last executing test programs: 2.659017668s ago: executing program 3 (id=967): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b", 0xa}], 0x1}, 0x4080) 2.632318368s ago: executing program 3 (id=968): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./cgroup\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.604529379s ago: executing program 3 (id=969): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r1, r0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20010) close(0xffffffffffffffff) 2.57409325s ago: executing program 3 (id=971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.399609574s ago: executing program 3 (id=974): bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x1c1) pwritev2(r1, &(0x7f00000000c0), 0x0, 0x3fffc, 0xfffff804, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x4000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddd8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 2.104173511s ago: executing program 4 (id=980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)}, {&(0x7f00000005c0)="1cb7", 0x2}], 0x2}, 0x8810) 1.924587205s ago: executing program 4 (id=986): r0 = socket$rds(0x15, 0x5, 0x0) pipe2$9p(&(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) write$P9_RXATTRCREATE(r1, &(0x7f0000001fc0)={0x7, 0x21, 0x1}, 0x7) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x0) unshare(0x48000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000500)={'filter\x00', 0x0, [0x200, 0x10006e, 0x20000004, 0x8c18, 0x9]}, &(0x7f0000000000)=0x54) recvmmsg(r4, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f0000000900)=""/195, 0xc3}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000004440)=""/56, 0x38}], 0x7}, 0x13ff}, {{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x0, 0x0) r6 = epoll_create1(0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0x2a, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, 0x0, r7}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002000), r8) r9 = getpid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)=r9) fcntl$getown(0xffffffffffffffff, 0x9) accept4(r3, 0x0, 0x0, 0x80800) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1.392146358s ago: executing program 4 (id=990): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0xfb}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.219635551s ago: executing program 0 (id=992): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b", 0xa}], 0x1}, 0x4080) 1.191224122s ago: executing program 0 (id=993): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.095296524s ago: executing program 1 (id=995): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)}, 0x50) 1.094863694s ago: executing program 1 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)}, {&(0x7f00000005c0)="1cb7", 0x2}], 0x2}, 0x8810) 1.052954895s ago: executing program 0 (id=997): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x41) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.000526357s ago: executing program 0 (id=999): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) 940.420218ms ago: executing program 1 (id=1000): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 839.03347ms ago: executing program 4 (id=1001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="0503222ed3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 779.639322ms ago: executing program 2 (id=1003): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b0529000000", 0xf}], 0x1}, 0x4080) 778.402692ms ago: executing program 2 (id=1004): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x30, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 711.507343ms ago: executing program 3 (id=1005): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = accept4$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x4, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, 0xffffffffffffff9e) writev(r1, 0x0, 0x0) 320.362993ms ago: executing program 2 (id=1006): socket$rds(0x15, 0x5, 0x0) pipe2$9p(&(0x7f0000001f80), 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) unshare(0x48000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000500)={'filter\x00', 0x0, [0x200, 0x10006e, 0x20000004, 0x8c18, 0x9]}, &(0x7f0000000000)=0x54) 295.882943ms ago: executing program 1 (id=1007): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 294.864673ms ago: executing program 4 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xfff2, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x24004840) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 232.056074ms ago: executing program 1 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x41) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 230.562154ms ago: executing program 2 (id=1010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)}, {&(0x7f00000005c0)="1cb7", 0x2}], 0x2}, 0x8810) 213.274585ms ago: executing program 1 (id=1011): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0xfb}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 157.098836ms ago: executing program 4 (id=1012): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0x0, 0x0, &(0x7f0000000200)) 137.940367ms ago: executing program 0 (id=1013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 79.887298ms ago: executing program 2 (id=1014): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.77462ms ago: executing program 2 (id=1015): bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x1c1) pwritev2(r1, &(0x7f00000000c0), 0x0, 0x3fffc, 0xfffff804, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x4000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddd8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 0s ago: executing program 0 (id=1016): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x4, 0x6, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): tadv_slave_1 [ 31.865937][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.871552][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.881044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.882800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.888848][ T4331] device veth0_macvtap entered promiscuous mode [ 31.892210][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.894006][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.895590][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 31.899775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.901466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.903085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.904489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.908226][ T4327] device veth0_vlan entered promiscuous mode [ 31.910471][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.912059][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.913557][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.914930][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.918087][ T4331] device veth1_macvtap entered promiscuous mode [ 31.938926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.940588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.942288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.953289][ T4327] device veth1_vlan entered promiscuous mode [ 