last executing test programs: 2m8.794140979s ago: executing program 2 (id=962): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x40800) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) 2m7.901757451s ago: executing program 2 (id=982): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 2m7.865767284s ago: executing program 2 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x2000c094) 2m7.845785327s ago: executing program 2 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x10042, &(0x7f0000000140)=ANY=[@ANYBLOB='discard=0x00000000000000f4,discard=0x000000000100aff9,errors=continue,nointegrity,iocharset=macroman,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,grpquota,\x00'], 0x24, 0x623a, &(0x7f0000002780)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 2m7.737917492s ago: executing program 2 (id=988): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 'macvlan1\x00'}}}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 2m7.067249554s ago: executing program 2 (id=999): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0xd9d7, 0x5) r3 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0xffffffff8d414e18, 0x7ff, 0x7d, 0x10000, 0x4, 0x0, 0x0, 0x100}}, 0x50) 2m7.054239852s ago: executing program 32 (id=999): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, 0x0, 0xd9d7, 0x5) r3 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0xffffffff8d414e18, 0x7ff, 0x7d, 0x10000, 0x4, 0x0, 0x0, 0x100}}, 0x50) 5.348013449s ago: executing program 0 (id=2550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000", @ANYRES16=r1, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="0800050006000000100017800400020500000000000000000c00178004000200040006001c0017800400040004000300040006000400"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 5.347399078s ago: executing program 0 (id=2552): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c000200"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 5.251918278s ago: executing program 0 (id=2555): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1, r0}, 0x0, 0x0, 0x0) 5.223419208s ago: executing program 0 (id=2556): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) write(r0, &(0x7f0000000080)="defc70a6419d8b", 0x7) 2.165348321s ago: executing program 0 (id=2587): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(0x4) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) write(r0, &(0x7f0000000080)="defc70a6419d8b", 0x7) 2.027545701s ago: executing program 4 (id=2594): unshare(0x40600) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) 1.931792915s ago: executing program 3 (id=2598): bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x18, 0xc, &(0x7f0000001300)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x5405, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) 990.269207ms ago: executing program 4 (id=2600): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCXONC(r1, 0x540a, 0x2) 990.105702ms ago: executing program 5 (id=2601): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0x9a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}}, 0x0) 975.87647ms ago: executing program 4 (id=2602): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1210080, &(0x7f00000010c0)={[{@type={'type', 0x3d, "b27d5bef"}}, {@umask={'umask', 0x3d, 0x97}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@creator={'creator', 0x3d, "0691aaf6"}}, {@umask={'umask', 0x3d, 0x472}}, {@dir_umask={'dir_umask', 0x3d, 0x400}}, {@codepage={'codepage', 0x3d, 'cp857'}}, {@gid}, {@umask={'umask', 0x3d, 0x401}}]}, 0x7, 0x318, &(0x7f00000004c0)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 975.345139ms ago: executing program 5 (id=2603): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="08001c1fdbea8ca17b018bde00002800000000000000000000000000000049cb", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x2, 0x4800) 928.929408ms ago: executing program 5 (id=2604): syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @private1}}}}}}, 0x0) 903.032187ms ago: executing program 4 (id=2605): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008001) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000044) r0 = open$dir(0x0, 0x0, 0x11) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}], 0x1, 0x0, 0x0, 0x2) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000010000000000000000000000040000000000000000020000000000000000000000000000000000000000000000000c0015005907350081000000"], 0xc4}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000000)={0x0, 0xb}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x0) 901.732281ms ago: executing program 3 (id=2606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x2, {0x0, 0x0, 0x2}, {0x2, 0xf0, 0x4}, 0x2, 0xfe}, {0x0, 0x3, {0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}, 0xff, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 831.314766ms ago: executing program 5 (id=2607): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) 831.091448ms ago: executing program 4 (id=2608): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200a83, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, &(0x7f0000000240)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x100f2cf, 0x10100, 0x0, 0x163}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 824.210203ms ago: executing program 1 (id=2610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYBLOB="fffffffed9526cfd8400128009000100766c616e00000000740002"], 0xb4}}, 0x0) 791.327206ms ago: executing program 3 (id=2611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 790.581491ms ago: executing program 5 (id=2612): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c884) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 746.276734ms ago: executing program 1 (id=2613): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 746.116577ms ago: executing program 1 (id=2614): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0x9a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}}, 0x0) 726.817428ms ago: executing program 1 (id=2615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x209, 0x6, 0x807, 0x2097}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0), 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000ba9e70000000000000000800000000000000800010001"], 0x20}}, 0x4000000) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 685.176245ms ago: executing program 5 (id=2616): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xb) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) 539.05275ms ago: executing program 3 (id=2617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x6, 0x6, 0x3, 0x3ff, 0x3}, 0x14) 538.806273ms ago: executing program 4 (id=2618): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x101000) dup3(0xffffffffffffffff, r0, 0x80000) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x74ec, 0xfe0, 0x2, 0xfffffffb, 0xc, "8e442e68fe0b41792d98772b46793e277e19f1", 0x3, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 514.966269ms ago: executing program 1 (id=2619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000040)={0x0, "eaf716300d6494e1cff7c67783b0d0c45678ef69fd4795732cb34e8fc696d5a6", 0x1, 0x1}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 481.982079ms ago: executing program 1 (id=2620): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910435000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r0]) 446.67368ms ago: executing program 3 (id=2621): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="0600150007000000", @ANYRES64=r0], 0x38}}, 0x10) 445.314579ms ago: executing program 3 (id=2622): socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x150, 0xd3, 0x12, 0x36, 0x10, 0x9fb, 0x602a, 0xfd36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xaa, 0x72, 0x59}}]}}]}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 0s ago: executing program 0 (id=2623): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) kernel console output (not intermixed with test programs): device [ 190.180362][T11677] binder: BINDER_SET_CONTEXT_MGR already set [ 190.180387][T11677] binder: 11676:11677 ioctl 4018620d 200003c0 returned -16 [ 190.181890][T11677] binder: 11676:11677 context manager tried to acquire desc 0 [ 190.181901][T11677] binder: 11676:11677 ioctl c0306201 20000000 returned -22 [ 190.291290][T11682] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1801'. [ 190.298457][ T6599] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 190.305006][ T6599] usb 1-1: USB disconnect, device number 28 [ 190.383268][T11684] loop1: detected capacity change from 0 to 512 [ 190.389052][T11684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.436713][T11684] EXT4-fs (loop1): 1 truncate cleaned up [ 190.439271][T11684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.094886][ T6586] binder_debug: 19 callbacks suppressed [ 191.094930][ T6586] binder: undelivered transaction 189, process died. [ 191.112539][ T6586] binder: undelivered TRANSACTION_COMPLETE [ 191.231090][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.300722][T11703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.304680][T11703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.308069][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'. [ 191.317050][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1807'. [ 191.374130][T11707] loop3: detected capacity change from 0 to 16 [ 191.374993][T11707] erofs (device loop3): mounted with root inode @ nid 36. [ 191.375616][T11707] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 191.375641][T11707] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 191.375666][T11707] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 191.499509][T11710] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 191.499532][T11710] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.499846][T11710] vhci_hcd vhci_hcd.0: Device attached [ 191.504705][T11710] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.505565][T11710] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 191.505578][T11710] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 191.505602][T11710] vhci_hcd vhci_hcd.0: Device attached [ 191.509663][T11710] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 191.509683][T11710] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.509726][T11710] vhci_hcd vhci_hcd.0: Device attached [ 191.511343][T11710] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 191.511357][T11710] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.511381][T11710] vhci_hcd vhci_hcd.0: Device attached [ 191.511830][T11710] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.512131][T11710] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.517937][T11714] vhci_hcd: connection closed [ 191.518392][T11712] vhci_hcd: connection closed [ 191.518610][T11716] vhci_hcd: connection closed [ 191.518727][T11718] vhci_hcd: connection closed [ 191.526460][ T2722] vhci_hcd: stop threads [ 191.526515][ T2722] vhci_hcd: release socket [ 191.526575][ T2722] vhci_hcd: disconnect device [ 191.531208][ T2722] vhci_hcd: stop threads [ 191.531230][ T2722] vhci_hcd: release socket [ 191.531255][ T2722] vhci_hcd: disconnect device [ 191.532334][ T2722] vhci_hcd: stop threads [ 191.532342][ T2722] vhci_hcd: release socket [ 191.532352][ T2722] vhci_hcd: disconnect device [ 191.532469][ T2722] vhci_hcd: stop threads [ 191.532474][ T2722] vhci_hcd: release socket [ 191.532483][ T2722] vhci_hcd: disconnect device [ 191.559282][T11723] binder: 11722:11723 tried to acquire reference to desc 0, got 1 instead [ 191.559471][T11723] binder: 11722:11723 ioctl c0306201 0 returned -14 [ 191.559550][T11723] binder: 11722:11723 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 191.559560][T11723] binder: 11723 RLIMIT_NICE not set [ 191.846490][T11726] binder: 11725:11726 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 191.849283][T11726] binder: 11725:11726 ioctl c0306201 20000000 returned -14 [ 191.849412][T11726] binder: 11725:11726 got transaction to invalid handle, 1 [ 191.849429][T11726] binder: 11725:11726 cannot find target node [ 191.849441][T11726] binder: 11725:11726 transaction call to 0:0 failed 206/29201/-22, code 0 size 72-24 line 3151 [ 191.849660][ T6599] binder: undelivered TRANSACTION_ERROR: 29201 [ 192.152392][T11740] loop5: detected capacity change from 0 to 512 [ 192.213923][T11740] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.229557][T11740] EXT4-fs (loop5): 1 truncate cleaned up [ 192.232139][T11740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.881213][ T6586] binder: undelivered transaction 199, process died. [ 192.892819][ T6586] binder: undelivered TRANSACTION_COMPLETE [ 193.013537][T11755] __nla_validate_parse: 1 callbacks suppressed [ 193.014937][T11755] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'. [ 193.105108][T11758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1823'. [ 193.118828][ T9563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.136611][T11762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.138369][T11762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.140395][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 193.157818][T11766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.157991][T11766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.251331][T11772] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 193.251354][T11772] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.251432][T11772] vhci_hcd vhci_hcd.0: Device attached [ 193.256802][T11772] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.259367][T11772] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 193.259391][T11772] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.259870][T11772] vhci_hcd vhci_hcd.0: Device attached [ 193.267174][T11772] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 193.267199][T11772] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.267439][T11772] vhci_hcd vhci_hcd.0: Device attached [ 193.270247][T11772] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 193.270263][T11772] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.270292][T11772] vhci_hcd vhci_hcd.0: Device attached [ 193.271340][T11772] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.271631][T11772] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.279995][T11781] vhci_hcd: connection closed [ 193.280091][T11777] vhci_hcd: connection closed [ 193.280323][ T6773] vhci_hcd: stop threads [ 193.280334][ T6773] vhci_hcd: release socket [ 193.280345][ T6773] vhci_hcd: disconnect device [ 193.281032][ T6773] vhci_hcd: stop threads [ 193.281039][ T6773] vhci_hcd: release socket [ 193.281051][ T6773] vhci_hcd: disconnect device [ 193.281078][T11779] vhci_hcd: connection closed [ 193.281550][ T6773] vhci_hcd: stop threads [ 193.281555][ T6773] vhci_hcd: release socket [ 193.281563][ T6773] vhci_hcd: disconnect device [ 193.289201][T11775] vhci_hcd: connection closed [ 193.289473][ T6773] vhci_hcd: stop threads [ 193.291028][ T6773] vhci_hcd: release socket [ 193.291800][ T6773] vhci_hcd: disconnect device [ 193.362825][T11784] loop1: detected capacity change from 0 to 16 [ 193.364623][T11784] erofs (device