last executing test programs: 2m36.135132147s ago: executing program 3 (id=21): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda0602000028fde80001dd0000040d000600ea11000000050000", 0x28}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 2m36.108548184s ago: executing program 3 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fsopen(0x0, 0x1) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(0xffffffffffffffff, &(0x7f0000000c40), 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4010) 2m35.089509898s ago: executing program 3 (id=25): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_open_procfs(r1, &(0x7f0000000300)='net/netstat\x00') 2m34.439049344s ago: executing program 3 (id=28): socket$inet(0x2, 0x4, 0x7fffffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 2m34.412831401s ago: executing program 3 (id=29): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x5, 0x5, 0x2, 0x800, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 2m34.362438187s ago: executing program 3 (id=30): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000340)="a6", 0x1, 0x200000c4, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x9}, 0x1c) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$FUSE_INIT(r0, &(0x7f0000002600)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x2, 0x2080800, 0x9, 0x3ff, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0x50) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001", @ANYBLOB="868f54"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 2m19.318642567s ago: executing program 32 (id=30): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000340)="a6", 0x1, 0x200000c4, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x9}, 0x1c) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$FUSE_INIT(r0, &(0x7f0000002600)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x2, 0x2080800, 0x9, 0x3ff, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0x50) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001", @ANYBLOB="868f54"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1m42.921375241s ago: executing program 1 (id=609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m42.877333319s ago: executing program 1 (id=610): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1m42.838899789s ago: executing program 1 (id=611): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="e2", 0x1}], 0x1, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x40040}, 0x10800) 1m42.793111497s ago: executing program 1 (id=612): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m42.680043448s ago: executing program 1 (id=613): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r2, 0x0, {0x1, 0xff, 0x1}, 0xfe}, 0x18, &(0x7f0000000300)={&(0x7f0000000200)="489f6c6151b6cf1497ccf07b29", 0xd}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) 1m42.284082593s ago: executing program 1 (id=617): r0 = syz_usb_connect(0x2, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00030300000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m42.176005272s ago: executing program 33 (id=617): r0 = syz_usb_connect(0x2, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00030300000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.248596037s ago: executing program 5 (id=2166): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0x10) 3.233997836s ago: executing program 6 (id=2167): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) unshare(0x2040400) pselect6(0x40, &(0x7f0000000100)={0x8, 0x800000000000000, 0xffffff7ffffffffc, 0x10001, 0x5, 0xffffffffffffffff, 0x8100000}, 0x0, 0x0, 0x0, 0x0) 3.201303979s ago: executing program 5 (id=2168): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x90}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x2, 0x0, &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=', @ANYRESOCT, @ANYRESDEC], 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x8, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000100)={0x401, 0x9, 0x200, 0x4, 0x18, "fcf50fac33a68474"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000002440)=0xd) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000680001000000000000000000000000000000000006000300cd9e00000400020004000b"], 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xd41, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x8) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) 3.173209289s ago: executing program 6 (id=2170): recvmmsg(0xffffffffffffffff, &(0x7f0000000f80), 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/5, 0xd}], 0x27, 0x0, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 3.17267757s ago: executing program 0 (id=2171): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100800000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x4000) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 1.987374873s ago: executing program 0 (id=2174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0xd212dbe53cbcda3a, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03080000000040"}}}}, 0xfdef) 1.302935548s ago: executing program 2 (id=2176): socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) setreuid(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7e, 0x2, 0x3, 0x80000000, 0x20000006, 0x4f, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x8000024, 0xd, 0x7, 0xfffffffc, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x88, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x1006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bc, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0xd, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x80000, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x10000, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0xc, 0x9, 0x8, 0x9, 0x6, 0x43, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x63fa0f21, 0x7, 0x5, 0xfffffffe, 0xfe, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x100b, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x27ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0x100, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7b, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x223, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xdd3, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.220167918s ago: executing program 5 (id=2177): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r0, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0xf8}}, 0x0) 1.18484227s ago: executing program 0 (id=2179): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.184444487s ago: executing program 6 (id=2180): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000500)=0x10) 1.108083867s ago: executing program 6 (id=2182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x882}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24004000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.107871846s ago: executing program 0 (id=2183): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000000)) 1.107772722s ago: executing program 5 (id=2184): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) close(r2) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 1.104971525s ago: executing program 4 (id=2185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 1.078920989s ago: executing program 5 (id=2186): syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x0, 0x7, 0x0, 0x1, 0x38, 0x9, 0x7, 0xc0000000, 0x7, 0x0, 0x64fc, 0x101, 0x1, 0x8f000000, 0x12, 0x34, {0xa6c, 0x1}, 0x6b, 0x9}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x88, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r2, 0x6, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00') sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 730.894022ms ago: executing program 5 (id=2187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syncfs(r1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000100000180100002020642500000000002020207b1a00fe00000000bfa120000000000007010000f8ffffffb702000008000000b703000004001000850000000602010095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 676.051258ms ago: executing program 6 (id=2188): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) syz_open_pts(r0, 0x141601) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 674.031927ms ago: executing program 6 (id=2189): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 640.029347ms ago: executing program 4 (id=2190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 602.376315ms ago: executing program 4 (id=2191): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf2501000000080001", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 338.97852ms ago: executing program 2 (id=2192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) 305.332386ms ago: executing program 4 (id=2193): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000500)=0x10) 234.735297ms ago: executing program 0 (id=2194): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 234.533047ms ago: executing program 4 (id=2195): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r0, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0xf8}}, 0x0) 234.051452ms ago: executing program 2 (id=2196): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 163.984265ms ago: executing program 0 (id=2197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0afeff0000000073018e02010000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 163.654958ms ago: executing program 4 (id=2198): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x34}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0x2e}], 0x1}, 0x4005) 110.668217ms ago: executing program 2 (id=2199): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) syz_open_pts(r0, 0x141601) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 87.262847ms ago: executing program 2 (id=2200): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r3, r1, 0x4, r0}, 0x10) 0s ago: executing program 2 (id=2201): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x4, 0x273, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008050) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/load\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) keyctl$update(0x2, 0x0, &(0x7f0000000000)="88a7b8b53aca8ff15fff0323bb605cca7114898535d3aff8fafedf3d854f2fb2808cee235a19d294e324bbbf19", 0x2d) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) kernel console output (not intermixed with test programs): op1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 36.181339][ T4920] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #11: comm syz.1.10: corrupted inode contents [ 36.181404][ T4920] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.181913][ T4920] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #11: comm syz.1.10: mark_inode_dirty error [ 36.181945][ T4920] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.182150][ T4920] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.10: invalid indirect mapped block 1 (level 1) [ 36.182169][ T4920] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.182343][ T4920] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #11: comm syz.1.10: corrupted inode contents [ 36.182361][ T4920] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.184524][ T4920] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 36.184600][ T4920] loop1: lost filesystem error report for type 5 error -117 [ 36.184770][ T4920] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #11: comm syz.1.10: corrupted inode contents [ 36.184788][ T4920] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.184867][ C0] EXT4-fs (loop1): error count since last fsck: 6 [ 36.184882][ C0] EXT4-fs (loop1): initial error at time 36: mb_free_blocks:2049: inode 11: block 64 [ 36.184917][ C0] EXT4-fs (loop1): last error at time 36: ext4_orphan_del:303 [ 36.185153][ T4920] EXT4-fs error (device loop1): ext4_truncate:4691: inode #11: comm syz.1.10: mark_inode_dirty error [ 36.185167][ T4920] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.185300][ T4920] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 36.185318][ T4920] loop1: lost filesystem error report for type 5 error -117 [ 36.185544][ T4920] EXT4-fs (loop1): 1 truncate cleaned up [ 36.186062][ T4920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.515695][ T4932] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.516091][ T4932] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 36.516201][ T4932] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.516201][ T4932] [ 36.516236][ T4932] EXT4-fs (loop2): Total free blocks count 0 [ 36.516270][ T4932] EXT4-fs (loop2): Free/Dirty block details [ 36.516318][ T4932] EXT4-fs (loop2): free_blocks=2415919504 [ 36.516367][ T4932] EXT4-fs (loop2): dirty_blocks=48 [ 36.516400][ T4932] EXT4-fs (loop2): Block reservation details [ 36.516432][ T4932] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 36.578501][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.691660][ T30] audit: type=1326 audit(36.680:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4937 comm="syz.4.14" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 36.692348][ T30] audit: type=1326 audit(36.680:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4937 comm="syz.4.14" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 36.693256][ T30] audit: type=1326 audit(36.680:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4937 comm="syz.4.14" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 36.693348][ T30] audit: type=1326 audit(36.680:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4937 comm="syz.4.14" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 36.693436][ T30] audit: type=1326 audit(36.680:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4937 comm="syz.4.14" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 36.693614][ T30] audit: type=1326 audit(36.680:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4937 comm="syz.4.14" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 36.694278][ T30] audit: type=1326 audit(36.680:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4937 comm="syz.4.14" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 36.695146][ T30] audit: type=1326 audit(36.