31.955295][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.957686][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.959260][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.960995][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.963361][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.968218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.969909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.971523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.988235][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.990035][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.991694][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.993378][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.995597][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.009400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.010941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.012590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.014228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.015838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.019945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.021634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.023280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.024852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.033324][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.034881][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.037153][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.038682][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.043605][ T4339] device veth0_vlan entered promiscuous mode [ 32.050511][ T4327] device veth0_macvtap entered promiscuous mode [ 32.052977][ T4327] device veth1_macvtap entered promiscuous mode [ 32.056825][ T451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.058211][ T451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.064315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.065906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.067483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.079625][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.080848][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.082490][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.102084][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.103569][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.109749][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.112359][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.114247][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.115875][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.122387][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.123953][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.125588][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.128396][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.130579][ T4339] device veth1_vlan entered promiscuous mode [ 32.135192][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.136939][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.138618][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.143234][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.144659][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.146393][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.147565][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.148940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.151173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.160416][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.162099][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.163722][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.165429][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.172268][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.174078][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.182430][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.183833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.185522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.187988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.210017][ T451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.211571][ T451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.213431][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.227783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.229605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.234252][ T4407] xt_hashlimit: size too large, truncated to 1048576 [ 32.242374][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.244100][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.245646][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.250706][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.259546][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.260875][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.277774][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.279130][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.360222][ T4339] device veth0_macvtap entered promiscuous mode [ 32.368237][ T4339] device veth1_macvtap entered promiscuous mode [ 32.373513][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.375740][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.403937][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.408244][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.413257][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.418637][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.420671][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.422585][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.425116][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.136946][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 33.136996][ T4342] Bluetooth: hci0: command 0x041b tx timeout [ 33.138082][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 33.216652][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 33.217737][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 33.736574][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.918937][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.920874][ T7] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.922362][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.925192][ T7] usb 1-1: config 0 descriptor?? [ 34.135755][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 34.137079][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 34.139874][ T7] usb 1-1: USB disconnect, device number 2 [ 34.626143][ T3899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.817441][ T3899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.819382][ T3899] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 34.820830][ T3899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.823915][ T3899] usb 1-1: config 0 descriptor?? [ 35.216237][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 35.216320][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 35.217361][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 35.296325][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 35.296474][ T4342] Bluetooth: hci3: command 0x040f tx timeout [ 35.647910][ T4419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.649526][ T4419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.650932][ T3899] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 35.653214][ T3899] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input2 [ 35.947225][ T7] usb 1-1: USB disconnect, device number 3 [ 35.947226][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 37.296152][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 37.296160][ T4342] Bluetooth: hci0: command 0x0419 tx timeout [ 37.306185][ T4337] Bluetooth: hci1: command 0x0419 tx timeout [ 37.376210][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 37.376254][ T4337] Bluetooth: hci3: command 0x0419 tx timeout [ 37.626151][ T4374] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.808326][ T4374] usb 1-1: Using ep0 maxpacket: 16 [ 37.811200][ T4374] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.813176][ T4374] usb 1-1: config 1 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.815257][ T4374] usb 1-1: config 1 interface 0 has no altsetting 0 [ 37.817878][ T4374] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 37.819307][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.820597][ T4374] usb 1-1: Product: syz [ 37.821230][ T4374] usb 1-1: Manufacturer: syz [ 37.821990][ T4374] usb 1-1: SerialNumber: syz [ 38.032542][ T4424] loop4: detected capacity change from 0 to 7 [ 38.035311][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.037014][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.038578][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.040054][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.041956][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.043495][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.044895][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.046397][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.048048][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.049561][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.050970][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.052507][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.053888][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.055366][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.057581][ T4424] ldm_validate_partition_table(): Disk read failed. [ 38.058910][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.060528][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.061890][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.063438][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.064854][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.066463][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.067844][ T4424] Dev loop4: unable to read RDB block 0 [ 38.069096][ T4424] loop4: unable to read partition table [ 38.070193][ T4424] loop4: partition table beyond EOD, truncated [ 38.071350][ T4424] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 38.174802][ T4374] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input3 [ 38.185190][ T4374] usb 1-1: USB disconnect, device number 4 [ 43.052889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.054793][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.058114][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.059785][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.061211][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.062747][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.064244][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.065744][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.070990][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.085094][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.085714][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.086866][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.088495][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.091150][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.118783][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.120463][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.121915][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.123296][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.125114][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.129808][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.131265][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.216920][ T4447] process 'syz.2.10' launched './file0' with NULL argv: empty string added [ 43.294846][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.296270][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.297943][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.592716][ T451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.594289][ T451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.595730][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.687934][ T4460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.696796][ T4460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.754653][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 43.764499][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 43.791401][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 43.799357][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 43.807481][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 43.821177][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 43.825338][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 43.834858][ T4463] binder: tried to use weak ref as strong ref [ 43.836035][ T4463] binder: 4462:4463 Acquire 1 refcount change on invalid ref 0 ret -22 [ 43.842619][ T4463] binder: 4462:4463 got transaction to invalid handle, 1 [ 43.844359][ T4463] binder: 4463:4462 cannot find target node [ 43.845250][ T4463] binder: 4462:4463 transaction call to 0:0 failed 3/29201/-22, size 0-0 line 3045 [ 43.851628][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.910580][ T4465] syz.4.15 uses obsolete (PF_INET,SOCK_PACKET) [ 44.078812][ T4472] binder: 4471:4472 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 44.166990][ T4472] binder: 4471:4472 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 44.169215][ T4472] binder: 4472 RLIMIT_NICE not set [ 44.297795][ T4485] loop2: detected capacity change from 0 to 256 [ 44.309703][ T4485] ======================================================= [ 44.309703][ T4485] WARNING: The mand mount option has been deprecated and [ 44.309703][ T4485] and is ignored by this kernel. Remove the mand [ 44.309703][ T4485] option from the mount to silence this warning. [ 44.309703][ T4485] ======================================================= [ 44.330471][ T4486] device syzkaller0 entered promiscuous mode [ 44.392148][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 44.929385][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 44.941872][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 44.994218][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 45.004719][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 45.015235][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 45.025916][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 45.039831][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 45.069283][ T27] audit: type=1326 audit(45.