loop1): mounted with root inode @ nid 36. [ 193.365266][T11784] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 193.365287][T11784] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 193.365309][T11784] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 193.701013][T11786] binder: 11785:11786 ioctl c0306201 0 returned -14 [ 193.711801][T11788] binder: 11787:11788 ioctl c0306201 20000000 returned -14 [ 193.713899][T11788] binder: 11787:11788 cannot find target node [ 193.715606][T11788] binder: 11787:11788 transaction call to 0:0 failed 213/29201/-22, code 0 size 72-24 line 3151 [ 193.718257][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.024094][T11801] loop3: detected capacity change from 0 to 512 [ 194.036415][T11801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.175638][T11801] EXT4-fs (loop3): 1 truncate cleaned up [ 194.176096][T11801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.771736][T11805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1837'. [ 194.895007][T11818] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1838'. [ 194.900017][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.900213][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.961079][T11822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.965770][T11822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.979426][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1843'. [ 194.984599][ T6543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.023979][T11827] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 195.024007][T11827] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.024060][T11827] vhci_hcd vhci_hcd.0: Device attached [ 195.024679][T11827] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.027578][T11827] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 195.027600][T11827] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.027631][T11827] vhci_hcd vhci_hcd.0: Device attached [ 195.029801][T11827] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 195.029811][T11827] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 195.029827][T11827] vhci_hcd vhci_hcd.0: Device attached [ 195.030730][T11827] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 195.030743][T11827] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 195.030765][T11827] vhci_hcd vhci_hcd.0: Device attached [ 195.031189][T11827] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.031496][T11827] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.040263][T11835] vhci_hcd: connection closed [ 195.040481][ T7330] vhci_hcd: stop threads [ 195.040492][ T7330] vhci_hcd: release socket [ 195.040502][ T7330] vhci_hcd: disconnect device [ 195.040562][T11833] vhci_hcd: connection closed [ 195.040701][ T7330] vhci_hcd: stop threads [ 195.040705][ T7330] vhci_hcd: release socket [ 195.040713][ T7330] vhci_hcd: disconnect device [ 195.040767][T11831] vhci_hcd: connection closed [ 195.041948][T11829] vhci_hcd: connection closed [ 195.042054][ T7330] vhci_hcd: stop threads [ 195.042061][ T7330] vhci_hcd: release socket [ 195.042072][ T7330] vhci_hcd: disconnect device [ 195.043036][ T7330] vhci_hcd: stop threads [ 195.043041][ T7330] vhci_hcd: release socket [ 195.043052][ T7330] vhci_hcd: disconnect device [ 195.047436][T11837] binder_user_error: 5 callbacks suppressed [ 195.047445][T11837] binder: 11828:11837 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 195.048544][T11837] binder: 11828:11837 ioctl c0306201 20000000 returned -14 [ 195.048636][T11837] binder: 11828:11837 got transaction to invalid handle, 1 [ 195.176812][T11844] loop4: detected capacity change from 0 to 16 [ 195.177600][T11844] erofs (device loop4): mounted with root inode @ nid 36. [ 195.178250][T11844] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 195.178271][T11844] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 195.178291][T11844] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 195.462571][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1850'. [ 195.480008][T11850] binder: 11849:11850 tried to acquire reference to desc 0, got 1 instead [ 195.480232][T11850] binder: 11849:11850 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 195.480244][T11850] binder: 11850 RLIMIT_NICE not set [ 195.777551][T11861] loop3: detected capacity change from 0 to 512 [ 195.813243][T11861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.870812][T11861] EXT4-fs (loop3): 1 truncate cleaned up [ 195.873395][T11861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.494200][ T6586] binder_debug: 5 callbacks suppressed [ 196.494241][ T6586] binder: undelivered transaction 226, process died. [ 196.513306][ T3931] binder: undelivered TRANSACTION_COMPLETE [ 196.650235][T11876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1856'. [ 196.665254][T11877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.667237][T11877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.717829][ T6543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.749988][T11881] binder: 11880:11881 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 196.781771][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1861'. [ 196.810709][T11886] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 196.810731][T11886] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.810806][T11886] vhci_hcd vhci_hcd.0: Device attached [ 196.811918][T11886] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 196.817541][T11886] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 196.817560][T11886] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.817588][T11886] vhci_hcd vhci_hcd.0: Device attached [ 196.820646][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1862'. [ 196.822587][T11886] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 196.822607][T11886] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 196.822631][T11886] vhci_hcd vhci_hcd.0: Device attached [ 196.823399][T11886] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 196.823411][T11886] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 196.823432][T11886] vhci_hcd vhci_hcd.0: Device attached [ 196.823740][T11886] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 196.823998][T11886] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 196.845431][T11889] vhci_hcd: connection closed [ 196.845825][T11891] vhci_hcd: connection closed [ 196.845939][ T7284] vhci_hcd: stop threads [ 196.845950][ T7284] vhci_hcd: release socket [ 196.845962][ T7284] vhci_hcd: disconnect device [ 196.845996][T11894] vhci_hcd: connection closed [ 196.846073][T11897] vhci_hcd: connection closed [ 196.846454][ T7284] vhci_hcd: stop threads [ 196.846458][ T7284] vhci_hcd: release socket [ 196.846467][ T7284] vhci_hcd: disconnect device [ 196.846563][ T7284] vhci_hcd: stop threads [ 196.846567][ T7284] vhci_hcd: release socket [ 196.846574][ T7284] vhci_hcd: disconnect device [ 196.846665][ T7284] vhci_hcd: stop threads [ 196.846668][ T7284] vhci_hcd: release socket [ 196.846675][ T7284] vhci_hcd: disconnect device [ 196.995341][T11907] binder: 11906:11907 tried to acquire reference to desc 0, got 1 instead [ 196.997151][T11907] binder: 11906:11907 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 196.999398][T11907] binder: 11907 RLIMIT_NICE not set [ 197.424605][T11914] loop4: detected capacity change from 0 to 512 [ 197.552301][T11914] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.610826][T11914] EXT4-fs (loop4): 1 truncate cleaned up [ 197.613117][T11914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.104646][ T3931] binder: undelivered transaction 236, process died. [ 198.122502][ T3931] binder: undelivered TRANSACTION_COMPLETE [ 198.240766][T11928] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1874'. [ 198.247537][T11919] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1871'. [ 198.259800][T11932] binder: 11930:11932 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 198.291088][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.397534][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 198.426845][T11950] loop3: detected capacity change from 0 to 16 [ 198.427743][T11950] erofs (device loop3): mounted with root inode @ nid 36. [ 198.429486][T11950] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 198.429534][T11950] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 198.429548][T11950] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 198.762302][ T6586] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 198.927781][ T6586] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.927826][ T6586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.927862][ T6586] usb 1-1: Product: syz [ 198.927873][ T6586] usb 1-1: Manufacturer: syz [ 198.927883][ T6586] usb 1-1: SerialNumber: syz [ 198.935501][ T6586] usb 1-1: config 0 descriptor?? [ 198.947173][T11958] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 198.947195][T11958] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.950584][T11958] vhci_hcd vhci_hcd.0: Device attached [ 198.951427][T11958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.955883][T11958] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 198.955904][T11958] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.956008][T11958] vhci_hcd vhci_hcd.0: Device attached [ 198.960137][T11958] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 198.960155][T11958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 198.960196][T11958] vhci_hcd vhci_hcd.0: Device attached [ 198.964642][T11958] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 198.964668][T11958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 198.965041][T11958] vhci_hcd vhci_hcd.0: Device attached [ 198.966403][T11958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.966742][T11958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.972016][T11965] vhci_hcd: connection closed [ 198.973000][T11963] vhci_hcd: connection closed [ 198.973397][T11961] vhci_hcd: connection closed [ 198.974058][ T4907] vhci_hcd: stop threads [ 198.974068][ T4907] vhci_hcd: release socket [ 198.974081][ T4907] vhci_hcd: disconnect device [ 198.974213][ T4907] vhci_hcd: stop threads [ 198.974218][ T4907] vhci_hcd: release socket [ 198.974226][ T4907] vhci_hcd: disconnect device [ 198.974339][ T4907] vhci_hcd: stop threads [ 198.974343][ T4907] vhci_hcd: release socket [ 198.974351][ T4907] vhci_hcd: disconnect device [ 198.978472][T11959] vhci_hcd: connection closed [ 198.981519][ T4907] vhci_hcd: stop threads [ 198.981527][ T4907] vhci_hcd: release socket [ 198.981539][ T4907] vhci_hcd: disconnect device [ 199.142581][ T6586] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 199.248083][ T6533] binder: undelivered transaction 246, process died. [ 199.262426][ T6533] binder: undelivered TRANSACTION_COMPLETE [ 199.273474][T11973] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1888'. [ 199.387395][T11979] loop4: detected capacity change from 0 to 512 [ 199.478090][T11979] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.172649][T11979] EXT4-fs (loop4): 1 truncate cleaned up [ 200.173131][T11979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.206213][T11977] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1890'. [ 200.267067][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 200.309336][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.387460][T12006] binder_user_error: 4 callbacks suppressed [ 200.388632][T12006] binder: 12005:12006 tried to acquire reference to desc 0, got 1 instead [ 200.390519][T12006] binder: 12005:12006 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 200.393061][T12006] binder: 12006 RLIMIT_NICE not set [ 200.434943][T12008] loop4: detected capacity change from 0 to 16 [ 200.437012][T12008] erofs (device loop4): mounted with root inode @ nid 36. [ 200.438708][T12008] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 200.438730][T12008] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 200.438743][T12008] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 200.588934][ T6586] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 200.801896][T12013] binder: 12012:12013 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 200.896526][T12019] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1903'. [ 200.972759][T12029] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 200.972783][T12029] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.973847][T12029] vhci_hcd vhci_hcd.0: Device attached [ 200.974436][T12029] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.975081][T12029] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 200.975089][T12029] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.975149][T12029] vhci_hcd vhci_hcd.0: Device attached [ 200.975875][T12029] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 200.975887][T12029] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 200.975933][T12029] vhci_hcd vhci_hcd.0: Device attached [ 200.976642][T12029] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 200.976654][T12029] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 200.976672][T12029] vhci_hcd vhci_hcd.0: Device attached [ 200.977154][T12029] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.977427][T12029] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.981922][T12036] vhci_hcd: connection closed [ 200.982111][T12034] vhci_hcd: connection closed [ 200.984529][T12032] vhci_hcd: connection closed [ 200.984674][ T7284] vhci_hcd: stop threads [ 200.984683][ T7284] vhci_hcd: release socket [ 200.984694][ T7284] vhci_hcd: disconnect device [ 200.984862][ T7284] vhci_hcd: stop threads [ 200.984867][ T7284] vhci_hcd: release socket [ 200.984881][ T7284] vhci_hcd: disconnect device [ 200.984966][ T7284] vhci_hcd: stop threads [ 200.984970][ T7284] vhci_hcd: release socket [ 200.984978][ T7284] vhci_hcd: disconnect device [ 200.986067][T12030] vhci_hcd: connection closed [ 200.988623][ T7284] vhci_hcd: stop threads [ 200.988631][ T7284] vhci_hcd: release socket [ 200.988640][ T7284] vhci_hcd: disconnect device [ 201.235189][ T9] binder: undelivered transaction 256, process died. [ 201.253009][ T9] binder: undelivered TRANSACTION_COMPLETE [ 201.295041][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.295219][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.302405][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'. [ 201.306105][T12052] binder: 12051:12052 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 201.306394][T12048] bond_slave_0: entered promiscuous mode [ 201.306437][T12048] bond_slave_1: entered promiscuous mode [ 201.306508][T12048] macvtap1: entered promiscuous mode [ 201.306519][T12048] bond0: entered promiscuous mode [ 201.306665][T12048] macvtap1: entered allmulticast mode [ 201.306674][T12048] bond0: entered allmulticast mode [ 201.306683][T12048] bond_slave_0: entered allmulticast mode [ 201.306692][T12048] bond_slave_1: entered allmulticast mode [ 201.307609][T12048] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 201.387699][T12053] loop1: detected capacity change from 0 to 512 [ 201.522049][T12053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 