ftl_cs: FTL header corrupt! [ 113.614825][ T6923] UBIFS error (pid: 6923): cannot open "ubi0:testvol", error -19 [ 113.664248][ T6926] binder: 6924:6926 ioctl 4018620d 0 returned -22 [ 113.665749][ T6926] binder: 6924:6926 cannot find target node [ 113.672392][ T6926] syz.2.667 (6926): drop_caches: 2 [ 113.672882][ T6927] syz.4.669 (6927): drop_caches: 2 [ 113.758709][ T6929] 0x000000000006-0x000000020000 : "" [ 113.761871][ T6932] binder_user_error: 6 callbacks suppressed [ 113.763196][ T6932] binder: 6931:6932 tried to acquire reference to desc 0, got 1 instead [ 113.765244][ T6932] binder: 6931:6932 ioctl c0306201 0 returned -14 [ 113.769953][ T6932] syz.2.671 (6932): drop_caches: 2 [ 113.781906][ T6929] ftl_cs: FTL header corrupt! [ 114.086585][ T6951] 0x000000000006-0x000000020000 : "" [ 114.087922][ T6951] ftl_cs: FTL header corrupt! [ 114.228830][ T6958] 0x000000000006-0x000000020000 : "" [ 114.231106][ T6958] ftl_cs: FTL header corrupt! [ 114.752346][ T6973] hub 8-0:1.0: USB hub found [ 114.753060][ T6973] hub 8-0:1.0: 8 ports detected [ 115.123305][ T6981] hub 8-0:1.0: USB hub found [ 115.123469][ T6981] hub 8-0:1.0: 8 ports detected [ 115.176772][ T6988] netlink: 52 bytes leftover after parsing attributes in process `syz.2.689'. [ 115.178754][ T6987] binder: tried to use weak ref as strong ref [ 115.179099][ T6988] ubi0: attaching mtd0 [ 115.180108][ T6988] ubi0: scanning is finished [ 115.180117][ T6988] ubi0: empty MTD device detected [ 115.181213][ T6987] binder: 6985:6987 Acquire 1 refcount change on invalid ref 0 ret -22 [ 115.182233][ T6987] binder: 6985:6987 got transaction to invalid handle, 1 [ 115.185229][ T6987] syz.0.687 (6987): drop_caches: 2 [ 115.208017][ T6990] loop0: detected capacity change from 0 to 1024 [ 115.209933][ T6990] EXT4-fs: Ignoring removed orlov option [ 115.467828][ T6990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.501980][ T4729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 115.543069][ T7002] syzkaller0: entered promiscuous mode [ 115.558359][ T6988] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.558380][ T6988] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.558392][ T6988] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.558400][ T6988] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 115.558407][ T6988] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.558414][ T6988] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.558421][ T6988] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2903605303 [ 115.558435][ T6988] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.558817][ T7003] ubi0: background thread "ubi_bgt0d" started, PID 7003 [ 115.572022][ T7002] syzkaller0: entered allmulticast mode [ 115.890149][ T7016] binder: 7015:7016 tried to acquire reference to desc 0, got 1 instead [ 115.892162][ T7016] binder: 7015:7016 got transaction with invalid data ptr [ 115.914012][ T7018] syzkaller0: entered promiscuous mode [ 115.915260][ T7018] syzkaller0: entered allmulticast mode [ 115.991458][ T7023] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 115.991838][ T7023] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 115.992112][ T7023] netlink: 'syz.0.697': attribute type 29 has an invalid length. [ 116.207436][ T7040] hub 8-0:1.0: USB hub found [ 116.208599][ T7040] hub 8-0:1.0: 8 ports detected [ 116.805858][ T7045] syzkaller0: entered promiscuous mode [ 116.808098][ T7045] syzkaller0: entered allmulticast mode [ 117.610698][ T7077] syzkaller0: entered promiscuous mode [ 117.611874][ T7077] syzkaller0: entered allmulticast mode [ 117.769397][ T7082] hub 8-0:1.0: USB hub found [ 117.769582][ T7082] hub 8-0:1.0: 8 ports detected [ 118.151684][ T7089] netlink: 'syz.1.720': attribute type 12 has an invalid length. [ 118.153379][ T7089] netlink: 132 bytes leftover after parsing