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.27" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377fe8 code=0x7ffc0000 [ 45.094338][ T27] audit: type=1326 audit(45.050:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.27" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377fe8 code=0x7ffc0000 [ 45.101072][ T27] audit: type=1326 audit(45.080:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.27" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377fe8 code=0x7ffc0000 [ 45.104928][ T27] audit: type=1326 audit(45.080:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.27" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbb377fe8 code=0x7ffc0000 [ 45.127783][ T27] audit: type=1326 audit(45.080:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.27" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377fe8 code=0x7ffc0000 [ 45.137027][ T27] audit: type=1326 audit(45.080:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.27" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377fe8 code=0x7ffc0000 [ 45.140877][ T27] audit: type=1326 audit(45.080:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.27" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377fe8 code=0x7ffc0000 [ 45.152634][ T27] audit: type=1326 audit(45.080:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.27" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffbb377fe8 code=0x7ffc0000 [ 45.166920][ T4507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 45.168574][ T4507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 45.170262][ T27] audit: type=1326 audit(45.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.27" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377fe8 code=0x7ffc0000 [ 45.174847][ T27] audit: type=1326 audit(45.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.3.27" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb377fe8 code=0x7ffc0000 [ 45.273165][ T4511] loop3: detected capacity change from 0 to 16 [ 45.292071][ T4511] erofs: (device loop3): mounted with root inode @ nid 36. [ 45.542942][ T4515] binder: 4514:4515 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 45.566855][ T4515] binder: 4514:4515 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 45.569097][ T4515] binder: 4515 RLIMIT_NICE not set [ 46.228723][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 46.248558][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 46.250001][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 46.251361][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 46.255347][ T4551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.259476][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 46.260767][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 46.262048][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 46.263529][ T4551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.540983][ T4568] loop0: detected capacity change from 0 to 16 [ 46.552037][ T4568] erofs: (device loop0): mounted with root inode @ nid 36. [ 46.834259][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 46.950361][ T4576] device syzkaller0 entered promiscuous mode [ 47.050033][ T4580] loop3: detected capacity change from 0 to 256 [ 47.247109][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 58.155161][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 58.534289][ T4664] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 58.753030][ T4669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.755700][ T4669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.158559][ T4675] device syzkaller0 entered promiscuous mode [ 59.364822][ T4688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.373505][ T4688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.388214][ T4689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.389714][ T4689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.405283][ T4689] netlink: 52 bytes leftover after parsing attributes in process `syz.4.80'. [ 59.407336][ T4689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.454431][ T4695] i2c i2c-0: Invalid block read size 255 [ 59.457628][ T4374] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.461679][ T4695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.464336][ T4695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.514258][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 59.514273][ T27] audit: type=1326 audit(59.490:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.4.80" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffadd77fe8 code=0x0 [ 59.527670][ T4689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.639244][ T4374] usb 1-1: config 0 has no interfaces? [ 59.640312][ T4374] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 59.641891][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.647961][ T4374] usb 1-1: config 0 descriptor?? [ 59.873811][ T4374] usb 1-1: USB disconnect, device number 5 [ 59.913675][ T4759] capability: warning: `syz.1.84' uses deprecated v2 capabilities in a way that may be insecure [ 60.031288][ T4768] device syzkaller0 entered promiscuous mode [ 60.294526][ T4782] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 60.616153][ T4787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 60.617986][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 60.623204][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 60.624747][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 60.632738][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 60.636527][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 60.639937][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 60.641481][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 60.644214][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.649384][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.650897][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.673007][ T4787] device gretap1 entered promiscuous mode [ 60.674580][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 60.778965][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000b6bc877c: rx timeout, send abort [ 60.886577][ T4794] loop3: detected capacity change from 0 to 256 [ 61.043162][ T4796] Zero length message leads to an empty skb [ 61.094141][ T4801] i2c i2c-0: Invalid block read size 255 [ 61.097290][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.100308][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.264055][ T4813] device syzkaller0 entered promiscuous mode [ 61.281079][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000b6bc877c: abort rx timeout. Force session deactivation [ 61.325853][ T4815] binder: 4814:4815 tried to acquire reference to desc 0, got 1 instead [ 61.328258][ T4815] binder: 4814:4815 ioctl c0306201 0 returned -14 [ 61.330396][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 61.338584][ T4375] binder: undelivered transaction 8, process died. [ 61.604820][ T4825] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 61.862732][ C1] vxcan1: j1939_tp_rxtimer: 0x0000000094757aaf: rx timeout, send abort [ 62.125828][ T4844] binder: 4842:4844 