201.581145][T12053] EXT4-fs (loop1): 1 truncate cleaned up [ 201.582495][T12053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.082285][ T6586] usb 1-1: USB disconnect, device number 29 [ 202.200304][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.282888][T12070] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1914'. [ 202.341409][T12080] binder: 12079:12080 tried to acquire reference to desc 0, got 1 instead [ 202.344425][T12080] binder: 12079:12080 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 202.346910][T12080] binder: 12080 RLIMIT_NICE not set [ 202.380942][T12083] loop5: detected capacity change from 0 to 16 [ 202.395349][T12083] erofs (device loop5): mounted with root inode @ nid 36. [ 202.396134][T12083] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 202.396165][T12083] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 202.396184][T12083] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 202.485220][T12087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.485444][T12087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.621010][T12091] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 202.621034][T12091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.621494][T12091] vhci_hcd vhci_hcd.0: Device attached [ 202.625271][T12091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.627468][T12091] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 202.627485][T12091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.627522][T12091] vhci_hcd vhci_hcd.0: Device attached [ 202.629051][T12091] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 202.629064][T12091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 202.629117][T12091] vhci_hcd vhci_hcd.0: Device attached [ 202.629999][T12091] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(13) [ 202.630018][T12091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 202.630091][T12091] vhci_hcd vhci_hcd.0: Device attached [ 202.630532][T12091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.630998][T12091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.640055][T12098] vhci_hcd: connection closed [ 202.640215][T12096] vhci_hcd: connection closed [ 202.640354][ T4907] vhci_hcd: stop threads [ 202.640365][ T4907] vhci_hcd: release socket [ 202.640377][ T4907] vhci_hcd: disconnect device [ 202.640540][ T4907] vhci_hcd: stop threads [ 202.640544][ T4907] vhci_hcd: release socket [ 202.640552][ T4907] vhci_hcd: disconnect device [ 202.640893][T12094] vhci_hcd: connection closed [ 202.642891][T12092] vhci_hcd: connection closed [ 202.643512][ T4907] vhci_hcd: stop threads [ 202.643518][ T4907] vhci_hcd: release socket [ 202.643530][ T4907] vhci_hcd: disconnect device [ 202.647311][ T4907] vhci_hcd: stop threads [ 202.647323][ T4907] vhci_hcd: release socket [ 202.647349][ T4907] vhci_hcd: disconnect device [ 203.025616][T12103] binder: 12102:12103 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 203.256021][T12112] loop3: detected capacity change from 0 to 512 [ 203.365377][T12112] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.450326][T12112] EXT4-fs (loop3): 1 truncate cleaned up [ 203.454271][T12112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.934424][ T3931] binder: undelivered transaction 267, process died. [ 203.952576][ T3931] binder: undelivered TRANSACTION_COMPLETE [ 204.206655][T12126] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 204.294758][ T6543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.310156][T12128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.310673][T12128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.326109][T12122] could not allocate digest TFM handle rmd320 [ 204.364363][T12128] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.364520][T12128] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.568504][T12128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.571423][T12128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.841884][T12148] netlink: 'syz.1.1939': attribute type 3 has an invalid length. [ 204.844424][T12148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1939'. [ 204.849066][T12150] loop4: detected capacity change from 0 to 512 [ 204.851530][T12150] EXT4-fs: inline encryption not supported [ 204.854217][T12150] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.856370][T12150] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 204.927574][ T7284] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.927632][ T7284] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.927660][ T7284] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.927678][ T7284] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.963470][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 205.028053][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 205.036641][T12156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.037861][T12156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.348952][T12161] syz.3.1944 (12161): drop_caches: 2 [ 205.434563][T12169] loop1: detected capacity change from 0 to 512 [ 205.435296][T12169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 205.479721][T12169] EXT4-fs (loop1): 1 truncate cleaned up [ 205.481157][T12169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.692323][ T3931] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 205.852654][ T3931] usb 1-1: Using ep0 maxpacket: 16 [ 205.871336][ T3931] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 205.871400][ T3931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.871451][ T3931] usb 1-1: Product: syz [ 205.871482][ T3931] usb 1-1: Manufacturer: syz [ 205.871512][ T3931] usb 1-1: SerialNumber: syz [ 205.877772][ T3931] r8152-cfgselector 1-1: Unknown version 0x0000 [ 205.877790][ T3931] r8152-cfgselector 1-1: config 0 descriptor?? [ 206.116972][T12176] could not allocate digest TFM handle rmd320 [ 206.191054][T12163] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.191205][T12163] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.315962][T12185] loop3: detected capacity change from 0 to 16 [ 206.317921][T12185] erofs (device loop3): mounted with root inode @ nid 36. [ 206.319743][T12185] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 206.319778][T12185] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 206.319813][T12185] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 206.518085][T12163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.520404][T12163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.561112][T12189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.563185][T12189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.566601][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1951'. [ 206.846187][T12189] macvtap1: entered promiscuous mode [ 206.846570][ T3931] r8152-cfgselector 1-1: Unknown version 0x0000 [ 206.846760][ T3931] r8152-cfgselector 1-1: bad CDC descriptors [ 206.849646][T12189] bond0: entered promiscuous mode [ 206.851152][T12189] bond_slave_0: entered promiscuous mode [ 206.853111][T12189] bond_slave_1: entered promiscuous mode [ 206.854775][T12189] macvtap1: entered allmulticast mode [ 206.855345][ T3931] r8152-cfgselector 1-1: USB disconnect, device number 30 [ 206.860806][T12189] bond0: entered allmulticast mode [ 206.861833][T12189] bond_slave_0: entered allmulticast mode [ 206.863211][T12189] bond_slave_1: entered allmulticast mode [ 206.866152][T12189] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 206.869023][ T4656] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.871152][ T4656] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.871208][ T4656] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.871223][ T4656] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.888645][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.934151][T12195] netlink: 'syz.1.1953': attribute type 3 has an invalid length. [ 206.935633][T12195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1953'. [ 207.120788][T12202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.123791][T12202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.441446][T12206] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1958'. [ 208.040823][T12218] could not allocate digest TFM handle rmd320 [ 208.094808][T12230] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1964'. [ 208.094844][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 208.148688][T12234] loop4: detected capacity change from 0 to 16 [ 208.149404][T12234] erofs (device loop4): mounted with root inode @ nid 36. [ 208.151500][T12234] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 208.151546][T12234] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 208.151570][T12234] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 208.168604][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 208.272752][T12240] loop3: detected capacity change from 0 to 512 [ 208.278565][T12240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.290747][T12240] EXT4-fs (loop3): 1 truncate cleaned up [ 208.291210][T12240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.492093][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.493993][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.499109][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1970'. [ 208.523397][T12244] macvtap2: entered promiscuous mode [ 208.525656][T12244] macvtap2: entered allmulticast mode [ 208.527604][T12244] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 208.628251][T12247] binder: 12246:12247 tried to acquire reference to desc 0, got 1 instead [ 208.631035][T12247] binder: 12246:12247 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 208.639369][T12247] binder: 12247 RLIMIT_NICE not set [ 208.964782][T12250] loop4: detected capacity change from 0 to 512 [ 208.970676][T12250] EXT4-fs: inline encryption not supported [ 208.975483][T12250] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.977407][T12250] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 209.166093][T12255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.167424][T12255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.370939][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.371125][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.462352][ T9] binder: undelivered transaction 277, process died. [ 209.482337][ T9] binder: undelivered TRANSACTION_COMPLETE [ 209.842307][ T6543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.925974][T12267] __nla_validate_parse: 2 callbacks suppressed [ 209.927873][T12267] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1976'. [ 209.929525][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1976'. [ 210.097458][T12279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1981'. [ 210.481604][T12281] could not allocate digest TFM handle rmd320 [ 210.604553][T12295] loop1: detected capacity change from 0 to 16 [ 210.614280][T12295] erofs (device loop1): mounted with root inode @ nid 36. [ 210.618004][T12295] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 210.618069][T12295] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 210.618101][T12295] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 210.794483][ T10] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 211.044014][ T10] usb 1-1: config 5 has an invalid interface number: 3 but max is 0 [ 211.045571][ T10] usb 1-1: config 5 has no interface number 0 [ 211.047990][T12297] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1984'. [ 211.051643][ T10] usb 1-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 211.053999][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.054033][ T10] usb 1-1: Product: syz [ 211.054046][ T10] usb 1-1: Manufacturer: syz [ 211.054059][ T10] usb 1-1: SerialNumber: syz [ 211.061120][ T10] ftdi_sio 1-1:5.3: FTDI USB Serial Device converter detected [ 211.072651][ T10] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 211.213254][T12306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.213444][T12306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.267067][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1983'. [ 211.271385][T12291] macvtap1: entered promiscuous mode [ 211.272650][T12291] bond0: entered promiscuous mode [ 211.273990][T12291] bond_slave_0: entered promiscuous mode [ 211.275133][T12291] bond_slave_1: entered promiscuous mode [ 211.276737][T12291] macvtap1: entered allmulticast mode [ 211.277782][T12291] bond0: entered allmulticast mode [ 211.277815][T12291] bond_slave_0: entered allmulticast mode [ 211.277843][T12291] bond_slave_1: entered allmulticast mode [ 211.278238][T12291] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 211.288494][T12307] loop5: detected capacity change from 0 to 512 [ 211.291848][T12307] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 211.299920][ T9] usb 1-1: USB disconnect, device number 31 [ 211.301755][ T9] ftdi_sio 1-1:5.3: device disconnected [ 211.331565][T12307] EXT4-fs (loop5): 1 truncate cleaned up [ 211.334392][T12307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.400534][T12310] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1987'. [ 211.403530][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 211.781359][T12320] binder: 12319:12320 tried to acquire reference to desc 0, got 1 instead [ 211.781583][T12320] binder: 12319:12320 got transaction with invalid data ptr [ 211.781671][T12320] binder: 12319:12320 transaction async to 12319:0 failed 286/29201/-14, code 0 size 0-24 line 3438 [ 211.786510][ T3931] binder: undelivered transaction 287, process died. [ 211.812998][ T3931] binder: undelivered TRANSACTION_COMPLETE [ 212.166921][T12330] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 212.380093][T12328] could not allocate digest TFM handle rmd320 [ 212.415185][T12338] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1995'. [ 212.798867][T12348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1998'. [ 212.798905][T12348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1998'. [ 212.856170][T12350] loop3: detected capacity change from 0 to 16 [ 212.885535][T12350] erofs (device loop3): mounted with root inode @ nid 36. [ 212.886532][T12350] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 212.886556][T12350] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 212.886578][T12350] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 213.249107][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.249290][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.344477][T12360] vti0: entered promiscuous mode [ 213.404741][ T9563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.471373][T12365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.471570][T12365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.479838][T12365] macvtap3: entered promiscuous mode [ 213.479904][T12365] macvtap3: entered allmulticast mode [ 213.480807][T12365] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 214.180997][T12387] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 214.382647][T12384] could not allocate digest TFM handle rmd320 [ 214.605516][T12395] binder: 