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4937 comm="syz.4.14" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 36.695805][ T30] audit: type=1326 audit(36.690:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4937 comm="syz.4.14" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff90b78c60 code=0x7ffc0000 [ 36.788841][ T30] audit: type=1326 audit(36.780:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4937 comm="syz.4.14" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff90b5be2c code=0x7ffc0000 [ 36.831785][ T4710] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 36.832562][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.931106][ T4945] Bluetooth: MGMT ver 1.23 [ 36.935192][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.363003][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 37.366592][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.366688][ T24] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 37.366710][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.368854][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 37.368867][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.368876][ T24] usb 1-1: Product: syz [ 37.368882][ T24] usb 1-1: Manufacturer: syz [ 37.368889][ T24] usb 1-1: SerialNumber: syz [ 37.380071][ T24] usb 1-1: config 0 descriptor?? [ 38.008814][ T4715] Bluetooth: hci3: command tx timeout [ 38.008866][ T4715] Bluetooth: hci2: command tx timeout [ 38.008880][ T4715] Bluetooth: hci1: command tx timeout [ 38.008977][ T4721] Bluetooth: hci4: command tx timeout [ 38.016579][ T24] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 38.414569][ T4980] Zero length message leads to an empty skb [ 39.085802][ T24] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 39.086328][ T24] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 39.086655][ T24] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 39.090559][ T4992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.099531][ T4992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.110182][ T24] usb 1-1: USB disconnect, device number 2 [ 39.907136][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 40.173448][ T4721] Bluetooth: hci4: command tx timeout [ 40.173532][ T4721] Bluetooth: hci2: command tx timeout [ 40.173559][ T4721] Bluetooth: hci3: command tx timeout [ 40.201681][ T5009] ======================================================= [ 40.201681][ T5009] WARNING: The mand mount option has been deprecated and [ 40.201681][ T5009] and is ignored by this kernel. Remove the mand [ 40.201681][ T5009] option from the mount to silence this warning. [ 40.201681][ T5009] ======================================================= [ 40.234931][ T4714] Bluetooth: hci1: command tx timeout [ 40.237395][ T5008] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 40.299141][ T5015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38'. [ 42.342478][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 42.346220][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.418143][ T5093] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 42.700424][ T5093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.70'. [ 42.704973][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.705019][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.870227][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.870431][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.965691][ T4804] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 43.125480][ T4804] usb 1-1: Using ep0 maxpacket: 16 [ 43.126958][ T4804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.128169][ T4804] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 43.128185][ T4804] usb 1-1: config 127 has no interface number 0 [ 43.128196][ T4804] usb 1-1: config 127 interface 124 has no altsetting 0 [ 43.129673][ T4804] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 43.129686][ T4804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.129695][ T4804] usb 1-1: Product: syz [ 43.129701][ T4804] usb 1-1: Manufacturer: syz [ 43.129708][ T4804] usb 1-1: SerialNumber: syz [ 43.238370][ T5104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 43.331118][ T4714] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 43.341679][ T4804] usb 1-1: USB disconnect, device number 3 [ 43.387959][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.396036][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.416470][ T5117] loop2: detected capacity change from 0 to 7 [ 43.418130][ T5117] Dev loop2: unable to read RDB block 7 [ 43.419031][ T5117] loop2: unable to read partition table [ 43.419125][ T5117] loop2: partition table beyond EOD, truncated [ 43.421171][ T5117] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 43.442139][ T5119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.442374][ T5119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.013722][ T5128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.016680][ T5128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.522007][ T5156] overlayfs: overlapping lowerdir path [ 45.995515][ T5174] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 46.234891][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 46.386065][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.386100][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 46.386113][ T24] usb 1-1: config 1 has no interface number 0 [ 46.386126][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.386138][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 46.386149][ T24] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 46.387674][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.387686][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.387695][ T24] usb 1-1: Product: syz [ 46.387701][ T24] usb 1-1: Manufacturer: syz [ 46.387707][ T24] usb 1-1: SerialNumber: syz [ 46.391754][ T5176] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.479960][ T5178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.102'. [ 46.601491][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.602207][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.973589][ T5176] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 47.157024][ T5200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 47.306974][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.308438][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.584025][ T24] cdc_ncm 1-1:1.1: bind() failure [ 47.589013][ T24] usb 1-1: USB disconnect, device number 4 [ 49.246199][ T5282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.248118][ T5282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.321627][ T5286] nbd: couldn't find device at index 237 [ 49.508060][ T5290] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 49.678007][ T867] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 49.836090][ T867] usb 1-1: config 127 has an invalid interface number: 138 but max is 0 [ 49.836124][ T867] usb 1-1: config 127 has no interface number 0 [ 49.836139][ T867] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 49.841956][ T867] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 49.842520][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.842531][ T867] usb 1-1: Product: syz [ 49.842539][ T867] usb 1-1: Manufacturer: syz [ 49.842545][ T867] usb 1-1: SerialNumber: syz [ 49.852796][ T5277] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.062771][ T867] usb 1-1: probing VID:PID(0424:012C) [ 50.063944][ T867] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0C [ 50.063956][ T867] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 50.106612][ T867] vub300 1-1:127.138: probe with driver vub300 failed with error -22 [ 50.110555][ T867] usb 1-1: USB disconnect, device number 5 [ 51.205514][ T4386] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 51.502632][ T4386] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 51.505038][ T4386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.506941][ T4386] usb 1-1: Product: syz [ 51.508433][ T4386] usb 1-1: Manufacturer: syz [ 51.509593][ T4386] usb 1-1: SerialNumber: syz [ 51.701860][ T4386] usb 1-1: config 0 descriptor?? [ 51.870888][ T5329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.872042][ T5329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.917215][ T4386] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 52.695780][ T5341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.696007][ T5341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.837204][ T4386] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 52.841264][ T4386] usb 1-1: USB disconnect, device number 6 [ 53.822121][ T781] tipc: Subscription rejected, illegal request [ 53.857652][ T4386] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 53.860195][ T4715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 53.861511][ T4715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 53.861911][ T4715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 53.862294][ T4715] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 53.862497][ T4715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.013257][ T4714] Bluetooth: hci4: connection err: -111 [ 54.027748][ T4386] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 54.027846][ T4386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.027860][ T4386] usb 1-1: Product: syz [ 54.027868][ T4386] usb 1-1: Manufacturer: syz [ 54.027874][ T4386] usb 1-1: SerialNumber: syz [ 54.031523][ T4386] usb 1-1: config 0 descriptor?? [ 54.037056][ T4386] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 54.122041][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 54.309226][ T4386] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 54.310291][ T4386] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 54.310312][ T4386] usb 1-1: media controller created [ 54.312646][ T4386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 54.341607][ T4386] DVB: Unable to find symbol mt352_attach() [ 54.347414][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.347607][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.376474][ T4386] DVB: Unable to find symbol nxt6000_attach() [ 54.377171][ T4386] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 54.378173][ T4386] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input3 [ 54.379565][ T4386] dvb-usb: schedule remote query interval to 1000 msecs. [ 54.379577][ T4386] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 54.379658][ T4386] dvb-usb: bulk message failed: -22 (7/0) [ 54.379667][ T4386] dvb-usb: bulk message failed: -22 (7/0) [ 54.382658][ T4386] usb 1-1: USB disconnect, device number 7 [ 54.479004][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.480595][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.482443][ T4386] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 54.485473][ T5370] bridge_slave_0: entered allmulticast mode [ 54.487803][ T5370] bridge_slave_0: entered promiscuous mode [ 54.490306][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.491865][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.493474][ T5370] bridge_slave_1: entered allmulticast mode [ 54.495450][ T5370] bridge_slave_1: entered promiscuous mode [ 54.502721][ T5370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.503737][ T5370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.510181][ T5370] team0: Port device team_slave_0 added [ 54.511446][ T5370] team0: Port device team_slave_1 added [ 54.778867][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.778895][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.778921][ T5370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.781488][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.781498][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.781513][ T5370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.798034][ T5370] hsr_slave_0: entered promiscuous mode [ 54.798473][ T5370] hsr_slave_1: entered promiscuous mode [ 54.798716][ T5370] debugfs: 'hsr0' already exists in 'hsr' [ 54.798727][ T5370] Cannot create hsr debugfs directory [ 54.829968][ T5406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.832728][ T5406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.878403][ T5370] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.881179][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.881644][ T5370] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.883619][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.884185][ T5370] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.887176][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.887727][ T5370] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.889481][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.901110][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.901153][ T5370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.901228][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.901257][ T5370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.922802][ T5370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.926952][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.928275][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.933182][ T5370] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.936420][ T3750] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.936463][ T3750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.942784][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.942826][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.079280][ T5427] binder: 5426:5427 tried to acquire reference to desc 0, got 1 instead [ 55.082168][ T5427] binder_alloc: 5426: binder_alloc_buf, no vma [ 55.083544][ T5427] binder: cannot allocate buffer: vma cleared, target dead or dying [ 55.083727][ T5427] binder: 5426:5427 transaction call to 5426:0 failed 12/29189/-3, code 0 size 0-0 line 3391 [ 55.089184][ T5370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.154502][ T5432] trusted_key: syz.2.187 sent an empty control message without MSG_MORE. [ 55.318030][ T4889] binder: undelivered TRANSACTION_ERROR: 29189 [ 55.318114][ T4889] binder: undelivered transaction 5, process died. [ 55.355527][ T4889] binder: undelivered TRANSACTION_COMPLETE [ 55.379208][ T5370] veth0_vlan: entered promiscuous mode [ 55.382792][ T5370] veth1_vlan: entered promiscuous mode [ 55.407567][ T5370] veth0_macvtap: entered promiscuous mode [ 55.678744][ T5370] veth1_macvtap: entered promiscuous mode [ 55.696896][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.703665][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.717960][ T781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.718164][ T3750] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.718185][ T3750] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.718200][ T3750] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.782505][ T5095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.782542][ T5095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.814408][ T5095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.814444][ T5095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.925351][ T4714] Bluetooth: hci5: command tx timeout [ 55.975935][ T5460] IPv4: Oversized IP packet from 127.202.26.0 [ 56.015972][ T5464] netlink: 16 bytes leftover after parsing attributes in process `syz.5.196'. [ 56.578223][ T5488] binder: 