last executing test programs: 9.842730743s ago: executing program 0 (id=792): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) 9.841501413s ago: executing program 3 (id=793): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="0a0101020000000000000000000000000000000032000000200100000000000000000000000000010000000000000000000000000000000008000000000000000100000001"], 0x15c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4", 0x11}], 0x1}}], 0x1, 0x8058) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4"], 0x398}}, 0x0) 9.078735164s ago: executing program 0 (id=794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x40a4, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c6372843ecbdda9f132dd908b4c422c6561746f723d30c6da432c64", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eeb646000000000000000801658ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cd"], 0x0, 0x5c8, &(0x7f0000005440)="$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") close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x4000804) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="06"], 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 8.996350445s ago: executing program 4 (id=796): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8.974150706s ago: executing program 3 (id=798): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}}, 0x0) 8.928319076s ago: executing program 0 (id=799): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000100)=@rose) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r6) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7.193550363s ago: executing program 4 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 7.069293984s ago: executing program 0 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) 6.993801716s ago: executing program 3 (id=803): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000100)=@rose) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x83f, &(0x7f0000000180)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r9, 0x3516, 0x0, 0x2, 0x0, 0x0) 5.752635614s ago: executing program 4 (id=806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f65"]) chdir(&(0x7f00000000c0)='./file0\x00') open(0x0, 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) migrate_pages(r0, 0xa94b, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x10b200) umount2(&(0x7f0000000340)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000e00)=ANY=[], 0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0086c43, &(0x7f0000000080)=0x700) 5.750922104s ago: executing program 0 (id=807): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x160}, 0x94) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x200000000005, 0x8000000000200003}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) 5.609217276s ago: executing program 3 (id=810): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r1}, @fd={0x77622a85}, @fda={0x66646185, 0x5, 0x1, 0x1a}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 4.615613081s ago: executing program 4 (id=812): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000100)=@rose) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r6) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.598332131s ago: executing program 2 (id=813): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @loopback}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}], 0x3c) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)='2', 0x1}], 0x1}, 0xc001) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 4.559063772s ago: executing program 1 (id=814): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) shutdown(r5, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r6], 0x4c}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x88}, {&(0x7f0000004900)=""/4068, 0xab}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xd4843, 0x0) unshare(0x22020600) 4.481852543s ago: executing program 2 (id=815): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}}, 0x0) 3.005605366s ago: executing program 2 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.004745976s ago: executing program 4 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) 2.928020996s ago: executing program 1 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) 2.525282773s ago: executing program 4 (id=819): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000000000008608ffffffff01"], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x4, @empty}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000540)=""/142, &(0x7f00000003c0)=0x8e) 2.442645264s ago: executing program 1 (id=820): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) 2.304173716s ago: executing program 1 (id=821): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0100001000130728bd7000"/30, @ANYBLOB="0a0101020000000000000000000000000000000032000000200100000000000000000000000000010000000000000000000000000000000008000000000000000100000001"], 0x15c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4", 0x11}], 0x1}}], 0x1, 0x8058) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4"], 0x398}}, 0x0) 2.160987568s ago: executing program 1 (id=822): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) r4 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000100)=@rose) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x83f, &(0x7f0000000180)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r7, 0x3516, 0x0, 0x2, 0x0, 0x0) 1.894432872s ago: executing program 2 (id=823): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f65"]) chdir(&(0x7f00000000c0)='./file0\x00') open(0x0, 0x33f, 0xfe) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x1a}, 0x28) migrate_pages(r0, 0xa94b, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x10b200) umount2(&(0x7f0000000340)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000e00)=ANY=[], 0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0086c43, &(0x7f0000000080)=0x700) 201.105498ms ago: executing program 1 (id=824): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x40a4, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c6372843ecbdda9f132dd908b4c422c6561746f723d30c6da432c64", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eeb646000000000000000801658ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cd"], 0x0, 0x5c8, &(0x7f0000005440)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x4000804) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x1a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="06"], 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 200.098028ms ago: executing program 2 (id=825): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r7 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 199.654798ms ago: executing program 3 (id=826): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @loopback}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}], 0x3c) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)='2', 0x1}], 0x1}, 0xc001) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 119.327949ms ago: executing program 0 (id=827): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}}, 0x0) 63.959779ms ago: executing program 3 (id=828): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) shutdown(r5, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r6], 0x4c}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x88}, {&(0x7f0000004900)=""/4068, 0xab}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xd4843, 0x0) unshare(0x22020600) 0s ago: executing program 2 (id=829): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000100)=@rose) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r6) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): veth0_macvtap entered promiscuous mode [ 41.306279][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.308939][ T4419] loop0: detected capacity change from 0 to 4096 [ 41.309045][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.314399][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.317360][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.331962][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.334952][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.337626][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.349460][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.354287][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.357788][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.364820][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.367777][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.371488][ T4420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 41.375995][ T4312] device veth1_macvtap entered promiscuous mode [ 41.394820][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.408587][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.431558][ T4305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.434003][ T4305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.436454][ T4305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.438962][ T4305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.457991][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.463297][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.488024][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.491617][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.497468][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.506350][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.509125][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.512787][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.517597][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.524291][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.527174][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.537597][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.541029][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.544072][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.547023][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.549767][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.554027][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.558413][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.561135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.564135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.567076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.571058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.608866][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.626252][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.629048][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.636788][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.652592][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.655592][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.659607][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.684373][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.687365][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.701497][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.704421][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.707085][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.713836][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.716621][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.719496][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.725268][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.729776][ T4312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.736559][ T4312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.739078][ T4312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.743058][ T4312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.805958][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.808706][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.813257][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.816078][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.836559][ T4314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.839205][ T4314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.879201][ T4314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.939007][ T27] audit: type=1400 audit(41.910:2): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4422 comm="syz.3.4" [ 42.116584][ T4314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.927305][ T4432] loop0: detected capacity change from 0 to 2048 [ 42.937382][ T4432] ======================================================= [ 42.937382][ T4432] WARNING: The mand mount option has been deprecated and [ 42.937382][ T4432] and is ignored by this kernel. Remove the mand [ 42.937382][ T4432] option from the mount to silence this warning. [ 42.937382][ T4432] ======================================================= [ 42.968735][ T4310] Bluetooth: hci4: command 0x040f tx timeout [ 42.972325][ T4311] Bluetooth: hci3: command 0x040f tx timeout [ 42.972371][ T4307] Bluetooth: hci1: command 0x040f tx timeout [ 42.972518][ T4321] Bluetooth: hci2: command 0x040f tx timeout [ 42.977753][ T4315] Bluetooth: hci0: command 0x040f tx timeout [ 43.058869][ T4432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 43.545208][ T4435] loop3: detected capacity change from 0 to 4096 [ 43.594348][ T1579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.596666][ T1579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.610220][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.615035][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.617345][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.639262][ T4442] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.657272][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.666388][ T1579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.668783][ T1579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.673058][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.757210][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.759431][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.764642][ T1579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.766984][ T1579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.773663][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.793126][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.852119][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.857528][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.864071][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.880423][ T3884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.908651][ T4445] loop1: detected capacity change from 0 to 4096 [ 43.968664][ T4447] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 