12394:12395 tried to acquire reference to desc 0, got 1 instead [ 214.607439][T12395] binder: 12394:12395 got transaction with invalid data ptr [ 214.608847][T12395] binder: 12394:12395 transaction async to 12394:0 failed 296/29201/-14, code 0 size 0-24 line 3438 [ 214.628248][ T6533] binder: undelivered transaction 297, process died. [ 214.642314][ T6533] binder: undelivered TRANSACTION_COMPLETE [ 214.673586][ T6613] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 214.834889][ T6613] usb 1-1: Using ep0 maxpacket: 16 [ 214.836764][ T6613] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.836795][ T6613] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 214.836807][ T6613] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 214.840244][ T6613] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.840255][ T6613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 214.840262][ T6613] usb 1-1: SerialNumber: syz [ 214.907346][T12409] loop4: detected capacity change from 0 to 16 [ 214.912679][T12409] erofs (device loop4): mounted with root inode @ nid 36. [ 214.920426][T12409] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 214.920508][T12409] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 214.920581][T12409] erofs (device loop4): xattr_isize 12 of nid 46 is not supported yet [ 215.030530][T12371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.099708][ T6613] cdc_acm 1-1:1.0: skipping garbage [ 215.105142][ T6613] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 215.343250][T12416] loop5: detected capacity change from 0 to 512 [ 215.347907][T12416] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.376898][T12416] EXT4-fs (loop5): 1 truncate cleaned up [ 215.377379][T12416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.420047][T12413] __nla_validate_parse: 6 callbacks suppressed [ 215.423457][T12413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2018'. [ 215.652020][T12426] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2020'. [ 215.652054][T12426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2020'. [ 215.657118][T12424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.659136][T12424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.732423][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2022'. [ 215.741635][T12428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.750225][T12428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.756665][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 215.783471][T12428] macvtap2: entered promiscuous mode [ 215.785722][T12428] macvtap2: entered allmulticast mode [ 215.789667][T12428] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 215.803503][T12432] vti0: entered promiscuous mode [ 215.922390][ T9563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.382270][T12446] could not allocate digest TFM handle rmd320 [ 216.459475][ T3931] usb 1-1: USB disconnect, device number 32 [ 216.539550][T12456] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2029'. [ 216.914456][T12468] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2032'. [ 216.916121][T12468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2032'. [ 216.946035][T12470] binder: 12469:12470 tried to acquire reference to desc 0, got 1 instead [ 216.946593][T12470] binder: 12469:12470 got transaction with invalid data ptr [ 216.946625][T12470] binder: 12469:12470 transaction async to 12469:0 failed 306/29201/-14, code 0 size 0-24 line 3438 [ 216.963379][ T3931] binder: undelivered transaction 307, process died. [ 216.994349][ T3931] binder: undelivered TRANSACTION_COMPLETE [ 217.019418][T12476] loop3: detected capacity change from 0 to 16 [ 217.023847][T12476] erofs (device loop3): mounted with root inode @ nid 36. [ 217.028438][T12476] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 217.028532][T12476] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 217.028606][T12476] erofs (device loop3): xattr_isize 12 of nid 46 is not supported yet [ 217.403234][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.404857][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.430013][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'. [ 217.498786][T12485] vti0: entered promiscuous mode [ 218.335452][T12474] loop4: detected capacity change from 0 to 512 [ 218.337782][T12485] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 218.345342][T12474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.353629][T12474] EXT4-fs (loop4): 1 truncate cleaned up [ 218.354090][T12474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.363465][T12485] bond1: (slave vti0): Error -95 calling set_mac_address [ 218.433173][T12493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.433418][T12493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.438393][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 218.809223][T12498] could not allocate digest TFM handle rmd320 [ 218.834833][ T7284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.856866][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.119167][ T7284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.173803][ T7284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.219917][ T6613] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 219.281296][ T7284] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.475008][ T7284] bridge_slave_1: left allmulticast mode [ 219.476913][ T7284] bridge_slave_1: left promiscuous mode [ 219.479074][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.577261][T12530] loop1: detected capacity change from 0 to 16 [ 219.720267][T12530] erofs (device loop1): mounted with root inode @ nid 36. [ 219.731036][T12530] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 219.731145][T12530] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 219.731183][T12530] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 219.733464][ T6613] usb 1-1: Using ep0 maxpacket: 16 [ 219.740459][ T6613] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.740482][ T6613] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 219.740494][ T6613] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 219.751933][ T6613] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.751953][ T6613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.751967][ T6613] usb 1-1: SerialNumber: syz [ 219.779053][T12531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.779231][T12531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.783680][T12504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.785534][ T6613] cdc_acm 1-1:1.0: skipping garbage [ 219.786799][ T6613] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 219.790689][ T7284] bridge_slave_0: left allmulticast mode [ 219.790717][ T7284] bridge_slave_0: left promiscuous mode [ 219.790806][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.046288][T12535] binder: 12534:12535 tried to acquire reference to desc 0, got 1 instead [ 220.059200][ T6599] binder: undelivered transaction 317, process died. [ 220.059435][ T6599] binder: undelivered transaction 316, process died. [ 220.072974][ T6599] binder: undelivered TRANSACTION_COMPLETE [ 220.192127][ T7284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.226654][ T7284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.244317][ T7284] bond0 (unregistering): Released all slaves [ 220.256046][ T7284] bond1 (unregistering): Released all slaves [ 220.308824][T12540] loop4: detected capacity change from 0 to 512 [ 220.449789][T12543] __nla_validate_parse: 4 callbacks suppressed [ 220.452060][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 220.601162][T12540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.773068][T12540] EXT4-fs (loop4): 1 truncate cleaned up [ 220.773637][T12540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.890425][T12552] could not allocate digest TFM handle rmd320 [ 220.941882][T12560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2058'. [ 220.967074][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.020243][T12560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2058'. [ 221.118786][T12573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.118975][T12573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.120938][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 221.497221][ T7284] hsr_slave_0: left promiscuous mode [ 221.500167][ T7284] hsr_slave_1: left promiscuous mode [ 221.500530][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.500564][ T7284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.501108][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.501126][ T7284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.599245][ T7284] veth1_macvtap: left promiscuous mode [ 221.610612][ T7284] veth0_macvtap: left promiscuous mode [ 221.611732][ T7284] veth1_vlan: left promiscuous mode [ 221.613102][ T7284] veth0_vlan: left promiscuous mode [ 221.635186][ T6533] usb 1-1: USB disconnect, device number 33 [ 221.798949][T12603] loop1: detected capacity change from 0 to 16 [ 221.811802][T12603] erofs (device loop1): mounted with root inode @ nid 36. [ 221.817788][T12603] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 221.817819][T12603] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 221.817851][T12603] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 222.137250][T12606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.137455][T12606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.474943][ T7284] team0 (unregistering): Port device team_slave_1 removed [ 222.476548][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 222.490055][ T7284] team0 (unregistering): Port device team_slave_0 removed [ 222.744436][T12624] loop1: detected capacity change from 0 to 512 [ 223.540140][T12624] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.562620][T12624] EXT4-fs (loop1): 1 truncate cleaned up [ 223.563111][T12624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.606137][T12632] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2071'. [ 223.700556][T12601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2063'. [ 223.702076][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.736592][T12620] vti0: entered promiscuous mode [ 223.741182][T12638] binder: 12636:12638 tried to acquire reference to desc 0, got 1 instead [ 223.741671][T12620] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 223.748891][T12620] bond2: (slave vti0): Error -95 calling set_mac_address [ 223.751699][ T6599] binder: undelivered transaction 327, process died. [ 223.751752][ T6599] binder: undelivered transaction 326, process died. [ 223.763994][ T6599] binder: undelivered TRANSACTION_COMPLETE [ 223.766272][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2071'. [ 223.766347][T12640] loop3: detected capacity change from 0 to 512 [ 223.767149][T12640] EXT4-fs: inline encryption not supported [ 223.767159][T12640] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.771768][T12640] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 223.843954][T12647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.844142][T12647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.847883][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2076'. [ 223.923893][T12642] could not allocate digest TFM handle rmd320 [ 223.925476][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 223.928038][T12652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.928220][T12652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.071420][T12665] loop5: detected capacity change from 0 to 16 [ 224.079480][T12665] erofs (device loop5): mounted with root inode @ nid 36. [ 224.085666][T12665] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 224.085765][T12665] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 224.085830][T12665] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 225.035529][T12697] loop5: detected capacity change from 0 to 512 [ 225.097717][T12697] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.394302][T12697] EXT4-fs (loop5): 1 truncate cleaned up [ 225.396759][T12697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.925854][ T9563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.050546][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 226.079701][T12708] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2085'. [ 226.082363][ T6533] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 226.095044][T12720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2088'. [ 226.095080][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2088'. [ 226.127214][T12722] binder: 12721:12722 tried to acquire reference to desc 0, got 1 instead [ 226.134661][ T6599] binder: undelivered transaction 337, process died. [ 226.134719][ T6599] binder: undelivered transaction 336, process died. [ 226.152749][ T6599] binder: undelivered TRANSACTION_COMPLETE [ 226.158460][T12725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.159306][T12725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.160115][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2090'. [ 226.199240][T12729] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 226.199262][T12729] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 226.202553][T12729] vhci_hcd vhci_hcd.0: Device attached [ 226.205662][T12729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.213679][T12729] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 226.213705][T12729] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 226.213767][T12729] vhci_hcd vhci_hcd.0: Device attached [ 226.221324][T12729] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 226.221343][T12729] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 226.225285][T12729] vhci_hcd vhci_hcd.0: Device attached [ 226.227721][T12729] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 226.227745][T12729] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 226.231579][T12729] vhci_hcd vhci_hcd.0: Device attached [ 226.232050][T12729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.236092][T12729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.238820][T12732] could not allocate digest TFM handle rmd320 [ 226.245747][ T6533] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 226.245782][ T6533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.245800][ T6533] usb 1-1: Product: syz [ 226.245811][ T6533] usb 1-1: Manufacturer: syz [ 226.245822][ T6533] usb 1-1: SerialNumber: syz [ 226.252570][ T6533] usb 1-1: config 0 descriptor?? [ 226.257956][T12739] vhci_hcd: connection closed [ 226.258141][ T254] vhci_hcd: stop threads [ 226.259074][ T254] vhci_hcd: release socket [ 226.259089][ T254] vhci_hcd: disconnect device [ 226.259126][T12736] vhci_hcd: connection closed [ 226.259368][T12733] vhci_hcd: connection closed [ 226.259468][T12730] vhci_hcd: connection closed [ 226.259574][ T254] vhci_hcd: stop threads [ 226.259581][ T254] vhci_hcd: release socket [ 226.259589][ T254] vhci_hcd: disconnect device [ 226.259707][ T254] vhci_hcd: stop threads [ 226.259712][ T254] vhci_hcd: release socket [ 226.259721][ T254] vhci_hcd: disconnect device [ 226.259824][ T254] vhci_hcd: stop