5487:5488 tried to acquire reference to desc 0, got 1 instead [ 56.580497][ T5488] binder_alloc: 5487: binder_alloc_buf, no vma [ 56.581959][ T5488] binder: cannot allocate buffer: vma cleared, target dead or dying [ 56.582043][ T5488] binder: 5487:5488 transaction call to 5487:0 failed 24/29189/-3, code 0 size 0-0 line 3391 [ 56.685388][ T5499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.687575][ T5499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.761840][ T26] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.761906][ T26] binder: undelivered transaction 17, process died. [ 56.795170][ T26] binder: undelivered TRANSACTION_COMPLETE [ 57.074322][ T5505] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 57.587311][ T5521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.587519][ T5521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.018825][ T4714] Bluetooth: hci5: command tx timeout [ 59.435004][ T4807] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 59.598093][ T4807] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 59.598124][ T4807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.598413][ T4807] usb 1-1: Product: syz [ 59.598421][ T4807] usb 1-1: Manufacturer: syz [ 59.598430][ T4807] usb 1-1: SerialNumber: syz [ 59.599790][ T4807] usb 1-1: config 0 descriptor?? [ 59.921927][ T4807] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 60.094900][ T4714] Bluetooth: hci5: command tx timeout [ 60.238504][ T5606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.250'. [ 60.589541][ T4807] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 60.591783][ T4807] usb 1-1: USB disconnect, device number 8 [ 61.142935][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.145777][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.160366][ T5622] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 62.292378][ T4714] Bluetooth: hci5: command tx timeout [ 62.447565][ T5657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.681255][ T5657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.733885][ T5669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.734110][ T5669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.030947][ T5677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.031169][ T5677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.208840][ T5682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.210717][ T5682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.346610][ T5686] binder: tried to use weak ref as strong ref [ 64.347970][ T5686] binder: 5685:5686 Acquire 1 refcount change on invalid ref 0 ret -22 [ 64.349843][ T5686] binder: 5685:5686 got transaction to invalid handle, 1 [ 64.351236][ T5686] binder: 5685:5686 cannot find target node [ 64.352561][ T5686] binder: 5685:5686 transaction async to 0:0 failed 27/29201/-22, code 0 size 72-24 line 3234 [ 64.354465][ T5686] binder: 5685:5686 got transaction to invalid handle, 3 [ 64.354476][ T5686] binder: 5685:5686 cannot find target node [ 64.354489][ T5686] binder: 5685:5686 transaction call to 0:0 failed 28/29201/-22, code 0 size 0-0 line 3234 [ 64.489078][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.492949][ T1022] cfg80211: failed to load regulatory.db [ 64.499969][ T1022] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.526708][ T1022] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.752641][ T5698] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.283'. [ 64.763779][ T5698] tc_dump_action: action bad kind [ 65.034546][ T5700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.045928][ T5700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.052262][ T5702] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.283'. [ 65.531417][ T5722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.531619][ T5722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.316442][ T5740] netlink: 104 bytes leftover after parsing attributes in process `syz.4.296'. [ 66.497288][ T5747] bridge1: entered promiscuous mode [ 66.497335][ T5747] bridge1: entered allmulticast mode [ 66.538419][ T5750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.538631][ T5750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.855038][ T1022] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 66.858931][ T5757] warning: `syz.5.303' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.913712][ T5761] binder: 5760:5761 tried to acquire reference to desc 0, got 1 instead [ 67.015983][ T1022] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.016024][ T1022] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 67.016177][ T1022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.017455][ T1022] usb 1-1: config 0 descriptor?? [ 67.021104][ T1022] pwc: Askey VC010 type 2 USB webcam detected. [ 67.317860][ T4386] binder: release 5760:5761 transaction 40 out, still active [ 67.317937][ T4386] binder: undelivered TRANSACTION_COMPLETE [ 67.318030][ T4386] binder: undelivered transaction 33, process died. [ 67.318082][ T4386] binder: undelivered TRANSACTION_COMPLETE [ 67.515974][ T1022] pwc: recv_control_msg error -32 req 02 val 2b00 [ 67.518626][ T1022] pwc: recv_control_msg error -32 req 02 val 2700 [ 67.946391][ T1022] pwc: recv_control_msg error -71 req 04 val 1000 [ 67.947877][ T1022] pwc: recv_control_msg error -71 req 04 val 1300 [ 67.948162][ T1022] pwc: recv_control_msg error -71 req 04 val 1400 [ 67.948383][ T1022] pwc: recv_control_msg error -71 req 02 val 2000 [ 67.948594][ T1022] pwc: recv_control_msg error -71 req 02 val 2100 [ 67.948801][ T1022] pwc: recv_control_msg error -71 req 04 val 1500 [ 67.949019][ T1022] pwc: recv_control_msg error -71 req 02 val 2500 [ 67.949223][ T1022] pwc: recv_control_msg error -71 req 02 val 2400 [ 67.949424][ T1022] pwc: recv_control_msg error -71 req 02 val 2600 [ 67.949614][ T1022] pwc: recv_control_msg error -71 req 02 val 2900 [ 67.949801][ T1022] pwc: recv_control_msg error -71 req 02 val 2800 [ 67.950027][ T1022] pwc: recv_control_msg error -71 req 04 val 1100 [ 67.950220][ T1022] pwc: recv_control_msg error -71 req 04 val 1200 [ 67.951587][ T1022] pwc: Registered as video11. [ 67.952058][ T1022] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input4 [ 67.953296][ T1022] usb 1-1: USB disconnect, device number 9 [ 68.447803][ T5803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.448000][ T5803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.085631][ T1022] IPVS: starting estimator thread 0... [ 69.138870][ T5816] binder: 5815:5816 tried to acquire reference to desc 0, got 1 instead [ 69.175048][ T5814] IPVS: using max 46 ests per chain, 110400 per kthread [ 70.178726][ T5849] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 70.178752][ T5849] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.190616][ T5849] vhci_hcd vhci_hcd.0: Device attached [ 70.196888][ T5852] vhci_hcd: connection closed [ 70.198438][ T3750] vhci_hcd vhci_hcd.5: stop threads [ 70.198619][ T3750] vhci_hcd vhci_hcd.5: release socket [ 70.198642][ T3750] vhci_hcd vhci_hcd.5: disconnect device [ 70.352808][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.353009][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.817847][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.819921][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.284474][ T5911] syzkaller1: entered promiscuous mode [ 71.287913][ T5911] syzkaller1: entered allmulticast mode [ 71.745387][ T5930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.745592][ T5930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.690158][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 74.551122][ T6028] futex_wake_op: syz.4.401 tries to shift op by 144; fix this program [ 75.450798][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 76.115022][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 76.116477][ T30] audit: type=1326 audit(76.060:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92978f68 code=0x7ffc0000 [ 76.116598][ T30] audit: type=1326 audit(76.060:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92978f68 code=0x7ffc0000 [ 76.116661][ T30] audit: type=1326 audit(76.060:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92978f68 code=0x7ffc0000 [ 76.116721][ T30] audit: type=1326 audit(76.060:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92978f68 code=0x7ffc0000 [ 76.116778][ T30] audit: type=1326 audit(76.060:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff92978f68 code=0x7ffc0000 [ 76.116846][ T30] audit: type=1326 audit(76.060:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92978f68 code=0x7ffc0000 [ 76.121229][ T30] audit: type=1326 audit(76.060:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92978f68 code=0x7ffc0000 [ 76.121313][ T30] audit: type=1326 audit(76.060:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92978f68 code=0x7ffc0000 [ 76.121383][ T30] audit: type=1326 audit(76.060:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92978f68 code=0x7ffc0000 [ 76.121454][ T30] audit: type=1326 audit(76.060:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.1.424" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff92978f68 code=0x7ffc0000 [ 76.392552][ T6095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.392763][ T6095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.413307][ T6097] Illegal XDP return value 4294967274 on prog (id 20) dev syz_tun, expect packet loss! [ 76.620154][ T6106] netlink: 56 bytes leftover after parsing attributes in process `syz.4.432'. [ 76.650958][ T6111] netlink: 248 bytes leftover after parsing attributes in process `syz.1.433'. [ 76.652735][ T6111] netlink: 'syz.1.433': attribute type 1 has an invalid length. [ 76.668355][ T6108] binder: 6107:6108 tried to acquire reference to desc 0, got 1 instead [ 76.777268][ T6115] bridge0: port 3(syz_tun) entered blocking state [ 76.777466][ T6115] bridge0: port 3(syz_tun) entered disabled state [ 76.778740][ T6115] syz_tun: entered allmulticast mode [ 76.785093][ T6115] syz_tun: entered promiscuous mode [ 76.786342][ T6115] bridge0: port 3(syz_tun) entered blocking state [ 76.786380][ T6115] bridge0: port 3(syz_tun) entered forwarding state [ 77.562476][ T26] binder_debug: 6 callbacks suppressed [ 77.562519][ T26] binder: release 6107:6108 transaction 64 out, still active [ 77.562537][ T26] binder: undelivered TRANSACTION_COMPLETE [ 77.562585][ T26] binder: undelivered transaction 57, process died. [ 77.562633][ T26] binder: undelivered TRANSACTION_COMPLETE [ 77.562667][ T26] binder: send failed reply for transaction 64, target dead [ 77.728374][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.730078][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.980313][ T6144] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.072210][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.074033][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.124522][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.124730][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.211067][ T6156] syz.0.451 uses obsolete (PF_INET,SOCK_PACKET) [ 79.219976][ T6158] overlayfs: conflicting lowerdir path [ 80.003675][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 80.021762][ T6179] binder: 6177:6179 BC_FREE_BUFFER no match for buffer at offset 3 [ 80.022323][ T6179] binder: 6177:6179 unknown command 0 [ 80.022337][ T6179] binder: 6177:6179 ioctl c0306201 20004a40 returned -22 [ 80.038272][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.040253][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.155470][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 80.157647][ T26] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 80.157677][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 80.157693][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 80.157709][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 80.157724][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 80.170950][ T6189] binder: 6188:6189 tried to acquire reference to desc 0, got 1 instead [ 80.171117][ T6189] binder_alloc: 6188: binder_alloc_buf, no vma [ 80.171125][ T6189] binder: cannot allocate buffer: vma cleared, target dead or dying [ 80.171148][ T6189] binder: 6188:6189 transaction async to 6188:0 failed 69/29189/-3, code 0 size 72-24 line 3391 [ 80.171217][ T26] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 80.171229][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.171239][ T26] usb 1-1: Product: syz [ 80.171246][ T26] usb 1-1: Manufacturer: syz [ 80.171253][ T26] usb 1-1: SerialNumber: syz [ 80.172191][ T6189] binder: 6188:6189 got transaction to invalid handle, 3 [ 80.172201][ T6189] binder: 6188:6189 cannot find target node [ 80.172211][ T6189] binder: 6188:6189 transaction call to 0:0 failed 70/29201/-22, code 0 size 0-0 line 3234 [ 80.173439][ T26] usb 1-1: config 0 descriptor?? [ 80.303440][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.303649][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.323766][ T4889] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.578228][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.578468][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.585282][ T26] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.585322][ T26] input input5: Device does not respond to id packet M [ 80.585527][ T26] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.585541][ T26] input input5: Device does not respond to id packet P [ 80.585733][ T26] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.585745][ T26] input input5: Device does not respond to id packet B [ 80.585949][ T26] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.585962][ T26] input input5: Device does not respond to id packet N [ 80.586244][ T26] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.586893][ T26] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.587099][ T26] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.587303][ T26] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.590037][ T26] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 80.600681][ T26] usb 1-1: USB disconnect, device number 10 [ 80.828701][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.830654][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.237851][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.238048][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.484896][ T4807] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 82.566822][ T6264] bridge0: port 3(syz_tun) entered blocking state [ 82.567048][ T6264] bridge0: port 3(syz_tun) entered disabled state [ 82.567775][ T6264] syz_tun: entered allmulticast mode [ 82.569684][ T6264] syz_tun: entered promiscuous mode [ 82.569894][ T6264] bridge0: port 3(syz_tun) entered blocking state [ 