attributes in process `syz.1.720'. [ 118.570831][ T7099] syzkaller0: entered promiscuous mode [ 118.572117][ T7099] syzkaller0: entered allmulticast mode [ 118.803409][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.805500][ T7112] netlink: 'syz.1.726': attribute type 29 has an invalid length. [ 118.806315][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.812826][ T7112] netlink: 'syz.1.726': attribute type 29 has an invalid length. [ 118.817937][ T7112] netlink: 'syz.1.726': attribute type 29 has an invalid length. [ 119.322518][ T7126] ip_tables: iptables: counters copy to user failed while replacing table [ 119.394478][ T7133] hub 8-0:1.0: USB hub found [ 119.394639][ T7133] hub 8-0:1.0: 8 ports detected [ 119.854861][ T7139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.735'. [ 119.918088][ T7141] netlink: 'syz.0.736': attribute type 13 has an invalid length. [ 119.921050][ T7142] UBIFS error (pid: 7142): cannot open "ubi0:testvol", error -19 [ 120.133886][ T7148] ip_tables: iptables: counters copy to user failed while replacing table [ 120.738963][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.739027][ T4720] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 121.073545][ T7169] ip_tables: iptables: counters copy to user failed while replacing table [ 121.075386][ T7167] ip_tables: iptables: counters copy to user failed while replacing table [ 121.578464][ T7176] hub 8-0:1.0: USB hub found [ 121.579623][ T7176] hub 8-0:1.0: 8 ports detected [ 121.676338][ T7183] netlink: 'syz.0.748': attribute type 13 has an invalid length. [ 122.432980][ T7202] netlink: 52 bytes leftover after parsing attributes in process `syz.1.754'. [ 122.530371][ T7205] ip_tables: iptables: counters copy to user failed while replacing table [ 122.849892][ T7208] input: syz1 as /devices/virtual/input/input3 [ 123.004160][ T7211] UBIFS error (pid: 7211): cannot open "ubi0:testvol", error -19 [ 123.898051][ T7232] netlink: 52 bytes leftover after parsing attributes in process `syz.0.759'. [ 123.906912][ T7232] ubi: mtd0 is already attached to ubi0 [ 123.980273][ T7233] UBIFS error (ubi0:0 pid 7233): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 124.745330][ T7185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.822260][ T7253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.765'. [ 125.822752][ T7253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.765'. [ 125.939247][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.939293][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.138030][ T7264] ip_tables: iptables: counters copy to user failed while replacing table [ 126.500882][ T7267] ip_tables: iptables: counters copy to user failed while replacing table [ 126.851656][ T7278] binder: BINDER_SET_CONTEXT_MGR already set [ 126.851684][ T7278] binder: 7276:7278 ioctl 4018620d 20000040 returned -16 [ 126.853532][ T7278] binder: 7276:7278 got transaction to invalid handle, 1 [ 126.853555][ T7278] binder_debug: 13 callbacks suppressed [ 126.853576][ T7278] binder: 7276:7278 cannot find target node [ 126.853597][ T7278] binder: 7276:7278 transaction call to 0:0 failed 155/29201/-22, code 0 size 0-24 line 3252 [ 126.856924][ T7278] syz.0.771 (7278): drop_caches: 2 [ 126.871844][ T4477] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.218824][ T7283] hub 8-0:1.0: USB hub found [ 127.222007][ T7283] hub 8-0:1.0: 8 ports detected [ 127.829746][ T7300] netlink: 52 bytes leftover after parsing attributes in process `syz.1.775'. [ 127.888298][ T7301] UBIFS error (ubi0:0 pid 7301): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 128.725478][ T7315] netlink: 60 bytes leftover after parsing attributes in process `syz.1.778'. [ 128.737349][ T7315] netlink: 60 bytes leftover after parsing attributes in process `syz.1.778'. [ 128.946536][ T7319] ip_tables: iptables: counters copy to user failed while replacing table [ 129.701087][ T7323] ip_tables: iptables: counters copy to user failed while replacing table [ 130.711936][ T7293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.797476][ T7337] loop0: detected capacity change from 0 to 1024 [ 130.799388][ T7337] EXT4-fs: Ignoring removed orlov option [ 130.830086][ T7337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.844127][ T7341] zram0: detected capacity change from 0 to 8 [ 130.865126][ T4729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.025479][ T7352] binder: 7343:7352 tried to acquire reference to desc 0, got 1 instead [ 131.034784][ T7352] binder: 7343:7352 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 131.250463][ T7352] binder: 7352 RLIMIT_NICE not set [ 131.296393][ T7352] binder: 7352 RLIMIT_NICE not set [ 131.509994][ T7352] binder: send failed reply for transaction 160 to 7343:7352 [ 131.510644][ T7352] binder: 7343:7352 ioctl c0306201 20000680 returned -14 [ 131.652871][ T7360] hub 8-0:1.0: USB hub found [ 131.653067][ T7360] hub 8-0:1.0: 8 ports detected [ 131.712634][ T5017] binder: undelivered TRANSACTION_COMPLETE [ 131.714031][ T5017] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.826585][ T7367] netlink: 'syz.2.790': attribute type 13 has an invalid length. [ 132.650149][ T7379] binder: BINDER_SET_CONTEXT_MGR already set [ 132.650185][ T7379] binder: 7378:7379 ioctl 4018620d 20000040 returned -16 [ 132.650615][ T7379] binder: 7378:7379 got transaction to invalid handle, 1 [ 132.650632][ T7379] binder: 7378:7379 cannot find target node [ 132.650651][ T7379] binder: 7378:7379 transaction call to 0:0 failed 163/29201/-22, code 0 size 0-24 line 3252 [ 132.659624][ T7379] syz.2.794 (7379): drop_caches: 2 [ 132.669127][ T1094] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.749519][ T7382] binder: 7381:7382 tried to acquire reference to desc 0, got 1 instead [ 132.749831][ T7382] binder: 7381:7382 got transaction with invalid data ptr [ 132.750084][ T7382] binder: 7381:7382 transaction call to 7381:0 failed 168/29201/-14, code 0 size 0-24 line 3511 [ 132.752348][ T7382] syz.0.795 (7382): drop_caches: 2 [ 132.758911][ T4477] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.782009][ T7386] loop2: detected capacity change from 0 to 1024 [ 132.794473][ T7386] EXT4-fs: Ignoring removed orlov option [ 132.929821][ T7390] ip_tables: iptables: counters copy to user failed while replacing table [ 133.332776][ T7386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.359179][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.377429][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.379842][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.634617][ T7405] ip_tables: iptables: counters copy to user failed while replacing table [ 134.581474][ T7423] netlink: 'syz.4.809': attribute type 13 has an invalid length. [ 134.835943][ T7428] ip_tables: iptables: counters copy to user failed while replacing table [ 134.997496][ T7437] loop0: detected capacity change from 0 to 1024 [ 134.999341][ T7437] EXT4-fs: Ignoring removed orlov option [ 135.028417][ T7437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.524297][ T4729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 135.654618][ T7455] binder: 7446:7455 tried to acquire reference to desc 0, got 1 instead [ 135.654911][ T7455] binder: 7446:7455 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 135.655144][ T7455] binder: 7455 RLIMIT_NICE not set [ 135.655532][ T7455] binder: 7455 RLIMIT_NICE not set [ 135.655566][ T7455] binder: send failed reply for transaction 173 to 7446:7455 [ 135.655593][ T7455] binder: 7446:7455 ioctl c0306201 20000680 returned -14 [ 135.795757][ T7457] ip_tables: iptables: counters copy to user failed while replacing table [ 135.908356][ T7459] loop4: detected capacity change from 0 to 1024 [ 135.909358][ T7459] EXT4-fs: Ignoring removed bh option [ 135.922446][ T7459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.250203][ T7459] EXT4-fs (loop4): shut down requested (0) [ 136.361159][ T1094] binder: undelivered TRANSACTION_COMPLETE [ 136.361200][ T1094] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.436036][ T7471] ip_tables: iptables: counters copy to user failed while replacing table [ 136.697189][ T7473] netlink: 'syz.0.822': attribute type 13 has an invalid length. [ 136.712922][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.809345][ T7482] hub 8-0:1.0: USB hub found [ 136.810471][ T7482] hub 8-0:1.0: 8 ports detected [ 136.952369][ T7487] loop0: detected capacity change from 0 to 1024 [ 136.953067][ T7487] EXT4-fs: Ignoring removed orlov option [ 136.974459][ T7487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.992747][ T4729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.227341][ T7504] ip_tables: iptables: counters copy to user failed while replacing table [ 137.570447][ T7508] ip_tables: iptables: counters copy to user failed while replacing table [ 137.753707][ T7511] ip_tables: iptables: counters copy to user failed while replacing table [ 137.821748][ T7515] binder: 7514:7515 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 137.821781][ T7515] binder: 7515 RLIMIT_NICE not set [ 138.149430][ T7519] netlink: 'syz.2.835': attribute type 13 has an invalid length. [ 138.296740][ T7526] fuse: fd is not a fuse device [ 138.316934][ T7528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.839'. [ 138.319515][ T7528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.839'. [ 139.094693][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.099322][ T4720] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 139.625275][ T7565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.851'. [ 139.627471][ T7565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.851'. [ 140.004338][ T7576] netlink: 'syz.2.853': attribute type 29 has an invalid length. [ 140.006273][ T7576] netlink: 'syz.2.853': attribute type 29 has an invalid length. [ 140.006956][ T7576] netlink: 'syz.2.853': attribute type 29 has an invalid length. [ 140.507153][ T7594] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 140.507716][ T7595] binder: 7590:7595 tried to acquire reference to desc 0, got 1 instead [ 140.507943][ T7595] binder: 7590:7595 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 140.507955][ T7595] binder: 7595 RLIMIT_NICE not set [ 140.507966][ T7595] binder: 7595 RLIMIT_NICE not set [ 140.507980][ T7595] binder: send failed reply for transaction 179 to 7590:7595 [ 140.507994][ T7595] binder: 7590:7595 ioctl c0306201 20000680 returned -14 [ 140.530993][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.862'. [ 140.531384][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.862'. [ 141.341944][ T1094] binder: undelivered TRANSACTION_COMPLETE [ 141.342056][ T1094] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.417602][ T7612] netlink: 'syz.0.865': attribute type 29 has an invalid length. [ 141.417978][ T7612] netlink: 'syz.0.865': attribute type 29 has an invalid length. [ 141.418631][ T7612] netlink: 'syz.0.865': attribute type 29 has an invalid length. [ 141.675402][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 141.691524][ T7634] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 141.692425][ T7634] overlayfs: failed to clone lowerpath [ 142.103126][ T7646] binder: 7644:7646 tried to acquire reference to desc 0, got 1 instead [ 142.104967][ T7646] binder: 7644:7646 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 142.105312][ T7646] binder: 7646 RLIMIT_NICE not set [ 142.105333][ T7646] binder: 7646 RLIMIT_NICE not set [ 142.105352][ T7646] binder: send failed