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 62.129735][ T4844] binder: 4842:4844 unknown command 0 [ 62.131212][ T4844] binder: 4842:4844 ioctl c0306201 200004c0 returned -22 [ 62.135908][ T4844] binder: 4842:4844 got reply transaction with no transaction stack [ 62.140252][ T4844] binder: 4842:4844 transaction reply to 0:0 failed 10/29201/-71, size 0-0 line 2946 [ 62.171799][ T4849] binder: 4848:4849 tried to acquire reference to desc 0, got 1 instead [ 62.177281][ T24] binder: undelivered TRANSACTION_COMPLETE [ 62.188247][ T24] binder: undelivered transaction 15, process died. [ 62.364299][ C1] vxcan1: j1939_tp_rxtimer: 0x0000000094757aaf: abort rx timeout. Force session deactivation [ 62.383392][ T4860] loop2: detected capacity change from 0 to 256 [ 62.406250][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.521859][ T4882] tipc: Started in network mode [ 62.522967][ T4882] tipc: Node identity 002d0000000000000040ffffe0000001, cluster identity 4711 [ 62.524695][ T4882] tipc: Enabling of bearer rejected, failed to enable media [ 62.538388][ T4884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.540047][ T4884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.639150][ T4869] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 62.666505][ T4876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.668610][ T4876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.769795][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000030af05f: rx timeout, send abort [ 62.776483][ T4869] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 62.782382][ T4867] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.837814][ T4898] binder: 4897:4898 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 62.839383][ T4898] binder: 4897:4898 unknown command 0 [ 62.840273][ T4898] binder: 4897:4898 ioctl c0306201 200004c0 returned -22 [ 62.841996][ T4898] binder: 4897:4898 got reply transaction with no transaction stack [ 62.843693][ T4898] binder: 4897:4898 transaction reply to 0:0 failed 17/29201/-71, size 0-0 line 2946 [ 63.064007][ T4905] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 63.096159][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 63.249294][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000831c6e2e: rx timeout, send abort [ 63.271458][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000030af05f: abort rx timeout. Force session deactivation [ 63.555733][ T4923] usb usb8: usbfs: process 4923 (syz.4.135) did not claim interface 0 before use [ 63.584033][ T4925] binder: 4924:4925 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 63.585403][ T4925] binder: 4924:4925 unknown command 0 [ 63.586873][ T4925] binder: 4924:4925 ioctl c0306201 200004c0 returned -22 [ 63.588551][ T4925] binder: 4924:4925 got reply transaction with no transaction stack [ 63.590908][ T4925] binder: 4924:4925 transaction reply to 0:0 failed 19/29201/-71, size 0-0 line 2946 [ 63.721009][ T4935] loop4: detected capacity change from 0 to 256 [ 63.750753][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000831c6e2e: abort rx timeout. Force session deactivation [ 63.816184][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.017597][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 64.096754][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 64.098587][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 64.126160][ T4374] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 64.176993][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 64.178854][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 64.256638][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 64.258514][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 64.260170][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 64.326147][ T4374] usb 1-1: Using ep0 maxpacket: 32 [ 64.330467][ T4374] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 64.332022][ T4374] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.333748][ T4374] usb 1-1: config 0 has no interface number 0 [ 64.334762][ T4374] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 64.336635][ T4374] usb 1-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.336953][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 64.338970][ T4374] usb 1-1: config 0 interface 12 has no altsetting 0 [ 64.343302][ T4374] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 64.344678][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.345932][ T4374] usb 1-1: Product: syz [ 64.348526][ T4374] usb 1-1: Manufacturer: syz [ 64.349376][ T4374] usb 1-1: SerialNumber: syz [ 64.351705][ T4374] usb 1-1: config 0 descriptor?? [ 64.353981][ T4374] f81534 1-1:0.12: required endpoints missing [ 64.497600][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.498779][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.855365][ T4374] usb 1-1: USB disconnect, device number 6 [ 67.856295][ C0] sctp_transport_update_pmtu: 76 callbacks suppressed [ 67.856310][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 68.016476][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 68.018247][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 68.020026][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 68.176409][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 68.256417][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 68.336927][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 68.496447][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 68.498343][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 68.500097][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 69.618112][ T22] cfg80211: failed to load regulatory.db [ 73.136397][ C0] sctp_transport_update_pmtu: 41 callbacks suppressed [ 73.136410][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.457449][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.459183][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.460897][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.462546][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.464243][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.465877][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.467664][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.469235][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 73.616372][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 74.409386][ T4940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.139'. [ 74.411272][ T4946] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 74.435942][ T4967] device syzkaller0 entered promiscuous mode [ 74.528146][ T4975] binder: 4974:4975 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 74.529523][ T4975] binder: 4974:4975 unknown command 0 [ 74.530390][ T4975] binder: 4974:4975 ioctl c0306201 200004c0 returned -22 [ 74.531790][ T4975] binder: 4974:4975 got reply transaction with no transaction stack [ 74.533250][ T4975] binder: 4974:4975 transaction reply to 0:0 failed 21/29201/-71, size 0-0 line 2946 [ 74.767209][ T5002] binder: BINDER_SET_CONTEXT_MGR already set [ 74.768617][ T5002] binder: 5001:5002 ioctl 4018620d 20004a80 returned -16 [ 74.773516][ T5002] binder: 5001:5002 got transaction to invalid handle, 1 [ 74.775862][ T5002] binder: 5002:5001 cannot find target node [ 74.780002][ T4451] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.781291][ T5002] binder: 5001:5002 transaction call to 0:0 failed 24/29201/-22, size 0-0 line 3045 [ 74.783022][ T5002] binder: 5001:5002 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 74.785027][ T5002] binder: 5002 RLIMIT_NICE not set [ 74.825325][ T5010] tipc: Started in network mode [ 74.826800][ T5010] tipc: Node identity 002d0000000000000040ffffe0000001, cluster identity 4711 [ 74.828676][ T5010] tipc: Enabling of bearer rejected, failed to enable media [ 74.834013][ T5011] binder: 5001:5011 BC_FREE_BUFFER u0000000020fff000 no match [ 74.988289][ T4993] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 74.991377][ T4993] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 75.122888][ T5024] loop2: detected capacity change from 0 to 164 [ 75.134983][ T5024] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.149467][ T5024] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.162392][ T5024] rock: directory entry would overflow storage [ 75.165834][ T5024] rock: sig=0x4f50, size=4, remaining=3 [ 75.169870][ T5024] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 75.235478][ T5026] binder: 5025:5026 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 75.240066][ T5026] binder: 5025:5026 unknown command 0 [ 75.242567][ T5026] binder: 5025:5026 ioctl c0306201 200004c0 returned -22 [ 75.247734][ T5026] binder: 5025:5026 got reply transaction with no transaction stack [ 75.251591][ T5026] binder: 5025:5026 transaction reply to 0:0 failed 26/29201/-71, size 0-0 line 2946 [ 75.259925][ T5029] device syzkaller0 entered promiscuous mode [ 75.277214][ T5022] loop4: detected capacity change from 0 to 32768 [ 75.288221][ T5022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.161 (5022) [ 75.314834][ T5022] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.316849][ T5022] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 75.318619][ T5022] BTRFS info (device loop4): using free space tree [ 75.438062][ T5022] BTRFS info (device loop4): enabling ssd optimizations [ 75.470544][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.489030][ T4339] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 75.522073][ T5056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.167'. [ 75.540740][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.562279][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.568411][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.588434][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.615207][ T5059] device gretap1 entered promiscuous mode [ 75.672642][ T5062] loop2: detected capacity change from 0 to 4096 [ 75.681412][ T5066] loop3: detected capacity change from 0 to 4096 [ 75.683648][ T5062] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.709269][ T5062] EXT4-fs (loop2): Test dummy encryption mode enabled [ 75.718702][ T5066] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 75.731784][ T5062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.795496][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 75.929400][ T5090] binder: 5089:5090 unknown command 0 [ 75.930293][ T5090] binder: 5089:5090 ioctl c0306201 200004c0 returned -22 [ 75.935973][ T5090] binder: 5089:5090 got reply transaction with no transaction stack [ 75.939161][ T5090] binder: 5089:5090 transaction reply to 0:0 failed 29/29201/-71, size 0-0 line 2946 [ 75.942591][ T5093] device syzkaller0 entered promiscuous mode [ 75.950191][ T5095] loop0: detected capacity change from 0 to 64 [ 75.956145][ T4327] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 75.966834][ T5095] hfs: request for non-existent node 293 in B*Tree [ 75.968227][ T5095] hfs: request for non-existent node 293 in B*Tree [ 75.969319][ T5095] hfs: get root inode failed [ 75.978849][ T5097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.980624][ T5097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.004881][ T4964] blk_print_req_error: 10 callbacks suppressed [ 76.004898][ T4964] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.081104][ T5104] binder: 5103:5104 tried to acquire reference to desc 0, got 1 instead [ 76.083064][ T5104] binder: 5103:5104 ioctl c0306201 0 returned -14 [ 76.094434][ T4451] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.188350][ T5107] loop1: detected capacity change from 0 to 128 [ 76.193135][ T5107] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 76.195582][ T5107] hpfs: filesystem error: improperly stopped [ 76.197502][ T5107] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 76.198874][ T5107] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 76.316136][ T5064] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 76.338172][ T5111] loop1: detected capacity change from 0 to 32768 [ 76.377279][ T5115] loop4: detected capacity change from 0 to 256 [ 76.384086][ T5115] exfat: Deprecated parameter 'utf8' [ 76.397090][ T5115] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc23166c1, utbl_chksum : 0xe619d30d) [ 76.457275][ T5117] loop1: detected capacity change from 0 to 4096 [ 76.464559][ T5117] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.471324][ T5117] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 76.473312][ T5117] NILFS (loop1): mounting unchecked fs [ 76.477248][ T5117] NILFS (loop1): invalid segment: Checksum error in segment payload [ 76.479850][ T5117] NILFS (loop1): unable to fall back to spare super block [ 76.481439][ T5117] NILFS (loop1): error -22 while searching super root [ 76.508245][ T5064] usb 1-1: Using ep0 maxpacket: 32 [ 76.511311][ T5064] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 76.512798][ T5064] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.514378][ T5064] usb 1-1: config 0 has no interface number 0 [ 76.515451][ T5064] usb 1-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.519866][ T5064] usb 1-1: config 0 interface 12 has no altsetting 0 [ 76.526506][ T5064] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 76.528150][ T5064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.529594][ T5064] usb 1-1: Product: syz [ 76.530285][ T5121] binder: 5120:5121 unknown command 0 [ 76.530297][ T5121] binder: 5120:5121 ioctl c0306201 200004c0 returned -22 [ 76.531558][ T5121] binder: 5120:5121 transaction reply to 0:0 failed 36/29201/-71, size 0-0 line 2946 [ 76.532301][ T5064] usb 1-1: Manufacturer: syz [ 76.534715][ T5064] usb 1-1: SerialNumber: syz [ 76.544264][ T4966] udevd[4966]: incorrect nilfs2 checksum on /dev/loop1 [ 76.553483][ T5064] usb 1-1: config 0 descriptor?? [ 76.556615][ T5064] f81534 1-1:0.12: required endpoints missing [ 76.595552][ T5126] device syzkaller0 entered promiscuous mode [ 76.643716][ T5119] loop4: detected capacity change from 0 to 32768 [ 76.689404][ T5119] XFS (loop4): Mounting V5 Filesystem [ 76.711337][ T5119] XFS (loop4): Ending clean mount [ 76.755987][ T5128] (syz.3.192,5128,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.760499][ T5128] (syz.3.192,5128,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.772703][ T5128] JBD2: Ignoring recovery information on journal [ 76.792916][ T5128] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 76.799818][ T4339] XFS (loop4): Unmounting Filesystem [ 76.854778][ T5128] (syz.3.192,5128,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 76.921672][ T4327] ocfs2: Unmounting device (7,3) on (node local) [ 76.965730][ T5140] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop1 scanned by syz.1.193 (5140) [ 76.973736][ T5140] BTRFS info (device loop1): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 76.980983][ T5140] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 76.982507][ T5140] BTRFS info (device loop1): using free space tree [ 77.049476][ T5140] BTRFS info (device loop1): enabling ssd optimizations [ 77.075101][ T4326] BTRFS info (device loop1): last unmount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 77.191064][ T5174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.196877][ T5174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.254387][ T5154] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.194 (5154) [ 77.263004][ T5154] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 77.264977][ T5154] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 77.267219][ T5154] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 77.273833][ T5154] BTRFS info (device loop4): use zstd compression, level 3 [ 77.275468][ T5154] BTRFS info (device loop4): use no compression [ 77.279881][ T5154] BTRFS info (device loop4): using free space tree [ 77.292652][ T5177] EXT4-fs: Ignoring removed bh option [ 77.327489][ T5172] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 77.329353][ T5172] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 77.333537][ T5177] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.338633][ T5172] F2FS-fs (loop1): invalid crc value [ 77.355102][ T5172] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.377871][ T5172] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 77.379253][ T5172] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.388531][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 77.445273][ T5154] BTRFS info (device loop4): enabling ssd optimizations [ 77.468310][ T5204] binder: 5202:5204 unknown command 0 [ 77.469257][ T5204] binder: 5202:5204 ioctl c0306201 200004c0 returned -22 [ 77.524095][ T4339] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 77.575664][ T5213] EXT4-fs: Ignoring removed bh option [ 77.621437][ T5213] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.679336][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 77.844828][ T5223] XFS (loop2): Mounting V5 Filesystem [ 77.863240][ T5223] XFS (loop2): Ending clean mount [ 77.893936][ T4331] XFS (loop2): Unmounting Filesystem [ 78.132594][ T5242] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.211: lblock 2 mapped to illegal pblock 2 (length 1) [ 78.142947][ T5242] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 78.144651][ T5242] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.211: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.151190][ T5242] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 78.152704][ T5242] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.211: Failed to acquire dquot type 0 [ 78.154968][ T5242] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 78.157891][ T5242] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.211: mark_inode_dirty error [ 78.162838][ T5242] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 78.164689][ T5242] EXT4-fs (loop1): 1 orphan inode deleted [ 78.165819][ T5242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.170493][ T4355] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.173483][ T4355] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 78.174935][ T4355] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 78.205946][ T4326] EXT4-fs (loop1): unmounting filesystem. [ 78.211511][ T4326] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 78.217603][ T4326] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 78.220546][ T4326] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 78.403540][ T5257] binder: 5256:5257 unknown command 0 [ 78.404638][ T5257] binder: 5256:5257 ioctl c0306201 200004c0 returned -22 [ 78.518962][ T5265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.521447][ T5265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.547265][ T5263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.576681][ C0] sctp_transport_update_pmtu: 31 callbacks suppressed [ 78.576695][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.610340][ T5267] exfat: Deprecated parameter 'utf8' [ 78.614642][ T5267] exfat: Deprecated parameter 'utf8' [ 78.616791][ T5267] exfat: Deprecated parameter 'utf8' [ 78.617717][ T5267] exfat: Deprecated parameter 'namecase' [ 78.629939][ T5267] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 78.840362][ T5275] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 78.844195][ T5275] ntfs3: loop1: volume is dirty and "force" flag is not set! [ 78.989615][ T5282] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 79.011651][ T4326] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 79.028966][ T5284] binder: 5283:5284 unknown command 0 [ 79.030009][ T5284] binder: 5283:5284 ioctl c0306201 200004c0 returned -22 [ 79.069757][ T5167] usb 1-1: USB disconnect, device number 7 [ 79.122076][ T5288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.216944][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 79.218811][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 79.220467][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 79.222212][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 79.464686][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.468684][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.515761][ T5321] netlink: 'syz.0.243': attribute type 7 has an invalid length. [ 79.522663][ T5320] device syzkaller0 entered promiscuous mode [ 79.576702][ T5322] binder: 5310:5322 ioctl c0306201 0 returned -14 [ 79.856392][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 80.181994][ T5343] set_capacity_and_notify: 16 callbacks suppressed [ 80.182004][ T5343] loop2: detected capacity change from 0 to 1764 [ 80.398498][ T5356] device syzkaller0 entered promiscuous mode [ 80.486773][ T5364] binder: 5363:5364 unknown command 0 [ 80.487731][ T5364] binder: 5363:5364 ioctl c0306201 200004c0 returned -22 [ 80.489200][ T5364] binder_user_error: 10 callbacks suppressed [ 80.489206][ T5364] binder: 5363:5364 got reply transaction with no transaction stack [ 80.501834][ T5364] binder_debug: 7 callbacks suppressed [ 80.501849][ T5364] binder: 5363:5364 transaction reply to 0:0 failed 52/29201/-71, size 0-0 line 2946 [ 80.563896][ T5372] binder: 5371:5372 tried to acquire reference to desc 0, got 1 instead [ 80.589376][ T5372] binder: 5371:5372 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 80.595957][ T5372] binder: 5372 RLIMIT_NICE not set [ 80.613977][ T5374] binder: 5373:5374 tried to acquire reference to desc 0, got 1 instead [ 80.623783][ T5374] binder: 5373:5374 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 80.629367][ T5374] binder: 5374 RLIMIT_NICE not set [ 80.641120][ T5377] binder: 