44.071023][ T3884] usb 1-1: Using ep0 maxpacket: 8 [ 44.075894][ T3884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.080261][ T3884] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 44.082868][ T3884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 44.085244][ T3884] usb 1-1: SerialNumber: syz [ 44.254291][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.258056][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.260361][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.669473][ T27] audit: type=1400 audit(44.640:3): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4448 comm="syz.4.5" [ 44.765155][ T3884] usb 1-1: config 0 descriptor?? [ 44.773273][ T3884] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 44.775643][ T3884] usb 1-1: No valid video chain found. [ 45.104691][ T4310] Bluetooth: hci4: command 0x0419 tx timeout [ 45.106477][ T4310] Bluetooth: hci3: command 0x0419 tx timeout [ 45.108208][ T4310] Bluetooth: hci1: command 0x0419 tx timeout [ 45.109889][ T4310] Bluetooth: hci2: command 0x0419 tx timeout [ 45.111623][ T4310] Bluetooth: hci0: command 0x0419 tx timeout [ 46.657988][ T7] usb 1-1: USB disconnect, device number 2 [ 47.095527][ T4463] loop4: detected capacity change from 0 to 32768 [ 47.167086][ T4463] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 47.353932][ T4461] loop3: detected capacity change from 0 to 4096 [ 47.365546][ T4461] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 47.407766][ T4314] ocfs2: Unmounting device (7,4) on (node local) [ 47.419025][ T4461] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 47.429281][ T4461] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 47.629056][ T4489] loop2: detected capacity change from 0 to 32768 [ 47.698198][ T4489] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.18 (4489) [ 47.758751][ T4489] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.783048][ T4489] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 47.785772][ T4489] BTRFS info (device loop2): setting nodatacow, compression disabled [ 47.788222][ T4489] BTRFS info (device loop2): max_inline at 0 [ 47.819464][ T4489] BTRFS info (device loop2): enabling disk space caching [ 47.836706][ T4489] BTRFS info (device loop2): turning off barriers [ 47.839067][ T4489] BTRFS info (device loop2): turning on flush-on-commit [ 47.889741][ T4489] BTRFS info (device loop2): doing ref verification [ 48.021769][ T4489] BTRFS info (device loop2): force clearing of disk cache [ 48.023992][ T4489] BTRFS info (device loop2): enabling ssd optimizations [ 48.025935][ T4489] BTRFS info (device loop2): max_inline at 4096 [ 48.060022][ T4489] BTRFS info (device loop2): disk space caching is enabled [ 48.307249][ T11] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 48.325264][ T4306] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 48.376841][ T4493] loop0: detected capacity change from 0 to 32768 [ 48.390295][ T4489] BTRFS info (device loop2): rebuilding free space tree [ 48.459139][ T4489] BTRFS info (device loop2): disabling free space tree [ 48.461443][ T4489] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 48.489051][ T4489] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 48.547104][ T4493] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.19 (4493) [ 48.575960][ T4526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.578657][ T4526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.647069][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 48.651184][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.653440][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.419228][ T4312] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.447493][ T4522] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.658585][ T4540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.675199][ T4540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.294179][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.297772][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.300798][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.829079][ T4524] loop3: detected capacity change from 0 to 32768 [ 50.856773][ T4524] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 50.868794][ T4550] loop0: detected capacity change from 0 to 4096 [ 50.894493][ T4522] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.935981][ T4531] loop1: detected capacity change from 0 to 32768 [ 50.984813][ T4553] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.006935][ T4531] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 51.197524][ T4531] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 51.768229][ T4306] ocfs2: Unmounting device (7,3) on (node local) [ 52.700129][ T27] audit: type=1400 audit(52.660:4): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4563 comm="syz.0.29" [ 53.271067][ T4305] ocfs2: Unmounting device (7,1) on (node local) [ 53.595612][ T4560] loop3: detected capacity change from 0 to 32768 [ 53.622904][ T4560] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (4560) [ 53.645534][ T4560] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.655145][ T4560] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 53.663417][ T4560] BTRFS info (device loop3): setting nodatasum [ 53.665139][ T4560] BTRFS info (device loop3): force zlib compression, level 3 [ 53.667083][ T4560] BTRFS info (device loop3): metadata ratio 1 [ 53.699649][ T4560] BTRFS info (device loop3): enabling ssd optimizations [ 53.702608][ T4560] BTRFS info (device loop3): allowing degraded mounts [ 53.704555][ T4560] BTRFS info (device loop3): using free space tree [ 54.317437][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 54.321109][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.323216][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.748419][ T4570] loop0: detected capacity change from 0 to 32768 [ 54.759684][ T4306] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 54.803885][ T4604] loop4: detected capacity change from 0 to 4096 [ 54.853478][ T4570] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 54.920180][ T4607] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.982898][ T4611] loop2: detected capacity change from 0 to 4096 [ 55.026066][ T4616] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.086966][ T4313] ocfs2: Unmounting device (7,0) on (node local) [ 55.353059][ T4598] loop1: detected capacity change from 0 to 32768 [ 55.491055][ T27] audit: type=1400 audit(55.420:5): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4622 comm="syz.0.39" [ 55.502750][ T4598] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.35 (4598) [ 56.100137][ T4598] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 56.107857][ T4598] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 56.118008][ T4598] BTRFS info (device loop1): setting nodatacow, compression disabled [ 56.147237][ T4598] BTRFS info (device loop1): max_inline at 0 [ 56.148940][ T4598] BTRFS info (device loop1): enabling disk space caching [ 56.157347][ T4598] BTRFS info (device loop1): turning off barriers [ 56.159137][ T4598] BTRFS info (device loop1): turning on flush-on-commit [ 56.182237][ T4598] BTRFS info (device loop1): doing ref verification [ 56.194423][ T4598] BTRFS info (device loop1): force clearing of disk cache [ 56.196492][ T4598] BTRFS info (device loop1): enabling ssd optimizations [ 56.198515][ T4598] BTRFS info (device loop1): max_inline at 4096 [ 56.216333][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 56.260114][ T4598] BTRFS info (device loop1): disk space caching is enabled [ 57.116857][ T4598] BTRFS info (device loop1): rebuilding free space tree [ 57.128580][ T4598] BTRFS info (device loop1): disabling free space tree [ 57.141061][ T4598] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 57.143977][ T4598] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 57.440096][ T4609] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 57.660208][ T4609] usb 1-1: Using ep0 maxpacket: 8 [ 57.695709][ T4609] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.719351][ T4609] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 57.791775][ T4609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 57.861291][ T4609] usb 1-1: SerialNumber: syz [ 57.958209][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.960835][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.963650][ T4609] usb 1-1: config 0 descriptor?? [ 58.051907][ T4620] loop3: detected capacity change from 0 to 32768 [ 58.071069][ T4620] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.36 (4620) [ 58.107458][ T4305] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.327277][ T4609] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 58.329379][ T4609] usb 1-1: No valid video chain found. [ 59.481734][ T27] audit: type=1400 audit(59.300:6): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4668 comm="syz.1.45" [ 60.152744][ T4667] usb 1-1: USB disconnect, device number 3 [ 60.287936][ T4522] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop1 scanned by udevd (4522) [ 60.484809][ T4671] loop3: detected capacity change from 0 to 32768 [ 60.509113][ T4671] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 60.579504][ T4682] loop0: detected capacity change from 0 to 2048 [ 60.653582][ T4682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.791196][ T4677] loop1: detected capacity change from 0 to 32768 [ 60.871932][ T4677] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 61.047946][ T4693] netlink: 44 bytes leftover after parsing attributes in process `syz.4.51'. [ 61.781413][ T4305] ocfs2: Unmounting device (7,1) on (node local) [ 61.863050][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 61.878733][ T4695] loop4: detected capacity change from 0 to 4096 [ 61.988941][ T4700] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.085247][ T4299] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 62.309084][ T27] audit: type=1400 audit(62.270:7): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4701 comm="syz.1.56" [ 63.448415][ T4699] loop3: detected capacity change from 0 to 32768 [ 63.469470][ T4699] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 63.677526][ T4706] loop2: detected capacity change from 0 to 32768 [ 63.694436][ T4706] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 63.766993][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.778517][ T4450] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.780346][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.991575][ T4709] loop1: detected capacity change from 0 to 32768 [ 64.166968][ T4720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.183027][ T4709] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 64.205876][ T4720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.592509][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.599171][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.989699][ T4725] loop2: detected capacity change from 0 to 32768 [ 66.002152][ T4725] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 66.016254][ T4305] ocfs2: Unmounting device (7,1) on (node local) [ 66.124355][ T4731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.63'. [ 67.679222][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 67.985476][ T4746] binfmt_misc: register: failed to install interpreter file ./file2 [ 68.983357][ T27] audit: type=1400 audit(68.950:8): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4747 comm="syz.4.69" [ 69.613577][ T22] cfg80211: failed to load regulatory.db [ 70.118224][ T27] audit: type=1400 audit(70.080:9): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4752 comm="syz.2.71" [ 71.131041][ T27] audit: type=1400 audit(70.810:10): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4760 comm="syz.4.73" [ 71.619643][ T4776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.642889][ T4776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.646876][ T4778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.656570][ T4778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.933508][ T27] audit: type=1400 audit(72.890:11): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4781 comm="syz.2.79" [ 73.569362][ T4772] loop4: detected capacity change from 0 to 32768 [ 73.612831][ T4772] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 73.868137][ T4791] loop2: detected capacity change from 0 to 32768 [ 73.878901][ T4791] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 73.913780][ T4774] loop0: detected capacity change from 0 to 32768 [ 73.933819][ T4774] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.76 (4774) [ 73.966486][ T4774] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 73.969452][ T4774] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 73.974392][ T4774] BTRFS info (device loop0): using free space tree [ 74.050961][ T4299] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 74.494904][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 74.529354][ T4774] BTRFS info (device loop0): enabling ssd optimizations [ 74.728754][ T4314] ocfs2: Unmounting device (7,4) on (node local) [ 74.798609][ T4313] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.001611][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.006271][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.008542][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.303203][ T4541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4541) [ 75.438086][ T4802] loop2: detected capacity change from 0 to 32768 [ 75.534863][ T4802] XFS (loop2): Mounting V5 Filesystem [ 75.548714][ T4822] loop4: detected capacity change from 0 to 32768 [ 75.614323][ T4822] XFS (loop4): Mounting V5 Filesystem [ 75.648950][ T4802] XFS (loop2): Ending clean mount [ 75.662201][ T4802] XFS (loop2): Quotacheck needed: Please wait. [ 75.724953][ T4802] XFS (loop2): Quotacheck: Done. [ 75.835941][ T4822] XFS (loop4): Ending clean mount [ 75.839089][ T4822] XFS (loop4): Quotacheck needed: Please wait. [ 75.938047][ T4822] XFS (loop4): Quotacheck: Done. [ 76.207064][ T4849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.224504][ T4849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.474928][ T4824] loop0: detected capacity change from 0 to 2048 [ 76.551964][ T4824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 76.777820][ T4314] XFS (loop4): Unmounting Filesystem [ 76.814098][ T4312] XFS (loop2): Unmounting Filesystem [ 76.874235][ T4313] EXT4-fs (loop0): unmounting filesystem. [ 77.016066][ T4860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.018667][ T4860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.347341][ T4855] loop3: detected capacity change from 0 to 32768 [ 77.384582][ T4855] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 77.665828][ T4871] loop2: detected capacity change from 0 to 256 [ 77.685278][ T4871] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.688613][ T4871] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 77.708921][ T4871] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 77.833817][ T27] audit: type=1400 audit(77.790:12): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4867 comm="syz.3.95" [ 78.470979][ T4877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 78.560198][ T4541] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 79.286942][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 79.412949][ T4864] loop4: detected capacity change from 0 to 32768 [ 79.454265][ T4864] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 81.124529][ T27] audit: type=1400 audit(81.100:13): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4891 comm="syz.4.101" [ 81.155120][ T27] audit: type=1400 audit(81.120:14): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4893 comm="syz.2.100" [ 81.199983][ T4440] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 81.392287][ T4883] loop3: detected capacity change from 0 to 32768 [ 81.406924][ T4883] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 81.800129][ T4613] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.980218][ T4613] usb 1-1: Using ep0 maxpacket: 8 [ 81.984856][ T4613] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.989021][ T4613] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 82.004489][ T4613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 82.019994][ T4613] usb 1-1: SerialNumber: syz [ 82.070607][ T4299] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 82.181596][ T4613] usb 1-1: config 0 descriptor?? [ 82.186999][ T4613] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 82.188989][ T4613] usb 1-1: No valid video chain found. [ 82.306051][ T4921] loop4: detected capacity change from 0 to 2048 [ 82.424325][ T4921] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.146441][ T4536] usb 1-1: USB disconnect, device number 4 [ 83.645239][ T27] audit: type=1400 audit(83.620:15): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4923 comm="syz.4.108" [ 83.976624][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 84.096911][ T4925] netlink: 44 bytes leftover after parsing attributes in process `syz.2.118'. [ 85.758250][ T27] audit: type=1400 audit(85.150:16): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4937 comm="syz.4.111" [ 86.151360][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.155035][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.157196][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.271087][ T4942] loop0: detected capacity change from 0 to 32768 [ 86.305248][ T4942] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.312432][ T4942] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 86.318214][ T4942] BTRFS info (device loop0): using free space tree [ 86.358398][ T4944] loop2: detected capacity change from 0 to 32768 [ 86.412072][ T4944] XFS (loop2): Mounting V5 Filesystem [ 86.500568][ T4944] XFS (loop2): Ending clean mount [ 86.504405][ T4944] XFS (loop2): Quotacheck needed: Please wait. [ 86.648568][ T4944] XFS (loop2): Quotacheck: Done. [ 87.163073][ T4986] loop4: detected capacity change from 0 to 2048 [ 87.668357][ T27] audit: type=1400 audit(86.860:17): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4981 comm="syz.3.117" [ 87.863481][ T4986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.270353][ T4942] BTRFS error (device loop0): open_ctree failed: -12 [ 88.296005][ T4991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.298637][ T4991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.309820][ T4312] XFS (loop2): Unmounting Filesystem [ 88.327701][ T4992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.380595][ T4992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.597918][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 88.969129][ T4994] loop4: detected capacity change from 0 to 32768 [ 88.979770][ T4994] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.130 (4994) [ 88.989811][ T4994] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.000551][ T4994] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 89.003020][ T4994] BTRFS info (device loop4): using free space tree [ 89.308498][ T4994] BTRFS info (device loop4): enabling ssd optimizations [ 89.623615][ T5024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.125'. [ 89.864352][ T4397] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 89.975248][ T5000] loop0: detected capacity change from 0 to 32768 [ 89.996719][ T5000] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.124 (5000) [ 90.326770][ T5025] loop2: detected capacity change from 0 to 32768 [ 90.358387][ T4314] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.517815][ T5025] XFS (loop2): Mounting V5 Filesystem [ 90.534660][ T4299] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4299) [ 90.850157][ T27] audit: type=1400 audit(90.640:18): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5030 comm="syz.0.127" [ 91.331667][ T5025] XFS (loop2): Ending clean mount [ 91.352871][ T5025] XFS (loop2): Quotacheck needed: Please wait. [ 91.437452][ T4440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop4 scanned by udevd (4440) [ 91.496985][ T5025] XFS (loop2): Quotacheck: Done. [ 91.630231][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.633584][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.635812][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.134906][ T4312] XFS (loop2): Unmounting Filesystem [ 92.683316][ T27] audit: type=1400 audit(92.570:19): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5054 comm="syz.4.133" [ 93.226645][ T5060] loop0: detected capacity change from 0 to 2048 [ 93.319735][ T5060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.599922][ C0] sched: RT throttling activated [ 93.714525][ T5064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 93.797135][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.799734][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.460160][ T27] audit: type=1400 audit(94.360:20): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5068 comm="syz.0.137" [ 95.034243][ T5062] loop3: detected capacity change from 0 to 32768 [ 95.054188][ T5062] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 95.209777][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.213837][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.215987][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.486212][ T27] audit: type=1400 audit(95.440:21): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5079 comm="syz.1.139" [ 96.085985][ T5072] loop4: detected capacity change from 0 to 32768 [ 96.116178][ T5072] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.119219][ T5072] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 96.122870][ T5072] BTRFS info (device loop4): using free space tree [ 96.149052][ T4299] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4299) [ 96.358393][ T5072] BTRFS info (device loop4): enabling ssd optimizations [ 96.488870][ T4433] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 96.710452][ T5092] loop3: detected capacity change from 0 to 32768 [ 96.724457][ T5092] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.142 (5092) [ 96.777499][ T4314] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.787537][ T5098] loop0: detected capacity change from 0 to 32768 [ 96.833790][ T5098] XFS (loop0): Mounting V5 Filesystem [ 96.981726][ T5098] XFS (loop0): Ending clean mount [ 96.988396][ T5098] XFS (loop0): Quotacheck needed: Please wait. [ 97.020413][ T5098] XFS (loop0): Quotacheck: Done. [ 97.030943][ T5123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.033489][ T5123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.246571][ T5130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 97.253289][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.278952][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.935015][ T27] audit: type=1400 audit(97.760:22): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5133 comm="syz.1.150" [ 98.994169][ T4299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4299) [ 99.019547][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.023146][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.025333][ T5144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.151136][ T4313] XFS (loop0): Unmounting Filesystem [ 99.452686][ T5142] loop2: detected capacity change from 0 to 32768 [ 99.456428][ T5142] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 99.829957][ T4440] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 100.056119][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.059795][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.062219][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.417544][ T27] audit: type=1400 audit(100.390:23): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5156 comm="syz.0.154" [ 100.605759][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 100.804387][ T5173] loop0: detected capacity change from 0 to 256 [ 100.819368][ T5175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.826942][ T5173] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.830444][ T5175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.838959][ T5173] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 101.140648][ T27] audit: type=1400 audit(101.050:24): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5171 comm="syz.2.162" [ 101.368535][ T5173] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 101.969321][ T5153] loop1: detected capacity change from 0 to 32768 [ 101.979672][ T5153] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.997459][ T5153] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 101.999867][ T5153] BTRFS info (device loop1): using free space tree [ 102.227134][ T5153] BTRFS info (device loop1): enabling ssd optimizations [ 102.304151][ T5180] loop2: detected capacity change from 0 to 32768 [ 102.331763][ T5180] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 102.338957][ T34] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 102.470021][ T4536] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.500827][ T5178] loop3: detected capacity change from 0 to 32768 [ 102.698598][ T5178] XFS (loop3): Mounting V5 Filesystem [ 102.710041][ T4536] usb 1-1: Using ep0 maxpacket: 8 [ 102.717573][ T4536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.722000][ T4536] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 102.724594][ T4536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 102.802004][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.805557][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.808041][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.904696][ T5178] XFS (loop3): Ending clean mount [ 102.913188][ T5178] XFS (loop3): Quotacheck needed: Please wait. [ 102.952962][ T5178] XFS (loop3): Quotacheck: Done. [ 102.984393][ T4305] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.138601][ T4536] usb 1-1: SerialNumber: syz [ 103.147387][ T4536] usb 1-1: config 0 descriptor?? [ 103.152423][ T4536] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 103.154397][ T4536] usb 1-1: No valid video chain found. [ 103.190260][ T4541] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 103.677225][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.680986][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.683230][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.952008][ T27] audit: type=1400 audit(103.910:25): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5223 comm="syz.1.170" [ 104.914773][ T4306] XFS (loop3): Unmounting Filesystem [ 104.948801][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 104.971597][ T27] audit: type=1400 audit(104.730:26): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5228 comm="syz.2.172" [ 106.673919][ T5249] loop4: detected capacity change from 0 to 32768 [ 106.696011][ T5249] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 106.710824][ T5248] loop2: detected capacity change from 0 to 32768 [ 106.726880][ T5248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.178 (5248) [ 106.755544][ T5248] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.758737][ T5248] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 106.775590][ T5248] BTRFS info (device loop2): using free space tree [ 106.979028][ T4299] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 106.998364][ T5248] BTRFS info (device loop2): enabling ssd optimizations [ 107.022629][ T5260] loop1: detected capacity change from 0 to 32768 [ 107.055543][ T5260] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.063353][ T5260] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 107.084694][ T5260] BTRFS info (device loop1): setting nodatacow, compression disabled [ 107.100219][ T5260] BTRFS info (device loop1): max_inline at 0 [ 107.102044][ T5260] BTRFS info (device loop1): enabling disk space caching [ 107.104276][ T5260] BTRFS info (device loop1): turning off barriers [ 107.106469][ T5260] BTRFS info (device loop1): turning on flush-on-commit [ 107.110857][ T5260] BTRFS info (device loop1): doing ref verification [ 107.114259][ T5260] BTRFS info (device loop1): force clearing of disk cache [ 107.116569][ T5260] BTRFS info (device loop1): enabling ssd optimizations [ 107.123038][ T5260] BTRFS info (device loop1): max_inline at 4096 [ 107.126214][ T5260] BTRFS info (device loop1): disk space caching is enabled [ 107.129143][ T4441] usb 1-1: USB disconnect, device number 5 [ 107.192418][ T4469] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 107.354274][ T5261] loop4: detected capacity change from 0 to 32768 [ 107.360260][ T5261] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.180 (5261) [ 107.460990][ T5260] BTRFS info (device loop1): rebuilding free space tree [ 107.469098][ T5260] BTRFS info (device loop1): disabling free space tree [ 107.476588][ T5260] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.485747][ T5260] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 107.567091][ T4299] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.511196][ T4305] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.514989][ T4312] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.543194][ T5261] loop4: detected capacity change from 0 to 2048 [ 108.660519][ T27] audit: type=1400 audit(108.620:27): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5303 comm="syz.3.185" [ 109.243512][ T5261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.346175][ T5316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.348916][ T5316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.460766][ T4314] EXT4-fs (loop4): unmounting filesystem. [ 109.587949][ T5302] loop0: detected capacity change from 0 to 32768 [ 109.636126][ T5302] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.183 (5302) [ 109.655490][ T5302] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.658624][ T5302] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 109.673988][ T5302] BTRFS info (device loop0): using free space tree [ 109.726041][ T5330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 109.849554][ T5302] BTRFS info (device loop0): enabling ssd optimizations [ 109.947735][ T4392] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 110.146815][ T5319] loop4: detected capacity change from 0 to 32768 [ 110.181138][ T5319] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.188 (5319) [ 110.228653][ T5322] loop2: detected capacity change from 0 to 32768 [ 110.302726][ T5322] XFS (loop2): Mounting V5 Filesystem [ 110.415455][ T5322] XFS (loop2): Ending clean mount [ 110.424816][ T4313] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.434079][ T5322] XFS (loop2): Quotacheck needed: Please wait. [ 110.466354][ T5322] XFS (loop2): Quotacheck: Done. [ 110.609892][ T5361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.626297][ T5361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.772426][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 111.823680][ T4299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4299) [ 111.951489][ T4312] XFS (loop2): Unmounting Filesystem [ 113.017661][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.021597][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.024252][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.025366][ T5381] loop4: detected capacity change from 0 to 32768 [ 114.085456][ T5381] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.198 (5381) [ 114.117452][ T5381] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.140203][ T5381] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 114.142732][ T5381] BTRFS info (device loop4): setting nodatacow, compression disabled [ 114.142835][ T5389] loop2: detected capacity change from 0 to 1024 [ 114.145095][ T5381] BTRFS info (device loop4): max_inline at 0 [ 114.149531][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 114.164087][ T5381] BTRFS info (device loop4): enabling disk space caching [ 114.166273][ T5381] BTRFS info (device loop4): turning off barriers [ 114.168104][ T5381] BTRFS info (device loop4): turning on flush-on-commit [ 114.174452][ T5381] BTRFS info (device loop4): doing ref verification [ 114.176512][ T5381] BTRFS info (device loop4): force clearing of disk cache [ 114.178751][ T5381] BTRFS info (device loop4): enabling ssd optimizations [ 114.188652][ T5381] BTRFS info (device loop4): max_inline at 4096 [ 114.195133][ T5381] BTRFS info (device loop4): disk space caching is enabled [ 114.525945][ T5381] BTRFS info (device loop4): rebuilding free space tree [ 114.593344][ T5392] loop0: detected capacity change from 0 to 32768 [ 114.707158][ T5381] BTRFS info (device loop4): disabling free space tree [ 114.710045][ T5381] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.712802][ T5381] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.720461][ T5392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.201 (5392) [ 115.252865][ T5392] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.261306][ T5392] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 115.301247][ T5424] netlink: 44 bytes leftover after parsing attributes in process `syz.2.205'. [ 115.741421][ T5392] BTRFS info (device loop0): using free space tree [ 115.969525][ T5431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.973360][ T5431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.975587][ T5431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.998958][ T4314] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.347148][ T27] audit: type=1400 audit(116.320:28): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5445 comm="syz.3.210" [ 116.626754][ T5460] loop1: detected capacity change from 0 to 2048 [ 116.670516][ T5460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.981090][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 118.072593][ T5392] BTRFS error (device loop0): open_ctree failed: -22 [ 118.129057][ T5439] loop2: detected capacity change from 0 to 32768 [ 118.151514][ T5439] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.207 (5439) [ 118.172772][ T5439] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.175565][ T5439] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 118.236426][ T5439] BTRFS info (device loop2): using free space tree [ 118.300768][ T5473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.304109][ T5473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.569729][ T5439] BTRFS info (device loop2): enabling ssd optimizations [ 119.253331][ T5498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.256815][ T5498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.259133][ T5498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.314006][ T4312] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.324124][ T4541] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4541) [ 119.631616][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.635187][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.637468][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.959449][ T4299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4299) [ 120.125357][ T27] audit: type=1400 audit(120.100:29): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5509 comm="syz.3.221" [ 120.227905][ T5515] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.231771][ T5515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.234104][ T5515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.564366][ T5504] loop2: detected capacity change from 0 to 32768 [ 120.573795][ T5504] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.218 (5504) [ 120.588447][ T5504] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.596036][ T5504] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 120.600198][ T5504] BTRFS info (device loop2): setting nodatacow, compression disabled [ 120.608450][ T5504] BTRFS info (device loop2): max_inline at 0 [ 120.611006][ T5504] BTRFS info (device loop2): enabling disk space caching [ 120.621642][ T5504] BTRFS info (device loop2): turning off barriers [ 120.623564][ T5504] BTRFS info (device loop2): turning on flush-on-commit [ 120.633919][ T5504] BTRFS info (device loop2): doing ref verification [ 120.639799][ T5504] BTRFS info (device loop2): force clearing of disk cache [ 120.646837][ T5504] BTRFS info (device loop2): enabling ssd optimizations [ 120.654188][ T5504] BTRFS info (device loop2): max_inline at 4096 [ 120.666853][ T5504] BTRFS info (device loop2): disk space caching is enabled [ 121.049203][ T5531] loop3: detected capacity change from 0 to 1024 [ 121.117763][ T5504] BTRFS info (device loop2): rebuilding free space tree [ 121.127794][ T27] audit: type=1400 audit(121.100:30): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5525 comm="syz.4.223" [ 121.161781][ T5504] BTRFS info (device loop2): disabling free space tree [ 121.169119][ T4440] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.175260][ T5504] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.203863][ T5504] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.349377][ T4312] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.479617][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 121.802049][ T5547] loop2: detected capacity change from 0 to 2048 [ 121.989480][ T5547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.391352][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.394805][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.396922][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.943286][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.945959][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.173153][ T27] audit: type=1400 audit(126.150:31): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5574 comm="syz.2.234" [ 126.236525][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 126.396828][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.400859][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.403206][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.673964][ T5579] loop3: detected capacity change from 0 to 32768 [ 126.683399][ T5579] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.235 (5579) [ 126.873386][ T5590] netlink: 44 bytes leftover after parsing attributes in process `syz.4.238'. [ 127.535377][ T5579] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.538316][ T5579] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 127.595756][ T5579] BTRFS info (device loop3): setting nodatacow, compression disabled [ 127.598137][ T5579] BTRFS info (device loop3): max_inline at 0 [ 127.599782][ T5579] BTRFS info (device loop3): enabling disk space caching [ 127.603669][ T5579] BTRFS info (device loop3): turning off barriers [ 127.605644][ T5579] BTRFS info (device loop3): turning on flush-on-commit [ 127.611986][ T5579] BTRFS info (device loop3): doing ref verification [ 127.614062][ T5579] BTRFS info (device loop3): force clearing of disk cache [ 127.616158][ T5579] BTRFS info (device loop3): enabling ssd optimizations [ 127.618175][ T5579] BTRFS info (device loop3): max_inline at 4096 [ 127.619882][ T5579] BTRFS info (device loop3): disk space caching is enabled [ 127.982737][ T5601] loop2: detected capacity change from 0 to 2048 [ 128.966996][ T5601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.471160][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.474593][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.476787][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.982463][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.985966][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.988149][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.132634][ T5579] BTRFS error (device loop3): open_ctree failed: -12 [ 133.949604][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 133.987296][ T5648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.989913][ T5648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.055384][ T5650] loop4: detected capacity change from 0 to 256 [ 134.081555][ T5650] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.101603][ T5650] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 134.145246][ T5650] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 134.257253][ T4440] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4440) [ 134.570541][ T5658] binfmt_misc: register: failed to install interpreter file ./file2 [ 135.285447][ T5660] binder: 5659:5660 tried to acquire reference to desc 0, got 1 instead [ 135.321825][ T5664] loop0: detected capacity change from 0 to 256 [ 135.337192][ T5664] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.348392][ T5664] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 135.361571][ T5664] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 137.077066][ T5314] binder: undelivered transaction 5, process died. [ 137.079393][ T5314] binder: undelivered TRANSACTION_COMPLETE [ 137.433214][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.437111][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.439405][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.631101][ T5679] binfmt_misc: register: failed to install interpreter file ./file2 [ 139.105135][ T5686] binder: 5685:5686 tried to acquire reference to desc 0, got 1 instead [ 140.117928][ T4360] binder: undelivered transaction 10, process died. [ 140.121486][ T4360] binder: undelivered TRANSACTION_COMPLETE [ 140.215362][ T5693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 140.428171][ T5684] loop0: detected capacity change from 0 to 32768 [ 140.546711][ T5684] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.549562][ T5684] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 140.556448][ T5684] BTRFS info (device loop0): setting nodatacow, compression disabled [ 140.558633][ T5684] BTRFS info (device loop0): max_inline at 0 [ 140.580213][ T5684] BTRFS info (device loop0): enabling disk space caching [ 140.583275][ T27] audit: type=1400 audit(140.560:32): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5694 comm="syz.4.262" [ 140.583317][ T5684] BTRFS info (device loop0): turning off barriers [ 140.588257][ T5684] BTRFS info (device loop0): turning on flush-on-commit [ 140.593368][ T5684] BTRFS info (device loop0): doing ref verification [ 140.595697][ T5684] BTRFS info (device loop0): force clearing of disk cache [ 140.599825][ T5684] BTRFS info (device loop0): enabling ssd optimizations [ 140.616987][ T5684] BTRFS info (device loop0): max_inline at 4096 [ 140.618958][ T5684] BTRFS info (device loop0): disk space caching is enabled [ 140.849024][ T5684] BTRFS info (device loop0): rebuilding free space tree [ 140.866264][ T5684] BTRFS info (device loop0): disabling free space tree [ 140.880933][ T5684] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.902586][ T5684] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.093858][ T4313] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.117293][ T5697] loop3: detected capacity change from 0 to 32768 [ 141.140941][ T5697] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.263 (5697) [ 141.281461][ T5697] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.284475][ T5697] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 141.287021][ T5697] BTRFS info (device loop3): using free space tree [ 141.338936][ T5723] loop4: detected capacity change from 0 to 256 [ 141.360470][ T5723] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.363435][ T5723] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 141.399500][ T5723] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 141.410487][ T5729] loop2: detected capacity change from 0 to 256 [ 141.413357][ T5729] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.416270][ T5729] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 141.457202][ T5729] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 141.478298][ T5719] loop1: detected capacity change from 0 to 32768 [ 143.276838][ T5746] netlink: 44 bytes leftover after parsing attributes in process `syz.0.265'. [ 144.591076][ T5697] BTRFS error (device loop3): open_ctree failed: -12 [ 144.873471][ T4440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4440) [ 145.890252][ T5763] binfmt_misc: register: failed to install interpreter file ./file2 [ 146.213103][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 146.511597][ T5775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.650248][ T5775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.703713][ T5780] loop2: detected capacity change from 0 to 256 [ 146.706719][ T5780] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.709766][ T5780] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 146.745889][ T5780] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 146.754345][ T27] audit: type=1400 audit(146.730:33): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5776 comm="syz.1.271" [ 146.800906][ T5761] loop0: detected capacity change from 0 to 32768 [ 146.817573][ T5761] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.822884][ T5761] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 146.828578][ T5761] BTRFS info (device loop0): using free space tree [ 147.545018][ T5761] BTRFS info (device loop0): enabling ssd optimizations [ 147.946246][ T5781] loop3: detected capacity change from 0 to 32768 [ 147.965323][ T4313] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.983326][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.986753][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.989650][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.019479][ T5781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.275 (5781) [ 148.688114][ T4541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4541) [ 148.770330][ T5781] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.773295][ T5781] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 148.775795][ T5781] BTRFS info (device loop3): setting nodatacow, compression disabled [ 148.840395][ T5781] BTRFS info (device loop3): max_inline at 0 [ 148.872034][ T5781] BTRFS info (device loop3): enabling disk space caching [ 148.876431][ T5781] BTRFS info (device loop3): turning off barriers [ 148.878217][ T5781] BTRFS info (device loop3): turning on flush-on-commit [ 148.899204][ T5781] BTRFS info (device loop3): doing ref verification [ 148.901342][ T5781] BTRFS info (device loop3): force clearing of disk cache [ 148.903499][ T5781] BTRFS info (device loop3): enabling ssd optimizations [ 148.930020][ T5781] BTRFS info (device loop3): max_inline at 4096 [ 148.931919][ T5781] BTRFS info (device loop3): disk space caching is enabled [ 149.307637][ T5824] netlink: 44 bytes leftover after parsing attributes in process `syz.2.280'. [ 149.837539][ T5781] BTRFS error (device loop3): open_ctree failed: -12 [ 150.381999][ T5841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.281'. [ 151.450090][ T4440] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4440) [ 151.599676][ T5816] loop0: detected capacity change from 0 to 2048 [ 151.661282][ T5816] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 151.837322][ T4313] EXT4-fs (loop0): unmounting filesystem. [ 152.039660][ T5848] loop2: detected capacity change from 0 to 32768 [ 152.060333][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 152.163394][ T5848] XFS (loop2): Mounting V5 Filesystem [ 152.299076][ T5848] XFS (loop2): Ending clean mount [ 152.319210][ T5848] XFS (loop2): Quotacheck needed: Please wait. [ 152.340628][ T5848] XFS (loop2): Quotacheck: Done. [ 152.490377][ T5874] binder: 5873:5874 tried to acquire reference to desc 0, got 1 instead [ 152.646443][ T4312] XFS (loop2): Unmounting Filesystem [ 152.651673][ T27] audit: type=1400 audit(152.610:34): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5871 comm="syz.4.288" [ 152.687576][ T5859] loop0: detected capacity change from 0 to 32768 [ 152.706765][ T5859] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.485191][ T5859] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 153.487761][ T5859] BTRFS info (device loop0): using free space tree [ 153.497313][ T4615] binder: undelivered transaction 15, process died. [ 153.499178][ T4615] binder: undelivered TRANSACTION_COMPLETE [ 153.948957][ T5895] loop1: detected capacity change from 0 to 2048 [ 154.272197][ T5895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.603238][ T5859] BTRFS info (device loop0): enabling ssd optimizations [ 154.685037][ T5907] loop2: detected capacity change from 0 to 256 [ 154.688960][ T5907] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.692555][ T5907] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 154.706460][ T5907] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 154.782167][ T4873] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 154.809432][ T5885] loop4: detected capacity change from 0 to 32768 [ 154.891171][ T5885] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.894046][ T5885] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 154.900415][ T5885] BTRFS info (device loop4): setting nodatacow, compression disabled [ 154.902624][ T5885] BTRFS info (device loop4): max_inline at 0 [ 154.904327][ T5885] BTRFS info (device loop4): enabling disk space caching [ 154.906312][ T5885] BTRFS info (device loop4): turning off barriers [ 155.090526][ T5885] BTRFS info (device loop4): turning on flush-on-commit [ 155.131938][ T5885] BTRFS info (device loop4): doing ref verification [ 155.204359][ T5885] BTRFS info (device loop4): force clearing of disk cache [ 155.352344][ T5885] BTRFS info (device loop4): enabling ssd optimizations [ 155.459479][ T4313] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.656846][ T5885] BTRFS info (device loop4): max_inline at 4096 [ 155.658644][ T5885] BTRFS info (device loop4): disk space caching is enabled [ 155.726474][ T5908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.291'. [ 156.050723][ T5918] netlink: 44 bytes leftover after parsing attributes in process `syz.1.295'. [ 156.319071][ T5885] BTRFS info (device loop4): rebuilding free space tree [ 156.342268][ T5885] BTRFS info (device loop4): disabling free space tree [ 156.350109][ T5885] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.352872][ T5885] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.386524][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 156.618780][ T4314] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.663770][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.705772][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.968151][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.971747][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.973990][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.006163][ T4450] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop4 scanned by udevd (4450) [ 158.167639][ T5961] loop2: detected capacity change from 0 to 1024 [ 158.262786][ T4440] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.043992][ T5964] loop0: detected capacity change from 0 to 256 [ 159.064042][ T5964] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.067118][ T5964] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 159.104987][ T5964] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 160.572554][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 161.251885][ T5989] binfmt_misc: register: failed to install interpreter file ./file2 [ 162.048277][ T5993] loop3: detected capacity change from 0 to 1024 [ 162.210830][ T5982] loop0: detected capacity change from 0 to 32768 [ 162.219680][ T5982] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 162.940225][ T4299] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.037263][ T4440] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.872875][ T6013] loop2: detected capacity change from 0 to 2048 [ 164.204068][ T6013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.563219][ T6016] loop4: detected capacity change from 0 to 256 [ 164.584697][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 164.593580][ T6016] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.596557][ T6016] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 164.642019][ T4310] Bluetooth: hci4: command 0x0406 tx timeout [ 164.643824][ T4310] Bluetooth: hci0: command 0x0406 tx timeout [ 164.645598][ T4310] Bluetooth: hci1: command 0x0406 tx timeout [ 164.647420][ T4310] Bluetooth: hci2: command 0x0406 tx timeout [ 164.649199][ T4310] Bluetooth: hci3: command 0x0406 tx timeout [ 164.675788][ T6016] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 165.659511][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.663953][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.666201][ T6031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.764372][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.786758][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.021348][ T6039] loop4: detected capacity change from 0 to 256 [ 166.083040][ T6039] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.086134][ T6039] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 166.108085][ T6039] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 166.243132][ T6041] binfmt_misc: register: failed to install interpreter file ./file2 [ 168.584926][ T6064] loop4: detected capacity change from 0 to 1024 [ 169.475610][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 169.843394][ T6072] loop2: detected capacity change from 0 to 2048 [ 170.004021][ T6072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.459059][ T6076] loop1: detected capacity change from 0 to 256 [ 170.495467][ T6076] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.517601][ T6076] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 170.542040][ T6076] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 172.531518][ T6092] binder: 6091:6092 tried to acquire reference to desc 0, got 1 instead [ 172.996654][ T6098] netlink: 44 bytes leftover after parsing attributes in process `syz.2.343'. [ 173.164005][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 174.025904][ T5317] binder: undelivered transaction 20, process died. [ 174.028056][ T5317] binder: undelivered TRANSACTION_COMPLETE [ 174.557686][ T6122] loop0: detected capacity change from 0 to 2048 [ 175.044553][ T6124] loop3: detected capacity change from 0 to 2048 [ 175.188061][ T6124] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.191871][ T6122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.803217][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.806056][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.907000][ T6143] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.911100][ T6143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.913247][ T6143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.030248][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 177.254368][ T6148] netlink: 44 bytes leftover after parsing attributes in process `syz.4.362'. [ 177.418011][ T6152] loop0: detected capacity change from 0 to 1024 [ 178.563697][ T6158] loop4: detected capacity change from 0 to 1024 [ 178.648651][ T6158] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 179.088655][ T6164] loop0: detected capacity change from 0 to 2048 [ 179.237386][ T6164] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.140706][ T6178] loop4: detected capacity change from 0 to 2048 [ 181.204326][ T6178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.922665][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 182.254741][ T6196] loop4: detected capacity change from 0 to 1024 [ 182.257886][ T6198] binder: 6197:6198 tried to acquire reference to desc 0, got 1 instead [ 182.442053][ T4299] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.320982][ T6207] loop4: detected capacity change from 0 to 2048 [ 184.359543][ T3884] binder: undelivered transaction 25, process died. [ 184.392771][ T3884] binder: undelivered TRANSACTION_COMPLETE [ 184.496027][ T6207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.343389][ T6219] binder: 6211:6219 got transaction to invalid handle, 1 [ 185.345655][ T6219] binder: 6219:6211 cannot find target node [ 185.347331][ T6219] binder: 6211:6219 transaction async to 0:0 failed 29/29201/-22, size 80-0 line 3054 [ 185.813964][ T6218] loop4: detected capacity change from 0 to 2048 [ 185.936112][ T6218] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.310809][ T5314] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.746624][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 187.129648][ T6234] netlink: 44 bytes leftover after parsing attributes in process `syz.0.383'. [ 187.251632][ T6244] loop1: detected capacity change from 0 to 256 [ 187.264026][ T6244] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.267397][ T6244] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 187.287396][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.291225][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.293331][ T6246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.318762][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.331256][ T6244] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 187.350505][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.370709][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.372481][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.879979][ T6253] loop1: detected capacity change from 0 to 2048 [ 189.065934][ T6253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.722211][ T6258] loop1: detected capacity change from 0 to 1024 [ 189.790610][ T4299] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.025945][ T6264] loop2: detected capacity change from 0 to 1024 [ 190.277307][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 190.614414][ T6271] netlink: 44 bytes leftover after parsing attributes in process `syz.1.400'. [ 191.297632][ T6281] binder: 6280:6281 tried to acquire reference to desc 0, got 1 instead [ 191.485434][ T6283] loop1: detected capacity change from 0 to 1024 [ 192.268194][ T5307] binder: undelivered TRANSACTION_COMPLETE [ 192.319360][ T4361] binder: undelivered transaction 34, process died. [ 192.373978][ T6283] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 192.404779][ T6279] loop0: detected capacity change from 0 to 32768 [ 192.409697][ T6279] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.402 (6279) [ 192.440066][ T6279] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.454518][ T6279] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 192.456936][ T6279] BTRFS info (device loop0): using free