reply for transaction 184 to 7644:7646 [ 142.105372][ T7646] binder: 7644:7646 ioctl c0306201 20000680 returned -14 [ 142.366979][ T7648] netlink: 'syz.0.877': attribute type 29 has an invalid length. [ 142.368828][ T7648] netlink: 'syz.0.877': attribute type 29 has an invalid length. [ 142.369167][ T7648] netlink: 'syz.0.877': attribute type 29 has an invalid length. [ 142.880935][ T9] binder: undelivered TRANSACTION_COMPLETE [ 142.880973][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.520006][ T7653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.019034][ T4722] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.020347][ T4720] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 144.630779][ T7721] netlink: 488 bytes leftover after parsing attributes in process `syz.4.896'. [ 144.630812][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.896'. [ 144.662241][ T7721] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 145.353742][ T7745] loop3: detected capacity change from 0 to 256 [ 145.446127][ T7753] netlink: 'syz.2.908': attribute type 29 has an invalid length. [ 145.447777][ T7753] netlink: 'syz.2.908': attribute type 29 has an invalid length. [ 145.448347][ T7753] netlink: 'syz.2.908': attribute type 29 has an invalid length. [ 145.466902][ T7756] capability: warning: `syz.2.909' uses deprecated v2 capabilities in a way that may be insecure [ 145.472537][ T7754] binder: 7749:7754 tried to acquire reference to desc 0, got 1 instead [ 145.472970][ T7754] binder: 7749:7754 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 145.472985][ T7754] binder: 7754 RLIMIT_NICE not set [ 145.472996][ T7754] binder: 7754 RLIMIT_NICE not set [ 145.473012][ T7754] binder: send failed reply for transaction 189 to 7749:7754 [ 145.473026][ T7754] binder: 7749:7754 ioctl c0306201 20000680 returned -14 [ 145.742855][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 146.228968][ T1094] binder: undelivered TRANSACTION_COMPLETE [ 146.229004][ T1094] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.059001][ T4720] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 147.059013][ T4717] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.258025][ T7781] loop2: detected capacity change from 0 to 1024 [ 147.258377][ T7781] EXT4-fs: Ignoring removed orlov option [ 147.273842][ T7781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.282416][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 147.350714][ T7787] binder: 7785:7787 tried to acquire reference to desc 0, got 1 instead [ 147.350946][ T7787] binder: 7785:7787 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 147.350973][ T7787] binder: 7787 RLIMIT_NICE not set [ 147.350984][ T7787] binder: 7787 RLIMIT_NICE not set [ 147.350999][ T7787] binder: send failed reply for transaction 194 to 7785:7787 [ 147.351015][ T7787] binder: 7785:7787 ioctl c0306201 20000680 returned -14 [ 147.561568][ T7789] loop0: detected capacity change from 0 to 8192 [ 147.586689][ T7789] loop0: p2 p3 p4 [ 147.587523][ T7789] loop0: p2 size 64053 extends beyond EOD, truncated [ 147.589446][ T7789] loop0: p3 start 65280 is beyond EOD, truncated [ 147.591115][ T7789] loop0: p4 size 50331904 extends beyond EOD, truncated [ 147.617422][ T7792] netlink: 'syz.0.920': attribute type 29 has an invalid length. [ 147.617815][ T7792] netlink: 'syz.0.920': attribute type 29 has an invalid length. [ 147.618029][ T7792] netlink: 'syz.0.920': attribute type 29 has an invalid length. [ 147.643576][ T6696] udevd[6696]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 147.645030][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 147.895556][ T7725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.953516][ T7801] tipc: Can't bind to reserved service type 0 [ 148.016885][ T7807] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 148.018130][ T7807] [U] J"—E:ÀÆ" [ 148.129582][ T9] binder: undelivered TRANSACTION_COMPLETE [ 148.129616][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.539120][ T4720] Bluetooth: hci2: command 0x0406 tx timeout [ 148.539196][ T4720] Bluetooth: hci4: command 0x0406 tx timeout [ 148.539227][ T4720] Bluetooth: hci3: command 0x0406 tx timeout [ 148.539249][ T4720] Bluetooth: hci1: command 0x0406 tx timeout [ 148.787961][ T7828] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 148.788931][ T7828] PKCS7: Only support pkcs7_signedData type [ 148.863600][ T7830] xt_hashlimit: size too large, truncated to 1048576 [ 149.037723][ T7846] netlink: 'syz.2.936': attribute type 29 has an invalid length. [ 149.040218][ T7846] netlink: 'syz.2.936': attribute type 29 has an invalid length. [ 149.042459][ T7846] netlink: 'syz.2.936': attribute type 29 has an invalid length. [ 149.138965][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.954004][ T7854] syz.2.940 uses obsolete (PF_INET,SOCK_PACKET) [ 151.895507][ T7833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.469680][ T7900] syz_tun: entered allmulticast mode [ 152.536281][ T7901] binder: 7895:7901 tried to acquire reference to desc 0, got 1 instead [ 152.538255][ T7901] binder: 7895:7901 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 152.541706][ T7901] binder: 7901 RLIMIT_NICE not set [ 152.543195][ T7901] binder: 7901 RLIMIT_NICE not set [ 152.544571][ T7901] binder: send failed reply for transaction 199 to 7895:7901 [ 152.546398][ T7901] binder: 7895:7901 ioctl c0306201 20000680 returned -14 [ 153.120262][ T5017] binder: undelivered TRANSACTION_COMPLETE [ 153.120298][ T5017] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.155361][ T7913] binder: BINDER_SET_CONTEXT_MGR already set [ 153.156648][ T7913] binder: 7912:7913 ioctl 4018620d 20000040 returned -16 [ 153.180489][ T7913] syz.3.957 (7913): drop_caches: 2 [ 154.292861][ T7935] binder: 7932:7935 tried to acquire reference to desc 0, got 1 instead [ 154.301700][ T7935] syz.4.962 (7935): drop_caches: 2 [ 154.313091][ T5017] binder: release 7932:7935 transaction 206 out, still active [ 154.313120][ T5017] binder: undelivered TRANSACTION_COMPLETE [ 154.581855][ T4817] binder: send failed reply for transaction 206, target dead [ 154.799855][ T7951] loop4: detected capacity change from 0 to 1024 [ 154.840183][ T7951] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.853115][ T7951] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 154.865528][ T7951] EXT4-fs (loop4): orphan cleanup on readonly fs [ 154.865553][ T7951] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.967: Bad quota inum: 1, type: 0 [ 154.865635][ T7951] loop4: lost filesystem error report for type 5 error -117 [ 154.869598][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 154.869609][ C1] EXT4-fs (loop4): initial error at time 154: ext4_quota_enable:7228 [ 154.869621][ C1] EXT4-fs (loop4): last error at time 154: ext4_quota_enable:7228 [ 154.875643][ T7951] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 154.875680][ T7951] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 154.877642][ T7951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.969638][ T7956] syz_tun: entered allmulticast mode [ 155.543495][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.759954][ T7985] batadv_slave_0: Caught tx_queue_len zero misconfig [ 156.471570][ T8010] netlink: 11 bytes leftover after parsing attributes in process `syz.1.986'. [ 156.473486][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.986'. [ 156.475352][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.986'. [ 156.614760][ T8023] binder: 8022:8023 tried to acquire reference to desc 0, got 1 instead [ 156.615044][ T8023] binder: 8022:8023 got transaction with invalid parent offset [ 156.615066][ T8023] binder: 