threads [ 226.259828][ T254] vhci_hcd: release socket [ 226.259836][ T254] vhci_hcd: disconnect device [ 226.457837][ T6533] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 227.237622][T12753] loop3: detected capacity change from 0 to 512 [ 227.952203][T12753] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.986506][T12752] loop1: detected capacity change from 0 to 16 [ 228.084663][T12752] erofs (device loop1): mounted with root inode @ nid 36. [ 228.116733][T12752] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 228.117018][T12752] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 228.117207][T12752] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 228.182624][T12753] EXT4-fs (loop3): 1 truncate cleaned up [ 228.187412][T12753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.637103][ T6543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.684749][T12763] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2099'. [ 228.684785][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2099'. [ 228.724951][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 228.836575][T12770] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2100'. [ 228.870474][T12781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.870658][T12781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.871247][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2103'. [ 228.872368][ T6533] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 228.996196][T12784] binder: 12783:12784 tried to acquire reference to desc 0, got 1 instead [ 228.998230][T12784] binder: 12783:12784 ioctl c0306201 0 returned -14 [ 229.009785][T12183] binder: undelivered transaction 350, process died. [ 229.009843][T12183] binder: undelivered transaction 346, process died. [ 229.026744][T12183] binder: undelivered TRANSACTION_COMPLETE [ 229.078072][T12786] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 229.078099][T12786] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 229.080847][T12786] vhci_hcd vhci_hcd.0: Device attached [ 229.083164][T12786] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 229.085665][T12786] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(9) [ 229.085684][T12786] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 229.088473][T12786] vhci_hcd vhci_hcd.0: Device attached [ 229.090455][T12786] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(11) [ 229.090476][T12786] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 229.093647][T12786] vhci_hcd vhci_hcd.0: Device attached [ 229.095591][T12786] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(13) [ 229.095613][T12786] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 229.098575][T12786] vhci_hcd vhci_hcd.0: Device attached [ 229.100446][T12786] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 229.103029][T12786] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 229.113816][T12789] vhci_hcd: connection closed [ 229.113990][ T2722] vhci_hcd: stop threads [ 229.114012][ T2722] vhci_hcd: release socket [ 229.114029][ T2722] vhci_hcd: disconnect device [ 229.114086][T12793] vhci_hcd: connection closed [ 229.114247][ T729] vhci_hcd: stop threads [ 229.114256][ T729] vhci_hcd: release socket [ 229.114272][ T729] vhci_hcd: disconnect device [ 229.121913][T12791] vhci_hcd: connection closed [ 229.122666][ T729] vhci_hcd: stop threads [ 229.122684][ T729] vhci_hcd: release socket [ 229.122712][ T729] vhci_hcd: disconnect device [ 229.126392][T12787] vhci_hcd: connection closed [ 229.126647][ T729] vhci_hcd: stop threads [ 229.126658][ T729] vhci_hcd: release socket [ 229.126673][ T729] vhci_hcd: disconnect device [ 229.227457][T12797] could not allocate digest TFM handle rmd320 [ 229.391567][T12802] loop1: detected capacity change from 0 to 512 [ 229.393263][T12802] EXT4-fs: inline encryption not supported [ 229.393289][T12802] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.394172][T12802] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 229.504558][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.506600][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.677745][T12809] loop4: detected capacity change from 0 to 512 [ 229.679602][T12809] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 229.684674][T12809] EXT4-fs (loop4): 1 truncate cleaned up [ 229.686220][T12809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.907834][ T6613] usb 1-1: USB disconnect, device number 34 [ 230.577304][T12830] vti0: entered promiscuous mode [ 230.578860][T12830] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 230.581324][T12830] bond1: (slave vti0): Error -95 calling set_mac_address [ 230.726098][T12835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.726311][T12835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.344090][T12842] binder: BINDER_SET_CONTEXT_MGR already set [ 231.344118][T12842] binder: 12841:12842 ioctl 4018620d 200002c0 returned -16 [ 231.344390][T12842] binder: 12841:12842 got transaction to invalid handle, 1 [ 231.344408][T12842] binder: 12841:12842 cannot find target node [ 231.344423][T12842] binder: 12841:12842 transaction async to 0:0 failed 355/29201/-22, code 0 size 72-24 line 3151 [ 231.344560][T12842] binder: 12841:12842 ioctl c0306201 0 returned -14 [ 231.399590][T12844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.399771][T12844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.504750][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.581728][T12849] __nla_validate_parse: 6 callbacks suppressed [ 231.581763][T12849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2122'. [ 231.581782][T12849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 231.628075][T12850] could not allocate digest TFM handle rmd320 [ 231.734472][T12860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2126'. [ 231.883982][T12869] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 231.884006][T12869] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.888286][T12869] vhci_hcd vhci_hcd.0: Device attached [ 231.895031][T12869] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 231.895052][T12869] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 231.898812][T12869] vhci_hcd vhci_hcd.0: Device attached [ 231.913389][T12868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.916840][T12865] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 231.916854][T12865] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.921957][T12865] vhci_hcd vhci_hcd.0: Device attached [ 231.943531][T12869] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 231.943559][T12869] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 231.943616][T12869] vhci_hcd vhci_hcd.0: Device attached [ 231.948495][T12865] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.951163][T12865] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.969052][T12874] vhci_hcd: connection closed [ 231.969126][T12872] vhci_hcd: connection closed [ 231.970958][T12870] vhci_hcd: connection closed [ 231.971888][T12866] vhci_hcd: connection closed [ 231.974907][ T254] vhci_hcd: stop threads [ 231.974935][ T254] vhci_hcd: release socket [ 231.974966][ T254] vhci_hcd: disconnect device [ 231.979160][ T254] vhci_hcd: stop threads [ 231.979192][ T254] vhci_hcd: release socket [ 231.979306][ T254] vhci_hcd: disconnect device [ 231.981494][ T254] vhci_hcd: stop threads [ 231.981513][ T254] vhci_hcd: release socket [ 231.981544][ T254] vhci_hcd: disconnect device [ 231.983552][ T254] vhci_hcd: stop threads [ 231.983559][ T254] vhci_hcd: release socket [ 231.983570][ T254] vhci_hcd: disconnect device [ 232.072035][T12881] loop5: detected capacity change from 0 to 16 [ 232.080712][T12881] erofs (device loop5): mounted with root inode @ nid 36. [ 232.085693][T12881] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 232.085783][T12881] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 232.085857][T12881] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 232.440627][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 232.452089][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.454147][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.573709][T12893] binder: 12892:12893 tried to acquire reference to desc 0, got 1 instead [ 232.575930][T12893] binder: 12892:12893 ioctl c0306201 0 returned -14 [ 232.582064][ T6586] binder: undelivered transaction 364, process died. [ 232.582138][ T6586] binder: undelivered transaction 360, process died. [ 232.592931][ T6586] binder: undelivered TRANSACTION_COMPLETE [ 232.603820][T12895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2134'. [ 232.603859][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2134'. [ 232.676217][T12899] loop1: detected capacity change from 0 to 512 [ 232.689077][T12899] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 232.709065][T12899] EXT4-fs (loop1): 1 truncate cleaned up [ 232.709673][T12899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.346382][T12915] could not allocate digest TFM handle rmd320 [ 233.625348][T12920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2140'. [ 233.673484][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'. [ 233.755985][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2143'. [ 233.776209][T12930] vti0: entered promiscuous mode [ 233.777496][T12930] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 233.779807][T12930] bond2: (slave vti0): Error -95 calling set_mac_address [ 233.913565][ T6586] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 233.936347][T12934] binder: 12933:12934 tried to acquire reference to desc 0, got 1 instead [ 233.949051][T12183] binder: undelivered transaction 375, process died. [ 233.950404][T12183] binder: undelivered transaction 371, process died. [ 233.972350][T12183] binder: undelivered TRANSACTION_COMPLETE [ 233.989749][T12936] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2145'. [ 234.062231][ T6586] usb 1-1: Using ep0 maxpacket: 16 [ 234.064377][ T6586] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.066034][ T6586] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 234.067640][ T6586] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 234.070065][ T6586] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.080292][ T6586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.081785][ T6586] usb 1-1: SerialNumber: syz [ 234.090226][T12925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.092152][ T6586] cdc_acm 1-1:1.0: skipping garbage [ 234.093432][ T6586] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 234.180949][T12945] loop5: detected capacity change from 0 to 16 [ 234.230226][T12945] erofs (device loop5): mounted with root inode @ nid 36. [ 234.234233][T12945] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 234.234304][T12945] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 234.234386][T12945] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 234.556611][T12946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.556805][T12946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.614702][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.931756][T12965] vti0: entered promiscuous mode [ 234.932979][T12965] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 234.935179][T12965] bond3: (slave vti0): Error -95 calling set_mac_address [ 235.220545][T12970] could not allocate digest TFM handle rmd320 [ 235.427776][T12983] loop4: detected capacity change from 0 to 512 [ 235.430029][T12983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.433075][T12983] EXT4-fs (loop4): 1 truncate cleaned up [ 235.461720][T12983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.138217][T13014] binder: 13013:13014 tried to acquire reference to desc 0, got 1 instead [ 236.156009][ T6586] binder: undelivered transaction 386, process died. [ 236.157420][ T6586] binder: undelivered transaction 382, process died. [ 236.326019][T13018] loop5: detected capacity change from 0 to 16 [ 236.350366][T13018] erofs (device loop5): mounted with root inode @ nid 36. [ 236.593588][ T6533] usb 1-1: USB disconnect, device number 35 [ 236.964404][T13026] __nla_validate_parse: 4 callbacks suppressed [ 236.965840][T13026] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2168'. [ 237.003439][ T6533] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 237.159704][ T6533] usb 1-1: config 5 has an invalid interface number: 3 but max is 0 [ 237.159741][ T6533] usb 1-1: config 5 has no interface number 0 [ 237.167723][ T6533] usb 1-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 237.167755][ T6533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.167785][ T6533] usb 1-1: Product: syz [ 237.167799][ T6533] usb 1-1: Manufacturer: syz [ 237.167811][ T6533] usb 1-1: SerialNumber: syz [ 237.172954][ T6533] ftdi_sio 1-1:5.3: FTDI USB Serial Device converter detected [ 237.173276][ T6533] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 237.186314][T13053] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2174'. [ 237.386647][T13064] binder: 13063:13064 tried to acquire reference to desc 0, got 1 instead [ 237.395762][ T6613] usb 1-1: USB disconnect, device number 36 [ 237.396305][ T6613] ftdi_sio 1-1:5.3: device disconnected [ 237.402342][ T6586] binder_debug: 1 callbacks suppressed [ 237.402365][ T6586] binder: undelivered transaction 397, process died. [ 237.402419][ T6586] binder: undelivered transaction 393, process died. [ 237.422333][T12183] binder: undelivered TRANSACTION_COMPLETE [ 237.539753][T13057] could not allocate digest TFM handle rmd320 [ 237.794940][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.052018][T13104] binder: 13101:13104 tried to acquire reference to desc 0, got 1 instead [ 238.060781][ T6586] binder: undelivered transaction 408, process died. [ 238.063542][ T6586] binder: undelivered transaction 404, process died. [ 238.092544][ T6613] binder: undelivered TRANSACTION_COMPLETE [ 238.124618][T13109] loop4: detected capacity change from 0 to 16 [ 238.175346][T13109] erofs (device loop4): mounted with root inode @ nid 36. [ 238.396308][T13108] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2185'. [ 238.543018][T13128] loop1: detected capacity change from 0 to 512 [ 238.581511][T13132] loop5: detected capacity change from 0 to 40427 [ 238.583523][T13128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 238.583904][T13132] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 238.583927][T13132] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 238.586256][T13132] F2FS-fs (loop5): invalid crc value [ 238.593883][T13128] EXT4-fs (loop1): 1 truncate cleaned up [ 238.594783][T13128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.616190][T13132] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 238.617052][T13132] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 238.617078][T13132] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 238.648208][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.689358][T13145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.691407][T13145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.918866][T13159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.921162][T13159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.935668][T13152] could