space tree [ 192.553480][ T6294] loop4: detected capacity change from 0 to 1024 [ 192.610224][ T6297] binder: 6295:6297 tried to acquire reference to desc 0, got 1 instead [ 193.605464][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 193.623582][ T4361] binder: undelivered transaction 39, process died. [ 193.625563][ T4361] binder: undelivered TRANSACTION_COMPLETE [ 193.757032][ T6320] loop4: detected capacity change from 0 to 1024 [ 193.877551][ T4440] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.898861][ T6279] BTRFS error (device loop0): open_ctree failed: -22 [ 194.037305][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.041035][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.043293][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.615843][ T6336] netlink: 44 bytes leftover after parsing attributes in process `syz.4.416'. [ 194.764500][ T6323] loop2: detected capacity change from 0 to 32768 [ 194.773917][ T6323] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.414 (6323) [ 194.779987][ T6323] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.782944][ T6323] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 194.785804][ T6323] BTRFS info (device loop2): using free space tree [ 194.824440][ T4299] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4299) [ 194.922307][ T6323] BTRFS info (device loop2): enabling ssd optimizations [ 194.954340][ T6356] binder: 6351:6356 tried to acquire reference to desc 0, got 1 instead [ 195.954672][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.957303][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.967600][ T5311] binder: undelivered transaction 44, process died. [ 195.969697][ T5311] binder: undelivered TRANSACTION_COMPLETE [ 195.998338][ T4479] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 196.200369][ T4312] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.296783][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 196.862160][ T6380] netlink: 44 bytes leftover after parsing attributes in process `syz.0.420'. [ 197.447194][ T6383] loop3: detected capacity change from 0 to 1024 [ 198.179234][ T6376] loop2: detected capacity change from 0 to 32768 [ 198.208505][ T6376] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.424 (6376) [ 198.249154][ T6376] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.289498][ T6376] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 198.319394][ T6376] BTRFS info (device loop2): using free space tree [ 199.402969][ T6376] BTRFS error (device loop2): open_ctree failed: -22 [ 199.513793][ T6389] loop3: detected capacity change from 0 to 32768 [ 199.548054][ T6389] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.428 (6389) [ 199.655916][ T6389] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.656081][ T6421] loop0: detected capacity change from 0 to 1024 [ 199.659146][ T6389] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 199.666381][ T6389] BTRFS info (device loop3): using free space tree [ 199.922001][ T6429] loop1: detected capacity change from 0 to 2048 [ 200.052159][ T6429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.174084][ T4440] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.438035][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 200.521448][ T6389] BTRFS info (device loop3): enabling ssd optimizations [ 200.665350][ T9] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 200.795339][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 200.825414][ T6451] loop0: detected capacity change from 0 to 1024 [ 200.882379][ T4306] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.461321][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.464885][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.466972][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.614796][ T6465] netlink: 44 bytes leftover after parsing attributes in process `syz.3.443'. [ 202.486948][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.490952][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.493192][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.902033][ T6470] binder: 6469:6470 tried to acquire reference to desc 0, got 1 instead [ 203.868591][ T6478] loop2: detected capacity change from 0 to 2048 [ 204.025124][ T6478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.427162][ T5307] binder: undelivered transaction 49, process died. [ 204.429274][ T5307] binder: undelivered TRANSACTION_COMPLETE [ 204.576918][ T6480] binder: 6479:6480 tried to acquire reference to desc 0, got 1 instead [ 204.785440][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 205.921091][ T4353] binder: undelivered transaction 54, process died. [ 205.927440][ T4353] binder: undelivered TRANSACTION_COMPLETE [ 206.484493][ T6487] loop2: detected capacity change from 0 to 32768 [ 206.492984][ T6487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.450 (6487) [ 206.506155][ T6487] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.509180][ T6487] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 206.516015][ T6487] BTRFS info (device loop2): using free space tree [ 206.540077][ T112] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.675725][ T6487] BTRFS info (device loop2): enabling ssd optimizations [ 206.730109][ T112] usb 1-1: Using ep0 maxpacket: 8 [ 206.736036][ T112] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.753826][ T112] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 206.774854][ T112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 206.785627][ T112] usb 1-1: SerialNumber: syz [ 206.956214][ T112] usb 1-1: config 0 descriptor?? [ 206.956629][ T4470] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 206.962754][ T112] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 206.964739][ T112] usb 1-1: No valid video chain found. [ 208.081960][ T6533] netlink: 44 bytes leftover after parsing attributes in process `syz.1.456'. [ 208.097743][ T6530] netlink: 44 bytes leftover after parsing attributes in process `syz.3.457'. [ 208.995302][ T4312] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.230968][ T6545] netlink: 44 bytes leftover after parsing attributes in process `syz.3.458'. [ 209.345697][ T6546] loop1: detected capacity change from 0 to 2048 [ 210.221029][ T6546] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.624687][ T5356] usb 1-1: USB disconnect, device number 6 [ 211.672133][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 211.844740][ T6565] binder: 6564:6565 tried to acquire reference to desc 0, got 1 instead [ 212.018771][ T6569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.022306][ T6569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.024482][ T6569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.842891][ T6574] netlink: 44 bytes leftover after parsing attributes in process `syz.3.468'. [ 213.360265][ T6576] binder: BINDER_SET_CONTEXT_MGR already set [ 213.362188][ T6576] binder: 6575:6576 ioctl 4018620d 200000c0 returned -16 [ 213.430603][ T6576] binder: BINDER_SET_CONTEXT_MGR already set [ 213.432361][ T6576] binder: 6575:6576 ioctl 4018620d 20000040 returned -16 [ 213.459667][ T3884] binder: undelivered transaction 59, process died. [ 213.461850][ T3884] binder: undelivered TRANSACTION_COMPLETE [ 213.480711][ T6576] binder: tried to use weak ref as strong ref [ 213.482488][ T6576] binder: 6575:6576 Acquire 1 refcount change on invalid ref 0 ret -22 [ 213.772291][ T6578] binder: 6575:6578 got transaction to invalid handle, 1 [ 213.774403][ T6578] binder: 6578:6575 cannot find target node [ 213.776105][ T6578] binder: 6575:6578 transaction async to 0:0 failed 61/29201/-22, size 80-0 line 3054 [ 214.493960][ T4352] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.822284][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.875283][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.885310][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.456361][ T6588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.470'. [ 216.673530][ T6599] netlink: 44 bytes leftover after parsing attributes in process `syz.1.473'. [ 216.776683][ T6600] loop4: detected capacity change from 0 to 2048 [ 217.543708][ T6600] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.152364][ T6590] loop3: detected capacity change from 0 to 32768 [ 218.168743][ T6590] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.471 (6590) [ 218.188925][ T6590] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.192268][ T6590] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 218.194744][ T6590] BTRFS info (device loop3): using free space tree [ 218.477763][ T6590] BTRFS info (device loop3): enabling ssd optimizations [ 218.677491][ T4479] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 219.116521][ T4306] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.154056][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 220.083352][ T6636] binder: 6628:6636 got transaction to invalid handle, 1 [ 220.085330][ T6636] binder: 6636:6628 cannot find target node [ 220.087007][ T6636] binder: 6628:6636 transaction async to 0:0 failed 65/29201/-22, size 80-0 line 3054 [ 220.310051][ T5356] binder: undelivered TRANSACTION_ERROR: 29201 [ 221.424827][ T6650] binder: BINDER_SET_CONTEXT_MGR already set [ 221.435348][ T6650] binder: 6648:6650 ioctl 4018620d 20000040 returned -16 [ 221.446678][ T6651] loop2: detected capacity change from 0 to 1024 [ 221.492548][ T6653] loop0: detected capacity change from 0 to 1024 [ 221.634218][ T4299] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.960106][ T6655] binder: 6648:6655 got transaction to invalid handle, 1 [ 221.962113][ T6655] binder: 6655:6648 cannot find target node [ 221.963707][ T6655] binder: 6648:6655 transaction async to 0:0 failed 68/29201/-22, size 80-0 line 3054 [ 222.502538][ T5317] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.720352][ T6651] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 222.962349][ T4397] hfsplus: b-tree write err: -5, ino 4 [ 223.732562][ T6665] binder: 6660:6665 tried to acquire reference to desc 0, got 1 instead [ 224.458707][ T112] binder: undelivered TRANSACTION_COMPLETE [ 224.648445][ T4534] binder: undelivered transaction 73, process died. [ 224.946139][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 225.222457][ T6680] loop4: detected capacity change from 0 to 1024 [ 225.980392][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.983807][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.986102][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.226060][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.229547][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.231902][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.469041][ T5464] hfsplus: b-tree write err: -5, ino 4 [ 226.619271][ T6699] loop4: detected capacity change from 0 to 1024 [ 227.602106][ T6713] loop2: detected capacity change from 0 to 1024 [ 227.618724][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 227.841978][ T5464] hfsplus: b-tree write err: -5, ino 4 [ 228.592243][ T34] hfsplus: b-tree write err: -5, ino 4 [ 228.683300][ T6723] binder: tried to use weak ref as strong ref [ 228.685466][ T6723] binder: 6722:6723 Acquire 1 refcount change on invalid ref 0 ret -22 [ 228.688602][ T6723] binder: 6722:6723 got transaction to invalid handle, 1 [ 228.690731][ T6723] binder: 6723:6722 cannot find target node [ 228.692337][ T6723] binder: 6722:6723 transaction async to 0:0 failed 76/29201/-22, size 80-0 line 3054 [ 228.695540][ T4353] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.940069][ T6730] loop1: detected capacity change from 0 to 1024 [ 230.909523][ T4440] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.301743][ T6747] loop2: detected capacity change from 0 to 1024 [ 232.166866][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.221014][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.290683][ T6179] hfsplus: b-tree write err: -5, ino 4 [ 232.330365][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.353237][ T6760] loop2: detected capacity change from 0 to 256 [ 232.367671][ T6760] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.381175][ T6760] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 232.449837][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.495907][ T6760] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 233.330263][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.332484][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.552645][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 234.445513][ T6773] binder: 6772:6773 tried to acquire reference to desc 0, got 1 instead [ 234.729431][ T6778] binder_alloc: 6772: binder_alloc_buf, no vma [ 234.731622][ T6778] binder: cannot allocate buffer: vma cleared, target dead or dying [ 234.731867][ T6778] binder: 6772:6778 transaction async to 6772:0 failed 81/29189/-3, size 80-0 line 3239 [ 235.357399][ T27] audit: type=1400 audit(235.330:35): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6774 comm="syz.1.520" [ 235.372506][ T112] binder: undelivered TRANSACTION_ERROR: 29189 [ 235.696208][ T27] audit: type=1400 audit(235.670:36): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6780 comm="syz.2.521" [ 237.084126][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 237.992483][ T6813] binder: tried to use weak ref as strong ref [ 237.994238][ T6813] binder: 6812:6813 Acquire 1 refcount change on invalid ref 0 ret -22 [ 237.997259][ T6813] binder: 6812:6813 got transaction to invalid handle, 1 [ 237.999392][ T6813] binder: 6813:6812 cannot find target node [ 238.001239][ T6813] binder: 6812:6813 transaction async to 0:0 failed 84/29201/-22, size 80-0 line 3054 [ 238.004392][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.068006][ T6815] loop2: detected capacity change from 0 to 1024 [ 238.105886][ T6817] binder: 6816:6817 tried to acquire reference to desc 0, got 1 instead [ 238.238971][ T6824] loop1: detected capacity change from 0 to 256 [ 238.258325][ T6824] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.269272][ T6824] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 238.304330][ T4299] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.319155][ T6824] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 238.403876][ T6828] binder_alloc: 6816: binder_alloc_buf, no vma [ 238.405672][ T6828] binder: cannot allocate buffer: vma cleared, target dead or dying [ 238.405907][ T6828] binder: 6816:6828 transaction async to 6816:0 failed 89/29189/-3, size 80-0 line 3239 [ 239.093594][ T4614] binder: undelivered TRANSACTION_ERROR: 29189 [ 239.610536][ T6834] binder: 