last executing test programs: 7.290385064s ago: executing program 0 (id=965): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, 0x0, &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e22, 0x1, @loopback, 0x4}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10005, 0x140008b}, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={0x0}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x800, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x44}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25090002"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 5.710664576s ago: executing program 3 (id=970): socket(0x10, 0x6, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) 5.660334818s ago: executing program 0 (id=972): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001280)={@val={0x0, 0x86dd}, @void, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x28, 0x2c, 0x0, @local, @mcast2, {[], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @loopback={0xf5ffffff}, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}, 0xb) write$cgroup_pid(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r8 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 4.851727789s ago: executing program 3 (id=986): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r0, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 4.462769895s ago: executing program 2 (id=988): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401000604"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) 3.964350275s ago: executing program 3 (id=989): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f0000002180)="af", 0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) 3.590994319s ago: executing program 2 (id=990): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401000604"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000001ff0), 0x10) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) 3.221609794s ago: executing program 3 (id=991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 2.673544305s ago: executing program 2 (id=993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.643140606s ago: executing program 2 (id=994): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4, 0x4, @remote, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 2.589660848s ago: executing program 2 (id=996): socket(0x10, 0x6, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = dup(r0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) 2.589398769s ago: executing program 0 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 2.577411979s ago: executing program 3 (id=999): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000d80)={0x44, 0x0, &(0x7f0000000c00)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f0000000c80)="bb047d0887a64ef1ce9e70c441aced1775a334586b5f43b75a1b70fcc3e656ef7de3aa3b053383b7466fa794770e8fc9bad2bca8223e0fce163ed9738675ded173813b0f60657e11aca5f89c04ae4ee8f503130f"}) 2.444382625s ago: executing program 3 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RSTATu(r6, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) socket$nl_route(0x10, 0x3, 0x0) 1.720494473s ago: executing program 1 (id=1005): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="c8fb", 0x2}], 0x1, 0x0, 0x0, 0x24048055}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000000640)="038db41c87da2337dae57772423900febc5de1724f2d936c82d723768fbb9a1abefcae73cfd3de58c3c39055e132c7232857b76bdc937d29e86a66b0d03e22d76e071ef73ba7b4f738555ad88c7bbd2e5a0d301c1d180862b2b424139df0502def7bc2", 0x63}], 0x1, 0x0, 0x0, 0x1}}], 0x2, 0x10000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.687361474s ago: executing program 1 (id=1006): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) 1.686890394s ago: executing program 0 (id=1007): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x90, 0x0, 0x4, 0x3ffd, 0x7}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 1.676800904s ago: executing program 2 (id=1008): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001280)={@val={0x0, 0x86dd}, @void, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x28, 0x2c, 0x0, @local, @mcast2, {[], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @loopback={0xf5ffffff}, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}, 0xb) write$cgroup_pid(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r8 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 1.662283215s ago: executing program 1 (id=1009): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.648683606s ago: executing program 0 (id=1010): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0xda74, 0x7, 0x6, {0x10, 0x2, 0x0, 0xfff9, 0x3}, {0x6, 0x0, 0x8, 0x0, 0x7, 0x8}, 0x3, 0x1, 0x101}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.52828819s ago: executing program 1 (id=1014): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000880)={0x3, 0x2, 0x5, 0xff5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4084) 1.52689905s ago: executing program 0 (id=1015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a2200000000000400000000000000002d0000000000000104800000200002000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) 621.962406ms ago: executing program 1 (id=1016): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="c8fb", 0x2}], 0x1, 0x0, 0x0, 0x24048055}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000000640)="038db41c87da2337dae57772423900febc5de1724f2d936c82d723768fbb9a1abefcae73cfd3de58c3c39055e132c7232857b76bdc937d29e86a66b0d03e22d76e071ef73ba7b4f738555ad88c7bbd2e5a0d301c1d180862b2b424139df0502def7bc2", 0x63}], 0x1, 0x0, 0x0, 0x1}}], 0x2, 0x10000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 617.501246ms ago: executing program 4 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006a0001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 564.471728ms ago: executing program 1 (id=1018): socket(0x10, 0x6, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = dup(r0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) 564.374618ms ago: executing program 4 (id=1019): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x646, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@fd={0x3, 0x1, 0x4, 0x800, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x2, 0x3, 0xb2, 0x6, "c809ecaa"}, 0x1000, 0x4, {}, 0x1ff}) 564.284338ms ago: executing program 4 (id=1020): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) 552.440418ms ago: executing program 4 (id=1021): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 534.383599ms ago: executing program 4 (id=1022): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 0s ago: executing program 4 (id=1023): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) kernel console output (not intermixed with test programs): nded to keep mac addresses unique to avoid problems! [ 47.829179][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.830605][ T4287] device veth0_vlan entered promiscuous mode [ 47.832967][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.834849][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.836293][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.837983][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.841461][ T4280] device veth0_macvtap entered promiscuous mode [ 47.845731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.847377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.849807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.855025][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.856896][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.859206][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.861472][ T4287] device veth1_vlan entered promiscuous mode [ 47.863128][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.864792][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.867108][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.869704][ T4280] device veth1_macvtap entered promiscuous mode [ 47.883080][ T4291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.884973][ T4291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.886645][ T4291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.888183][ T4291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.890855][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.892769][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.895373][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.897036][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.899322][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.908348][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.910004][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.911565][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.913235][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.919224][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.921115][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.922831][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.925784][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.927410][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.929155][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.931423][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.939331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.941054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.943705][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.948147][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.949902][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.951778][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.954105][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.958534][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.960426][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.962221][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.964078][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.966686][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.968469][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.970677][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.973926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.975830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.977398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.979015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.982843][ T1642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.984337][ T1642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.992040][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.993640][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.996325][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.997899][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.000300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.007882][ T4287] device veth0_macvtap entered promiscuous mode [ 48.010421][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.011941][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.013529][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.015382][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.019716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.022001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.023724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.036188][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.037555][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.038761][ T4287] device veth1_macvtap entered promiscuous mode [ 48.046189][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.047810][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.056939][ T1642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.058428][ T1642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.062237][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.064156][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.067173][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.069036][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.070847][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.072733][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.075398][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.077189][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.079835][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.083421][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.085562][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.087268][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.102171][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.103607][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.104125][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.106905][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.108856][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.110794][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.112619][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.116843][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.118635][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.120562][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.123380][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.127913][ T1642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.130110][ T1642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.133194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.134802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.136192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.137827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.147112][ T118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.147816][ T4287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.148480][ T118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.149988][ T4287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.152753][ T4287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.156133][ T4287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.159864][ T118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.211065][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.212451][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.213779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.249192][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.250603][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.252539][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.256397][ T4362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.267767][ T4362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.284975][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.286405][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.303740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.309018][ T118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.310618][ T118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.312030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.436422][ T4383] device syzkaller0 entered promiscuous mode [ 49.018262][ T4411] tipc: Failed to remove unknown binding: 66,0,0/0:3303961236/3303961238 [ 49.020224][ T4411] tipc: Failed to remove unknown binding: 66,0,0/0:3303961236/3303961237 [ 49.022504][ T4411] tipc: Failed to remove unknown binding: 66,0,0/0:3303961236/3303961238 [ 49.023349][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 49.025005][ T4411] tipc: Failed to remove unknown binding: 66,0,0/0:3303961236/3303961237 [ 49.034563][ T4296] Bluetooth: hci1: command 0x041b tx timeout [ 49.035655][ T4296] Bluetooth: hci3: command 0x041b tx timeout [ 49.036712][ T4296] Bluetooth: hci2: command 0x041b tx timeout [ 49.037862][ T4296] Bluetooth: hci4: command 0x041b tx timeout [ 49.038929][ T4296] Bluetooth: hci0: command 0x041b tx timeout [ 49.092556][ T4418] Zero length message leads to an empty skb [ 51.124863][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 51.126005][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 51.127090][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 51.128184][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 51.129300][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 53.194591][ T4296] Bluetooth: hci1: command 0x0419 tx timeout [ 53.195753][ T4296] Bluetooth: hci3: command 0x0419 tx timeout [ 53.196906][ T4296] Bluetooth: hci2: command 0x0419 tx timeout [ 53.198043][ T4296] Bluetooth: hci4: command 0x0419 tx timeout [ 53.199176][ T4296] Bluetooth: hci0: command 0x0419 tx timeout [ 59.882703][ T4440] tipc: Enabling of bearer rejected, failed to enable media [ 59.990900][ T4458] loop2: detected capacity change from 0 to 3 [ 59.993394][ T4461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.998810][ T4461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.004628][ T4458] Dev loop2: unable to read RDB block 3 [ 60.005720][ T4458] loop2: unable to read partition table [ 60.006789][ T4458] loop2: partition table beyond EOD, truncated [ 60.007870][ T4458] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 60.067433][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 60.069024][ T4463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.070425][ T4463] IPv6: NLM_F_CREATE should be set when creating new route [ 60.137484][ T4469] binder: 4468:4469 got transaction to invalid handle, 1 [ 60.138826][ T4469] binder: 4469:4468 cannot find target node [ 60.139850][ T4469] binder: 4468:4469 transaction call to 0:0 failed 4/29201/-22, size 72-24 line 3045 [ 60.148380][ T4326] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.287080][ T4286] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 60.349810][ T4485] device syzkaller0 entered promiscuous mode [ 60.387670][ T4489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.390344][ T4489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.422849][ T4481] qrtr: Invalid version 18 [ 60.568916][ T4452] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 60.707607][ T4503] device syzkaller0 entered promiscuous mode [ 60.935813][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.938413][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.509467][ T4521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.511280][ T4521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.555929][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.558536][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.764294][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.766043][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.485357][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.486663][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.596246][ T24] cfg80211: failed to load regulatory.db [ 71.339235][ T4514] netlink: 'syz.0.50': attribute type 39 has an invalid length. [ 71.407474][ T4519] tipc: Enabling of bearer rejected, failed to enable media [ 71.465480][ T4545] device syzkaller0 entered promiscuous mode [ 71.527397][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 71.527446][ T4549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.604432][ T4560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.604532][ T4560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.874267][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.066487][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 72.071380][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 72.075665][ T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 72.077468][ T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 72.078968][ T7] usb 1-1: Product: syz [ 72.079690][ T7] usb 1-1: Manufacturer: syz [ 72.080531][ T7] usb 1-1: SerialNumber: syz [ 72.083259][ T7] usb 1-1: config 0 descriptor?? [ 72.087838][ T4562] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.090606][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 72.091726][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 72.599030][ T4593] binder: 4592:4593 got transaction to invalid handle, 1 [ 72.600315][ T4593] binder: 4593:4592 cannot find target node [ 72.601601][ T4593] binder: 4592:4593 transaction call to 0:0 failed 8/29201/-22, size 72-24 line 3045 [ 72.603801][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.784278][ T4562] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 72.976878][ T4562] usb 1-1: device firmware changed [ 72.978432][ T3898] usb 1-1: USB disconnect, device number 3 [ 73.124267][ T3898] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.304260][ T3898] usb 1-1: Using ep0 maxpacket: 32 [ 73.306493][ T3898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 73.310119][ T3898] usb 1-1: string descriptor 0 read error: -22 [ 73.311183][ T3898] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 73.312772][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 73.315658][ T3898] usb 1-1: config 0 descriptor?? [ 73.317365][ T4586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.319201][ T3898] hub 1-1:0.0: bad descriptor, ignoring hub [ 73.320332][ T3898] hub: probe of 1-1:0.0 failed with error -5 [ 73.665036][ T3898] usb 1-1: USB disconnect, device number 4 [ 74.072389][ T4612] loop2: detected capacity change from 0 to 3 [ 74.074169][ T4612] Dev loop2: unable to read RDB block 3 [ 74.076303][ T4612] loop2: unable to read partition table [ 74.077393][ T4612] loop2: partition table beyond EOD, truncated [ 74.078488][ T4612] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.383591][ T4603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 82.385391][ T4603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.386683][ T4603] IPv6: NLM_F_CREATE should be set when creating new route [ 82.497582][ T4634] binder: tried to use weak ref as strong ref [ 82.497605][ T4634] binder: 4632:4634 Acquire 1 refcount change on invalid ref 0 ret -22 [ 82.497732][ T4634] binder: 4632:4634 got transaction to invalid handle, 1 [ 82.497741][ T4634] binder: 4634:4632 cannot find target node [ 82.497748][ T4634] binder: 4632:4634 transaction call to 0:0 failed 11/29201/-22, size 72-24 line 3045 [ 82.497934][ T4331] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.551946][ T4635] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 83.203482][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.209758][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.219789][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.223867][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.763879][ T4703] binder: tried to use weak ref as strong ref [ 83.766973][ T4703] binder: 4702:4703 Acquire 1 refcount change on invalid ref 0 ret -22 [ 83.769225][ T4703] binder: 4702:4703 got transaction to invalid handle, 1 [ 83.770573][ T4703] binder: 4703:4702 cannot find target node [ 83.771600][ T4703] binder: 4702:4703 transaction call to 0:0 failed 14/29201/-22, size 72-24 line 3045 [ 83.781634][ T4452] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.300510][ T4731] netlink: 64 bytes leftover after parsing attributes in process `syz.4.108'. [ 94.341517][ T4737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.343160][ T4737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.347512][ T4735] binder: tried to use weak ref as strong ref [ 94.348631][ T4735] binder: 4734:4735 Acquire 1 refcount change on invalid ref 0 ret -22 [ 94.350453][ T4735] binder: 4734:4735 got transaction to invalid handle, 1 [ 94.351711][ T4735] binder: 4735:4734 cannot find target node [ 94.352478][ T4737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.352760][ T4735] binder: 4734:4735 transaction call to 0:0 failed 17/29201/-22, size 72-24 line 3045 [ 94.356460][ T4737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.370000][ T4452] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.135487][ T4761] device syzkaller0 entered promiscuous mode [ 105.285286][ T4810] binder: 4809:4810 ioctl 4018620d 0 returned -22 [ 105.286723][ T4810] binder: tried to use weak ref as strong ref [ 105.293119][ T4810] binder: 4809:4810 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.295170][ T4810] binder: 4809:4810 got transaction to invalid handle, 1 [ 105.296438][ T4810] binder: 4810:4809 cannot find target node [ 105.297521][ T4810] binder: 4809:4810 transaction call to 0:0 failed 20/29201/-22, size 72-24 line 3045 [ 105.298172][ T4812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.300155][ T4331] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.301834][ T4812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.341063][ T4817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.342960][ T4817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.868315][ T4819] netlink: 64 bytes leftover after parsing attributes in process `syz.4.128'. [ 106.032298][ T4821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.037150][ T4821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.040706][ T4821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.042352][ T4821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.407710][ T4821] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.408921][ T4821] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.425156][ T4821] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 106.429110][ T4821] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.432035][ T4821] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.439448][ T4821] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 106.440946][ T4821] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.447134][ T4821] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.449458][ T4821] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 106.464096][ T4821] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.465410][ T4821] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.470662][ T4821] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 106.474046][ T4821] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 106.476036][ T4821] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 106.479329][ T4821] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 106.616054][ T4854] binder: 4853:4854 ioctl 4018620d 0 returned -22 [ 106.617521][ T4854] binder: tried to use weak ref as strong ref [ 106.618603][ T4854] binder: 4853:4854 Acquire 1 refcount change on invalid ref 0 ret -22 [ 106.630360][ T4854] binder: 4853:4854 got transaction to invalid handle, 1 [ 106.631605][ T4854] binder: 4854:4853 cannot find target node [ 106.632706][ T4854] binder: 4853:4854 transaction call to 0:0 failed 23/29201/-22, size 72-24 line 3045 [ 106.643709][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 106.701798][ T4864] loop2: detected capacity change from 0 to 3 [ 106.706728][ T4864] Dev loop2: unable to read RDB block 3 [ 106.709785][ T4864] loop2: unable to read partition table [ 106.711077][ T4864] loop2: partition table beyond EOD, truncated [ 106.712119][ T4864] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.712705][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.717529][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.722587][ T3936] Dev loop2: unable to read RDB block 3 [ 106.723602][ T3936] loop2: unable to read partition table [ 106.725500][ T3936] loop2: partition table beyond EOD, truncated [ 106.814363][ T4874] netlink: 64 bytes leftover after parsing attributes in process `syz.2.143'. [ 106.865087][ T4876] device syzkaller0 entered promiscuous mode [ 106.895108][ T4880] IPVS: rr: FWM 3 0x00000003 - no destination available [ 107.026517][ T4888] device syzkaller0 entered promiscuous mode [ 107.064314][ T4890] binder: 4889:4890 ioctl 4018620d 0 returned -22 [ 107.074774][ T4890] binder: tried to use weak ref as strong ref [ 107.075857][ T4890] binder: 4889:4890 Acquire 1 refcount change on invalid ref 0 ret -22 [ 107.077982][ T4890] binder: 4889:4890 got transaction to invalid handle, 1 [ 107.079245][ T4890] binder: 4890:4889 cannot find target node [ 107.080352][ T4890] binder: 4889:4890 transaction call to 0:0 failed 26/29201/-22, size 72-24 line 3045 [ 107.082550][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 107.117285][ T4331] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.117360][ T4893] loop2: detected capacity change from 0 to 3 [ 107.120517][ T4893] Dev loop2: unable to read RDB block 3 [ 107.124123][ T4893] loop2: unable to read partition table [ 107.125540][ T4893] loop2: partition table beyond EOD, truncated [ 107.126638][ T4893] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.143865][ T4894] device syzkaller0 entered promiscuous mode [ 107.274312][ T4331] usb 1-1: device descriptor read/64, error -71 [ 107.544374][ T4331] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.691145][ T4910] device syzkaller0 entered promiscuous mode [ 107.694757][ T4331] usb 1-1: device descriptor read/64, error -71 [ 107.733566][ T4914] device syzkaller0 entered promiscuous mode [ 107.814437][ T4331] usb usb1-port1: attempt power cycle [ 107.843805][ T4918] binder: 4917:4918 ioctl c0306201 0 returned -14 [ 107.845435][ T4918] binder: 4917:4918 got transaction to invalid handle, 1 [ 107.850503][ T4918] binder: 4918:4917 cannot find target node [ 107.889099][ T4920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.894116][ T4920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.106949][ T4938] device syzkaller0 entered promiscuous mode [ 108.188568][ T4940] device syzkaller0 entered promiscuous mode [ 108.224319][ T4331] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.264650][ T4331] usb 1-1: device descriptor read/8, error -71 [ 108.361538][ T4944] binder: 4943:4944 ioctl c0306201 0 returned -14 [ 108.396161][ T4946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.402999][ T4946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.474408][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.476154][ T4296] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.476166][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.477414][ T4295] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.478334][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.506142][ T4952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.181'. [ 108.534319][ T4331] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.564977][ T4331] usb 1-1: device descriptor read/8, error -71 [ 108.684623][ T4331] usb usb1-port1: unable to enumerate USB device [ 108.863029][ T4958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.865910][ T4958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.071501][ T4962] device syzkaller0 entered promiscuous mode [ 109.477752][ T4969] device syzkaller0 entered promiscuous mode [ 109.533604][ T4981] binder: 4980:4981 ioctl c0306201 0 returned -14 [ 109.553231][ T4983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.555479][ T4983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.655718][ T4989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 109.742259][ T5003] device syzkaller0 entered promiscuous mode [ 109.929721][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.931589][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.104273][ T4452] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 110.130829][ T5007] device syzkaller0 entered promiscuous mode [ 110.254261][ T4452] usb 1-1: device descriptor read/64, error -71 [ 110.367587][ T5023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 110.399490][ T5027] binder_user_error: 3 callbacks suppressed [ 110.399498][ T5027] binder: 5026:5027 got transaction to invalid handle, 1 [ 110.402051][ T5027] binder_debug: 11 callbacks suppressed [ 110.402063][ T5027] binder: 5027:5026 cannot find target node [ 110.404475][ T5027] binder: 5026:5027 transaction call to 0:0 failed 46/29201/-22, size 72-24 line 3045 [ 110.406645][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.424126][ T5029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.425944][ T5029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.453238][ T5031] device syzkaller0 entered promiscuous mode [ 110.497379][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.499291][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.524240][ T4452] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 110.554783][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 110.554822][ T4295] Bluetooth: hci3: command 0x0406 tx timeout [ 110.555930][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 110.556961][ T4295] Bluetooth: hci2: command 0x0406 tx timeout [ 110.558020][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 110.924270][ T4452] usb 1-1: device descriptor read/64, error -71 [ 111.044335][ T4452] usb usb1-port1: attempt power cycle [ 111.139239][ T5041] device syzkaller0 entered promiscuous mode [ 111.283325][ T5053] binder: 5052:5053 got transaction to invalid handle, 1 [ 111.284887][ T5053] binder: 5053:5052 cannot find target node [ 111.286065][ T5053] binder: 5052:5053 transaction call to 0:0 failed 50/29201/-22, size 72-24 line 3045 [ 111.288267][ T4331] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.355155][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 111.459386][ T5065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.461026][ T5065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.484223][ T4452] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 111.508899][ T5057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.511917][ T5057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.511976][ T5055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.515650][ T4452] usb 1-1: device descriptor read/8, error -71 [ 111.516868][ T5055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.784234][ T4452] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 111.815250][ T4452] usb 1-1: device descriptor read/8, error -71 [ 111.934368][ T4452] usb usb1-port1: unable to enumerate USB device [ 112.008267][ T5069] device syzkaller0 entered promiscuous mode [ 112.429440][ T5083] device syzkaller0 entered promiscuous mode [ 112.446141][ T5090] binder: 5089:5090 got transaction to invalid handle, 1 [ 112.447608][ T5090] binder: 5090:5089 cannot find target node [ 112.448746][ T5090] binder: 5089:5090 transaction call to 0:0 failed 54/29201/-22, size 72-24 line 3045 [ 112.450855][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.504582][ T5094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 112.607053][ T5100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.610366][ T5100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.651841][ T5104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.653497][ T5104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.801307][ T5115] binder: 5114:5115 got transaction to invalid handle, 1 [ 112.802865][ T5115] binder: 5115:5114 cannot find target node [ 112.827445][ T5117] device syzkaller0 entered promiscuous mode [ 112.857987][ T5106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.859822][ T5106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.860130][ T5104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.862690][ T5104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.135681][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 113.219941][ T5121] device syzkaller0 entered promiscuous mode [ 113.403553][ T5133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.410696][ T5133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.440169][ T5139] binder: 5138:5139 got transaction to invalid handle, 1 [ 113.484016][ T5141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.486443][ T5141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.540977][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 113.549075][ T5146] device syzkaller0 entered promiscuous mode [ 114.056486][ T5156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.058301][ T5156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.177679][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.182509][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 114.193851][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 114.201003][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 114.211334][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 114.222704][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 114.230915][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 114.277494][ T5156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.279113][ T5156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.299776][ T5160] device syzkaller0 entered promiscuous mode [ 114.336010][ T5164] binder: 5163:5164 tried to acquire reference to desc 0, got 1 instead [ 114.338038][ T5164] binder: 5163:5164 ioctl c0306201 0 returned -14 [ 114.924531][ T3898] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 115.144735][ T5177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 115.174256][ T3898] usb 1-1: device descriptor read/64, error -71 [ 115.226975][ T5179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.229142][ T5179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.272247][ T5185] binder: 5184:5185 Acquire 1 refcount change on invalid ref 1 ret -22 [ 115.298102][ T5187] device syzkaller0 entered promiscuous mode [ 115.383044][ T5196] binder: 5195:5196 tried to acquire reference to desc 0, got 1 instead [ 115.386729][ T5196] binder: 5195:5196 ioctl c0306201 0 returned -14 [ 115.407289][ T5198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.409165][ T5198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.444294][ T3898] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.594296][ T3898] usb 1-1: device descriptor read/64, error -71 [ 115.714340][ T3898] usb usb1-port1: attempt power cycle [ 115.727554][ T5200] device syzkaller0 entered promiscuous mode [ 115.760780][ T5202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.762600][ T5202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.897171][ T5206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 115.948123][ T5208] tun0: tun_chr_ioctl cmd 1074025677 [ 115.949118][ T5208] tun0: linktype set to 10000 [ 115.967319][ T5202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.968905][ T5202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.124241][ T3898] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 116.140032][ T5214] loop4: detected capacity change from 0 to 32768 [ 116.157083][ T3898] usb 1-1: device descriptor read/8, error -71 [ 116.179801][ T5214] add_index: next_index = 0. Resetting! [ 116.182231][ T5214] find_entry called with index >= next_index [ 116.182520][ T5218] loop1: detected capacity change from 0 to 8 [ 116.184836][ T5214] find_entry called with index >= next_index [ 116.186997][ T5214] find_entry called with index >= next_index [ 116.187988][ T5218] SQUASHFS error: zlib decompression failed, data probably corrupt [ 116.189968][ T5214] find_entry called with index >= next_index [ 116.194143][ T5218] SQUASHFS error: Failed to read block 0x9b: -5 [ 116.197097][ T5218] SQUASHFS error: Unable to read metadata cache entry [99] [ 116.202637][ T5218] SQUASHFS error: Unable to read inode 0x127 [ 116.237161][ T5220] binder: 5219:5220 tried to acquire reference to desc 0, got 1 instead [ 116.241432][ T5220] binder: 5219:5220 ioctl c0306201 0 returned -14 [ 116.263944][ T5222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.274951][ T5222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.284781][ T5224] device syzkaller0 entered promiscuous mode [ 116.424237][ T3898] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 116.455273][ T3898] usb 1-1: device descriptor read/8, error -71 [ 116.574363][ T3898] usb usb1-port1: unable to enumerate USB device [ 116.745450][ T5235] loop1: detected capacity change from 0 to 512 [ 116.753611][ T5235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.758352][ T5235] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 116.771805][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 116.817984][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 116.881497][ T5248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.883127][ T5248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.989757][ T5254] binder: 5253:5254 tried to acquire reference to desc 0, got 1 instead [ 117.010328][ T5256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.012120][ T5256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.218371][ T5256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.221006][ T5256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.618024][ T5262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.619848][ T5262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.707189][ T5264] device syzkaller0 entered promiscuous mode [ 117.721519][ T5266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.723191][ T5266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.782188][ T5272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 117.869109][ T5274] loop1: detected capacity change from 0 to 32768 [ 117.872484][ T5274] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.318 (5274) [ 117.879490][ T5274] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.881337][ T5274] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 117.882849][ T5274] BTRFS info (device loop1): turning on sync discard [ 117.884111][ T5274] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 117.885896][ T5274] BTRFS info (device loop1): use zstd compression, level 3 [ 117.887229][ T5274] BTRFS info (device loop1): turning on async discard [ 117.888482][ T5274] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.890335][ T5274] BTRFS info (device loop1): trying to use backup root at mount time [ 117.891753][ T5274] BTRFS info (device loop1): force zlib compression, level 3 [ 117.893094][ T5274] BTRFS info (device loop1): using free space tree [ 117.902118][ T5277] binder: 5275:5277 tried to acquire reference to desc 0, got 1 instead [ 117.932885][ T5284] loop0: detected capacity change from 0 to 164 [ 117.977325][ T9] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 117.980233][ T5274] BTRFS error (device loop1): failed to load root extent [ 117.981540][ T5274] BTRFS warning (device loop1): try to load backup roots slot 1 [ 118.016670][ T9] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 118.019034][ T5274] BTRFS warning (device loop1): couldn't read tree root [ 118.020291][ T5274] BTRFS warning (device loop1): try to load backup roots slot 2 [ 118.022947][ T5274] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 118.025274][ T5274] BTRFS warning (device loop1): couldn't read tree root [ 118.026479][ T5274] BTRFS warning (device loop1): try to load backup roots slot 3 [ 118.044772][ T5274] BTRFS info (device loop1): enabling ssd optimizations [ 118.046316][ T5274] BTRFS info (device loop1): rebuilding free space tree [ 118.060824][ T5274] BTRFS info (device loop1): checking UUID tree [ 118.117061][ T5279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.131357][ T5279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.183705][ T5303] loop2: detected capacity change from 0 to 3 [ 118.186746][ T5107] Dev loop2: unable to read RDB block 3 [ 118.187885][ T5107] loop2: unable to read partition table [ 118.188888][ T5107] loop2: partition table beyond EOD, truncated [ 118.190719][ T5296] syz.0.322 (5296): drop_caches: 2 [ 118.208466][ T4279] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.218400][ T5303] Dev loop2: unable to read RDB block 3 [ 118.225549][ T5303] loop2: unable to read partition table [ 118.240240][ T5303] loop2: partition table beyond EOD, truncated [ 118.241393][ T5303] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.336717][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.338416][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.381026][ T5314] netlink: 64 bytes leftover after parsing attributes in process `syz.1.324'. [ 118.555298][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.557034][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.667890][ T5339] loop4: detected capacity change from 0 to 256 [ 118.689895][ T5325] device syzkaller0 entered promiscuous mode [ 118.691917][ T5334] device syzkaller0 entered promiscuous mode [ 118.844229][ T5346] loop4: detected capacity change from 0 to 40427 [ 118.848236][ T5346] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 118.849703][ T5346] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.852174][ T5346] F2FS-fs (loop4): invalid crc value [ 118.886856][ T5346] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.899019][ T5346] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.900303][ T5346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.958460][ T5359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.960071][ T5359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.964697][ T5357] loop2: detected capacity change from 0 to 3 [ 118.969309][ T5357] Dev loop2: unable to read RDB block 3 [ 118.970311][ T5357] loop2: unable to read partition table [ 118.971382][ T5357] loop2: partition table beyond EOD, truncated [ 118.973026][ T5357] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.111027][ T5365] binder: 5364:5365 tried to acquire reference to desc 0, got 1 instead [ 119.114126][ T4452] binder_debug: 5 callbacks suppressed [ 119.114132][ T4452] binder: release 5364:5365 transaction 89 out, still active [ 119.138524][ T4452] binder: undelivered TRANSACTION_COMPLETE [ 119.142916][ T5371] netlink: 64 bytes leftover after parsing attributes in process `syz.4.339'. [ 119.144918][ T4452] binder: send failed reply for transaction 89, target dead [ 119.161276][ T5374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.177574][ T5374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.191907][ T5378] device syzkaller0 entered promiscuous mode [ 119.394245][ T4327] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 119.510912][ T5381] binder: 5380:5381 tried to acquire reference to desc 0, got 1 instead [ 119.554260][ T4327] usb 1-1: device descriptor read/64, error -71 [ 119.587537][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 119.661000][ T5388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.735647][ T5393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.737436][ T5393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.834251][ T4327] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 119.941311][ T5393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.947044][ T5393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.964553][ T5399] loop4: detected capacity change from 0 to 4096 [ 119.984324][ T4327] usb 1-1: device descriptor read/64, error -71 [ 120.001596][ T5403] netlink: 64 bytes leftover after parsing attributes in process `syz.2.356'. [ 120.019544][ T5399] EXT4-fs (loop4): Test dummy encryption mode enabled [ 120.028779][ T5399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.042562][ T5399] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 120.078552][ T5411] binder: 5410:5411 tried to acquire reference to desc 0, got 1 instead [ 120.080937][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 120.105039][ T4327] usb usb1-port1: attempt power cycle [ 120.138782][ T5415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.140440][ T5415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.493131][ T5421] device syzkaller0 entered promiscuous mode [ 120.544480][ T4327] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 120.570086][ T5434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.571774][ T5434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.584630][ T4327] usb 1-1: device descriptor read/8, error -71 [ 120.728050][ T5440] netlink: 64 bytes leftover after parsing attributes in process `syz.3.368'. [ 120.864692][ T4327] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 120.904599][ T4327] usb 1-1: device descriptor read/8, error -71 [ 122.480866][ T5453] loop3: detected capacity change from 0 to 131072 [ 122.487192][ T4327] usb usb1-port1: unable to enumerate USB device [ 122.488793][ T5453] F2FS-fs (loop3): invalid crc value [ 122.503781][ T5453] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.511547][ T5453] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 122.515448][ T5453] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 122.563318][ T5467] device syzkaller0 entered promiscuous mode [ 122.622019][ T5471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.624080][ T5471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.844478][ T5477] MPTCP: addr_signal error, rm_addr=5 [ 122.857731][ T5481] loop2: detected capacity change from 0 to 3 [ 122.866247][ T5481] Dev loop2: unable to read RDB block 3 [ 122.867282][ T5481] loop2: unable to read partition table [ 122.868366][ T5481] loop2: partition table beyond EOD, truncated [ 122.869455][ T5481] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.886301][ T4327] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 122.892441][ T5483] binder: 5482:5483 tried to acquire reference to desc 0, got 1 instead [ 122.894821][ T5483] binder: 5482:5483 got transaction with invalid data ptr [ 122.896129][ T5483] binder: 5482:5483 transaction call to 5482:0 failed 102/29201/-14, size 0-24 line 3333 [ 122.898153][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.009627][ T5490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.011137][ T5490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.074231][ T4327] usb 1-1: Using ep0 maxpacket: 32 [ 123.077069][ T4327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.078980][ T4327] usb 1-1: config 0 has no interfaces? [ 123.083137][ T4327] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 123.085119][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 123.086758][ T4327] usb 1-1: Product: syz [ 123.087478][ T4327] usb 1-1: Manufacturer: syz [ 123.087483][ T5494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.088908][ T5494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.091292][ T4327] usb 1-1: SerialNumber: syz [ 123.097891][ T4327] usb 1-1: config 0 descriptor?? [ 123.157829][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.159547][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.215874][ T5490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.217698][ T5490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.304584][ T4327] usb 1-1: USB disconnect, device number 21 [ 123.683617][ T5498] device syzkaller0 entered promiscuous mode [ 123.819698][ T5508] loop2: detected capacity change from 0 to 3 [ 123.821223][ T5508] Dev loop2: unable to read RDB block 3 [ 123.822241][ T5508] loop2: unable to read partition table [ 123.823226][ T5508] loop2: partition table beyond EOD, truncated [ 123.825603][ T5508] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.860380][ T5510] binder: 5509:5510 tried to acquire reference to desc 0, got 1 instead [ 123.870443][ T24] binder: release 5509:5510 transaction 107 out, still active [ 123.871847][ T24] binder: undelivered TRANSACTION_COMPLETE [ 123.896645][ T24] binder: send failed reply for transaction 107, target dead [ 123.904407][ T4327] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 123.917255][ T5518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.918871][ T5518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.960209][ T5520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.962283][ T5520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.053164][ T5530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.057209][ T5530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.094291][ T4327] usb 1-1: Using ep0 maxpacket: 32 [ 124.096623][ T4327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.098480][ T4327] usb 1-1: config 0 has no interfaces? [ 124.101536][ T4327] usb 1-1: string descriptor 0 read error: -22 [ 124.102665][ T4327] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 124.104853][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 124.109494][ T4327] usb 1-1: config 0 descriptor?? [ 124.166375][ T5520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.168161][ T5520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.314256][ T4452] usb 1-1: USB disconnect, device number 22 [ 124.446277][ T5533] device syzkaller0 entered promiscuous mode [ 124.625687][ T5535] loop2: detected capacity change from 0 to 3 [ 124.627391][ T5535] Dev loop2: unable to read RDB block 3 [ 124.628369][ T5535] loop2: unable to read partition table [ 124.629548][ T5535] loop2: partition table beyond EOD, truncated [ 124.630663][ T5535] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.692376][ T5541] netlink: 64 bytes leftover after parsing attributes in process `syz.3.412'. [ 124.881779][ T5561] loop2: detected capacity change from 0 to 3 [ 124.884059][ T5559] device syzkaller0 entered promiscuous mode [ 124.888128][ T5561] Dev loop2: unable to read RDB block 3 [ 124.889206][ T5561] loop2: unable to read partition table [ 124.890254][ T5561] loop2: partition table beyond EOD, truncated [ 124.891318][ T5561] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.902685][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.923709][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.946340][ T5569] netlink: 64 bytes leftover after parsing attributes in process `syz.1.424'. [ 124.973327][ T5573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.979901][ T5573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.076396][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.082729][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.114268][ T5306] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 125.127991][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.129851][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.287443][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.289155][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.294384][ T5306] usb 1-1: Using ep0 maxpacket: 32 [ 125.296420][ T5306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 125.298274][ T5306] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 125.301751][ T5306] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 125.303324][ T5306] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 125.307253][ T5306] usb 1-1: Product: syz [ 125.308011][ T5306] usb 1-1: Manufacturer: syz [ 125.308819][ T5306] usb 1-1: SerialNumber: syz [ 125.310999][ T5306] usb 1-1: config 0 descriptor?? [ 125.313940][ T5306] hub 1-1:0.0: bad descriptor, ignoring hub [ 125.315156][ T5306] hub: probe of 1-1:0.0 failed with error -5 [ 125.634354][ T5306] usb 1-1: USB disconnect, device number 23 [ 125.925284][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.926717][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.090948][ T5598] netlink: 64 bytes leftover after parsing attributes in process `syz.1.438'. [ 126.151261][ T5602] tipc: Started in network mode [ 126.152241][ T5602] tipc: Node identity e290f276cf5a, cluster identity 4711 [ 126.153683][ T5602] tipc: Enabled bearer , priority 0 [ 126.157298][ T5602] tipc: Resetting bearer [ 126.226216][ T5599] tipc: Disabling bearer [ 126.346997][ T5617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.361016][ T5617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.371545][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.373141][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.484274][ T5306] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 126.578062][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.579826][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.613075][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.615382][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.654304][ T5306] usb 1-1: device descriptor read/64, error -71 [ 126.934231][ T5306] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 127.084268][ T5306] usb 1-1: device descriptor read/64, error -71 [ 127.111609][ T5638] tipc: Started in network mode [ 127.112585][ T5638] tipc: Node identity 1e7ec0e1c0df, cluster identity 4711 [ 127.113960][ T5638] tipc: Enabled bearer , priority 0 [ 127.118941][ T5638] tipc: Resetting bearer [ 127.153103][ T5642] loop4: detected capacity change from 0 to 4096 [ 127.155380][ T5642] EXT4-fs: Ignoring removed orlov option [ 127.162690][ T5642] EXT4-fs (loop4): Test dummy encryption mode enabled [ 127.166744][ T5642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.189592][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 127.195199][ T5637] tipc: Disabling bearer [ 127.206689][ T5306] usb usb1-port1: attempt power cycle [ 127.365161][ T5663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.366778][ T5663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.393208][ T5667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.398493][ T5667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.648792][ T5306] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 127.823658][ T5306] usb 1-1: device descriptor read/8, error -71 [ 127.825241][ T5667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.833823][ T5667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.867554][ T5670] loop4: detected capacity change from 0 to 32768 [ 127.905282][ T5673] tipc: Started in network mode [ 127.906239][ T5673] tipc: Node identity e2d23178fb2, cluster identity 4711 [ 127.907564][ T5673] tipc: Enabled bearer , priority 0 [ 127.910892][ T5673] tipc: Resetting bearer [ 127.984762][ T5672] tipc: Disabling bearer [ 128.114273][ T5306] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 128.154837][ T5306] usb 1-1: device descriptor read/8, error -71 [ 128.290591][ T5306] usb usb1-port1: unable to enumerate USB device [ 128.371965][ T5684] loop1: detected capacity change from 0 to 4096 [ 128.373544][ T5684] EXT4-fs: Ignoring removed orlov option [ 128.377912][ T5684] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.386229][ T5684] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.403379][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 128.512821][ T5701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.514652][ T5701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.672727][ T5706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.677858][ T5706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.799876][ T5708] loop3: detected capacity change from 0 to 512 [ 128.804560][ T5708] EXT4-fs: Ignoring removed nobh option [ 129.012378][ T5708] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.045480][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 129.080811][ T5714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.490'. [ 129.083616][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.085474][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.289066][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.290773][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.588928][ T5746] loop2: detected capacity change from 0 to 3 [ 129.599475][ T5107] Dev loop2: unable to read RDB block 3 [ 129.600467][ T5107] loop2: unable to read partition table [ 129.601550][ T5107] loop2: partition table beyond EOD, truncated [ 129.605850][ T5746] Dev loop2: unable