8023:8022 failed to fixup parent [ 156.615121][ T8023] binder: 8022:8023 transaction call to 8022:0 failed 211/29201/-22, code 0 size 104-24 line 3717 [ 156.615772][ T4817] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.653592][ T8027] usb usb8: usbfs: process 8027 (syz.4.993) did not claim interface 7 before use [ 157.042448][ T8031] binder: 8028:8031 tried to acquire reference to desc 0, got 1 instead [ 157.042497][ T8031] binder_alloc: 8028: binder_alloc_buf, no vma [ 157.042505][ T8031] binder: cannot allocate buffer: vma cleared, target dead or dying [ 157.042618][ T8031] binder: 8028:8031 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 157.042629][ T8031] binder: 8031 RLIMIT_NICE not set [ 157.501034][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 157.501068][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 158.436379][ T50] Bluetooth: hci4: unexpected event for opcode 0x0035 [ 158.526302][ T8094] [ 158.526728][ T8094] ====================================================== [ 158.527898][ T8094] WARNING: possible circular locking dependency detected [ 158.529112][ T8094] syzkaller #0 Not tainted [ 158.529889][ T8094] ------------------------------------------------------ [ 158.531068][ T8094] syz.0.1011/8094 is trying to acquire lock: [ 158.532085][ T8094] ffff800088e063c0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x220/0x16e4 [ 158.533750][ T8094] [ 158.533750][ T8094] but task is already holding lock: [ 158.535021][ T8094] ffff0000c73d3810 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 158.537061][ T8094] [ 158.537061][ T8094] which lock already depends on the new lock. [ 158.537061][ T8094] [ 158.538717][ T8094] [ 158.538717][ T8094] the existing dependency chain (in reverse order) is: [ 158.540214][ T8094] [ 158.540214][ T8094] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 158.541632][ T8094] blk_alloc_queue+0x488/0x590 [ 158.542572][ T8094] blk_mq_alloc_queue+0x148/0x284 [ 158.543480][ T8094] __blk_mq_alloc_disk+0x38/0x10c [ 158.544357][ T8094] loop_add+0x358/0x8e4 [ 158.545113][ T8094] loop_init+0xe8/0x10c [ 158.545874][ T8094] do_one_initcall+0x274/0xc38 [ 158.546746][ T8094] do_initcall_level+0x12c/0x1c4 [ 158.547652][ T8094] do_initcalls+0x70/0xd0 [ 158.548479][ T8094] do_basic_setup+0x7c/0x90 [ 158.549296][ T8094] kernel_init_freeable+0x268/0x3a8 [ 158.550246][ T8094] kernel_init+0x24/0x1dc [ 158.551034][ T8094] ret_from_fork+0x10/0x20 [ 158.551879][ T8094] [ 158.551879][ T8094] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 158.553059][ T8094] fs_reclaim_acquire+0x90/0x110 [ 158.553959][ T8094] __kmalloc_noprof+0xd4/0x6b8 [ 158.554828][ T8094] pcpu_mem_zalloc+0x48/0x7c [ 158.555653][ T8094] pcpu_create_chunk+0x38/0x4e4 [ 158.556526][ T8094] pcpu_alloc_noprof+0x53c/0x16e4 [ 158.557437][ T8094] do_kmem_cache_create+0x144/0x700 [ 158.558387][ T8094] __kmem_cache_create_args+0x348/0x470 [ 158.559401][ T8094] inet_frags_init+0xdc/0x210 [ 158.560229][ T8094] ipfrag_init+0x68/0xb8 [ 158.561045][ T8094] inet_init+0x398/0x428 [ 158.561827][ T8094] do_one_initcall+0x274/0xc38 [ 158.562716][ T8094] do_initcall_level+0x12c/0x1c4 [ 158.563602][ T8094] do_initcalls+0x70/0xd0 [ 158.564427][ T8094] do_basic_setup+0x7c/0x90 [ 158.565272][ T8094] kernel_init_freeable+0x268/0x3a8 [ 158.566178][ T8094] kernel_init+0x24/0x1dc [ 158.566929][ T8094] ret_from_fork+0x10/0x20 [ 158.567730][ T8094] [ 158.567730][ T8094] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 158.569047][ T8094] __lock_acquire+0x17c0/0x2ebc [ 158.569915][ T8094] lock_acquire+0x140/0x364 [ 158.570739][ T8094] __mutex_lock+0x164/0xf14 [ 158.571583][ T8094] _mutex_lock_killable+0x24/0x30 [ 158.572516][ T8094] pcpu_alloc_noprof+0x220/0x16e4 [ 158.573461][ T8094] __percpu_counter_init_many+0x50/0x350 [ 158.574488][ T8094] blkg_rwstat_init+0x40/0xc8 [ 158.575310][ T8094] throtl_pd_alloc+0xcc/0x350 [ 158.576148][ T8094] blkcg_activate_policy+0x560/0x994 [ 158.577078][ T8094] blk_throtl_init+0x2ac/0x3b0 [ 158.577974][ T8094] tg_set_conf+0x1b0/0x46c [ 158.578819][ T8094] tg_set_conf_u64+0x38/0x4c [ 158.579645][ T8094] cgroup_file_write+0x23c/0x6e4 [ 158.580507][ T8094] kernfs_fop_write_iter+0x260/0x3b8 [ 158.581503][ T8094] vfs_write+0x51c/0xa0c [ 158.582341][ T8094] ksys_write+0x12c/0x228 [ 158.583139][ T8094] __arm64_sys_write+0x84/0x98 [ 158.584056][ T8094] invoke_syscall+0x98/0x244 [ 158.584946][ T8094] el0_svc_common+0xec/0x23c [ 158.585787][ T8094] do_el0_svc+0x4c/0x5c [ 158.586523][ T8094] el0_svc+0x64/0x260 [ 158.587235][ T8094] el0t_64_sync_handler+0x44/0x104 [ 158.588147][ T8094] el0t_64_sync+0x198/0x19c [ 158.588982][ T8094] [ 158.588982][ T8094] other info that might help us debug this: [ 158.588982][ T8094] [ 158.590637][ T8094] Chain exists of: [ 158.590637][ T8094] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 158.590637][ T8094] [ 158.593014][ T8094] Possible unsafe locking scenario: [ 158.593014][ T8094] [ 158.594184][ T8094] CPU0 CPU1 [ 158.595077][ T8094] ---- ---- [ 158.595952][ T8094] lock(&q->q_usage_counter(io)#17); [ 158.597031][ T8094] lock(fs_reclaim); [ 158.598331][ T8094] lock(&q->q_usage_counter(io)#17); [ 158.599845][ T8094] lock(pcpu_alloc_mutex); [ 158.600734][ T8094] [ 158.600734][ T8094] *** DEADLOCK *** [ 158.600734][ T8094] [ 158.602351][ T8094] 7 locks held by syz.0.1011/8094: [ 158.603370][ T8094] #0: ffff0000d1b75970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 158.605203][ T8094] #1: ffff0000d2c4e450 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 158.607004][ T8094] #2: ffff0000d0d64080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 158.608866][ T8094] #3: ffff0000f1973788 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 158.610767][ T8094] #4: ffff0000c73d3a10 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x208/0x34c [ 158.612396][ T8094] #5: ffff0000c73d3810 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 158.614415][ T8094] #6: ffff0000c73d3848 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 158.616360][ T8094] [ 158.616360][ T8094] stack backtrace: [ 158.617323][ T8094] CPU: 1 UID: 0 PID: 8094 Comm: syz.0.1011 Not tainted syzkaller #0 PREEMPT [ 158.618762][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 158.620428][ T8094] Call trace: [ 158.620973][ T8094] show_stack+0x2c/0x3c (C) [ 158.621718][ T8094] __dump_stack+0x30/0x40 [ 158.622465][ T8094] dump_stack_lvl+0xd8/0x12c [ 158.623244][ T8094] dump_stack+0x1c/0x28 [ 158.623938][ T8094] print_circular_bug+0x328/0x330 [ 158.624759][ T8094] check_noncircular+0x158/0x174 [ 158.625595][ T8094] __lock_acquire+0x17c0/0x2ebc [ 158.626437][ T8094] lock_acquire+0x140/0x364 [ 158.627191][ T8094] __mutex_lock+0x164/0xf14 [ 158.627937][ T8094] _mutex_lock_killable+0x24/0x30 [ 158.628797][ T8094] pcpu_alloc_noprof+0x220/0x16e4 [ 158.629617][ T8094] __percpu_counter_init_many+0x50/0x350 [ 158.630541][ T8094] blkg_rwstat_init+0x40/0xc8 [ 158.631322][ T8094] throtl_pd_alloc+0xcc/0x350 [ 158.632101][ T8094] blkcg_activate_policy+0x560/0x994 [ 158.632983][ T8094] blk_throtl_init+0x2ac/0x3b0 [ 158.633787][ T8094] tg_set_conf+0x1b0/0x46c [ 158.634560][ T8094] tg_set_conf_u64+0x38/0x4c [ 158.635340][ T8094] cgroup_file_write+0x23c/0x6e4 [ 158.636183][ T8094] kernfs_fop_write_iter+0x260/0x3b8 [ 158.637003][ T8094] vfs_write+0x51c/0xa0c [ 158.637690][ T8094] ksys_write+0x12c/0x228 [ 158.638399][ T8094] __arm64_sys_write+0x84/0x98 [ 158.639120][ T8094] invoke_syscall+0x98/0x244 [ 158.639857][ T8094] el0_svc_common+0xec/0x23c [ 158.640585][ T8094] do_el0_svc+0x4c/0x5c [ 158.641234][ T8094] el0_svc+0x64/0x260 [ 158.641858][ T8094] el0t_64_sync_handler+0x44/0x104 [ 158.642627][ T8094] el0t_64_sync+0x198/0x19c