6826:6834 got transaction to invalid handle, 1 [ 239.612465][ T6834] binder: 6834:6826 cannot find target node [ 240.160224][ T6836] binder: 6829:6836 got transaction to invalid handle, 1 [ 240.162444][ T6836] binder_debug: 1 callbacks suppressed [ 240.162455][ T6836] binder: 6836:6829 cannot find target node [ 240.165796][ T6836] binder: 6829:6836 transaction async to 0:0 failed 95/29201/-22, size 80-0 line 3054 [ 241.294246][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 241.314272][ T5307] binder: undelivered TRANSACTION_ERROR: 29201 [ 241.316245][ T5307] binder: undelivered TRANSACTION_ERROR: 29201 [ 241.398497][ T6848] binder: 6847:6848 tried to acquire reference to desc 0, got 1 instead [ 241.498544][ T6850] loop2: detected capacity change from 0 to 1024 [ 242.282528][ T4361] binder: undelivered TRANSACTION_COMPLETE [ 242.363637][ T5307] binder: undelivered transaction 100, process died. [ 242.537756][ T6860] loop1: detected capacity change from 0 to 1024 [ 242.875692][ T6862] netlink: 44 bytes leftover after parsing attributes in process `syz.3.548'. [ 243.390630][ T6866] loop2: detected capacity change from 0 to 1024 [ 243.447303][ T4299] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.463193][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.466646][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.468799][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.532525][ T6872] binder: tried to use weak ref as strong ref [ 243.534346][ T6872] binder: 6871:6872 Acquire 1 refcount change on invalid ref 0 ret -22 [ 243.835006][ T6874] binder: 6871:6874 got transaction to invalid handle, 1 [ 243.837110][ T6874] binder: 6874:6871 cannot find target node [ 243.838812][ T6874] binder: 6871:6874 transaction async to 0:0 failed 103/29201/-22, size 80-0 line 3054 [ 244.546690][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.551138][ T6877] loop2: detected capacity change from 0 to 1024 [ 244.728346][ T6883] loop3: detected capacity change from 0 to 256 [ 244.736713][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.745475][ T6883] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.755737][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.758592][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.803504][ T6883] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 245.560077][ T6883] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 245.658150][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 245.711474][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.718207][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.329153][ T6905] netlink: 44 bytes leftover after parsing attributes in process `syz.3.559'. [ 248.244688][ T27] audit: type=1400 audit(248.220:37): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6910 comm="syz.3.561" [ 249.020109][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.022196][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.504749][ T6922] loop3: detected capacity change from 0 to 1024 [ 249.514892][ T6923] binder: 6920:6923 ioctl 4018620d 0 returned -22 [ 249.552381][ T4440] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.852745][ T6925] binder: 6920:6925 got transaction to invalid handle, 1 [ 249.854971][ T6925] binder: 6925:6920 cannot find target node [ 249.857151][ T6925] binder: 6920:6925 transaction async to 0:0 failed 106/29201/-22, size 80-0 line 3054 [ 250.566947][ T4441] binder: undelivered TRANSACTION_ERROR: 29201 [ 251.903320][ T6935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.566'. [ 252.900107][ T6937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.567'. [ 253.082088][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 253.217074][ T6949] loop4: detected capacity change from 0 to 1024 [ 254.230193][ T6954] netlink: 44 bytes leftover after parsing attributes in process `syz.0.572'. [ 255.200139][ T6955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.571'. [ 255.843332][ T4299] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.948142][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'. [ 255.952029][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 256.138165][ T6968] loop1: detected capacity change from 0 to 1024 [ 256.952485][ T6976] binder: 6970:6976 ioctl 4018620d 0 returned -22 [ 256.955085][ T6976] binder: 6970:6976 Acquire 1 refcount change on invalid ref 0 ret -22 [ 257.236755][ T6980] binder: 6970:6980 got transaction to invalid handle, 1 [ 257.238807][ T6980] binder: 6980:6970 cannot find target node [ 257.240725][ T6980] binder: 6970:6980 transaction async to 0:0 failed 108/29201/-22, size 80-0 line 3054 [ 257.905635][ T5356] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.918455][ T6979] binder: 6978:6979 Acquire 1 refcount change on invalid ref 0 ret -22 [ 258.113115][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 258.165600][ T6984] loop1: detected capacity change from 0 to 1024 [ 258.171028][ T4440] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.195989][ T6984] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 258.270482][ T6989] binder: 6978:6989 got transaction to invalid handle, 1 [ 258.272453][ T6989] binder: 6989:6978 cannot find target node [ 258.274454][ T6989] binder: 6978:6989 transaction async to 0:0 failed 110/29201/-22, size 80-0 line 3054 [ 258.710971][ T4352] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.982584][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.002294][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.924308][ T7000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.927726][ T7000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.930689][ T7000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.942924][ T7002] netlink: 44 bytes leftover after parsing attributes in process `syz.4.586'. [ 259.957842][ T7006] binder: 7005:7006 ioctl 4018620d 0 returned -22 [ 260.191810][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 260.311642][ T7013] binder: 7005:7013 got transaction to invalid handle, 1 [ 260.314017][ T7013] binder: 7013:7005 cannot find target node [ 260.315662][ T7013] binder: 7005:7013 transaction async to 0:0 failed 113/29201/-22, size 80-0 line 3054 [ 261.152213][ T7014] netlink: 44 bytes leftover after parsing attributes in process `syz.1.589'. [ 261.611591][ T4614] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.831916][ T7021] loop1: detected capacity change from 0 to 1024 [ 262.051461][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 262.297727][ T7038] binder: 7035:7038 tried to acquire reference to desc 0, got 1 instead [ 262.363029][ T7040] loop4: detected capacity change from 0 to 1024 [ 262.465592][ T7043] binder: 7041:7043 Acquire 1 refcount change on invalid ref 0 ret -22 [ 262.497204][ T4299] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.711052][ T7040] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 262.787602][ T7046] binder: 7041:7046 got transaction to invalid handle, 1 [ 262.789626][ T7046] binder: 7046:7041 cannot find target node [ 262.791490][ T7046] binder: 7041:7046 transaction async to 0:0 failed 120/29201/-22, size 80-0 line 3054 [ 263.444196][ T4667] binder: undelivered transaction 119, process died. [ 263.446112][ T4667] binder: undelivered TRANSACTION_COMPLETE [ 263.503441][ T5317] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.528431][ T7048] binder: 7047:7048 tried to acquire reference to desc 0, got 1 instead [ 264.197589][ T7053] netlink: 44 bytes leftover after parsing attributes in process `syz.1.602'. [ 264.435029][ T4667] binder: undelivered transaction 125, process died. [ 264.440624][ T4667] binder: undelivered TRANSACTION_COMPLETE [ 265.760154][ T7073] netlink: 44 bytes leftover after parsing attributes in process `syz.3.604'. [ 266.322509][ T7075] loop0: detected capacity change from 0 to 256 [ 266.360198][ T7075] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.363917][ T7075] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 266.371174][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 266.386185][ T7075] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 266.545765][ T7085] binder: 7083:7085 ioctl c0306201 0 returned -14 [ 266.767085][ T7090] binder: 7087:7090 ioctl c0306201 0 returned -14 [ 267.018833][ T7091] binder: 7083:7091 got transaction to invalid handle, 1 [ 267.021128][ T7091] binder: 7091:7083 cannot find target node [ 267.022903][ T7091] binder: 7083:7091 transaction async to 0:0 failed 130/29201/-22, size 80-0 line 3054 [ 267.816177][ T7093] binder: 7087:7093 got transaction to invalid handle, 1 [ 267.818309][ T7093] binder: 7093:7087 cannot find target node [ 267.820051][ T7093] binder: 7087:7093 transaction async to 0:0 failed 131/29201/-22, size 80-0 line 3054 [ 269.430560][ T4614] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.500809][ T4614] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.152857][ T7102] binder: 7101:7102 tried to acquire reference to desc 0, got 1 instead [ 270.574220][ T7105] loop1: detected capacity change from 0 to 2048 [ 270.663857][ T7105] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.102972][ T5317] binder: undelivered transaction 136, process died. [ 271.105462][ T5317] binder: undelivered TRANSACTION_COMPLETE [ 274.014839][ T7117] netlink: 44 bytes leftover after parsing attributes in process `syz.2.619'. [ 275.170066][ T5317] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 276.049275][ T7143] loop3: detected capacity change from 0 to 256 [ 276.071436][ T7143] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.079294][ T7143] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 276.086019][ T7139] binder: 7133:7139 ioctl 4018620d 0 returned -22 [ 276.101091][ T7139] binder: 7133:7139 Acquire 1 refcount change on invalid ref 0 ret -22 [ 276.191210][ T7143] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 276.680126][ T7151] binder: 7133:7151 got transaction to invalid handle, 1 [ 276.682208][ T7151] binder: 7151:7133 cannot find target node [ 276.683949][ T7151] binder: 7133:7151 transaction async to 0:0 failed 140/29201/-22, size 80-0 line 3054 [ 277.014341][ T7146] binder: 7140:7146 ioctl c0306201 0 returned -14 [ 277.349138][ T7155] binder: 7140:7155 got transaction to invalid handle, 1 [ 277.351321][ T7155] binder: 7155:7140 cannot find target node [ 277.353066][ T7155] binder: 7140:7155 transaction async to 0:0 failed 141/29201/-22, size 80-0 line 3054 [ 280.764860][ T4387] binder: undelivered TRANSACTION_ERROR: 29201 [ 280.773651][ T4387] binder: undelivered TRANSACTION_ERROR: 29201 [ 281.008481][ T7168] binder: 7167:7168 tried to acquire reference to desc 0, got 1 instead [ 283.294801][ T4387] binder: undelivered TRANSACTION_COMPLETE [ 283.313106][ T7165] binder: 7164:7165 ioctl c0306201 0 returned -14 [ 283.504736][ T7165] binder: 7164:7165 got transaction to invalid handle, 1 [ 283.506644][ T7165] binder: 7165:7164 cannot find target node [ 283.508295][ T7165] binder: 7164:7165 transaction async to 0:0 failed 149/29201/-22, size 80-0 line 3054 [ 283.563273][ T4614] binder: undelivered TRANSACTION_ERROR: 29201 [ 283.565050][ T4614] binder: undelivered transaction 146, process died. [ 285.165801][ T7187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.635'. [ 285.849328][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.870868][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.637504][ T7224] loop2: detected capacity change from 0 to 256 [ 288.660776][ T7224] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.663667][ T7224] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 288.677407][ T7224] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 288.712688][ T7226] loop1: detected capacity change from 0 to 1024 [ 290.364291][ T7234] binder: 7233:7234 ioctl c0306201 0 returned -14 [ 290.375776][ T4585] hfsplus: b-tree write err: -5, ino 4 [ 290.435375][ T7235] loop0: detected capacity change from 0 to 1024 [ 290.592905][ T7236] binder: 7231:7236 tried to acquire reference to desc 0, got 1 instead [ 290.670311][ T7239] binder: 7233:7239 got transaction to invalid handle, 1 [ 290.672515][ T7239] binder: 7239:7233 cannot find target node [ 290.674242][ T7239] binder: 7233:7239 transaction async to 0:0 failed 156/29201/-22, size 80-0 line 3054 [ 290.796418][ T4614] binder: undelivered TRANSACTION_COMPLETE [ 291.182340][ T4614] binder: undelivered TRANSACTION_ERROR: 29201 [ 291.358335][ T4548] hfsplus: b-tree write err: -5, ino 4 [ 291.434543][ T4614] binder: undelivered transaction 157, process died. [ 292.234572][ T7247] loop4: detected capacity change from 0 to 1024 [ 295.622816][ T9] hfsplus: b-tree write err: -5, ino 4 [ 295.800591][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.809078][ T7283] loop4: detected capacity change from 0 to 1024 [ 295.811432][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.898153][ T7289] binder: 7288:7289 ioctl c0306201 0 returned -14 [ 296.325136][ T7300] binder: 7288:7300 got transaction to invalid handle, 1 [ 296.327352][ T7300] binder: 7300:7288 cannot find target node [ 296.328971][ T7300] binder: 7288:7300 transaction async to 0:0 failed 160/29201/-22, size 80-0 line 3054 [ 296.508785][ T4299] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 296.692767][ T4387] binder: undelivered TRANSACTION_ERROR: 29201 [ 296.765737][ T7302] loop2: detected capacity change from 0 to 256 [ 296.780015][ T7302] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.784573][ T7302] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 296.805931][ T7307] binder: 7305:7307 tried to acquire reference to desc 0, got 1 instead [ 296.821141][ T7302] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 297.687381][ T4387] binder: undelivered transaction 165, process died. [ 297.691785][ T4387] binder: undelivered TRANSACTION_COMPLETE [ 297.740556][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.744072][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.746165][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.921137][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 297.924807][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.927154][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.369050][ T7332] loop2: detected capacity change from 0 to 1024 [ 298.543067][ T4299] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.845051][ T7338] loop0: detected capacity change from 0 to 2048 [ 299.285749][ T7338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.589285][ T7356] binder: 7354:7356 tried to acquire reference to desc 0, got 1 instead [ 301.195178][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 301.456564][ T5317] binder: undelivered transaction 170, process died. [ 301.458650][ T5317] binder: undelivered TRANSACTION_COMPLETE [ 301.522358][ T7371] loop3: detected capacity change from 0 to 1024 [ 301.661268][ T4440] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.780111][ T7379] netlink: 44 bytes leftover after parsing attributes in process `syz.0.690'. [ 303.336975][ T7381] loop2: detected capacity change from 0 to 2048 [ 303.525368][ T7381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.015902][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.019442][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.021688][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.178932][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.193225][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.291392][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 305.463047][ T7416] binder: 7415:7416 tried to acquire reference to desc 0, got 1 instead [ 305.614246][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.618613][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.621090][ T7419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.637772][ T4534] binder: undelivered TRANSACTION_COMPLETE [ 305.642637][ T4534] binder: undelivered transaction 175, process died. [ 306.385818][ T7429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.704'. [ 307.008764][ T7437] loop2: detected capacity change from 0 to 1024 [ 307.325122][ T7439] loop4: detected capacity change from 0 to 2048 [ 307.484187][ T7439] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.992488][ T7443] loop2: detected capacity change from 0 to 1024 [ 308.935183][ T7450] binder: 7449:7450 tried to acquire reference to desc 0, got 1 instead [ 308.997732][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.001281][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.003411][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.073146][ T4585] hfsplus: b-tree write err: -5, ino 4 [ 309.082208][ T5317] binder: undelivered TRANSACTION_COMPLETE [ 309.137961][ T3884] binder: undelivered transaction 180, process died. [ 309.167385][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 310.016570][ T7466] netlink: 44 bytes leftover after parsing attributes in process `syz.2.717'. [ 310.511982][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.513786][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.306760][ T7482] loop1: detected capacity change from 0 to 2048 [ 312.393387][ T7482] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.817226][ T7484] loop2: detected capacity change from 0 to 1024 [ 312.966629][ T7487] binder: 7486:7487 tried to acquire reference to desc 0, got 1 instead [ 312.985635][ T4440] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 313.134250][ T4387] binder: undelivered TRANSACTION_COMPLETE [ 313.185986][ T4352] binder: undelivered transaction 185, process died. [ 313.200452][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 313.873948][ T7505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.730'. [ 315.416609][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 315.420520][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.422681][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.827095][ T7530] loop3: detected capacity change from 0 to 2048 [ 316.284582][ T7530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.420002][ T4534] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 316.525090][ T7532] loop4: detected capacity change from 0 to 1024 [ 316.560660][ T7534] binder: BINDER_SET_CONTEXT_MGR already set [ 316.562329][ T7534] binder: 7533:7534 ioctl 4018620d 20000040 returned -16 [ 316.578575][ T7534] binder: tried to use weak ref as strong ref [ 316.585714][ T4440] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.588547][ T7534] binder: 7533:7534 Acquire 1 refcount change on invalid ref 0 ret -22 [ 316.600036][ T4534] usb 1-1: Using ep0 maxpacket: 8 [ 316.603078][ T4534] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.606785][ T4534] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 316.621505][ T4534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 316.623911][ T4534] usb 1-1: SerialNumber: syz [ 316.635145][ T4534] usb 1-1: config 0 descriptor?? [ 316.638951][ T4534] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 316.651205][ T7535] binder: 7533:7535 got transaction to invalid handle, 1 [ 316.653263][ T7535] binder: 7535:7533 cannot find target node [ 316.655053][ T7535] binder: 7533:7535 transaction async to 0:0 failed 188/29201/-22, size 80-0 line 3054 [ 316.663625][ T4534] usb 1-1: No valid video chain found. [ 316.984537][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 317.379809][ T4352] binder: undelivered TRANSACTION_ERROR: 29201 [ 317.977790][ T7559] netlink: 44 bytes leftover after parsing attributes in process `syz.4.745'. [ 318.557003][ T7563] loop4: detected capacity change from 0 to 1024 [ 318.758583][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.762337][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.764591][ T7572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.024368][ T7573] loop1: detected capacity change from 0 to 2048 [ 319.128326][ T7573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.649183][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 319.875553][ T7587] binder: 7585:7587 tried to acquire reference to desc 0, got 1 instead [ 320.054315][ T7592] loop1: detected capacity change from 0 to 1024 [ 320.303227][ T4388] usb 1-1: USB disconnect, device number 8 [ 320.675289][ T4534] binder: undelivered TRANSACTION_COMPLETE [ 320.707088][ T4534] binder: undelivered transaction 193, process died. [ 321.041419][ T5606] hfsplus: b-tree write err: -5, ino 4 [ 321.571522][ T7608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.575162][ T7608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.577370][ T7608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.863886][ T7610] loop0: detected capacity change from 0 to 2048 [ 322.036798][ T7610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.466768][ T7612] loop2: detected capacity change from 0 to 1024 [ 322.921048][ T7616] netlink: 44 bytes leftover after parsing attributes in process `syz.0.765'. [ 323.018313][ T4440] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.505518][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 323.778429][ T7628] binder: 7627:7628 tried to acquire reference to desc 0, got 1 instead [ 324.171180][ T4352] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 324.360573][ T4352] usb 1-1: Using ep0 maxpacket: 8 [ 324.371167][ T4352] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.378540][ T4352] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 324.389760][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 324.398603][ T4352] usb 1-1: SerialNumber: syz [ 324.415167][ T4352] usb 1-1: config 0 descriptor?? [ 324.431712][ T4352] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 324.433826][ T4352] usb 1-1: No valid video chain found. [ 324.634260][ T4352] binder: undelivered transaction 198, process died. [ 324.641809][ T4352] binder: undelivered TRANSACTION_COMPLETE [ 325.627699][ T7651] loop1: detected capacity change from 0 to 2048 [ 325.868210][ T7648] netlink: 44 bytes leftover after parsing attributes in process `syz.4.777'. [ 325.995113][ T7651] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.522799][ T7655] loop3: detected capacity change from 0 to 1024 [ 326.539637][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 326.546539][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 326.550202][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.552331][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.616769][ T4541] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.309571][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 327.313449][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.315787][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.165252][ T7685] binder: 7684:7685 tried to acquire reference to desc 0, got 1 instead [ 329.004400][ T4534] binder: undelivered TRANSACTION_COMPLETE [ 329.429097][ T4352] usb 1-1: USB disconnect, device number 9 [ 330.938021][ T4614] binder: undelivered transaction 203, process died. [ 331.223713][ T7707] loop2: detected capacity change from 0 to 2048 [ 331.299947][ T7707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.746300][ T7711] loop0: detected capacity change from 0 to 1024 [ 331.760951][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 331.799311][ T4541] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.143291][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.149374][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.430232][ T7738] netlink: 44 bytes leftover after parsing attributes in process `syz.1.797'. [ 334.046922][ T7748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 334.051170][ T7748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.053262][ T7748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.980235][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 334.983916][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.986255][ T7743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.253359][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 335.355892][ T7766] binder: 7762:7766 tried to acquire reference to desc 0, got 1 instead [ 335.383358][ T7769] loop2: detected capacity change from 0 to 1024 [ 335.722063][ T7770] loop4: detected capacity change from 0 to 2048 [ 335.989959][ T7770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.032012][ T4299] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 336.458341][ T4352] binder: undelivered TRANSACTION_COMPLETE [ 337.428400][ T7797] netlink: 44 bytes leftover after parsing attributes in process `syz.1.814'. [ 338.196857][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.200418][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.202613][ T7801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.288527][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.292241][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.294475][ T7803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.398712][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.415300][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.557724][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 339.877176][ T4441] binder: undelivered transaction 208, process died. [ 340.115689][ T7826] loop2: detected capacity change from 0 to 2048 [ 340.253526][ T7826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.708532][ T7829] loop1: detected capacity change from 0 to 1024 [ 340.971248][ C1] ================================================================== [ 340.973510][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x404/0x45c [ 340.975637][ C1] Read of size 2 at addr ffff0000f51b102a by task ksoftirqd/1/21 [ 340.977836][ C1] [ 340.978486][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.145-syzkaller #0 [ 340.980703][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.983558][ C1] Call trace: [ 340.984472][ C1] dump_backtrace+0x1c8/0x1f4 [ 340.985808][ C1] show_stack+0x2c/0x3c [ 340.986982][ C1] __dump_stack+0x30/0x40 [ 340.988235][ C1] dump_stack_lvl+0xf8/0x160 [ 340.989573][ C1] print_address_description+0x88/0x220 [ 340.991209][ C1] print_report+0x50/0x68 [ 340.992476][ C1] kasan_report+0xa8/0x100 [ 340.993699][ C1] __asan_report_load2_noabort+0x2c/0x38 [ 340.995344][ C1] rose_timer_expiry+0x404/0x45c [ 340.996698][ C1] call_timer_fn+0x1b8/0x964 [ 340.998038][ C1] __run_timers+0x460/0x6bc [ 340.999324][ C1] run_timer_softirq+0x7c/0x114 [ 341.000657][ C1] handle_softirqs+0x318/0xc6c [ 341.002030][ C1] run_ksoftirqd+0x7c/0x2a0 [ 341.003320][ C1] smpboot_thread_fn+0x4b0/0x964 [ 341.004685][ C1] kthread+0x250/0x2d8 [ 341.005906][ C1] ret_from_fork+0x10/0x20 [ 341.007162][ C1] [ 341.007813][ C1] Allocated by task 7426: [ 341.009056][ C1] kasan_set_track+0x4c/0x80 [ 341.010365][ C1] kasan_save_alloc_info+0x28/0x34 [ 341.011767][ C1] __kasan_kmalloc+0xa0/0xb8 [ 341.013088][ C1] __kmalloc_node_track_caller+0xe0/0x16c [ 341.014741][ C1] __alloc_skb+0x264/0x718 [ 341.015988][ C1] __netdev_alloc_skb+0xb8/0x3c4 [ 341.017424][ C1] __ieee80211_beacon_get+0x71c/0x19cc [ 341.018980][ C1] ieee80211_beacon_get_tim+0x68/0x444 [ 341.020516][ C1] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 341.022135][ C1] __iterate_interfaces+0x204/0x484 [ 341.023593][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 341.025657][ C1] mac80211_hwsim_beacon+0xc8/0x1b8 [ 341.027170][ C1] __hrtimer_run_queues+0x44c/0xc64 [ 341.028671][ C1] hrtimer_run_softirq+0x160/0x400 [ 341.030153][ C1] handle_softirqs+0x318/0xc6c [ 341.031488][ C1] __do_softirq+0x14/0x20 [ 341.032719][ C1] [ 341.033395][ C1] The buggy address belongs to the object at ffff0000f51b1000 [ 341.033395][ C1] which belongs to the cache kmalloc-512 of size 512 [ 341.037361][ C1] The buggy address is located 42 bytes inside of [ 341.037361][ C1] 512-byte region [ffff0000f51b1000, ffff0000f51b1200) [ 341.041178][ C1] [ 341.041790][ C1] The buggy address belongs to the physical page: [ 341.043662][ C1] page:000000008b137733 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f51b3000 pfn:0x1351b0 [ 341.046950][ C1] head:000000008b137733 order:2 compound_mapcount:0 compound_pincount:0 [ 341.049357][ C1] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 341.051778][ C1] raw: 05ffc00000010200 fffffc0003637508 fffffc000327d908 ffff0000c0002600 [ 341.054274][ C1] raw: ffff0000f51b3000 0000000000100001 00000001ffffffff 0000000000000000 [ 341.056728][ C1] page dumped because: kasan: bad access detected [ 341.058561][ C1] [ 341.059218][ C1] Memory state around the buggy address: [ 341.060826][ C1] ffff0000f51b0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 341.063139][ C1] ffff0000f51b0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 341.065434][ C1] >ffff0000f51b1000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 341.067746][ C1] ^ [ 341.069347][ C1] ffff0000f51b1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 341.071664][ C1] ffff0000f51b1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 341.073961][ C1] ================================================================== [ 341.076273][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.078036][ C1] Disabling lock debugging due to kernel taint [ 341.094781][ T4440] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 341.234629][ T7847] netlink: 44 bytes leftover after parsing attributes in process `syz.3.828'.