82.569918][ T6264] bridge0: port 3(syz_tun) entered forwarding state [ 83.465193][ T4807] usb 1-1: Using ep0 maxpacket: 32 [ 83.468733][ T4807] usb 1-1: config 127 has an invalid interface number: 22 but max is 0 [ 83.468786][ T4807] usb 1-1: config 127 has no interface number 0 [ 83.468798][ T4807] usb 1-1: config 127 interface 22 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 83.468808][ T4807] usb 1-1: config 127 interface 22 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 83.468819][ T4807] usb 1-1: config 127 interface 22 has no altsetting 0 [ 83.470733][ T4807] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=78.50 [ 83.470748][ T4807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.470758][ T4807] usb 1-1: Product: syz [ 83.470764][ T4807] usb 1-1: Manufacturer: syz [ 83.470770][ T4807] usb 1-1: SerialNumber: syz [ 83.589032][ T6276] misc userio: The device must be registered before sending interrupts [ 83.964919][ T4807] option 1-1:127.22: GSM modem (1-port) converter detected [ 83.968468][ T4807] usb 1-1: USB disconnect, device number 11 [ 83.972154][ T4807] option 1-1:127.22: device disconnected [ 83.993209][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.999076][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.366781][ T6304] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.413265][ T6307] binder: BINDER_SET_CONTEXT_MGR already set [ 84.414017][ T6307] binder: 6306:6307 ioctl 4018620d 20000240 returned -16 [ 84.414685][ T6307] binder: 6306:6307 got transaction to invalid handle, 3 [ 84.414697][ T6307] binder_debug: 1 callbacks suppressed [ 84.414703][ T6307] binder: 6306:6307 cannot find target node [ 84.414718][ T6307] binder: 6306:6307 transaction call to 0:0 failed 73/29201/-22, code 0 size 0-0 line 3234 [ 84.619160][ T4889] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.112207][ T6347] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.565210][ T6358] process 'syz.1.528' launched '/dev/fd/4' with NULL argv: empty string added [ 86.803558][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.803767][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.779555][ T6435] syzkaller0: entered promiscuous mode [ 87.781048][ T6435] syzkaller0: refused to change device tx_queue_len [ 87.902464][ T6441] overlayfs: overlapping lowerdir path [ 88.161645][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.164044][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.514878][ T4889] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 88.664955][ T4889] usb 1-1: Using ep0 maxpacket: 32 [ 88.666037][ T4889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 88.666231][ T4889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 88.666250][ T4889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 88.666261][ T4889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 88.666271][ T4889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 88.667975][ T4889] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 88.667993][ T4889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.668004][ T4889] usb 1-1: Product: syz [ 88.668012][ T4889] usb 1-1: Manufacturer: syz [ 88.668021][ T4889] usb 1-1: SerialNumber: syz [ 88.670603][ T4889] usb 1-1: config 0 descriptor?? [ 88.917588][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'. [ 89.025443][ T6483] overlayfs: overlapping lowerdir path [ 89.083472][ T4889] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 89.083510][ T4889] input input6: Device does not respond to id packet M [ 89.083739][ T4889] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 89.083753][ T4889] input input6: Device does not respond to id packet P [ 89.083957][ T4889] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 89.083969][ T4889] input input6: Device does not respond to id packet B [ 89.084156][ T4889] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 89.084169][ T4889] input input6: Device does not respond to id packet N [ 89.084349][ T4889] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 89.084531][ T4889] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 89.084717][ T4889] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 89.085102][ T4889] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 89.095676][ T4889] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 89.098492][ T4889] usb 1-1: USB disconnect, device number 12 [ 89.160856][ T6492] netlink: 32 bytes leftover after parsing attributes in process `syz.1.584'. [ 89.581395][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.581593][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.644698][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.646296][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.683326][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'. [ 89.763943][ T6513] overlayfs: overlapping lowerdir path [ 89.934780][ T6529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.940964][ T6529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.105693][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.605'. [ 90.615179][ T4719] bridge0: port 3(syz_tun) entered disabled state [ 90.631524][ T4719] syz_tun (unregistering): left allmulticast mode [ 90.634538][ T4719] syz_tun (unregistering): left promiscuous mode [ 90.637115][ T4719] bridge0: port 3(syz_tun) entered disabled state [ 90.906772][ T781] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.923721][ T30] kauditd_printk_skb: 422 callbacks suppressed [ 90.923777][ T30] audit: type=1326 audit(90.910:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6563 comm="syz.4.616" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x0 [ 90.925373][ T6562] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.046758][ T781] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.088806][ T4715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.089579][ T4715] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.091266][ T4715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.097032][ T4715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.098781][ T4715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.203289][ T781] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.208028][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.209784][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.274223][ T781] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.276453][ T4807] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 91.411604][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.413346][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.415220][ T6571] bridge_slave_0: entered allmulticast mode [ 91.417426][ T6571] bridge_slave_0: entered promiscuous mode [ 91.426829][ T4807] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.429893][ T4807] usb 1-1: config 1 has an invalid interface number: 87 but max is 0 [ 91.429934][ T4807] usb 1-1: config 1 has no interface number 0 [ 91.429951][ T4807] usb 1-1: config 1 interface 87 has no altsetting 0 [ 91.439453][ T4807] usb 1-1: string descriptor 0 read error: -22 [ 91.440799][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.442058][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.443438][ T6571] bridge_slave_1: entered allmulticast mode [ 91.445209][ T4807] usb 1-1: New USB device found, idVendor=0830, idProduct=0070, bcdDevice=87.65 [ 91.445236][ T4807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.449290][ T6571] bridge_slave_1: entered promiscuous mode [ 91.472463][ T781] bridge_slave_1: left allmulticast mode [ 91.472504][ T781] bridge_slave_1: left promiscuous mode [ 91.472947][ T781] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.480393][ T781] bridge_slave_0: left allmulticast mode [ 91.480432][ T781] bridge_slave_0: left promiscuous mode [ 91.480520][ T781] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.606398][ T781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.629247][ T781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.637503][ T781] bond0 (unregistering): Released all slaves [ 91.642094][ T6571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.645631][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.629'. [ 91.648398][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 91.651305][ T6571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.755972][ T4807] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 91.756025][ T4807] visor 1-1:1.87: Handspring Visor / Palm OS converter detected [ 91.762838][ T4807] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 91.776393][ T4807] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 91.817865][ T6571] team0: Port device team_slave_0 added [ 91.819841][ T6571] team0: Port device team_slave_1 added [ 91.828599][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.830070][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.835275][ T6571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.838176][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.839542][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.839563][ T6571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.858587][ T4889] usb 1-1: USB disconnect, device number 13 [ 91.870431][ T4889] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 91.883037][ T4889] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 91.883281][ T4889] visor 1-1:1.87: device disconnected [ 91.955510][ T6571] hsr_slave_0: entered promiscuous mode [ 91.957192][ T6571] hsr_slave_1: entered promiscuous mode [ 91.957868][ T6571] debugfs: 'hsr0' already exists in 'hsr' [ 91.958067][ T6571] Cannot create hsr debugfs directory [ 92.228507][ T781] hsr_slave_0: left promiscuous mode [ 92.229617][ T781] hsr_slave_1: left promiscuous mode [ 92.229982][ T781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.229998][ T781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.231179][ T781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.231190][ T781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.248018][ T781] veth1_macvtap: left promiscuous mode [ 92.248107][ T781] veth1_vlan: left promiscuous mode [ 92.248152][ T781] veth0_vlan: left promiscuous mode [ 92.595672][ T781] team0 (unregistering): Port device team_slave_1 removed [ 92.610135][ T781] team0 (unregistering): Port device team_slave_0 removed [ 93.001450][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 93.029166][ T6571] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 93.044039][ T6571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.051833][ T6571] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 93.060745][ T6571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.061182][ T6571] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 93.071785][ T6571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.075868][ T6571] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 93.081793][ T6571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.134914][ T4714] Bluetooth: hci3: command tx timeout [ 93.192621][ T6571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.213335][ T6571] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.223091][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.223146][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.226872][ T3750] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.226918][ T3750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.235684][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.5.638'. [ 93.250825][ T6571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.252904][ T6571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.343690][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.640'. [ 93.492025][ T6571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.625274][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 93.642488][ T6571] veth0_vlan: entered promiscuous mode [ 93.647449][ T6571] veth1_vlan: entered promiscuous mode [ 93.667545][ T6571] veth0_macvtap: entered promiscuous mode [ 93.670668][ T6571] veth1_macvtap: entered promiscuous mode [ 93.676683][ T6571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.682692][ T6571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.686916][ T781] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.687003][ T781] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.687037][ T781] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.687061][ T781] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.732735][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.732771][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.734260][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'. [ 93.747494][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.747525][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.865344][ T1022] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 94.103848][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 94.146912][ T1022] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.149673][ T1022] usb 1-1: config 1 has an invalid interface number: 87 but max is 0 [ 94.150644][ T1022] usb 1-1: config 1 has no interface number 0 [ 94.150664][ T1022] usb 1-1: config 1 interface 87 has no altsetting 0 [ 94.158626][ T1022] usb 1-1: string descriptor 0 read error: -22 [ 94.159786][ T1022] usb 1-1: New USB device found, idVendor=0830, idProduct=0070, bcdDevice=87.65 [ 94.161828][ T1022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.378884][ T1022] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 94.380515][ T1022] visor 1-1:1.87: Handspring Visor / Palm OS converter detected [ 94.401558][ T1022] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 94.415948][ T1022] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 94.420654][ T1022] usb 1-1: USB disconnect, device number 14 [ 94.428147][ T1022] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 94.436708][ T1022] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 94.439447][ T1022] visor 1-1:1.87: device disconnected [ 94.633637][ T30] audit: type=1326 audit(94.620:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.4.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 94.633686][ T30] audit: type=1326 audit(94.620:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.4.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 94.637677][ T30] audit: type=1326 audit(94.630:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.4.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 94.637697][ T30] audit: type=1326 audit(94.630:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.4.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 94.653748][ T30] audit: type=1326 audit(94.640:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.4.