to read RDB block 3 [ 129.607005][ T5746] loop2: unable to read partition table [ 129.614129][ T5746] loop2: partition table beyond EOD, truncated [ 129.615706][ T5746] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 129.640720][ T5750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.643436][ T5750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.044767][ T5750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.046549][ T5750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.220924][ T5766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.226096][ T5766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.648490][ T5775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.517'. [ 130.687500][ T5779] tipc: Enabled bearer , priority 0 [ 130.689706][ T5779] device syzkaller0 entered promiscuous mode [ 130.700591][ T5779] tipc: Resetting bearer [ 130.704142][ T5777] tipc: Resetting bearer [ 130.764695][ T5777] tipc: Disabling bearer [ 130.984264][ T4452] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 131.061431][ T5795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.065033][ T5795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.164308][ T4452] usb 1-1: Using ep0 maxpacket: 32 [ 131.452248][ T4452] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.454315][ T4452] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.460022][ T5800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.461650][ T5800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.464913][ T4452] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 131.466730][ T4452] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 131.468494][ T4452] usb 1-1: Product: syz [ 131.469434][ T4452] usb 1-1: Manufacturer: syz [ 131.470568][ T4452] usb 1-1: SerialNumber: syz [ 131.473077][ T4452] usb 1-1: config 0 descriptor?? [ 131.477935][ T4452] hub 1-1:0.0: bad descriptor, ignoring hub [ 131.479267][ T4452] hub: probe of 1-1:0.0 failed with error -5 [ 131.795749][ T5808] device syzkaller0 entered promiscuous mode [ 131.805365][ T1514] usb 1-1: USB disconnect, device number 28 [ 132.155004][ T4332] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 132.334252][ T4332] usb 1-1: Using ep0 maxpacket: 32 [ 132.336667][ T4332] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.338766][ T4332] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.343886][ T4332] usb 1-1: string descriptor 0 read error: -22 [ 132.346772][ T4332] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 132.349375][ T4332] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 132.352292][ T4332] usb 1-1: config 0 descriptor?? [ 132.354089][ T4332] hub 1-1:0.0: bad descriptor, ignoring hub [ 132.355544][ T4332] hub: probe of 1-1:0.0 failed with error -5 [ 132.674840][ T7] usb 1-1: USB disconnect, device number 29 [ 133.224659][ T5838] device syzkaller0 entered promiscuous mode [ 133.384347][ T7] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 133.625428][ T5842] ======================================================= [ 133.625428][ T5842] WARNING: The mand mount option has been deprecated and [ 133.625428][ T5842] and is ignored by this kernel. Remove the mand [ 133.625428][ T5842] option from the mount to silence this warning. [ 133.625428][ T5842] ======================================================= [ 133.645641][ T27] audit: type=1326 audit(133.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.3.542" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa377a28 code=0x7ffc0000 [ 133.809451][ T5780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.828348][ T27] audit: type=1326 audit(133.600:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.3.542" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa377a28 code=0x7ffc0000 [ 133.844572][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 133.847160][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.848626][ T27] audit: type=1326 audit(133.620:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.3.542" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffaa377a28 code=0x7ffc0000 [ 133.849066][ T7] usb 1-1: config 0 has no interfaces? [ 133.872211][ T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 133.875121][ T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 133.877610][ T7] usb 1-1: Product: syz [ 133.878496][ T7] usb 1-1: Manufacturer: syz [ 133.879277][ T7] usb 1-1: SerialNumber: syz [ 133.880782][ T27] audit: type=1326 audit(133.620:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.3.542" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa377a28 code=0x7ffc0000 [ 133.885348][ T27] audit: type=1326 audit(133.620:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.3.542" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa377a28 code=0x7ffc0000 [ 133.930588][ T7] usb 1-1: config 0 descriptor?? [ 133.976421][ T5853] tipc: Enabled bearer , priority 0 [ 133.977927][ T5853] device syzkaller0 entered promiscuous mode [ 134.786912][ T5853] tipc: Resetting bearer [ 134.801130][ T4327] usb 1-1: USB disconnect, device number 30 [ 134.899097][ T5852] tipc: Resetting bearer [ 134.945730][ T5852] tipc: Disabling bearer [ 135.128078][ T5860] netlink: 348 bytes leftover after parsing attributes in process `syz.3.548'. [ 135.130109][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 135.363456][ T5306] tipc: Node number set to 3735142625 [ 135.399405][ T5858] device syzkaller0 entered promiscuous mode [ 135.604290][ T4327] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 135.674841][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.677276][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.731938][ T5879] device syzkaller0 entered promiscuous mode [ 135.794372][ T4327] usb 1-1: Using ep0 maxpacket: 32 [ 135.798788][ T4327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.800566][ T4327] usb 1-1: config 0 has no interfaces? [ 135.804541][ T4327] usb 1-1: string descriptor 0 read error: -22 [ 135.805678][ T4327] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 135.807212][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 135.817587][ T4327] usb 1-1: config 0 descriptor?? [ 136.402983][ T27] audit: type=1326 audit(136.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.559" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b977a28 code=0x7ffc0000 [ 136.448027][ T27] audit: type=1326 audit(136.380:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.559" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b977a28 code=0x7ffc0000 [ 136.454391][ T4332] usb 1-1: USB disconnect, device number 31 [ 136.548704][ T27] audit: type=1326 audit(136.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.559" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff8b977a28 code=0x7ffc0000 [ 136.639080][ T27] audit: type=1326 audit(136.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.559" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b977a28 code=0x7ffc0000 [ 136.661626][ T27] audit: type=1326 audit(136.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.559" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b977a28 code=0x7ffc0000 [ 136.920341][ T5904] loop2: detected capacity change from 0 to 32768 [ 136.938628][ T5904] add_index: next_index = 0. Resetting! [ 136.940880][ T5904] find_entry called with index >= next_index [ 136.943115][ T5904] find_entry called with index >= next_index [ 136.944754][ T5904] find_entry called with index >= next_index [ 136.945960][ T5904] find_entry called with index >= next_index [ 137.434966][ T47] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 137.436700][ T47] Bluetooth: hci4: Injecting HCI hardware error event [ 137.438311][ T47] Bluetooth: hci4: hardware error 0x00 [ 137.495237][ T5926] device syzkaller0 entered promiscuous mode [ 137.666298][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 137.682503][ T5937] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.574'. [ 137.711517][ T5937] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.574'. [ 137.715430][ T4290] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 138.414330][ T1514] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 138.604294][ T1514] usb 1-1: Using ep0 maxpacket: 32 [ 138.606373][ T1514] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.608119][ T1514] usb 1-1: config 0 has no interfaces? [ 138.611541][ T1514] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 138.613155][ T1514] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.615769][ T1514] usb 1-1: Product: syz [ 138.616503][ T1514] usb 1-1: Manufacturer: syz [ 138.618459][ T1514] usb 1-1: SerialNumber: syz [ 138.643383][ T1514] usb 1-1: config 0 descriptor?? [ 138.849421][ T7] usb 1-1: USB disconnect, device number 32 [ 139.404515][ T7] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 139.584257][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 139.586791][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.588500][ T7] usb 1-1: config 0 has no interfaces? [ 139.591386][ T7] usb 1-1: string descriptor 0 read error: -22 [ 139.592459][ T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 139.594160][ T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 139.594301][ T47] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 139.599883][ T7] usb 1-1: config 0 descriptor?? [ 139.805148][ T7] usb 1-1: USB disconnect, device number 33 [ 139.914516][ T47] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 139.916139][ T47] Bluetooth: hci0: Injecting HCI hardware error event [ 139.917670][ T47] Bluetooth: hci0: hardware error 0x00 [ 140.154294][ T4290] Bluetooth: hci3: command 0x0405 tx timeout [ 142.074251][ T47] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 142.244236][ T47] Bluetooth: hci3: command 0x0405 tx timeout [ 149.380829][ T5985] tipc: Enabling of bearer rejected, failed to enable media [ 149.812075][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 149.812861][ T27] audit: type=1326 audit(149.800:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa377a28 code=0x7ffc0000 [ 149.834902][ T27] audit: type=1326 audit(149.800:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa377a28 code=0x7ffc0000 [ 150.434703][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 150.438468][ T6038] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.440138][ T6038] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.441803][ T6038] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.443503][ T6038] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.449139][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 150.451226][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 150.453495][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.469205][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.744486][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.750132][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.005136][ T6052] device syzkaller0 entered promiscuous mode [ 151.029082][ T6055] tipc: Started in network mode [ 151.030165][ T6055] tipc: Node identity 764a098ac0b7, cluster identity 4711 [ 151.031491][ T6055] tipc: Enabled bearer , priority 0 [ 151.033230][ T6055] device syzkaller0 entered promiscuous mode [ 151.043458][ T6055] tipc: Resetting bearer [ 151.136210][ T6054] tipc: Resetting bearer [ 151.185276][ T6054] tipc: Disabling bearer [ 151.467598][ T27] audit: type=1326 audit(151.460:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.0.609" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b77a28 code=0x7ffc0000 [ 151.761528][ T6071] netlink: 348 bytes leftover after parsing attributes in process `syz.1.610'. [ 151.763507][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 151.802635][ T27] audit: type=1326 audit(151.460:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.0.609" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b77a28 code=0x7ffc0000 [ 152.135802][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.138021][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.208690][ T6082] tipc: Enabled bearer , priority 10 [ 152.236141][ T6084] loop1: detected capacity change from 0 to 2048 [ 152.242700][ T6084] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.287622][ T6086] netlink: 64 bytes leftover after parsing attributes in process `syz.0.618'. [ 152.342563][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.344982][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.347989][ T6088] device syzkaller0 entered promiscuous mode [ 152.351065][ T6090] tipc: Enabled bearer , priority 0 [ 152.424625][ T6090] device syzkaller0 entered promiscuous mode [ 152.433859][ T6090] tipc: Resetting bearer [ 152.436217][ T6089] tipc: Resetting bearer [ 152.467451][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.469172][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.476103][ T6089] tipc: Disabling bearer [ 152.915786][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.917573][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.138487][ T6115] netlink: 348 bytes leftover after parsing attributes in process `syz.3.626'. [ 153.140252][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 153.847782][ T6121] loop3: detected capacity change from 0 to 2048 [ 153.874560][ T6121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.877832][ T6125] netlink: 64 bytes leftover after parsing attributes in process `syz.0.630'. [ 154.016693][ T6137] device syzkaller0 entered promiscuous mode [ 154.040770][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.043386][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.514450][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.518843][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.354334][ T47] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 155.356702][ T47] Bluetooth: hci1: Injecting HCI hardware error event [ 155.358344][ T47] Bluetooth: hci1: hardware error 0x00 [ 156.947922][ T6133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.994118][ T4295] Bluetooth: hci3: unexpected event for opcode 0x0406 [ 157.760534][ T6163] netlink: 348 bytes leftover after parsing attributes in process `syz.1.639'. [ 157.762463][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 157.773686][ T47] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 158.270358][ T6169] netlink: 64 bytes leftover after parsing attributes in process `syz.3.641'. [ 158.322153][ T6171] loop4: detected capacity change from 0 to 2048 [ 158.331753][ T6171] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.369616][ T6175] loop3: detected capacity change from 0 to 64 [ 158.386619][ T6175] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 158.430093][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.431632][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.445131][ T6179] device syzkaller0 entered promiscuous mode [ 158.537059][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.539402][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.544461][ T4332] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 158.655837][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.726305][ T4332] usb 1-1: Using ep0 maxpacket: 32 [ 158.738716][ T4332] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.740787][ T4332] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.824394][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.830310][ T4332] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 158.832779][ T4332] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 158.834510][ T4332] usb 1-1: Product: syz [ 158.835241][ T4332] usb 1-1: Manufacturer: syz [ 158.836204][ T4332] usb 1-1: SerialNumber: syz [ 158.838018][ T4332] usb 1-1: config 0 descriptor?? [ 158.840372][ T4332] hub 1-1:0.0: bad descriptor, ignoring hub [ 158.841519][ T4332] hub: probe of 1-1:0.0 failed with error -5 [ 159.164870][ T7] usb 1-1: USB disconnect, device number 34 [ 159.251194][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.253121][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.347205][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 159.514344][ T3898] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 159.694268][ T3898] usb 1-1: Using ep0 maxpacket: 32 [ 159.751086][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.753078][ T3898] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.759284][ T3898] usb 1-1: string descriptor 0 read error: -22 [ 159.760552][ T3898] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 159.762179][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 159.767506][ T3898] usb 1-1: config 0 descriptor?? [ 159.769205][ T3898] hub 1-1:0.0: bad descriptor, ignoring hub [ 159.770306][ T3898] hub: probe of 1-1:0.0 failed with error -5 [ 159.866942][ T6205] netlink: 64 bytes leftover after parsing attributes in process `syz.3.656'. [ 160.106147][ T14] usb 1-1: USB disconnect, device number 35 [ 160.529411][ T6215] loop0: detected capacity change from 0 to 2048 [ 160.594766][ T6216] netlink: 348 bytes leftover after parsing attributes in process `syz.4.658'. [ 160.596827][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 160.880511][ T6215] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.948404][ T6221] loop0: detected capacity change from 0 to 4096 [ 160.950300][ T6221] ntfs3: Unknown parameter 'windows_names' [ 160.954766][ T6222] device syzkaller0 entered promiscuous mode [ 160.991999][ T6027] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.034344][ T47] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 161.036585][ T47] Bluetooth: hci3: Injecting HCI hardware error event [ 161.038100][ T47] Bluetooth: hci3: hardware error 0x00 [ 161.144080][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.146023][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.495413][ T4329] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 161.497856][ T6235] loop4: detected capacity change from 0 to 16 [ 161.502083][ T6235] erofs: Unknown parameter 'Ð-®æyåÖxtc;K‡Á' [ 161.744099][ T6239] netlink: 64 bytes leftover after parsing attributes in process `syz.2.668'. [ 161.764756][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.766759][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.894223][ T4329] usb 1-1: Using ep0 maxpacket: 32 [ 161.896488][ T4329] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 161.899754][ T6191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.901910][ T4329] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.904726][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.906168][ T4329] usb 1-1: Product: syz [ 161.906918][ T4329] usb 1-1: Manufacturer: syz [ 161.908588][ T4329] usb 1-1: SerialNumber: syz [ 161.914436][ T4329] usb 1-1: config 0 descriptor?? [ 161.915892][ T6231] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.919098][ T4329] hub 1-1:0.0: bad descriptor, ignoring hub [ 161.920170][ T4329] hub: probe of 1-1:0.0 failed with error -5 [ 161.935805][ T6243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.937583][ T6243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.414239][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.415925][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.437450][ T6251] loop4: detected capacity change from 0 to 2048 [ 162.440721][ T6251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.518840][ T6255] device syzkaller0 entered promiscuous mode [ 162.754113][ T6268] tipc: Enabled bearer , priority 0 [ 162.755925][ T6268] device syzkaller0 entered promiscuous mode [ 162.761727][ T6268] tipc: Resetting bearer [ 162.763781][ T6267] tipc: Resetting bearer [ 163.108006][ T6267] tipc: Disabling bearer [ 163.200157][ T6276] loop4: detected capacity change from 0 to 1024 [ 163.206922][ T6271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.223562][ T6276] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.228956][ T6276] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.682: Directory hole found for htree leaf block 0 [ 163.241934][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 163.274288][ T47] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 163.429456][ T6290] loop4: detected capacity change from 0 to 32768 [ 163.547761][ T3898] usb 1-1: USB disconnect, device number 36 [ 163.604745][ T6294] device syzkaller0 entered promiscuous mode [ 163.825732][ T6296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.690'. [ 164.358398][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.360252][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.381834][ T6305] loop1: detected capacity change from 0 to 512 [ 164.384063][ T6306] device syzkaller0 entered promiscuous mode [ 164.393838][ T6305] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 164.396973][ T6305] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.694: corrupted in-inode xattr [ 164.399802][ T6305] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.694: couldn't read orphan inode 15 (err -117) [ 164.402117][ T6305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 164.484609][ T47] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 164.486249][ T47] Bluetooth: hci2: Injecting HCI hardware error event [ 164.488171][ T47] Bluetooth: hci2: hardware error 0x00 [ 164.971176][ T6319] loop0: detected capacity change from 0 to 1024 [ 164.973740][ T6319] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 164.977406][ T6319] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 164.979435][ T6319] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.698: inode #1: comm syz.0.698: iget: illegal inode # [ 164.982050][ T6319] EXT4-fs (loop0): no journal found [ 164.983037][ T6319] EXT4-fs (loop0): can't get journal size [ 164.990627][ T6319] EXT4-fs (loop0): failed to initialize system zone (-22) [ 164.992292][ T6319] EXT4-fs (loop0): mount failed [ 165.414293][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 165.509384][ T6325] device syzkaller0 entered promiscuous mode [ 165.544404][ T6329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.575488][ T6335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.577338][ T6335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.752411][ T6340] netlink: 64 bytes leftover after parsing attributes in process `syz.2.705'. [ 165.800847][ T6345] device syzkaller0 entered promiscuous mode [ 166.209238][ T6355] loop4: detected capacity change from 0 to 128 [ 166.216247][ T6355] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 166.219112][ T6355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.238791][ T6355] overlayfs: upper fs needs to support d_type. [ 166.240239][ T6355] overlayfs: upper fs does not support tmpfile. [ 166.876261][ T47] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 166.934671][ T6371] device syzkaller0 entered promiscuous mode [ 166.985822][ T6369] loop0: detected capacity change from 0 to 32768 [ 166.994736][ T6369] add_index: next_index = 0. Resetting! [ 166.996018][ T6369] find_entry called with index >= next_index [ 166.997127][ T6369] find_entry called with index >= next_index [ 166.998319][ T6369] find_entry called with index >= next_index [ 166.999501][ T6369] find_entry called with index >= next_index [ 167.035039][ T6373] netlink: 64 bytes leftover after parsing attributes in process `syz.0.719'. [ 167.071829][ T6375] loop0: detected capacity change from 0 to 2048 [ 167.079806][ T6375] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.110656][ T6377] netlink: 512 bytes leftover after parsing attributes in process `syz.3.722'. [ 167.168610][ T6381] device syzkaller0 entered promiscuous mode [ 167.179306][ T6385] binder: 6382:6385 tried to acquire reference to desc 0, got 1 instead [ 167.181453][ T6385] binder: 6382:6385 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 167.183822][ T6385] binder: 6385 RLIMIT_NICE not set [ 167.187174][ T6385] binder: 6385 RLIMIT_NICE not set [ 167.188258][ T6385] binder: 6385 RLIMIT_NICE not set [ 167.189293][ T6385] binder_alloc: 6382: binder_alloc_buf, no vma [ 167.190450][ T6385] binder: cannot allocate buffer: vma cleared, target dead or dying [ 167.190491][ T6385] binder: 6382:6385 transaction reply to 6382:6385 failed 113/29189/-3, size 0-0 line 3230 [ 167.193776][ T6385] binder: send failed reply for transaction 112 to 6382:6385 [ 167.197686][ T6385] binder: 6382:6385 got reply transaction with no transaction stack [ 167.199014][ T6385] binder: 6382:6385 transaction reply to 0:0 failed 114/29201/-71, size 0-0 line 2946 [ 167.207038][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.218587][ T3898] binder: undelivered TRANSACTION_ERROR: 29190 [ 167.235044][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.236749][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.262700][ T6384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.350944][ T6397] loop0: detected capacity change from 0 to 64 [ 167.444150][ T6402] netlink: 64 bytes leftover after parsing attributes in process `syz.0.731'. [ 167.827147][ T6405] loop0: detected capacity change from 0 to 2048 [ 167.847092][ T6405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.907276][ T6407] device syzkaller0 entered promiscuous mode [ 168.097567][ T6416] loop2: detected capacity change from 0 to 2048 [ 168.104603][ T6412] loop1: detected capacity change from 0 to 128 [ 168.141622][ T6416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.146155][ T6034] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.152565][ T6416] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 168.195783][ T6421] device syzkaller0 entered promiscuous mode [ 168.270057][ T4291] EXT4-fs (loop2): unmounting filesystem. [ 168.304260][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.306018][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.600785][ T6432] netlink: 64 bytes leftover after parsing attributes in process `syz.1.742'. [ 168.628232][ T6434] loop1: detected capacity change from 0 to 2048 [ 168.636885][ T6434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.678717][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.680308][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.776095][ T6440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.888425][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.890927][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.110602][ T6446] loop2: detected capacity change from 0 to 40427 [ 169.114449][ T6446] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 169.115888][ T6446] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 169.121261][ T6446] F2FS-fs (loop2): invalid crc value [ 169.129942][ T6446] F2FS-fs (loop2): Found nat_bits in checkpoint [ 169.138292][ T6446] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 169.139453][ T6446] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 169.145206][ T6450] device syzkaller0 entered promiscuous mode [ 169.183235][ T6456] netlink: 100 bytes leftover after parsing attributes in process `syz.2.750'. [ 169.670685][ T6464] 9pnet_fd: Insufficient options for proto=fd [ 169.688308][ T6468] netlink: 64 bytes leftover after parsing attributes in process `syz.1.754'. [ 169.721841][ T6470] device syzkaller0 entered promiscuous mode [ 169.726626][ T6472] loop1: detected capacity change from 0 to 256 [ 169.790131][ T6476] loop4: detected capacity change from 0 to 512 [ 169.791672][ T6476] EXT4-fs: inline encryption not supported [ 169.852974][ T6476] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 170.294271][ T3898] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 170.343903][ T6490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.348895][ T6490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.386194][ T6488] device syzkaller0 entered promiscuous mode [ 170.681465][ T3898] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.683111][ T3898] usb 1-1: config 0 has no interface number 0 [ 170.685783][ T6490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.689099][ T6490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.700766][ T3898] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 170.702538][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.704015][ T3898] usb 1-1: Product: syz [ 170.706149][ T3898] usb 1-1: Manufacturer: syz [ 170.707006][ T3898] usb 1-1: SerialNumber: syz [ 170.709183][ T3898] usb 1-1: config 0 descriptor?? [ 170.712004][ T3898] usb 1-1: selecting invalid altsetting 1 [ 170.713717][ T3898] dvb_ttusb_budget: ttusb_init_controller: error [ 170.715083][ T3898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 170.738628][ T3898] DVB: Unable to find symbol stv0299_attach() [ 170.751269][ T3898] DVB: Unable to find symbol tda8083_attach() [ 170.752431][ T3898] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 170.871939][ T6507] netlink: 64 bytes leftover after parsing attributes in process `syz.3.768'. [ 170.919713][ T3898] usb 1-1: USB disconnect, device number 37 [ 171.219392][ T6516] device syzkaller0 entered promiscuous mode [ 171.355694][ T6518] netlink: 220 bytes leftover after parsing attributes in process `syz.2.773'. [ 171.497365][ T6525] loop0: detected capacity change from 0 to 512 [ 171.503731][ T6525] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 171.509026][ T6525] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.514621][ T6525] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 171.517578][ T6525] EXT4-fs (loop0): 1 truncate cleaned up [ 171.518692][ T6525] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 171.616923][ T6529] device