not allocate digest TFM handle rmd320 [ 238.972021][T13165] binder: 13164:13165 tried to acquire reference to desc 0, got 1 instead [ 238.979307][ T6586] binder: undelivered transaction 419, process died. [ 238.979380][ T6586] binder: undelivered transaction 415, process died. [ 238.992610][ T6586] binder: undelivered TRANSACTION_COMPLETE [ 239.095854][T13171] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2201'. [ 239.210095][T13179] loop4: detected capacity change from 0 to 512 [ 239.212010][T13179] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.228649][T13179] EXT4-fs (loop4): 1 truncate cleaned up [ 239.229114][T13179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.263913][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.329977][T13194] binder: 13193:13194 tried to acquire reference to desc 0, got 1 instead [ 239.337744][ T6533] binder: undelivered transaction 430, process died. [ 239.397562][T13198] loop4: detected capacity change from 0 to 16 [ 239.620435][T13198] erofs (device loop4): mounted with root inode @ nid 36. [ 239.678933][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.680935][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.790957][T13215] loop5: detected capacity change from 0 to 512 [ 239.793021][T13215] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 239.805503][T13215] EXT4-fs (loop5): 1 truncate cleaned up [ 239.805951][T13215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.835367][ T9563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.882736][T13230] binder: 13229:13230 tried to acquire reference to desc 0, got 1 instead [ 239.939200][T13232] could not allocate digest TFM handle rmd320 [ 239.987623][T13244] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2228'. [ 239.987909][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2228'. [ 240.007044][T13246] binder: 13245:13246 ioctl c0306201 0 returned -14 [ 240.009259][T13246] binder: 13245:13246 ioctl c0306201 20000000 returned -14 [ 240.010753][T13246] binder: 13245:13246 got transaction to invalid handle, 1 [ 240.101916][T13255] loop5: detected capacity change from 0 to 1024 [ 240.168491][T13260] binder: 13259:13260 tried to acquire reference to desc 0, got 1 instead [ 240.207519][T13263] loop3: detected capacity change from 0 to 512 [ 240.210310][T13263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.425129][T13263] EXT4-fs (loop3): 1 truncate cleaned up [ 240.425601][T13263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.479217][T13268] could not allocate digest TFM handle rmd320 [ 240.780254][T13291] loop5: detected capacity change from 0 to 16 [ 240.809479][T13291] erofs (device loop5): mounted with root inode @ nid 36. [ 240.829619][T13291] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 240.829703][T13291] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 240.829779][T13291] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 241.018176][ T6543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.102779][T13300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.102958][T13300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.115570][T13306] binder: 13304:13306 Acquire 1 refcount change on invalid ref 0 ret -22 [ 241.166688][T13310] could not allocate digest TFM handle rmd320 [ 241.176997][T13301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.177026][T13301] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 241.216586][T13301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.216619][T13301] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 241.293600][T13301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.295552][T13301] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 241.384477][T13327] loop4: detected capacity change from 0 to 512 [ 241.386439][T13327] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 241.395126][T13301] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 241.396366][T13301] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 241.445892][T13327] EXT4-fs (loop4): 1 truncate cleaned up [ 241.446360][T13327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.540921][T13301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.543671][T13301] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 241.756468][T13341] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 241.756494][T13341] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 241.760760][T13341] vhci_hcd vhci_hcd.0: Device attached [ 241.765924][T13341] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.776705][T13341] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(9) [ 241.776729][T13341] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 241.776779][T13341] vhci_hcd vhci_hcd.0: Device attached [ 241.785175][T13341] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(11) [ 241.785206][T13341] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.785276][T13341] vhci_hcd vhci_hcd.0: Device attached [ 241.795936][T13341] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(13) [ 241.795961][T13341] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.796017][T13341] vhci_hcd vhci_hcd.0: Device attached [ 241.801598][T13341] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.805884][T13341] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.837292][T13343] vhci_hcd: connection closed [ 241.837745][T13346] vhci_hcd: connection closed [ 241.838992][T13350] vhci_hcd: connection closed [ 241.840336][T13348] vhci_hcd: connection closed [ 241.841400][ T254] vhci_hcd: stop threads [ 241.841423][ T254] vhci_hcd: release socket [ 241.841437][ T254] vhci_hcd: disconnect device [ 241.845252][ T254] vhci_hcd: stop threads [ 241.845267][ T254] vhci_hcd: release socket [ 241.845372][ T254] vhci_hcd: disconnect device [ 241.849250][ T254] vhci_hcd: stop threads [ 241.849267][ T254] vhci_hcd: release socket [ 241.849282][ T254] vhci_hcd: disconnect device [ 241.853124][ T254] vhci_hcd: stop threads [ 241.853142][ T254] vhci_hcd: release socket [ 241.853164][ T254] vhci_hcd: disconnect device [ 242.025690][T13357] could not allocate digest TFM handle rmd320 [ 242.065665][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 242.132941][T13370] loop1: detected capacity change from 0 to 16 [ 242.330054][T13370] erofs (device loop1): mounted with root inode @ nid 36. [ 242.332154][T13371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2272'. [ 242.333406][T13369] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 242.333435][T13369] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 242.333455][T13369] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 242.343059][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.357008][T13372] vti0: entered promiscuous mode [ 242.357288][T13372] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 242.357610][T13372] bond3: (slave vti0): Error -95 calling set_mac_address [ 242.476167][T13380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.478089][T13380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.559890][T13387] binder: 13386:13387 tried to acquire reference to desc 0, got 1 instead [ 242.578329][ T6599] binder_debug: 11 callbacks suppressed [ 242.578368][ T6599] binder: undelivered transaction 467, process died. [ 242.578406][ T6599] binder: undelivered transaction 463, process died. [ 242.593149][ T6599] binder: undelivered TRANSACTION_COMPLETE [ 242.612097][T13393] loop4: detected capacity change from 0 to 256 [ 242.802000][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 242.813854][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2286'. [ 242.816205][T13402] vti0: entered promiscuous mode [ 242.816567][T13402] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 242.817244][T13402] bond4: (slave vti0): Error -95 calling set_mac_address [ 242.863554][T13404] loop4: detected capacity change from 0 to 512 [ 242.871040][T13404] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.988783][T13404] EXT4-fs (loop4): 1 truncate cleaned up [ 242.989238][T13404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.020778][T13417] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 243.020803][T13417] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.020871][T13417] vhci_hcd vhci_hcd.0: Device attached [ 243.027470][T13417] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.032159][T13417] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 243.032179][T13417] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.035976][T13417] vhci_hcd vhci_hcd.0: Device attached [ 243.043723][T13417] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 243.043749][T13417] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 243.046539][T13417] vhci_hcd vhci_hcd.0: Device attached [ 243.051589][T13417] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 243.051611][T13417] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 243.051649][T13417] vhci_hcd vhci_hcd.0: Device attached [ 243.062577][T13417] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.071621][T13417] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.105841][T13420] vhci_hcd: connection closed [ 243.106174][ T12] vhci_hcd: stop threads [ 243.106204][ T12] vhci_hcd: release socket [ 243.106221][ T12] vhci_hcd: disconnect device [ 243.110022][T13424] vhci_hcd: connection closed [ 243.110417][ T12] vhci_hcd: stop threads [ 243.110439][ T12] vhci_hcd: release socket [ 243.110453][ T12] vhci_hcd: disconnect device [ 243.116083][T13418] vhci_hcd: connection closed [ 243.116222][T13422] vhci_hcd: connection closed [ 243.121477][ T2722] vhci_hcd: stop threads [ 243.121519][ T2722] vhci_hcd: release socket [ 243.121572][ T2722] vhci_hcd: disconnect device [ 243.126334][ T2722] vhci_hcd: stop threads [ 243.126358][ T2722] vhci_hcd: release socket [ 243.126382][ T2722] vhci_hcd: disconnect device [ 243.142862][T13427] binder: 13426:13427 tried to acquire reference to desc 0, got 1 instead [ 243.166219][ T10] binder: undelivered transaction 478, process died. [ 243.166289][ T10] binder: undelivered transaction 474, process died. [ 243.183400][ T10] binder: undelivered TRANSACTION_COMPLETE [ 243.206723][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.218401][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.233397][ T6599] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 243.440089][T13437] loop5: detected capacity change from 0 to 16 [ 243.446225][T13437] erofs (device loop5): mounted with root inode @ nid 36. [ 243.455412][T13437] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 243.455453][T13437] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 243.455514][T13437] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 243.705243][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.752264][ T6599] usb 1-1: Using ep0 maxpacket: 16 [ 243.754001][ T6599] usb 1-1: config 0 has an invalid interface number: 65 but max is 0 [ 243.754011][ T6599] usb 1-1: config 0 has no interface number 0 [ 243.756147][ T6599] usb 1-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 243.756162][ T6599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.756172][ T6599] usb 1-1: Product: syz [ 243.756178][ T6599] usb 1-1: Manufacturer: syz [ 243.756183][ T6599] usb 1-1: SerialNumber: syz [ 243.758090][ T6599] usb 1-1: config 0 descriptor?? [ 243.761200][ T6599] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 243.853113][T13441] could not allocate digest TFM handle rmd320 [ 244.074133][T13451] binder: 13450:13451 ioctl c0306201 20000000 returned -14 [ 244.074336][T13451] binder: 13450:13451 got transaction to invalid handle, 1 [ 244.074361][T13451] binder: 13450:13451 cannot find target node [ 244.074372][T13451] binder: 13450:13451 transaction call to 0:0 failed 484/29201/-22, code 0 size 72-24 line 3151 [ 244.074608][ T6613] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.240540][T13456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.240735][T13456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.266450][T13460] binder: 13457:13460 tried to acquire reference to desc 0, got 1 instead [ 244.306787][ T6613] binder: undelivered transaction 493, process died. [ 244.336973][T13467] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 244.336994][T13467] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 244.340466][T13467] vhci_hcd vhci_hcd.0: Device attached [ 244.344314][T13467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 244.347020][T13467] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(9) [ 244.347033][T13467] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 244.350121][T13467] vhci_hcd vhci_hcd.0: Device attached [ 244.354809][T13467] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(11) [ 244.354837][T13467] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 244.354929][T13467] vhci_hcd vhci_hcd.0: Device attached [ 244.359864][T13467] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(13) [ 244.359881][T13467] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 244.364255][T13467] vhci_hcd vhci_hcd.0: Device attached [ 244.369273][T13467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 244.370133][T13467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 244.377695][T13474] vhci_hcd: connection closed [ 244.377834][ T729] vhci_hcd: stop threads [ 244.377938][T13472] vhci_hcd: connection closed [ 244.378075][T13470] vhci_hcd: connection closed [ 244.378295][T13468] vhci_hcd: connection closed [ 244.378923][ T729] vhci_hcd: release socket [ 244.378944][ T729] vhci_hcd: disconnect device [ 244.379089][ T729] vhci_hcd: stop threads [ 244.379095][ T729] vhci_hcd: release socket [ 244.379121][ T729] vhci_hcd: disconnect device [ 244.379227][ T729] vhci_hcd: stop threads [ 244.379231][ T729] vhci_hcd: release socket [ 244.379254][ T729] vhci_hcd: disconnect device [ 244.379346][ T729] vhci_hcd: stop threads [ 244.379349][ T729] vhci_hcd: release socket [ 244.379356][ T729] vhci_hcd: disconnect device [ 244.421229][T13476] loop1: detected capacity change from 0 to 512 [ 244.421894][T13476] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 244.436925][T13476] EXT4-fs (loop1): 1 truncate cleaned up [ 244.437397][T13476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.577493][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 244.586246][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 244.586278][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2310'. [ 244.644063][T13487] binder: 13486:13487 ioctl c0306201 20000000 returned -14 [ 244.644257][T13487] binder: 13486:13487 got transaction to invalid handle, 1 [ 244.657173][T13489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.657350][T13489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.818699][T13493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2316'. [ 244.835555][ T6599] usb 1-1: USB disconnect, device number 37 [ 244.888574][T13499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2319'. [ 244.890366][T13499] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2319'. [ 244.938598][T13501] vti0: entered promiscuous mode [ 244.939840][T13501] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 244.944447][T13501] bond1: (slave vti0): Error -95 calling set_mac_address [ 245.119381][T13507] could not allocate digest TFM handle rmd320 [ 245.141674][T13515] binder: tried to use weak ref as strong ref [ 245.144750][T13515] binder: 13514:13515 Acquire 1 refcount change on invalid ref 0 ret -22 [ 245.146269][T13515] binder: 13514:13515 ioctl c0306201 20000000 returned -14 [ 245.148078][T13515] binder: 13514:13515 got transaction to invalid handle, 1 [ 245.187563][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.198667][T13517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.200306][T13517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.256796][T13523] binder: BINDER_SET_CONTEXT_MGR already set [ 245.256825][T13523] binder: 13521:13523 ioctl 4018620d 200002c0 returned -16 [ 245.257110][T13523] binder: 13521:13523 got transaction to invalid handle, 1 [ 245.287643][T13526] loop4: detected capacity change from 0 to 2048 [ 245.305704][T13526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.357881][T13530] warning: `syz.4.2331' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 245.430718][T13530] loop4: detected capacity change from 0 to 32768 [ 245.437338][T13530] jfs_mount: dbMount failed w/rc = -22 [ 245.437697][T13530] Mount JFS Failure: -22 [ 245.619291][T13544] loop4: detected capacity change from 0 to 512 [ 245.621103][T13544] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.632646][T13544] EXT4-fs (loop4): 1 truncate cleaned up [ 245.637024][T13544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.654706][T13550] binder: 13549:13550 tried to acquire reference to desc 0, got 1 instead [ 245.730114][T13554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.732529][T13554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.802325][ T6586] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 245.901579][T13568] vti0: entered promiscuous mode [ 245.901783][T13568] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 245.902161][T13568] bond2: (slave vti0): Error -95 calling set_mac_address [ 245.931099][T13575] loop9: detected capacity change from 0 to 7 [ 245.934648][T13575] Dev loop9: unable to read RDB block 7 [ 245.934755][T13575] loop9: unable to read partition table [ 245.935828][T13575] loop9: partition table beyond EOD, truncated [ 245.940578][T13575] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.956468][ T6586] usb 1-1: no configurations [ 245.956500][ T6586] usb 1-1: can't read configurations, error -22 [ 245.980210][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.984067][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.992437][T13580] loop3: detected capacity change from 0 to 1024 [ 246.004863][T13580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 246.043527][ T6543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 246.084567][ T6586] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 246.187738][T13587] could not allocate digest TFM handle rmd320 [ 246.236954][ T6586] usb 1-1: no configurations [ 246.237097][ T6586] usb 1-1: can't read configurations, error -22 [ 246.239140][ T6586] usb usb1-port1: attempt power cycle [ 246.344229][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.567325][T13611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.573185][ T6586] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 246.594601][ T6586] usb 1-1: no configurations [ 246.594632][ T6586] usb 1-1: can't read configurations, error -22 [ 246.710998][T13624] binder: 13623:13624 ioctl 4018620d 0 returned -22 [ 246.712802][T13624] binder: 13623:13624 ioctl c0306201 20000000 returned -14 [ 246.728261][T13620] loop5: detected capacity change from 0 to 512 [ 246.728931][T13620] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 246.736109][ T6586] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 246.740536][T13620] EXT4-fs (loop5): 1 truncate cleaned up [ 246.742096][T13620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.753682][ T6586] usb 1-1: no configurations [ 246.753708][ T6586] usb 1-1: can't read configurations, error -22 [ 246.753856][ T6586] usb usb1-port1: unable to enumerate USB device [ 246.819431][T13633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.821244][T13633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.974145][T13640] vti0: entered promiscuous mode [ 246.974341][T13640] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 246.974693][T13640] bond3: (slave vti0): Error -95 calling set_mac_address [ 247.096985][T13649] binder: 13648:13649 ioctl 4018620d 0 returned -22 [ 247.098446][T13649] binder: 13648:13649 ioctl c0306201 20000000 returned -14 [ 247.124196][T13651] loop3: detected capacity change from 0 to 4096 [ 247.137169][T13652] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.350349][T13664] loop1: detected capacity change from 0 to 512 [ 247.352450][T13664] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.359176][T13664] EXT4-fs (loop1): 1 truncate cleaned up [ 247.359646][T13664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.435318][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.506135][ T9563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.509090][T13673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.509272][T13673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.531528][T13676] __nla_validate_parse: 16 callbacks suppressed [ 247.531572][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'. [ 247.543457][T13668] could not allocate digest TFM handle rmd320 [ 247.563134][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'. [ 247.579652][T13681] binder: 13680:13681 ioctl 4018620d 0 returned -22 [ 247.581093][T13681] binder_user_error: 10 callbacks suppressed [ 247.581119][T13681] binder: tried to use weak ref as strong ref [ 247.585804][T13681] binder: 13680:13681 Acquire 1 refcount change on invalid ref 0 ret -22 [ 247.585853][T13681] binder: 13680:13681 ioctl c0306201 20000000 returned -14 [ 247.588980][T13681] binder: 13680:13681 got transaction to invalid handle, 1 [ 247.588994][T13681] binder_debug: 31 callbacks suppressed [ 247.589002][T13681] binder: 13680:13681 cannot find target node [ 247.589013][T13681] binder: 13680:13681 transaction call to 0:0 failed 569/29201/-22, code 0 size 72-24 line 3151 [ 247.594715][ T6613] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.664370][T13689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.668863][T13689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.690996][T13692] binder: 13691:13692 tried to acquire reference to desc 0, got 1 instead [ 247.696928][ T6533] binder: undelivered transaction 578, process died. [ 247.696990][ T6533] binder: undelivered transaction 574, process died. [ 247.712440][ T6533] binder: undelivered TRANSACTION_COMPLETE [ 247.817147][T13698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.817388][T13698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.142368][T13701] loop3: detected capacity change from 0 to 512 [ 248.144244][T13701] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 248.157136][T13701] EXT4-fs (loop3): 1 truncate cleaned up [ 248.157613][T13701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.200404][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2403'. [ 248.214621][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2403'. [ 248.231459][T13711] binder: 13710:13711 ioctl c0306201 0 returned -14 [ 248.231616][T13711] binder: 13710:13711 got transaction to invalid handle, 1 [ 248.231625][T13711] binder: 13710:13711 cannot find target node [ 248.231632][T13711] binder: 13710:13711 transaction call to 0:0 failed 584/29201/-22, code 0 size 72-24 line 3151 [ 248.231830][ T6533] binder: undelivered TRANSACTION_ERROR: 29201 [ 248.526846][T13733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.528727][T13733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.530468][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2414'. [ 248.628643][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 248.641642][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 248.647609][T13743] vti0: entered promiscuous mode [ 248.647797][T13743] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 248.648064][T13743] bond5: (slave vti0): Error -95 calling set_mac_address [ 248.655132][T13738] could not allocate digest TFM handle rmd320 [ 248.812602][ T2412] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.812655][ T2412] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.894521][ T6543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.942800][ T6533] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 249.020702][T13752] trusted_key: syz.3.2420 sent an empty control message without MSG_MORE. [ 249.103998][ T6533] usb 1-1: Using ep0 maxpacket: 16 [ 249.121942][ T6533] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 249.121982][ T6533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.121999][ T6533] usb 1-1: Product: syz [ 249.122006][ T6533] usb 1-1: Manufacturer: syz [ 249.122012][ T6533] usb 1-1: SerialNumber: syz [ 249.142357][ T6533] r8152-cfgselector 1-1: Unknown version 0x0000 [ 249.142714][ T6533] r8152-cfgselector 1-1: config 0 descriptor?? [ 249.174764][T13762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.174951][T13762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.191645][T13764] binder: BINDER_SET_CONTEXT_MGR already set [ 249.191672][T13764] binder: 13763:13764 ioctl 4018620d 200002c0 returned -16 [ 249.191881][T13764] binder: tried to use weak ref as strong ref [ 249.191889][T13764] binder: 13763:13764 Acquire 1 refcount change on invalid ref 0 ret -22 [ 249.192002][T13764] binder: 13763:13764 got transaction to invalid handle, 1 [ 249.192012][T13764] binder: 13763:13764 cannot find target node [ 249.192408][T13764] binder: 13763:13764 ioctl c0306201 0 returned -14 [ 249.194013][T13764] binder: 13763:13764 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 249.194026][T13764] binder: 13764 RLIMIT_NICE not set [ 249.208437][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2427'. [ 249.210077][T13766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.210111][T13766] IPv6: NLM_F_CREATE should be set when creating new route [ 249.227759][T13768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.229579][T13768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.400666][T13772] bond0: left allmulticast mode [ 249.400698][T13772] bond_slave_0: left allmulticast mode [ 249.400710][T13772] bond_slave_1: left allmulticast mode [ 249.400722][T13772] bond0: left promiscuous mode [ 249.400730][T13772] bond_slave_0: left promiscuous mode [ 249.400829][T13772] bond_slave_1: left promiscuous mode [ 249.449302][T13771] loop1: detected capacity change from 0 to 512 [ 249.451494][T13771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.465629][T13771] EXT4-fs (loop1): 1 truncate cleaned up [ 249.466067][T13771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.761614][T13782] loop4: detected capacity change from 0 to 512 [ 250.098045][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 250.098102][T13794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.098110][T13794] IPv6: NLM_F_CREATE should be set when creating new route [ 250.371041][T13803] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 250.478396][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.531663][T13810] tipc: Started in network mode [ 250.533712][T13810] tipc: Node identity 86dbc03b5b4b, cluster identity 4711 [ 250.535165][T13810] tipc: Enabled bearer , priority 0 [ 250.537240][T13810] syzkaller0: entered promiscuous mode [ 250.538450][T13810] syzkaller0: entered allmulticast mode [ 250.547591][T13800] could not allocate digest TFM handle rmd320 [ 250.556676][T13810] tipc: Resetting bearer [ 250.566727][T13809] tipc: Resetting bearer [ 250.574515][T13809] tipc: Disabling bearer [ 250.589523][T13814] loop1: detected capacity change from 0 to 512 [ 250.640011][T13816] binder: 13815:13816 ioctl c0306201 0 returned -14 [ 250.816332][T13829] loop4: detected capacity change from 0 to 512 [ 250.818010][T13829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 250.821195][T13829] EXT4-fs (loop4): 1 truncate cleaned up [ 250.821665][T13829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.897844][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 251.066405][T13854] loop3: detected capacity change from 0 to 32768 [ 251.072841][T13854] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2464 (13854) [ 251.080799][T13854] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.080873][T13854] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 251.130064][T13871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.136276][T13871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.158642][T13854] BTRFS info (device loop3): rebuilding free space tree [ 251.171358][T13854] BTRFS info (device loop3): disabling free space tree [ 251.171406][T13854] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 251.171415][T13854] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 251.176930][T13854] BTRFS info (device loop3): enabling ssd optimizations [ 251.176945][T13854] BTRFS info (device loop3): disabling tree log [ 251.176952][T13854] BTRFS info (device loop3): turning on flush-on-commit [ 251.176958][T13854] BTRFS info (device loop3): turning on sync discard [ 251.176964][T13854] BTRFS info (device loop3): force clearing of disk cache [ 251.206015][T13871] bond0: left allmulticast mode [ 251.206048][T13871] bond_slave_0: left allmulticast mode [ 251.206057][T13871] bond_slave_1: left allmulticast mode [ 251.206065][T13871] bond0: left promiscuous mode [ 251.206070][T13871] bond_slave_0: left promiscuous mode [ 251.206131][T13871] bond_slave_1: left promiscuous mode [ 251.214229][ T6543] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.566646][ T6536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.669577][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.669802][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.709397][ T6533] r8152-cfgselector 1-1: Unknown version 0x0000 [ 251.709514][ T6533] r8152-cfgselector 1-1: bad CDC descriptors [ 251.722088][ T6533] r8152-cfgselector 1-1: USB disconnect, device number 42 [ 251.791804][T13937] loop5: detected capacity change from 0 to 2048 [ 251.806294][T13937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.850435][T13944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.852485][T13944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.947563][T13951] loop1: detected capacity change from 0 to 512 [ 251.955709][T13951] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 252.778955][T13951] EXT4-fs (loop1): 1 truncate cleaned up [ 252.779426][T13951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.823418][T13957] __nla_validate_parse: 4 callbacks suppressed [ 252.825447][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2498'. [ 252.835475][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2498'. [ 252.837663][T13957] vti0: entered promiscuous