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 94.659561][ T30] audit: type=1326 audit(94.640:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.4.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 94.659598][ T30] audit: type=1326 audit(94.650:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.4.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 94.663173][ T30] audit: type=1326 audit(94.650:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.4.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 94.663191][ T30] audit: type=1326 audit(94.650:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.4.657" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 94.732141][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.658'. [ 94.888833][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.891317][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.012314][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.012517][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.142670][ T6796] overlayfs: missing 'lowerdir' [ 95.164080][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.672'. [ 95.207356][ T4714] Bluetooth: hci3: command tx timeout [ 96.798913][ T6830] overlayfs: missing 'lowerdir' [ 96.821950][ T6832] binder: 6831:6832 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 96.833934][ T6832] binder: 6831:6832 got transaction to invalid handle, 3 [ 96.837766][ T6832] binder: 6831:6832 cannot find target node [ 96.839378][ T6832] binder: 6831:6832 transaction call to 0:0 failed 75/29201/-22, code 0 size 0-0 line 3234 [ 97.000951][ T4889] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.246450][ T4386] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 97.270293][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.697'. [ 97.282233][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 97.287234][ T4714] Bluetooth: hci3: command tx timeout [ 97.292869][ T6862] gretap0: entered promiscuous mode [ 97.293753][ T6862] macvtap1: entered promiscuous mode [ 97.293828][ T6862] macvtap1: entered allmulticast mode [ 97.293836][ T6862] gretap0: entered allmulticast mode [ 97.631676][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.695'. [ 97.657833][ T4386] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 97.657877][ T4386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.657888][ T4386] usb 1-1: Product: syz [ 97.657897][ T4386] usb 1-1: Manufacturer: syz [ 97.657905][ T4386] usb 1-1: SerialNumber: syz [ 97.661931][ T4386] usb 1-1: config 0 descriptor?? [ 97.747124][ T6871] bridge0: port 3(syz_tun) entered blocking state [ 97.747283][ T6871] bridge0: port 3(syz_tun) entered disabled state [ 97.748415][ T6871] syz_tun: entered allmulticast mode [ 97.753202][ T6871] syz_tun: entered promiscuous mode [ 97.754057][ T6871] bridge0: port 3(syz_tun) entered blocking state [ 97.754100][ T6871] bridge0: port 3(syz_tun) entered forwarding state [ 98.216302][ T4386] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.820463][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.820687][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.009727][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.012236][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.365123][ T4714] Bluetooth: hci3: command tx timeout [ 99.496876][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.713'. [ 99.573947][ T6914] ubi31: attaching mtd0 [ 99.656870][ T6922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.657067][ T6922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.800633][ T4386] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 99.806013][ T4386] usb 1-1: USB disconnect, device number 15 [ 100.618529][ T6953] syzkaller0: entered promiscuous mode [ 100.618690][ T6953] syzkaller0: refused to change device tx_queue_len [ 101.518615][ T6989] netlink: 'syz.0.747': attribute type 29 has an invalid length. [ 101.521323][ T6989] netlink: 'syz.0.747': attribute type 29 has an invalid length. [ 101.523501][ T6989] netlink: 'syz.0.747': attribute type 29 has an invalid length. [ 102.442771][ T7002] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.492656][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.494453][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.826036][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.6.776'. [ 104.826824][ T7065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.777'. [ 105.393975][ T7130] bridge0: port 2(bridge_slave_1) entered listening state [ 105.398999][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.019391][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.019620][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.103020][ T7172] binder: 7166:7172 ioctl c0306201 20000240 returned -14 [ 106.292980][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.6.811'. [ 106.633307][ T7209] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 107.468267][ T7284] can: request_module (can-proto-0) failed. [ 107.992501][ T7307] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 108.923764][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.868'. [ 109.176536][ T7341] bridge0: port 3(syz_tun) entered blocking state [ 109.176667][ T7341] bridge0: port 3(syz_tun) entered disabled state [ 109.177465][ T7341] syz_tun: entered allmulticast mode [ 109.181027][ T7341] syz_tun: entered promiscuous mode [ 109.181894][ T7341] bridge0: port 3(syz_tun) entered blocking state [ 109.181923][ T7341] bridge0: port 3(syz_tun) entered forwarding state [ 110.094909][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 110.094948][ T30] audit: type=1326 audit(110.060:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.2.870" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x7fc00000 [ 110.103648][ T7348] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 110.239713][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.878'. [ 110.278384][ T7363] binder: tried to use weak ref as strong ref [ 110.278416][ T7363] binder: 7362:7363 Acquire 1 refcount change on invalid ref 0 ret -22 [ 110.278563][ T7363] binder: 7362:7363 got transaction to invalid handle, 1 [ 110.278578][ T7363] binder: 7362:7363 cannot find target node [ 110.278598][ T7363] binder: 7362:7363 transaction async to 0:0 failed 78/29201/-22, code 0 size 72-24 line 3234 [ 110.561778][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.630094][ T7387] bridge0: port 3(syz_tun) entered blocking state [ 110.630276][ T7387] bridge0: port 3(syz_tun) entered disabled state [ 110.631064][ T7387] syz_tun: entered allmulticast mode [ 110.634765][ T7387] syz_tun: entered promiscuous mode [ 110.635667][ T7387] bridge0: port 3(syz_tun) entered blocking state [ 110.635702][ T7387] bridge0: port 3(syz_tun) entered forwarding state [ 111.384934][ T30] audit: type=1326 audit(111.310:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.2.870" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb8378f68 code=0x7fc00000 [ 111.554641][ T4714] Bluetooth: hci4: connection err: -111 [ 111.673049][ T7411] binder: 7409:7411 tried to acquire reference to desc 0, got 1 instead [ 111.992167][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.898'. [ 112.003028][ T4849] binder: undelivered TRANSACTION_COMPLETE [ 112.003100][ T4849] binder: send failed reply for transaction 90 to 7409:7411 [ 112.006142][ T4849] binder: undelivered TRANSACTION_COMPLETE [ 112.006166][ T4849] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.006222][ T4849] binder: undelivered transaction 83, process died. [ 112.483653][ T30] audit: type=1326 audit(112.470:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.908" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 112.489800][ T7440] tipc: Started in network mode [ 112.489832][ T7440] tipc: Node identity ac14140f, cluster identity 4711 [ 112.490170][ T7440] tipc: New replicast peer: 172.30.0.3 [ 112.492982][ T30] audit: type=1326 audit(112.480:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.908" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 112.493898][ T30] audit: type=1326 audit(112.480:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.908" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 112.493981][ T30] audit: type=1326 audit(112.480:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.908" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 112.494048][ T30] audit: type=1326 audit(112.480:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.908" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 112.494122][ T30] audit: type=1326 audit(112.480:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.908" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 112.494254][ T30] audit: type=1326 audit(112.480:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.908" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 112.494329][ T30] audit: type=1326 audit(112.480:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.908" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b78f68 code=0x7ffc0000 [ 112.515633][ T7440] tipc: Enabled bearer , priority 10 [ 112.601062][ T7450] binder: 7449:7450 tried to acquire reference to desc 0, got 1 instead [ 112.749828][ T4849] binder: release 7449:7450 transaction 102 out, still active [ 112.749870][ T4849] binder: undelivered TRANSACTION_COMPLETE [ 112.837874][ T7463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.840045][ T7463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.607910][ T26] tipc: Node number set to 2886997007 [ 114.185293][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.6.932'. [ 114.478694][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.478898][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.555603][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.557775][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.048333][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.048699][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.196868][ T7532] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 115.303394][ T7534] binder: 7533:7534 tried to acquire reference to desc 0, got 1 instead [ 115.381825][ T7536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.382026][ T7536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.412177][ T26] binder_debug: 3 callbacks suppressed [ 115.412207][ T26] binder: undelivered TRANSACTION_COMPLETE [ 115.412250][ T26] binder: send failed reply for transaction 114 to 7533:7534 [ 115.412576][ T26] binder: undelivered TRANSACTION_COMPLETE [ 115.412586][ T26] binder: undelivered TRANSACTION_ERROR: 29189 [ 115.412625][ T26] binder: undelivered transaction 107, process died. [ 115.510351][ T4807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.513615][ T4807] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.534316][ T7544] fido_id[7544]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.537800][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.539426][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.742347][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.742562][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.780765][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.966'. [ 116.867741][ T7587] netlink: 72 bytes leftover after parsing attributes in process `syz.4.971'. [ 116.870661][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.870862][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.300202][ T7607] loop6: detected capacity change from 0 to 512 [ 117.307271][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 117.307298][ T30] audit: type=1326 audit(117.300:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.6.980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed78f68 code=0x7ffc0000 [ 117.308011][ T30] audit: type=1326 audit(117.300:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.6.980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed78f68 code=0x7ffc0000 [ 117.309967][ T30] audit: type=1326 audit(117.300:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.6.980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=96 compat=0 ip=0xffff7ed78f68 code=0x7ffc0000 [ 117.309987][ T30] audit: type=1326 audit(117.300:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.6.980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed78f68 code=0x7ffc0000 [ 117.310004][ T30] audit: type=1326 audit(117.300:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.6.980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff7ed78f68 code=0x7ffc0000 [ 117.310021][ T30] audit: type=1326 audit(117.300:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.6.980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed78f68 code=0x7ffc0000 [ 117.310039][ T30] audit: type=1326 audit(117.300:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.6.980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff7ed78f68 code=0x7ffc0000 [ 117.310056][ T30] audit: type=1326 audit(117.300:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.6.980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed78f68 code=0x7ffc0000 [ 117.310138][ T30] audit: type=1326 audit(117.300:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.6.980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7ed78f68 code=0x7ffc0000 [ 117.310274][ T30] audit: type=1326 audit(117.300:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.6.980" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ed78f68 code=0x7ffc0000 [ 117.310467][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.6.980'. [ 117.310913][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.6.980'. [ 117.397225][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.5.982'. [ 117.423646][ T7613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.439379][ T7613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.453054][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.983'. [ 117.527460][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.987'. [ 117.697836][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.698044][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.565237][ T7671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1008'. [ 119.569980][ T7673] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 119.596575][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.596793][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.600146][ T7671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1008'. [ 121.251199][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 121.507559][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.507622][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.507782][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.507804][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.905824][ T7760] fuse: Bad value for 'fd' [ 122.089184][ T4804] IPVS: starting