syzkaller0 entered promiscuous mode [ 172.011336][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.013137][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.137192][ T6538] netlink: 64 bytes leftover after parsing attributes in process `syz.2.780'. [ 172.238708][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.240432][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.447881][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.449666][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.006810][ T6548] device syzkaller0 entered promiscuous mode [ 173.171694][ T6550] loop2: detected capacity change from 0 to 1024 [ 173.173594][ T6550] EXT4-fs: Ignoring removed oldalloc option [ 173.185730][ T6550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 173.621284][ T6556] loop3: detected capacity change from 0 to 16 [ 173.638015][ T6556] erofs: (device loop3): mounted with root inode @ nid 36. [ 173.739724][ T6499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.746127][ T6562] device syzkaller0 entered promiscuous mode [ 173.773249][ T4284] EXT4-fs (loop0): unmounting filesystem. [ 173.829758][ T6567] loop1: detected capacity change from 0 to 8 [ 173.874030][ T6570] netlink: 64 bytes leftover after parsing attributes in process `syz.1.792'. [ 174.342833][ T4291] EXT4-fs (loop2): unmounting filesystem. [ 174.367339][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.369144][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.410391][ T6578] binder: 6577:6578 unknown command 1074553619 [ 174.411714][ T6578] binder: 6577:6578 ioctl c0306201 20000040 returned -22 [ 174.413324][ T6578] binder: 6577:6578 unknown command 1074553620 [ 174.414669][ T6578] binder: 6577:6578 ioctl c0306201 20000640 returned -22 [ 174.456392][ T6580] device syzkaller0 entered promiscuous mode [ 174.866558][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.884437][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.975456][ T6585] loop3: detected capacity change from 0 to 40427 [ 174.984138][ T6585] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.992175][ T6585] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 174.993656][ T6585] F2FS-fs (loop3): Start checkpoint disabled! [ 174.998848][ T6585] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 175.023486][ T6595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.409386][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.411377][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.412627][ T6606] netlink: 64 bytes leftover after parsing attributes in process `syz.3.804'. [ 175.416747][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.418617][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.462889][ T6608] device syzkaller0 entered promiscuous mode [ 176.513034][ T51] block nbd0: Attempted send on invalid socket [ 176.514389][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 176.516534][ T6619] FAT-fs (nbd0): unable to read boot sector [ 176.581541][ T6625] device syzkaller0 entered promiscuous mode [ 177.492551][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.497014][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.704379][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.706030][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.043435][ T6598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.097416][ T6636] netlink: 64 bytes leftover after parsing attributes in process `syz.0.815'. [ 178.128184][ T6638] device syzkaller0 entered promiscuous mode [ 178.190909][ T6646] binder: 6645:6646 unknown command 1074553620 [ 178.204377][ T6646] binder: 6645:6646 ioctl c0306201 20000640 returned -22 [ 178.259177][ T6651] loop1: detected capacity change from 0 to 64 [ 178.276637][ T6651] hfs: unable to load iocharset "macinuiÿ" [ 178.277874][ T6651] hfs: unable to parse mount options [ 178.444419][ T3898] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 178.628287][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.636608][ T3898] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.644847][ T3898] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 178.652988][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.659421][ T3898] usb 1-1: Product: syz [ 178.661359][ T3898] usb 1-1: Manufacturer: syz [ 178.662147][ T3898] usb 1-1: SerialNumber: syz [ 178.677484][ T3898] usb 1-1: config 0 descriptor?? [ 179.047611][ T3898] usb 1-1: USB disconnect, device number 38 [ 179.093220][ T6678] netlink: 64 bytes leftover after parsing attributes in process `syz.3.830'. [ 179.111001][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.113440][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.175715][ T6683] device syzkaller0 entered promiscuous mode [ 179.321327][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.323184][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.456675][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.458684][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.864356][ T6165] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 179.971100][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.972785][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.066069][ T6165] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.068376][ T6165] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.070249][ T6165] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.072622][ T6165] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.073863][ T6165] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 180.075758][ T6165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.078274][ T6165] usb 1-1: config 0 descriptor?? [ 180.487069][ T6165] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 180.488492][ T6165] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 180.489823][ T6165] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 180.491048][ T6165] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 180.492300][ T6165] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 180.496122][ T6165] holtek 0003:1241:5015.0001: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 180.498176][ T6165] holtek 0003:1241:5015.0001: no inputs found [ 180.687980][ T6165] usb 1-1: USB disconnect, device number 39 [ 181.777250][ T6671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.136600][ T6720] device syzkaller0 entered promiscuous mode [ 182.186508][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.191051][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.223158][ T6729] fido_id[6729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 182.464254][ T7] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 182.565458][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 182.572790][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 182.581561][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 182.590521][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 182.599498][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 182.601782][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 182.612098][ T6735] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 182.626790][ T6739] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.630679][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 182.632276][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 182.636120][ T6741] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.637721][ T6741] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.639330][ T6741] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.640932][ T6741] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.643872][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 182.646688][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 182.656740][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 182.659934][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 182.670233][ T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 182.671898][ T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 182.673417][ T7] usb 1-1: Product: syz [ 182.674136][ T7] usb 1-1: Manufacturer: syz [ 182.676723][ T7] usb 1-1: SerialNumber: syz [ 182.683466][ T7] usb 1-1: config 0 descriptor?? [ 182.685150][ T6728] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.688143][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 182.689242][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 182.703536][ T6734] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 182.806682][ T6751] loop4: detected capacity change from 0 to 128 [ 183.114820][ T6751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.200709][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 183.435051][ T6766] loop4: detected capacity change from 0 to 512 [ 183.439703][ T6766] EXT4-fs: Ignoring removed nobh option [ 183.645647][ T6766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.694267][ T6728] usb 1-1: reset high-speed USB device number 40 using dummy_hcd [ 183.705823][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 183.824486][ T6777] device syzkaller0 entered promiscuous mode [ 184.248502][ T6760] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 184.639594][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.641544][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.705170][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 184.712945][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 184.718153][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.720028][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.726046][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 184.740339][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 184.746885][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 184.749044][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 184.752158][ T6793] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.758220][ T6789] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 184.778694][ T6788] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 184.807952][ T27] audit: type=1326 audit(184.800:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2577a28 code=0x7ffc0000 [ 184.812618][ T27] audit: type=1326 audit(184.800:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2577a28 code=0x7ffc0000 [ 184.817783][ T27] audit: type=1326 audit(184.800:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2577a28 code=0x7ffc0000 [ 184.834606][ T27] audit: type=1326 audit(184.800:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=132 compat=0 ip=0xffffa2577a28 code=0x7ffc0000 [ 184.841868][ T27] audit: type=1326 audit(184.800:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2577a28 code=0x7ffc0000 [ 184.846531][ T27] audit: type=1326 audit(184.800:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2577a28 code=0x7ffc0000 [ 184.851110][ T27] audit: type=1326 audit(184.800:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2577a28 code=0x7ffc0000 [ 184.856729][ T27] audit: type=1326 audit(184.800:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa2577a28 code=0x7ffc0000 [ 184.861250][ T27] audit: type=1326 audit(184.800:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2577a28 code=0x7ffc0000 [ 184.865685][ T27] audit: type=1326 audit(184.800:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.4.867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2577a28 code=0x7ffc0000 [ 185.259923][ T6803] loop3: detected capacity change from 0 to 8 [ 185.263237][ T6803] SQUASHFS error: zlib decompression failed, data probably corrupt [ 185.265965][ T6803] SQUASHFS error: Failed to read block 0x9b: -5 [ 185.267304][ T6803] SQUASHFS error: Unable to read metadata cache entry [99] [ 185.268659][ T6803] SQUASHFS error: Unable to read inode 0x127 [ 185.650500][ T6810] loop3: detected capacity change from 0 to 512 [ 185.854879][ T5306] usb 1-1: USB disconnect, device number 40 [ 186.388209][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.391245][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.253742][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.255924][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.355925][ T1514] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 187.356327][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.358518][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.544271][ T1514] usb 1-1: Using ep0 maxpacket: 32 [ 187.546936][ T1514] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 187.550290][ T1514] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 187.551950][ T1514] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 187.553468][ T1514] usb 1-1: Product: syz [ 187.554247][ T1514] usb 1-1: Manufacturer: syz [ 187.556156][ T1514] usb 1-1: SerialNumber: syz [ 187.558508][ T1514] usb 1-1: config 0 descriptor?? [ 187.559855][ T6850] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.561939][ T1514] hub 1-1:0.0: bad descriptor, ignoring hub [ 187.563203][ T1514] hub: probe of 1-1:0.0 failed with error -5 [ 188.385424][ T6850] usb 1-1: reset high-speed USB device number 41 using dummy_hcd [ 188.586079][ T6873] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.905616][ T6165] usb 1-1: USB disconnect, device number 41 [ 190.031244][ T6886] device syzkaller0 entered promiscuous mode [ 190.342992][ T6858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.803147][ T6909] syz.0.905 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 190.807226][ T6909] ubi31: attaching mtd0 [ 190.808919][ T6909] ubi31: scanning is finished [ 190.809809][ T6909] ubi31: empty MTD device detected [ 191.221721][ T6909] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 191.223165][ T6909] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 191.224533][ T6909] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 191.225742][ T6909] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 191.227153][ T6909] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 191.228399][ T6909] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 191.229886][ T6909] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 171996958 [ 191.231854][ T6909] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 191.237456][ T6915] ubi31: background thread "ubi_bgt31d" started, PID 6915 [ 191.263963][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.265908][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.767657][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.769405][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.652722][ T6927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.719400][ T6964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.721076][ T6964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.044298][ T4329] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 195.224240][ T4329] usb 1-1: Using ep0 maxpacket: 32 [ 195.226463][ T4329] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 195.229669][ T4329] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 195.231294][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 195.232778][ T4329] usb 1-1: Product: syz [ 195.233540][ T4329] usb 1-1: Manufacturer: syz [ 195.234838][ T4329] usb 1-1: SerialNumber: syz [ 195.242945][ T4329] usb 1-1: config 0 descriptor?? [ 195.244333][ T6969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.246788][ T4329] hub 1-1:0.0: bad descriptor, ignoring hub [ 195.247937][ T4329] hub: probe of 1-1:0.0 failed with error -5 [ 195.272988][ T6977] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 195.284763][ T6977] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 195.292038][ T6977] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 195.297132][ T6977] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 195.307066][ T6977] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 195.309300][ T6977] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 195.311530][ T6977] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 195.316712][ T6977] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 195.842823][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 195.946372][ T6997] tipc: Enabled bearer , priority 0 [ 195.948281][ T6997] device syzkaller0 entered promiscuous mode [ 195.974340][ T6969] usb 1-1: reset high-speed USB device number 42 using dummy_hcd [ 195.986006][ T6997] tipc: Resetting bearer [ 195.990979][ T6996] tipc: Resetting bearer [ 196.035617][ T6996] tipc: Disabling bearer [ 196.169110][ T6969] usb 1-1: device firmware changed [ 196.170605][ T4332] usb 1-1: USB disconnect, device number 42 [ 196.256995][ T7008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.938'. [ 196.324513][ T4332] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 196.504820][ T4332] usb 1-1: Using ep0 maxpacket: 32 [ 196.509150][ T4332] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 196.513990][ T4332] usb 1-1: string descriptor 0 read error: -22 [ 196.517067][ T4332] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 196.519025][ T4332] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 196.527201][ T4332] usb 1-1: config 0 descriptor?? [ 196.528721][ T6983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.530692][ T4332] hub 1-1:0.0: bad descriptor, ignoring hub [ 196.531826][ T4332] hub: probe of 1-1:0.0 failed with error -5 [ 196.553253][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 196.558112][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 196.559644][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 196.561103][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 196.562790][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 196.565417][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 196.566993][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 196.854408][ T7] usb 1-1: USB disconnect, device number 43 [ 196.977751][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 197.025060][ T7015] loop4: detected capacity change from 0 to 256 [ 197.031227][ T7015] exfat: Deprecated parameter 'utf8' [ 197.032263][ T7015] exfat: Deprecated parameter 'namecase' [ 197.040245][ T7015] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 197.071374][ T7017] netlink: 64 bytes leftover after parsing attributes in process `syz.4.942'. [ 197.581208][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 197.631852][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.636884][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.160142][ T7047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.954'. [ 198.246586][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.249103][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.453466][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.455313][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.621928][ T7059] netlink: 348 bytes leftover after parsing attributes in process `syz.1.959'. [ 198.623952][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 198.898083][ T6998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.950771][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.953671][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.965971][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.968511][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.486344][ T7075] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 199.492515][ T7077] netlink: 64 bytes leftover after parsing attributes in process `syz.3.966'. [ 200.518850][ T7081] netlink: 'syz.0.965': attribute type 3 has an invalid length. [ 201.148406][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 201.161180][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 201.162605][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 201.164058][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 201.165846][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 201.167122][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 201.168602][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 201.180220][ T7097] tipc: Enabled bearer , priority 0 [ 201.181793][ T7097] device syzkaller0 entered promiscuous mode [ 201.486114][ T7097] tipc: Resetting bearer [ 201.491056][ T7095] tipc: Resetting bearer [ 201.536515][ T7095] tipc: Disabling bearer [ 201.716240][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.722002][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.761978][ T7121] netlink: 64 bytes leftover after parsing attributes in process `syz.4.981'. [ 202.259201][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 202.419761][ T7137] netlink: 348 bytes leftover after parsing attributes in process `syz.2.988'. [ 202.421684][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 203.427624][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 203.427687][ T27] audit: type=1326 audit(203.360:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.990" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77a28 code=0x7ffc0000 [ 203.453269][ T27] audit: type=1326 audit(203.360:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.990" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77a28 code=0x7ffc0000 [ 203.484045][ T27] audit: type=1326 audit(203.360:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.990" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffaaf77a28 code=0x7ffc0000 [ 203.489754][ T27] audit: type=1326 audit(203.360:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.990" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77a28 code=0x7ffc0000 [ 203.495298][ T27] audit: type=1326 audit(203.360:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.990" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77a28 code=0x7ffc0000 [ 203.499845][ T27] audit: type=1326 audit(203.360:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.990" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffaaf5a8ec code=0x7ffc0000 [ 203.507628][ T27] audit: type=1326 audit(203.360:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.990" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77a28 code=0x7ffc0000 [ 203.513205][ T27] audit: type=1326 audit(203.360:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.990" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77a28 code=0x7ffc0000 [ 203.553930][ T27] audit: type=1326 audit(203.370:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.990" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaaf77a28 code=0x7ffc0000 [ 203.558606][ T27] audit: type=1326 audit(203.370:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.2.990" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaf77a28 code=0x7ffc0000 [ 204.099935][ T7152] netlink: 64 bytes leftover after parsing attributes in process `syz.2.993'. [ 204.121914][ T7100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.262383][ T7164] binder: tried to use weak ref as strong ref [ 204.264010][ T7164] binder: 7162:7164 Acquire 1 refcount change on invalid ref 0 ret -22 [ 204.275190][ T7164] binder: 7162:7164 got transaction to invalid handle, 1 [ 204.276512][ T7164] binder: 7164:7162 cannot find target node [ 204.277583][ T7164] binder: 7162:7164 transaction call to 0:0 failed 121/29201/-22, size 0-0 line 3045 [ 204.279491][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 204.283471][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 204.285579][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 204.286947][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 204.288268][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 204.289647][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 204.291078][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 204.619804][ T7173] overlayfs: overlapping lowerdir path [ 205.213171][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.218354][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.621248][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.626574][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.151593][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 206.210204][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 206.214528][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 206.216077][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 206.217636][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 206.219075][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 206.226208][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 206.227527][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 206.238436][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.240238][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.767106][ T7235] ------------[ cut here ]------------ [ 206.768309][ T7235] WARNING: CPU: 0 PID: 7235 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 206.770014][ T7235] Modules linked in: [ 206.770784][ T7235] CPU: 0 PID: 7235 Comm: syz.4.1023 Not tainted syzkaller #0 [ 206.772264][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.774209][ T7235] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 206.775758][ T7235] pc : hugetlb_split+0x234/0x29c [ 206.776729][ T7235] lr : hugetlb_split+0x234/0x29c [ 206.777725][ T7235] sp : ffff8000216077f0 [ 206.778555][ T7235] x29: ffff8000216077f0 x28: dfff800000000000 x27: 0000000020800000 [ 206.780149][ T7235] x26: ffff0000c4143288 x25: ffff800015220000 x24: 1ffff00002a44070 [ 206.781751][ T7235] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 206.783342][ T7235] x20: 0000000020000000 x19: ffff0000c4143288 x18: 0000000000000000 [ 206.784916][ T7235] x17: ffff80000880c7e0 x16: ffff8000082d7db8 x15: 0000000000000000 [ 206.786501][ T7235] x14: 0000000000000001 x13: 1fffe00018d9291b x12: 0000000000080000 [ 206.788004][ T7235] x11: 000000000000164e x10: ffff800028a6d000 x9 : ffff800008897c90 [ 206.789506][ T7235] x8 : 000000000000164f x7 : 0000000000000000 x6 : 000000000000003f [ 206.791019][ T7235] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008897b10 [ 206.792525][ T7235] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 206.794048][ T7235] Call trace: [ 206.794668][ T7235] hugetlb_split+0x234/0x29c [ 206.795542][ T7235] __vma_adjust+0x3a0/0x1724 [ 206.796411][ T7235] __split_vma+0x324/0x444 [ 206.797260][ T7235] split_vma+0xa0/0xf8 [ 206.798040][ T7235] mprotect_fixup+0x3b8/0x5c4 [ 206.798970][ T7235] __arm64_sys_mprotect+0x5e4/0xa0c [ 206.799952][ T7235] invoke_syscall+0x98/0x2b4 [ 206.800865][ T7235] el0_svc_common+0x138/0x258 [ 206.801763][ T7235] do_el0_svc+0x58/0x130 [ 206.802603][ T7235] el0_svc+0x58/0x128 [ 206.803414][ T7235] el0t_64_sync_handler+0x84/0xf0 [ 206.804435][ T7235] el0t_64_sync+0x18c/0x190 [ 206.805361][ T7235] irq event stamp: 344 [ 206.806160][ T7235] hardirqs last enabled at (343): [] kmem_cache_alloc_bulk+0x3bc/0x4e4 [ 206.808069][ T7235] hardirqs last disabled at (344): [] el1_dbg+0x24/0x80 [ 206.809712][ T7235] softirqs last enabled at (324): [] local_bh_enable+0x10/0x34 [ 206.811496][ T7235] softirqs last disabled at (322): [] local_bh_disable+0x10/0x34 [ 206.813319][ T7235] ---[ end trace 0000000000000000 ]--- [ 206.815744][ T7235] ------------[ cut here ]------------ [ 206.816712][ T7235] WARNING: CPU: 0 PID: 7235 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 206.818319][ T7235] Modules linked in: [ 206.819007][ T7235] CPU: 0 PID: 7235 Comm: syz.4.1023 Tainted: G W syzkaller #0 [ 206.820545][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.822298][ T7235] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 206.823716][ T7235] pc : hugetlb_split+0x234/0x29c [ 206.824671][ T7235] lr : hugetlb_split+0x234/0x29c [ 206.825657][ T7235] sp : ffff8000216077f0 [ 206.826464][ T7235] x29: ffff8000216077f0 x28: dfff800000000000 x27: 0000000020800000 [ 206.828051][ T7235] x26: ffff0000c4143288 x25: ffff800015220000 x24: 1ffff00002a44070 [ 206.829630][ T7235] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 206.831181][ T7235] x20: 0000000020800000 x19: ffff0000c4143288 x18: 0000000000000000 [ 206.832744][ T7235] x17: ffff80000880c7e0 x16: ffff8000082d7db8 x15: 0000000000000000 [ 206.834301][ T7235] x14: 0000000000000001 x13: 1fffe00018d9291b x12: 0000000000080000 [ 206.835855][ T7235] x11: 00000000000190fb x10: ffff800028a6d000 x9 : ffff800008897c90 [ 206.837429][ T7235] x8 : 00000000000190fc x7 : 0000000000000000 x6 : 000000000000003f [ 206.838993][ T7235] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008897b10 [ 206.840557][ T7235] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 206.842114][ T7235] Call trace: [ 206.842749][ T7235] hugetlb_split+0x234/0x29c [ 206.843645][ T7235] __vma_adjust+0x3ac/0x1724 [ 206.844557][ T7235] __split_vma+0x324/0x444 [ 206.845432][ T7235] split_vma+0xa0/0xf8 [ 206.846229][ T7235] mprotect_fixup+0x3b8/0x5c4 [ 206.847150][ T7235] __arm64_sys_mprotect+0x5e4/0xa0c [ 206.848172][ T7235] invoke_syscall+0x98/0x2b4 [ 206.849097][ T7235] el0_svc_common+0x138/0x258 [ 206.850044][ T7235] do_el0_svc+0x58/0x130 [ 206.850909][ T7235] el0_svc+0x58/0x128 [ 206.851710][ T7235] el0t_64_sync_handler+0x84/0xf0 [ 206.852716][ T7235] el0t_64_sync+0x18c/0x190 [ 206.853617][ T7235] irq event stamp: 392 [ 206.854416][ T7235] hardirqs last enabled at (391): [] exit_to_kernel_mode+0xcc/0xfc [ 206.856308][ T7235] hardirqs last disabled at (392): [] el1_dbg+0x24/0x80 [ 206.857977][ T7235] softirqs last enabled at (386): [] handle_softirqs+0xaec/0xc60 [ 206.859846][ T7235] softirqs last disabled at (347): [] __do_softirq+0x14/0x20 [ 206.861538][ T7235] ---[ end trace 0000000000000000 ]--- [ 208.104773][ T7199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512