mode [ 252.837856][T13957] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 252.838527][T13957] bond4: (slave vti0): Error -95 calling set_mac_address [ 252.913543][T13964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.914589][T13964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.918304][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.093363][T13971] netlink: 'syz.4.2505': attribute type 11 has an invalid length. [ 253.093400][T13971] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2505'. [ 253.110254][T13973] binder_user_error: 7 callbacks suppressed [ 253.110297][T13973] binder: 13972:13973 tried to acquire reference to desc 0, got 1 instead [ 253.113686][ T6586] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 253.115758][ T6533] binder_debug: 20 callbacks suppressed [ 253.115789][ T6533] binder: undelivered transaction 625, process died. [ 253.129030][T13976] loop4: detected capacity change from 0 to 256 [ 253.129845][T13977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.129992][T13977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.133404][T13976] exfat: Deprecated parameter 'utf8' [ 253.140359][T13976] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 253.272305][ T6586] usb 1-1: Using ep0 maxpacket: 16 [ 253.277229][ T6586] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 253.278793][ T6586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.280175][ T6586] usb 1-1: Product: syz [ 253.280903][ T6586] usb 1-1: Manufacturer: syz [ 253.281758][ T6586] usb 1-1: SerialNumber: syz [ 253.286041][ T6586] r8152-cfgselector 1-1: Unknown version 0x0000 [ 253.287120][ T6586] r8152-cfgselector 1-1: config 0 descriptor?? [ 253.694745][T13994] loop5: detected capacity change from 0 to 512 [ 253.978427][T13994] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 254.451514][T13994] EXT4-fs (loop5): 1 truncate cleaned up [ 254.452043][T13994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.528924][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'. [ 254.575102][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 254.577281][T14001] vti0: entered promiscuous mode [ 254.577509][T14001] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 254.577875][T14001] bond4: (slave vti0): Error -95 calling set_mac_address [ 254.608882][ T9563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.657813][T14012] binder: 14010:14012 tried to acquire reference to desc 0, got 1 instead [ 254.664867][ T6613] binder: undelivered transaction 633, process died. [ 254.700351][T14015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.705250][T14015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.804002][T14015] bridge0: port 1() entered disabled state [ 254.911871][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.912059][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.100155][T14015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.101988][T14015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.426430][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.426490][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.426516][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.426532][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.637167][T14046] loop1: detected capacity change from 0 to 512 [ 255.742458][T14046] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 255.829645][T14046] EXT4-fs (loop1): 1 truncate cleaned up [ 255.834612][T14046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.335100][ T6586] r8152-cfgselector 1-1: Unknown version 0x0000 [ 256.335224][ T6586] r8152-cfgselector 1-1: bad CDC descriptors [ 256.344916][ T6586] r8152-cfgselector 1-1: USB disconnect, device number 43 [ 256.426191][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2532'. [ 256.426260][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.441023][T14055] vti0: entered promiscuous mode [ 256.441207][T14055] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 256.441477][T14055] bond5: (slave vti0): Error -95 calling set_mac_address [ 256.444097][T14058] binder: 14056:14058 tried to acquire reference to desc 0, got 1 instead [ 256.448741][ T6599] binder: undelivered transaction 641, process died. [ 256.534384][T14074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.535980][T14074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.644521][T14087] binder: 14086:14087 tried to acquire reference to desc 0, got 1 instead [ 256.650165][ T6599] binder: undelivered transaction 649, process died. [ 256.669265][T14089] sp0: Synchronizing with TNC [ 256.760179][T14090] loop1: detected capacity change from 0 to 512 [ 257.565418][T14090] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 257.583167][T14090] EXT4-fs (loop1): 1 truncate cleaned up [ 257.583634][T14090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.600605][T14093] loop3: detected capacity change from 0 to 512 [ 257.611156][T14093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.663073][T14103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.666114][T14103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.668698][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'. [ 257.695625][T14104] vti0: entered promiscuous mode [ 257.696863][T14104] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 257.699120][T14104] bond6: (slave vti0): Error -95 calling set_mac_address [ 257.720535][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.805266][T14116] binder: 14115:14116 tried to acquire reference to desc 0, got 1 instead [ 257.809897][ T6586] binder: undelivered transaction 657, process died. [ 257.899410][T14124] loop1: detected capacity change from 0 to 128 [ 258.002594][ T6599] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 258.134359][T14131] loop1: detected capacity change from 0 to 512 [ 258.934389][T14131] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 258.941907][T14131] EXT4-fs (loop1): 1 truncate cleaned up [ 258.949747][T14131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.968671][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2566'. [ 258.973887][ T6543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.010527][T14134] vti0: entered promiscuous mode [ 259.012283][ T6599] usb 1-1: Using ep0 maxpacket: 16 [ 259.014752][ T6599] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 259.014790][ T6599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.014802][ T6599] usb 1-1: Product: syz [ 259.014808][ T6599] usb 1-1: Manufacturer: syz [ 259.014813][ T6599] usb 1-1: SerialNumber: syz [ 259.020674][T14134] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 259.021425][T14134] bond6: (slave vti0): Error -95 calling set_mac_address [ 259.022664][ T6599] r8152-cfgselector 1-1: Unknown version 0x0000 [ 259.022675][ T6599] r8152-cfgselector 1-1: config 0 descriptor?? [ 259.040271][T14139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.040470][T14139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.091673][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.117963][T14145] binder: 14144:14145 tried to acquire reference to desc 0, got 1 instead [ 259.128448][ T6522] binder: undelivered transaction 665, process died. [ 259.140611][T14147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.140836][T14147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.191418][T14153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.191625][T14153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.666325][T14161] 9pnet_fd: Insufficient options for proto=fd [ 259.897730][T14176] binder: 14175:14176 tried to acquire reference to desc 0, got 1 instead [ 259.898171][T14176] binder: 14175:14176 got transaction with invalid data ptr [ 259.898197][T14176] binder: 14175:14176 transaction async to 14175:0 failed 677/29201/-14, code 0 size 0-24 line 3438 [ 259.970794][T14177] loop1: detected capacity change from 0 to 512 [ 259.976364][T14177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 260.193929][T14177] EXT4-fs (loop1): 1 truncate cleaned up [ 260.197388][T14177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.650337][ T6586] binder: undelivered transaction 673, process died. [ 260.800242][T14185] loop5: detected capacity change from 0 to 32768 [ 260.817854][T14185] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2585 (14185) [ 260.844198][ T6599] r8152-cfgselector 1-1: Unknown version 0x0000 [ 260.844312][ T6599] r8152-cfgselector 1-1: bad CDC descriptors [ 260.845839][ T6599] r8152-cfgselector 1-1: USB disconnect, device number 44 [ 260.854364][T14185] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 260.854419][T14185] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 260.866519][ T6535] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.893151][T14200] 9pnet_fd: Insufficient options for proto=fd [ 260.954199][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 260.955524][T14215] binder: BINDER_SET_CONTEXT_MGR already set [ 260.955530][T14215] binder: 14214:14215 ioctl 4018620d 200002c0 returned -16 [ 260.955725][T14215] binder: 14214:14215 got transaction to invalid handle, 1 [ 260.955734][T14215] binder: 14214:14215 cannot find target node [ 260.955740][T14215] binder: 14214:14215 transaction async to 0:0 failed 680/29201/-22, code 0 size 72-24 line 3151 [ 260.955895][T14215] binder: 14214:14215 got transaction to invalid handle, 1 [ 260.955902][T14215] binder: 14214:14215 cannot find target node [ 260.955907][T14215] binder: 14214:14215 transaction async to 0:0 failed 681/29201/-22, code 0 size 0-24 line 3151 [ 260.984663][T14185] BTRFS info (device loop5): rebuilding free space tree [ 260.991448][T14185] BTRFS info (device loop5): disabling free space tree [ 260.991498][T14185] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 260.991517][T14185] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 260.996977][T14213] vti0: entered promiscuous mode [ 260.997166][T14213] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 260.998259][T14185] BTRFS info (device loop5): checking UUID tree [ 261.003277][T14213] bond5: (slave vti0): Error -95 calling set_mac_address [ 261.004762][T14185] BTRFS info (device loop5): enabling ssd optimizations [ 261.004783][T14185] BTRFS info (device loop5): force clearing of disk cache [ 261.004796][T14185] BTRFS info (device loop5): doing ref verification [ 261.042011][T14225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.042357][T14225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.079061][ T9563] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 261.282223][T14234] loop3: detected capacity change from 0 to 512 [ 261.433505][T14234] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 261.455555][T14234] EXT4-fs (loop3): 1 truncate cleaned up [ 261.459704][T14234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.960079][T14236] 9pnet_fd: Insufficient options for proto=fd [ 262.011461][T14240] 9pnet_fd: Insufficient options for proto=fd [ 262.052788][T14242] loop4: detected capacity change from 0 to 64 [ 262.096358][ T6599] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 262.122922][ T6543] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.140638][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2606'. [ 262.183285][T14252] loop5: detected capacity change from 0 to 512 [ 262.188905][T14252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.217791][ T9563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.253117][ T6599] usb 1-1: Using ep0 maxpacket: 16 [ 262.256127][ T6599] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 262.256177][ T6599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.256193][ T6599] usb 1-1: Product: syz [ 262.256206][ T6599] usb 1-1: Manufacturer: syz [ 262.256217][ T6599] usb 1-1: SerialNumber: syz [ 262.262810][ T6599] r8152-cfgselector 1-1: Unknown version 0x0000 [ 262.262825][ T6599] r8152-cfgselector 1-1: config 0 descriptor?? [ 262.267404][T14269] 9pnet_fd: Insufficient options for proto=fd [ 262.344474][T14274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.344676][T14274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.480558][ T6599] r8152-cfgselector 1-1: Unknown version 0x0000 [ 262.480762][ T6599] r8152-cfgselector 1-1: bad CDC descriptors [ 262.507257][ T6599] r8152-cfgselector 1-1: USB disconnect, device number 45 [ 262.569993][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.570203][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.599764][T14290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.599960][T14290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.601191][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2622'. [ 263.011805][T14293] ------------[ cut here ]------------ [ 263.011819][T14293] WARNING: CPU: 0 PID: 14293 at fs/exec.c:119 path_noexec+0x1ac/0x1e4 [ 263.014151][T14293] Modules linked in: [ 263.014756][T14293] CPU: 0 UID: 0 PID: 14293 Comm: syz.0.2623 Not tainted syzkaller #0 PREEMPT [ 263.016218][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 263.017992][T14293] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 263.019245][T14293] pc : path_noexec+0x1ac/0x1e4 [ 263.019941][T14293] lr : path_noexec+0x1ac/0x1e4 [ 263.020692][T14293] sp : ffff80009f4d7a30 [ 263.021373][T14293] x29: ffff80009f4d7a30 x28: ffff0000cbbfe338 x27: dfff800000000000 [ 263.022692][T14293] x26: ffff0000ddf44748 x25: ffff80009f4d7ac0 x24: ffff0000ddf44740 [ 263.024055][T14293] x23: ffff80009f4d7c20 x22: 1fffe0001bbe88f0 x21: dfff800000000000 [ 263.025316][T14293] x20: 0000000000000000 x19: ffff0000ddf44780 x18: 0000000000000000 [ 263.026637][T14293] x17: 0000000000000000 x16: ffff80008af86388 x15: 0000000000000007 [ 263.027904][T14293] x14: 0000000000000002 x13: 0000000000000003 x12: 0000000000ff0100 [ 263.029277][T14293] x11: 0000000000080000 x10: 0000000000000130 x9 : ffff8000a4a19000 [ 263.030391][T14293] x8 : 0000000000000131 x7 : 0000000000000000 x6 : 0000000000000000 [ 263.031440][T14293] x5 : 0000000000000077 x4 : 0000000000000000 x3 : 0000000000003000 [ 263.032652][T14293] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 263.033850][T14293] Call trace: [ 263.034347][T14293] path_noexec+0x1ac/0x1e4 (P) [ 263.035123][T14293] do_mmap+0xb1c/0xfac [ 263.035743][T14293] vm_mmap_pgoff+0x2d8/0x45c [ 263.036459][T14293] ksys_mmap_pgoff+0x394/0x5b8 [ 263.037128][T14293] __arm64_sys_mmap+0xf8/0x110 [ 263.037962][T14293] invoke_syscall+0x98/0x254 [ 263.038686][T14293] el0_svc_common+0x130/0x23c [ 263.039469][T14293] do_el0_svc+0x48/0x58 [ 263.040124][T14293] el0_svc+0x5c/0x254 [ 263.040789][T14293] el0t_64_sync_handler+0x84/0x12c [ 263.041635][T14293] el0t_64_sync+0x198/0x19c [ 263.042430][T14293] irq event stamp: 302 [ 263.043051][T14293] hardirqs last enabled at (301): [] local_daif_restore+0x1c/0x3c [ 263.044487][T14293] hardirqs last disabled at (302): [] el1_brk64+0x20/0x54 [ 263.045682][T14293] softirqs last enabled at (296): [] local_bh_enable+0x10/0x34 [ 263.046993][T14293] softirqs last disabled at (294): [] local_bh_disable+0x10/0x34 [ 263.048350][T14293] ---[ end trace 0000000000000000 ]--- [ 263.049235][ C0] vkms_vblank_simulate: vblank timer overrun