estimator thread 0... [ 122.194927][ T7781] IPVS: using max 59 ests per chain, 141600 per kthread [ 122.299981][ T7790] __nla_validate_parse: 2 callbacks suppressed [ 122.300020][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1056'. [ 122.303468][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1056'. [ 122.816678][ T7808] fuse: Bad value for 'fd' [ 124.355647][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 124.434387][ T7844] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1078'. [ 124.610372][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1085'. [ 124.610623][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1085'. [ 124.657689][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 124.692982][ T7876] loop4: detected capacity change from 0 to 512 [ 124.744218][ T7882] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1093'. [ 124.756420][ T7876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.929737][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.517058][ T7909] loop6: detected capacity change from 0 to 4096 [ 125.566867][ T7909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.639647][ T7914] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 125.639671][ T7914] overlayfs: missing 'lowerdir' [ 125.720039][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1107'. [ 125.736014][ T7920] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 125.986445][ T7925] bridge1: left promiscuous mode [ 125.986520][ T7925] bridge1: left allmulticast mode [ 125.989390][ T7925] macvtap1: left promiscuous mode [ 125.989574][ T7925] macvtap1: left allmulticast mode [ 125.989606][ T7925] gretap0: left allmulticast mode [ 126.064021][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.342452][ T6571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.270450][ T7969] mmap: syz.0.1126 (7969) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.383294][ T7981] bond0: entered allmulticast mode [ 127.384399][ T7981] bond_slave_0: entered allmulticast mode [ 127.384615][ T7979] binder: 7978:7979 tried to acquire reference to desc 0, got 1 instead [ 127.385263][ T7979] binder: 7978:7979 ioctl c01c7c02 0 returned -22 [ 127.385349][ T7979] binder: 7978:7979 ioctl c0306201 0 returned -14 [ 127.386693][ T7979] binder: 7978:7979 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 127.386708][ T7979] binder: 7979 RLIMIT_NICE not set [ 127.386821][ T7979] binder: 7978:7979 ioctl c0306201 0 returned -14 [ 127.388740][ T4807] binder: release 7978:7979 transaction 119 out, still active [ 127.388759][ T4807] binder: undelivered TRANSACTION_COMPLETE [ 127.398529][ T7981] bond_slave_1: entered allmulticast mode [ 127.407187][ T4807] binder: send failed reply for transaction 119, target dead [ 128.235276][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 129.501729][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 129.534466][ T8044] loop6: detected capacity change from 0 to 512 [ 129.546683][ T8044] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 129.600357][ T8050] binder: 8049:8050 ioctl 4018620d 0 returned -22 [ 129.600501][ T8050] binder: tried to use weak ref as strong ref [ 129.600509][ T8050] binder: 8049:8050 Acquire 1 refcount change on invalid ref 0 ret -22 [ 129.600594][ T8050] binder: 8049:8050 got transaction to invalid handle, 1 [ 129.600602][ T8050] binder: 8049:8050 cannot find target node [ 129.600615][ T8050] binder: 8049:8050 transaction async to 0:0 failed 122/29201/-22, code 0 size 72-24 line 3234 [ 129.600970][ T8050] binder: 8049:8050 got transaction to invalid handle, 3 [ 129.600979][ T8050] binder: 8049:8050 cannot find target node [ 129.600989][ T8050] binder: 8049:8050 transaction call to 0:0 failed 123/29201/-22, code 0 size 0-0 line 3234 [ 129.618136][ T8044] EXT4-fs (loop6): 1 truncate cleaned up [ 129.618616][ T8044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.637958][ T6571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.968912][ T8060] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1162'. [ 129.972776][ T4804] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.000033][ T4804] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.210959][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.211181][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.307458][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 130.432360][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 130.734704][ T8091] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1177'. [ 130.802336][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 130.804787][ T3624] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.811337][ T15] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.814263][ T15] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.814301][ T15] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.003260][ T8124] loop4: detected capacity change from 0 to 128 [ 131.008633][ T8124] EXT4-fs: old and new quota format mixing [ 131.047415][ T8128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.047635][ T8128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.337656][ T8154] loop5: detected capacity change from 0 to 1024 [ 131.348430][ T8154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.392176][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.518183][ T8192] tipc: Started in network mode [ 132.518218][ T8192] tipc: Node identity 2003, cluster identity 4711 [ 132.519159][ T8192] tipc: Node number set to 8195 [ 132.539951][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1222'. [ 132.543794][ T8196] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 132.958393][ T8207] loop5: detected capacity change from 0 to 512 [ 132.970670][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.973642][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.998894][ T8207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.012861][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.456070][ T8226] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1233'. [ 133.803488][ T8256] futex_wake_op: syz.6.1244 tries to shift op by 144; fix this program [ 133.894401][ T8257] loop6: detected capacity change from 0 to 2048 [ 134.066129][ T8262] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1245'. [ 134.068307][ T8257] loop6: p3 < > p4 < > [ 134.068319][ T8257] loop6: partition table partially beyond EOD, truncated [ 134.068421][ T8257] loop6: p3 start 4284289 is beyond EOD, truncated [ 134.136347][ T8268] bond_slave_0: entered allmulticast mode [ 134.138541][ T8268] bond0: (slave bond_slave_0): Releasing backup interface [ 134.173586][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 134.173624][ T30] audit: type=1326 audit(134.160:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.5.1249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7b78f68 code=0x7ffc0000 [ 134.178887][ T30] audit: type=1326 audit(134.170:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.5.1249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7b78f68 code=0x7ffc0000 [ 134.178908][ T30] audit: type=1326 audit(134.170:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.5.1249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7b78f68 code=0x7ffc0000 [ 134.178983][ T30] audit: type=1326 audit(134.170:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.5.1249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa7b78f68 code=0x7ffc0000 [ 134.179086][ T30] audit: type=1326 audit(134.170:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.5.1249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7b78f68 code=0x7ffc0000 [ 134.179694][ T30] audit: type=1326 audit(134.170:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.5.1249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7b78f68 code=0x7ffc0000 [ 134.180026][ T30] audit: type=1326 audit(134.170:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.5.1249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7b78f68 code=0x7ffc0000 [ 134.180281][ T30] audit: type=1326 audit(134.170:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.5.1249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7b78f68 code=0x7ffc0000 [ 134.180600][ T30] audit: type=1326 audit(134.170:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.5.1249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa7b78f68 code=0x7ffc0000 [ 134.180696][ T30] audit: type=1326 audit(134.170:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8269 comm="syz.5.1249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7b78f68 code=0x7ffc0000 [ 134.850656][ T8298] batadv_slave_1: entered promiscuous mode [ 135.335841][ T8308] loop4: detected capacity change from 0 to 512 [ 135.341747][ T8308] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 135.341804][ T8308] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 135.353773][ T8308] EXT4-fs (loop4): 1 truncate cleaned up [ 135.354262][ T8308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.362184][ T8308] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.1265: lblock 0 mapped to illegal pblock 4 (length 1) [ 135.628005][ T8292] batadv_slave_1: left promiscuous mode [ 135.635036][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.665898][ T8320] batadv_slave_1: entered promiscuous mode [ 135.667686][ T8319] batadv_slave_1: left promiscuous mode [ 135.778561][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1272'. [ 135.780492][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1272'. [ 136.037506][ T8358] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1283'. [ 136.896962][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1310'. [ 136.897006][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1310'. [ 137.606081][ T4714] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 137.606294][ T4714] Bluetooth: hci2: Injecting HCI hardware error event [ 137.606881][ T4715] Bluetooth: hci2: hardware error 0x00 [ 137.681627][ T8438] fuse: Bad value for 'fd' [ 138.133712][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1322'. [ 138.501507][ T8489] fuse: Bad value for 'fd' [ 138.782338][ T4804] IPVS: starting estimator thread 0... [ 138.801345][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 138.884873][ T8502] IPVS: using max 60 ests per chain, 144000 per kthread [ 139.391856][ T4714] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 139.392151][ T4714] Bluetooth: hci3: Injecting HCI hardware error event [ 139.393599][ T4714] Bluetooth: hci3: hardware error 0x00 [ 139.765901][ T4715] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 140.005707][ T4715] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 140.007806][ T4715] Bluetooth: hci4: Injecting HCI hardware error event [ 140.012956][ T4721] Bluetooth: hci4: hardware error 0x00 [ 140.596849][ T8535] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1355'. [ 140.598010][ T8535] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1355'. [ 141.089720][ T8552] loop5: detected capacity change from 0 to 128 [ 141.155541][ T8555] netlink: 'syz.2.1362': attribute type 1 has an invalid length. [ 141.160206][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 141.163202][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 141.176294][ T8555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.206788][ T8555] bond1: (slave ip6gretap1): making interface the new active one [ 141.208472][ T8555] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 142.004971][ T4714] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 142.083660][ T4807] IPVS: starting estimator thread 0... [ 142.225242][ T8573] IPVS: using max 61 ests per chain, 146400 per kthread [ 142.355040][ T4714] Bluetooth: hci5: link tx timeout [ 142.357258][ T4714] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 142.358469][ T4714] Bluetooth: hci5: link tx timeout [ 142.358488][ T4714] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.561376][ T8599] netlink: 'syz.0.1370': attribute type 4 has an invalid length. [ 142.645224][ T4721] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 143.733346][ T8612] loop5: detected capacity change from 0 to 4096 [ 143.888891][ T8612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.967497][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.278759][ T4721] Bluetooth: hci5: link tx timeout [ 144.278820][ T4721] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.279598][ T4721] Bluetooth: hci5: link tx timeout [ 144.279607][ T4721] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.406879][ T4721] Bluetooth: hci5: command 0x0406 tx timeout [ 145.541726][ T8684] fuse: Bad value for 'fd' [ 145.561770][ T8686] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1409'. [ 145.837842][ T8692] fuse: fd is not a fuse device [ 146.575020][ T4721] Bluetooth: hci5: command 0x0406 tx timeout [ 146.935925][ T8731] capability: warning: `syz.4.1426' uses deprecated v2 capabilities in a way that may be insecure [ 148.235688][ T8782] binder: 8781:8782 tried to acquire reference to desc 0, got 1 instead [ 148.237861][ T8782] binder: 8781:8782 got transaction to invalid handle, 3 [ 148.239297][ T8782] binder: 8781:8782 cannot find target node [ 148.240379][ T8782] binder: 8781:8782 transaction call to 0:0 failed 128/29201/-22, code 0 size 0-0 line 3234 [ 148.563978][ T8789] fuse: fd is not a fuse device [ 148.575275][ T8785] overlayfs: failed to get inode (-116) [ 148.575352][ T8785] overlayfs: failed to get inode (-116) [ 148.575691][ T8785] overlayfs: failed to get inode (-116) [ 148.575752][ T8785] overlayfs: failed to get inode (-116) [ 148.578345][ T1022] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.659362][ T8797] loop6: detected capacity change from 0 to 256 [ 148.659850][ T8797] vfat: Unknown parameter 'uni_xltf8' [ 149.302913][ T8812] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 149.302959][ T8812] overlayfs: failed to set xattr on upper [ 149.302965][ T8812] overlayfs: ...falling back to redirect_dir=nofollow. [ 149.302972][ T8812] overlayfs: ...falling back to uuid=null. [ 149.708396][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 149.708441][ T30] audit: type=1326 audit(149.700:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8820 comm="syz.2.1461" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x7ffc0000 [ 149.708463][ T30] audit: type=1326 audit(149.700:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8820 comm="syz.2.1461" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x7ffc0000 [ 149.718389][ T30] audit: type=1326 audit(149.710:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8820 comm="syz.2.1461" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x7ffc0000 [ 149.722759][ T30] audit: type=1326 audit(149.710:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8820 comm="syz.2.1461" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x7ffc0000 [ 149.722817][ T30] audit: type=1326 audit(149.710:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8820 comm="syz.2.1461" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8378f68 code=0x7ffc0000 [ 149.731070][ T30] audit: type=1326 audit(149.720:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8820 comm="syz.2.1461" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x7ffc0000 [ 149.736243][ T30] audit: type=1326 audit(149.730:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8820 comm="syz.2.1461" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x7ffc0000 [ 149.736270][ T30] audit: type=1326 audit(149.730:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8820 comm="syz.2.1461" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x7ffc0000 [ 149.737593][ T30] audit: type=1326 audit(149.730:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8820 comm="syz.2.1461" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x7ffc0000 [ 149.737609][ T30] audit: type=1326 audit(149.730:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8820 comm="syz.2.1461" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x7ffc0000 [ 150.031440][ T8825] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 150.115689][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1465'. [ 150.117629][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1465'. [ 150.966968][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1468'. [ 150.967019][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 151.025017][ T8849] netlink: 'syz.0.1471': attribute type 64 has an invalid length. [ 151.273800][ T8874] loop5: detected capacity change from 0 to 1024 [ 151.274558][ T8874] EXT4-fs: Ignoring removed oldalloc option [ 151.274568][ T8874] EXT4-fs: Ignoring removed oldalloc option [ 151.274580][ T8874] EXT4-fs: quotafile must be on filesystem root [ 151.565522][ T8877] fuse: fd is not a fuse device [ 151.599226][ T8881] loop6: detected capacity change from 0 to 256 [ 151.607953][ T8881] FAT-fs (loop6): Directory bread(block 1285) failed [ 151.609423][ T8881] FAT-fs (loop6): Directory bread(block 1286) failed [ 151.610674][ T8881] FAT-fs (loop6): Directory bread(block 1287) failed [ 151.611951][ T8881] FAT-fs (loop6): Directory bread(block 1288) failed [ 151.619188][ T8881] FAT-fs (loop6): Directory bread(block 1285) failed [ 151.621086][ T8881] FAT-fs (loop6): Directory bread(block 1286) failed [ 151.622512][ T8881] FAT-fs (loop6): Directory bread(block 1287) failed [ 151.624176][ T8881] FAT-fs (loop6): Directory bread(block 1288) failed [ 151.629303][ T8881] FAT-fs (loop6): Directory bread(block 1285) failed [ 151.631197][ T8881] FAT-fs (loop6): Directory bread(block 1286) failed [ 152.837984][ T8914] tipc: Enabling of bearer rejected, failed to enable media [ 153.490228][ T8931] netlink: 'syz.6.1506': attribute type 10 has an invalid length. [ 153.532634][ T8933] loop6: detected capacity change from 0 to 512 [ 153.534940][ T8933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.543543][ T8933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 153.546503][ T8933] System zones: 0-2, 18-18, 34-34 [ 153.546683][ T8933] EXT4-fs (loop6): orphan cleanup on readonly fs [ 153.546718][ T8933] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #4: comm syz.6.1507: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 153.546741][ T8933] loop6: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 153.554072][ T8933] EXT4-fs error (device loop6): ext4_quota_enable:7235: comm syz.6.1507: Bad quota inode: 4, type: 1 [ 153.555888][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 153.555900][ C1] EXT4-fs (loop6): last error at time 153: ext4_ext_check_inode:521: inode 4 [ 153.560694][ T8933] loop6: lost filesystem error report for type 5 error -117 [ 153.561759][ T8933] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.569632][ T8933] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 153.570147][ T8933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.588147][ T6571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.606767][ T4715] Bluetooth: hci1: command 0x0406 tx timeout [ 153.641904][ T8942] netlink: 'syz.5.1511': attribute type 1 has an invalid length. [ 153.668209][ T8942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.686989][ T8942] bond1: (slave gretap1): making interface the new active one [ 153.692419][ T8942] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 154.454917][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1522'. [ 154.455010][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1522'. [ 155.471488][ T9030] nftables ruleset with unbound set [ 155.757629][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1563'. [ 155.866949][ T9070] loop5: detected capacity change from 0 to 512 [ 155.873147][ T9070] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 155.884422][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 155.897179][ T9070] EXT4-fs (loop5): 1 truncate cleaned up [ 155.898737][ T9070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.935464][ T9070] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1568: invalid indirect mapped block 4294901760 (level 0) [ 155.939103][ T9070] EXT4-fs (loop5): Remounting filesystem read-only [ 155.957244][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.032112][ T9085] netlink: 'syz.0.1574': attribute type 7 has an invalid length. [ 156.148113][ T9094] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1577'. [ 156.236511][ T8997] Set syz1 is full, maxelem 65536 reached [ 156.289541][ T9110] syzkaller0: entered promiscuous mode [ 156.289579][ T9110] syzkaller0: entered allmulticast mode [ 156.762106][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1587'. [ 157.113839][ T9111] xfrm0 speed is unknown, defaulting to 1000 [ 157.125737][ T9111] xfrm0 speed is unknown, defaulting to 1000 [ 157.126465][ T9111] xfrm0 speed is unknown, defaulting to 1000 [ 157.166061][ T9111] infiniband syz0: set active [ 157.166672][ T4849] xfrm0 speed is unknown, defaulting to 1000 [ 157.169546][ T9111] infiniband syz0: added xfrm0 [ 157.183536][ T9111] RDS/IB: syz0: added [ 157.185520][ T9111] smc: adding ib device syz0 with port count 1 [ 157.187066][ T9111] smc: ib device syz0 port 1 has no pnetid [ 157.190037][ T4849] xfrm0 speed is unknown, defaulting to 1000 [ 157.193203][ T9111] xfrm0 speed is unknown, defaulting to 1000 [ 157.269621][ T9150] binder: 9149:9150 tried to acquire reference to desc 0, got 1 instead [ 157.271806][ T9150] binder: 9149:9150 ioctl c0306201 0 returned -14 [ 157.279856][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1600'. [ 157.326238][ T9111] xfrm0 speed is unknown, defaulting to 1000 [ 157.423468][ T4849] binder: undelivered transaction 133, process died. [ 157.437722][ T9111] xfrm0 speed is unknown, defaulting to 1000 [ 157.494236][ T9111] xfrm0 speed is unknown, defaulting to 1000 [ 157.533905][ T4849] binder: undelivered TRANSACTION_COMPLETE [ 157.552534][ T9111] xfrm0 speed is unknown, defaulting to 1000 [ 157.862546][ T9184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1613'. [ 157.945534][ T9111] xfrm0 speed is unknown, defaulting to 1000 [ 158.194178][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'. [ 158.196191][ T9191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1617'. [ 158.261104][ T9200] 9p: Bad value for 'rfdno' [ 158.422495][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1629'. [ 158.436873][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 158.436925][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1630'. [ 158.464633][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000cc14303e: rx timeout, send abort [ 158.662807][ T9242] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 158.871964][ T9247] usb usb8: usbfs: process 9247 (syz.4.1640) did not claim interface 0 before use [ 158.874073][ T9247] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.964729][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000c9adcf43: rx timeout, send abort [ 158.965609][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000cc14303e: abort rx timeout. Force session deactivation [ 159.093868][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1647'. [ 159.464787][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000c9adcf43: abort rx timeout. Force session deactivation [ 160.452493][ T9372] 9pnet: p9_errstr2errno: server reported unknown error [ 160.529174][ T9380] fuse: fd is not a fuse device [ 160.558878][ T9382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.094731][ T9409] fuse: fd is not a fuse device [ 161.167022][ T9411] __nla_validate_parse: 6 callbacks suppressed [ 161.167070][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1705'. [ 162.186382][ T9419] syzkaller0: entered promiscuous mode [ 162.189606][ T9419] syzkaller0: entered allmulticast mode [ 162.439837][ T9433] netlink: 'syz.6.1716': attribute type 39 has an invalid length. [ 162.464978][ T9440] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1714'. [ 162.932012][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1726'. [ 163.223520][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'. [ 163.261823][ T26] IPVS: starting estimator thread 0... [ 163.332678][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 163.332713][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 163.360814][ T9496] IPVS: using max 60 ests per chain, 144000 per kthread [ 163.403666][ T9508] netlink: 766 bytes leftover after parsing attributes in process `syz.5.1746'. [ 163.507974][ T9515] tipc: Started in network mode [ 163.508020][ T9515] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 163.508753][ T9515] tipc: Enabled bearer , priority 10 [ 163.575538][ T9519] netlink: 'syz.5.1751': attribute type 1 has an invalid length. [ 163.584106][ T9519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.607131][ T9519] bond2: (slave veth3): Enslaving as an active interface with a down link [ 163.627443][ T9519] bond2: (slave dummy0): making interface the new active one [ 163.631734][ T9519] dummy0: entered promiscuous mode [ 163.633146][ T9519] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 163.640110][ T9519] netlink: 'syz.5.1751': attribute type 10 has an invalid length. [ 163.640146][ T9519] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1751'. [ 163.644530][ T9519] bond2: (slave dummy0): Releasing active interface [ 163.681379][ T9524] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 163.681379][ T9524] The task syz.4.1752 (9524) triggered the difference, watch for misbehavior. [ 163.854228][ T9530] loop5: detected capacity change from 0 to 512 [ 163.873555][ T9530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.931602][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.006386][ T9543] bridge0: port 3(syz_tun) entered disabled state [ 165.108052][ T9543] syz_tun (unregistering): left allmulticast mode [ 165.108097][ T9543] syz_tun (unregistering): left promiscuous mode [ 165.108141][ T9543] bridge0: port 3(syz_tun) entered disabled state [ 165.135322][ T9555] loop4: detected capacity change from 0 to 512 [ 165.144707][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 165.146585][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'. [ 165.168386][ T9555] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.175844][ T9555] EXT4-fs (loop4): 1 truncate cleaned up [ 165.180497][ T9555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.199587][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.257567][ T1022] tipc: Node number set to 4269801488 [ 165.312160][ T9567] loop6: detected capacity change from 0 to 1024 [ 165.319439][ T9567] EXT4-fs: Ignoring removed bh option [ 165.320247][ T9567] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 165.339501][ T9567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.346322][ T9567] EXT4-fs (loop6): shut down requested (2) [ 165.358676][ T9574] 9p: Bad value for 'rfdno' [ 165.404436][ T9577] loop4: detected capacity change from 0 to 512 [ 165.406303][ T9577] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.412925][ T9577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.431212][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.461421][ T9567] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 165.484765][ T6571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.722338][ T9617] loop4: detected capacity change from 0 to 128 [ 166.517996][ T9650] __nla_validate_parse: 2 callbacks suppressed [ 166.518039][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1804'. [ 166.518132][ T9650] netlink: get zone limit has 8 unknown bytes [ 166.569484][ T9654] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1807'. [ 166.620374][ T9660] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1809'. [ 167.232547][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 167.782362][ T9700] netlink: 'syz.5.1822': attribute type 4 has an invalid length. [ 167.782398][ T9700] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1822'. [ 168.367952][ T9738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.368201][ T9738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.461558][ T9744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.461756][ T9744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.981675][ T9760] 9pnet: p9_errstr2errno: server reported unknown error ./file0/.. [ 169.172237][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.174490][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.235405][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1850'. [ 169.590277][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 169.590307][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 169.590332][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 169.670104][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'. [ 169.673607][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.675598][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.677376][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.678937][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.297152][ T9804] trusted_key: encrypted_key: key trusted:syz not found [ 170.679494][ T9809] netlink: 'syz.6.1863': attribute type 4 has an invalid length. [ 170.939392][ T9824] PKCS8: Unsupported PKCS#8 version [ 171.199639][ T9832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.201985][ T9832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.931629][ T9879] syzkaller0: entered promiscuous mode [ 172.931664][ T9879] syzkaller0: entered allmulticast mode [ 173.112750][ T9891] VFS: Mount too revealing [ 173.336308][ T9901] syzkaller0: entered promiscuous mode [ 173.336350][ T9901] syzkaller0: entered allmulticast mode [ 173.360995][ T9905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.361825][ T9905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.539615][ T9928] 9pnet: p9_errstr2errno: server reported unknown error ./file0/../f [ 174.765182][ T9952] __nla_validate_parse: 3 callbacks suppressed [ 174.765223][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1914'. [ 175.322310][ T9962] 9pnet: p9_errstr2errno: server reported unknown error ./file0/.. [ 176.270767][ T9975] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1921'. [ 176.431767][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1925'. [ 176.442518][ T9985] fuse: fd is not a fuse device [ 176.444292][ T3750] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.444355][ T3750] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.444374][ T3750] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.444391][ T3750] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.446175][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1925'. [ 176.495221][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.495424][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.796384][T10018] fuse: fd is not a fuse device [ 176.836998][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1940'. [ 177.061963][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 177.061996][ T30] audit: type=1326 audit(177.050:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10029 comm="syz.2.1944" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8378f68 code=0x0 [ 177.211005][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.211226][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.512977][T10051] tipc: Started in network mode [ 177.514009][T10051] tipc: Node identity 5672181f1b37, cluster identity 4711 [ 177.514156][T10051] tipc: Enabled bearer , priority 0 [ 177.516840][T10051] syzkaller0: entered promiscuous mode [ 177.516855][T10051] syzkaller0: entered allmulticast mode [ 177.518562][T10051] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 177.526578][T10051] tipc: Resetting bearer [ 177.529567][T10050] tipc: Resetting bearer [ 177.537262][T10050] tipc: Disabling bearer [ 178.257222][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 178.545352][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1957'. [ 179.902592][T10116] tipc: Started in network mode [ 179.902631][T10116] tipc: Node identity da70320b37f, cluster identity 4711 [ 179.902693][T10116] tipc: Enabled bearer , priority 0 [ 179.903319][T10116] syzkaller0: entered promiscuous mode [ 179.903338][T10116] syzkaller0: entered allmulticast mode [ 179.919486][T10118] tls_set_device_offload_rx: netdev not found [ 179.922264][T10116] tipc: Resetting bearer [ 179.922385][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.922402][T10116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.928182][T10115] tipc: Resetting bearer [ 179.937622][T10115] tipc: Disabling bearer [ 180.307488][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1984'. [ 180.367808][T10141] tipc: Enabled bearer , priority 0 [ 180.371177][T10140] tipc: Disabling bearer [ 180.473464][T10152] syzkaller0: entered promiscuous mode [ 180.474657][T10152] syzkaller0: entered allmulticast mode [ 180.686973][T10160] tipc: Enabling of bearer rejected, failed to enable media [ 181.025390][T10179] syzkaller0: entered promiscuous mode [ 181.026583][T10179] syzkaller0: entered allmulticast mode [ 181.209167][T10200] binder: 10199:10200 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 181.211749][T10200] binder: 10200 RLIMIT_NICE not set [ 181.256446][T10203] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2014'. [ 181.264353][T10204] binder: 10199:10204 BC_FREE_BUFFER no match for buffer at offset 0 [ 181.878384][T10215] syzkaller0: entered promiscuous mode [ 181.878416][T10215] syzkaller0: entered allmulticast mode [ 182.075309][T10225] batadv_slave_0: entered promiscuous mode [ 182.075613][T10224] batadv_slave_0: left promiscuous mode [ 182.149422][T10227] 9pnet: p9_errstr2errno: server reported unknown error ./file0/../ [ 182.199285][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2026'. [ 182.199323][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2026'. [ 182.207373][ T1234] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.207494][ T1234] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.207525][ T1234] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.207541][ T1234] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.213294][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2026'. [ 182.213309][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2026'. [ 182.311285][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 182.371380][T10252] binder: 10251:10252 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 182.373820][T10252] binder: 10252 RLIMIT_NICE not set [ 182.430333][T10258] binder: 10251:10258 BC_FREE_BUFFER no match for buffer at offset 0 [ 182.495360][T10259] 9pnet: p9_errstr2errno: server reported unknown error ./file0/../ [ 182.609566][T10279] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2046'. [ 182.613832][T10279] syzkaller1: entered promiscuous mode [ 182.614218][T10279] syzkaller1: entered allmulticast mode [ 183.424786][T10301] fuse: fd is not a fuse device [ 184.903976][T10372] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2077'. [ 184.957150][T10374] binder: 10373:10374 tried to acquire reference to desc 0, got 1 instead [ 184.957626][T10374] binder: 10373:10374 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 184.957638][T10374] binder: 10374 RLIMIT_NICE not set [ 184.957649][T10374] binder: 10374 RLIMIT_NICE not set [ 184.959615][ T26] binder: release 10373:10374 transaction 146 out, still active [ 184.959636][ T26] binder: undelivered TRANSACTION_COMPLETE [ 184.979953][ T26] binder: release 10373:10374 transaction 146 in, still active [ 184.979991][ T26] binder: send failed reply for transaction 146, target dead [ 185.387642][T10395] gtp1: entered promiscuous mode [ 185.387679][T10395] gtp1: entered allmulticast mode [ 185.409799][T10397] binder: release 10396:10397 transaction 151 in, still active [ 185.409837][T10397] binder: send failed reply for transaction 151 to 10396:10397 [ 185.410132][ T867] binder: undelivered TRANSACTION_COMPLETE [ 185.410143][ T867] binder: undelivered TRANSACTION_ERROR: 29189 [ 185.466727][T10395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.469228][T10395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.479798][ T867] binder: release 10401:10402 transaction 156 out, still active [ 185.479846][ T867] binder: undelivered TRANSACTION_COMPLETE [ 185.489888][T10404] tipc: Enabling of bearer rejected, failed to enable media [ 185.520712][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2091'. [ 185.523357][T10408] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2091'. [ 185.523659][T10408] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2091'. [ 185.601465][T10412] 9pnet: p9_errstr2errno: server reported unknown error ./file0/../ [ 185.781614][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'. [ 185.781966][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'. [ 185.882544][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.882743][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.116125][T10449] tipc: Enabled bearer , priority 10 [ 186.171199][T10455] fuse: fd is not a fuse device [ 186.189247][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'. [ 186.189277][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2109'. [ 186.189699][T10458] netlink: 'syz.2.2109': attribute type 14 has an invalid length. [ 186.189716][T10458] netlink: 'syz.2.2109': attribute type 11 has an invalid length. [ 186.194588][T10451] 9pnet: p9_errstr2errno: server reported unknown error ./file0/../ [ 186.507971][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 186.508003][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2118'. [ 186.508328][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 186.905172][T10491] 9pnet: p9_errstr2errno: server reported unknown error ./file0/../ [ 187.107484][T10509] fuse: fd is not a fuse device [ 187.240824][T10517] loop5: detected capacity change from 0 to 2048 [ 187.251566][T10517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.367214][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.422939][T10525] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 187.423955][T10525] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 187.424001][T10525] EXT4-fs (loop5): This should not happen!! Data will be lost [ 187.424001][T10525] [ 187.424046][T10525] EXT4-fs (loop5): Total free blocks count 0 [ 187.424096][T10525] EXT4-fs (loop5): Free/Dirty block details [ 187.424157][T10525] EXT4-fs (loop5): free_blocks=2415919504 [ 187.424202][T10525] EXT4-fs (loop5): dirty_blocks=48 [ 187.424235][T10525] EXT4-fs (loop5): Block reservation details [ 187.424267][T10525] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 188.104226][ T5370] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 188.111331][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.213427][T10540] fuse: fd is not a fuse device [ 188.217629][T10541] binder_user_error: 6 callbacks suppressed [ 188.217671][T10541] binder: 10539:10541 tried to acquire reference to desc 0, got 1 instead [ 188.221225][T10541] binder: 10539:10541 BC_FREE_BUFFER matched unreturned or currently freeing buffer at offset 0 [ 188.303937][T10545] loop4: detected capacity change from 0 to 2048 [ 188.330759][T10545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.424037][T10564] tipc: Enabled bearer , priority 0 [ 188.424359][T10564] syzkaller0: entered promiscuous mode [ 188.424370][T10564] syzkaller0: entered allmulticast mode [ 188.430394][T10564] tipc: Resetting bearer [ 188.433114][T10563] tipc: Resetting bearer [ 188.442683][T10563] tipc: Disabling bearer [ 188.519130][T10567] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 188.519430][T10567] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 188.519469][T10567] EXT4-fs (loop4): This should not happen!! Data will be lost [ 188.519469][T10567] [ 188.519502][T10567] EXT4-fs (loop4): Total free blocks count 0 [ 188.519535][T10567] EXT4-fs (loop4): Free/Dirty block details [ 188.519590][T10567] EXT4-fs (loop4): free_blocks=2415919504 [ 188.519635][T10567] EXT4-fs (loop4): dirty_blocks=48 [ 188.519666][T10567] EXT4-fs (loop4): Block reservation details [ 188.519697][T10567] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 188.939036][T10587] binder: 10586:10587 tried to acquire reference to desc 0, got 1 instead [ 188.941468][T10587] binder: 10586:10587 BC_FREE_BUFFER matched unreturned or currently freeing buffer at offset 0 [ 189.148173][ T4716] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 189.148996][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.296813][T10598] loop4: detected capacity change from 0 to 2048 [ 189.319623][T10598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.404558][T10603] loop6: detected capacity change from 0 to 4096 [ 189.412550][T10603] EXT4-fs: Ignoring removed orlov option [ 189.424895][T10603] EXT4-fs: Mount option(s) incompatible with ext2 [ 189.850764][T10621] fuse: fd is not a fuse device [ 190.442917][T10648] fuse: Bad value for 'rootmode' [ 190.499395][T10649] loop5: detected capacity change from 0 to 512 [ 190.943882][ T4716] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.167873][T10654] __nla_validate_parse: 3 callbacks suppressed [ 191.167916][T10654] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2174'. [ 191.256822][T10649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.912792][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.952985][T10666] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2178'. [ 192.793531][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 192.795926][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'. [ 192.800917][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 192.800950][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'. [ 192.837007][T10702] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2192'. [ 193.127272][ ** replaying previous printk message ** [ 193.127272][ T31] INFO: task syz.3.30:4990 blocked for more than 143 seconds. [ 193.127329][ T31] Tainted: G L syzkaller #0 [ 193.127336][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 193.127340][ T31] task:syz.3.30 state:D stack:0 pid:4990 tgid:4987 ppid:4712 task_flags:0x400040 flags:0x00800011 [ 193.127355][ T31] Call trace: [ 193.127359][ T31] __switch_to+0x2b0/0x6e0 (T) [ 193.127375][ T31] __schedule+0x1370/0x2d80 [ 193.127384][ T31] schedule+0x13c/0x20c [ 193.127391][ T31] futex_hash_allocate+0x74c/0xc20 [ 193.127402][ T31] futex_hash_prctl+0xd0/0x324 [ 193.127411][ T31] __arm64_sys_prctl+0x9b8/0x14e0 [ 193.127423][ T31] invoke_syscall+0x98/0x244 [ 193.127435][ T31] el0_svc_common+0xec/0x23c [ 193.127445][ T31] do_el0_svc+0x4c/0x5c [ 193.127456][ T31] el0_svc+0x64/0x260 [ 193.127465][ T31] el0t_64_sync_handler+0x48/0x148 [ 193.127474][ T31] el0t_64_sync+0x198/0x19c [ 193.127513][ T31] [ 193.127513][ T31] Showing all locks held in the system: [ 193.127519][ T31] 1 lock held by khungtaskd/31: [ 193.127524][ T31] #0: ffff800088cb6f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 193.127552][ T31] 2 locks held by pr/ttyAMA-1/41: [ 193.127567][ T31] 2 locks held by getty/4493: [ 193.127572][ T31] #0: ffff0000c9dec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 193.127594][ T31] #1: ffff80009248b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 193.127625][ T31] 1 lock held by syz.0.2197/10719: [ 193.127630][ T31] 2 locks held by syz.2.2201/10721: [ 193.127635][ T31] [ 193.127637][ T31] ============================================= [ 193.127637][ T31] [ 193.127643][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 193.156262][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 193.158034][ T31] Tainted: [L]=SOFTLOCKUP [ 193.158754][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 193.160485][ T31] Call trace: [ 193.161108][ T31] show_stack+0x2c/0x3c (C) [ 193.161942][ T31] __dump_stack+0x30/0x40 [ 193.162707][ T31] dump_stack_lvl+0x30/0x12c [ 193.163511][ T31] dump_stack+0x1c/0x28 [ 193.164251][ T31] vpanic+0x594/0xaf8 [ 193.164981][ T31] vpanic+0x0/0xaf8 [ 193.165620][ T31] hung_task_panic+0x0/0x2c [ 193.166297][ T31] kthread+0x304/0x3d4 [ 193.166925][ T31] ret_from_fork+0x10/0x20 [ 193.167553][ T31] SMP: stopping secondary CPUs [ 193.168252][ T31] Kernel Offset: disabled [ 193.168902][ T31] CPU features: 0x0a000000,003c0008,27020501,5427fea7 [ 193.169947][ T31] Memory Limit: none [ 193.504801][ T31] Rebooting in 86400 seconds..