5371:5377 BC_FREE_BUFFER u0000000020fff000 no match [ 80.668570][ T4373] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.877876][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 81.057960][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 81.060452][ T7] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 81.061911][ T7] usb 1-1: config 0 has no interface number 0 [ 81.063025][ T7] usb 1-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 81.064840][ T7] usb 1-1: config 0 interface 12 has no altsetting 0 [ 81.068749][ T7] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 81.070391][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.073027][ T7] usb 1-1: Product: syz [ 81.073797][ T7] usb 1-1: Manufacturer: syz [ 81.075864][ T7] usb 1-1: SerialNumber: syz [ 81.082180][ T7] usb 1-1: config 0 descriptor?? [ 81.084608][ T7] f81534 1-1:0.12: required endpoints missing [ 81.288730][ T5382] netlink: 'syz.2.268': attribute type 7 has an invalid length. [ 81.778026][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.779941][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.781659][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.784871][ T5387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.269'. [ 81.793235][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.798376][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.801951][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.166551][ T5407] binder: 5404:5407 unknown command 0 [ 82.167525][ T5407] binder: 5404:5407 ioctl c0306201 200004c0 returned -22 [ 82.168746][ T5407] binder: 5404:5407 got reply transaction with no transaction stack [ 82.170264][ T5407] binder: 5404:5407 transaction reply to 0:0 failed 63/29201/-71, size 0-0 line 2946 [ 82.328966][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.362159][ T5417] binder: 5416:5417 tried to acquire reference to desc 0, got 1 instead [ 82.416688][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.253771][ T5438] netlink: 'syz.3.286': attribute type 7 has an invalid length. [ 83.707178][ C0] sctp_transport_update_pmtu: 7 callbacks suppressed [ 83.707191][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.710226][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.712023][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.713650][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.715437][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.719482][ T7] usb 1-1: USB disconnect, device number 8 [ 84.059016][ T5461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 84.060708][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 84.064972][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 84.066727][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 84.068231][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 84.069720][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 84.071118][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 84.072610][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 84.074813][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.120660][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.121952][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.134737][ T5468] loop3: detected capacity change from 0 to 1024 [ 84.140490][ T5461] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 84.150172][ T5468] EXT4-fs: Ignoring removed bh option [ 84.173583][ T5468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.222329][ T5468] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.292: lblock 0 mapped to illegal pblock 0 (length 6) [ 84.250224][ T5468] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.292: bg 0: block 112: padding at end of block bitmap is not set [ 84.347059][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.348916][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.350727][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.352522][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.354407][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 84.379985][ T5468] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 84.382941][ T5468] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.382941][ T5468] [ 84.384857][ T5468] EXT4-fs (loop3): Total free blocks count 0 [ 84.395620][ T5468] EXT4-fs (loop3): Free/Dirty block details [ 84.398422][ T5468] EXT4-fs (loop3): free_blocks=0 [ 84.402760][ T5468] EXT4-fs (loop3): dirty_blocks=64 [ 84.403583][ T5468] EXT4-fs (loop3): Block reservation details [ 84.411686][ T5468] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 84.464683][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 84.656759][ T5494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.659331][ T5494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.729715][ T5496] netlink: 'syz.2.302': attribute type 7 has an invalid length. [ 84.793940][ T5499] loop0: detected capacity change from 0 to 8 [ 85.010240][ T5513] fuse: Bad value for 'fd' [ 85.391525][ T5542] loop0: detected capacity change from 0 to 8 [ 85.433631][ T5545] fuse: Bad value for 'fd' [ 85.752523][ T5566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.755791][ T5566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.875703][ T5570] loop2: detected capacity change from 0 to 4096 [ 85.919107][ T5570] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 85.951526][ T4331] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 86.299404][ T5587] loop4: detected capacity change from 0 to 8 [ 86.395137][ T5597] netlink: 'syz.2.333': attribute type 7 has an invalid length. [ 86.786362][ T5620] binder_user_error: 14 callbacks suppressed [ 86.786373][ T5620] binder: 5619:5620 tried to acquire reference to desc 0, got 1 instead [ 86.793511][ T5620] binder: 5619:5620 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 86.801792][ T5620] binder: 5620 RLIMIT_NICE not set [ 86.843757][ T5623] binder: 5619:5623 BC_FREE_BUFFER u0000000020fff000 no match [ 87.058807][ T5631] device syzkaller0 entered promiscuous mode [ 87.141762][ T5633] loop0: detected capacity change from 0 to 8 [ 88.042920][ T5665] device gretap1 entered promiscuous mode [ 88.132024][ T5675] device syzkaller0 entered promiscuous mode [ 88.371290][ T5686] binder: 5685:5686 tried to acquire reference to desc 0, got 1 instead [ 88.376413][ T5686] binder: 5685:5686 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 88.380954][ T5686] binder: 5686 RLIMIT_NICE not set [ 88.426988][ T5689] binder: 5685:5689 BC_FREE_BUFFER u0000000020fff000 no match [ 88.595602][ T5695] device syzkaller0 entered promiscuous mode [ 88.687475][ T5700] loop4: detected capacity change from 0 to 512 [ 88.818395][ C0] sctp_transport_update_pmtu: 22 callbacks suppressed [ 88.818408][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.915472][ T5708] loop3: detected capacity change from 0 to 512 [ 88.927351][ T5708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a817c02c, mo2=0002] [ 88.928917][ T5708] System zones: 1-12 [ 88.931586][ T5708] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.371: error while reading EA inode 32 err=-116 [ 88.939732][ T5708] EXT4-fs (loop3): Remounting filesystem read-only [ 88.942199][ T5708] EXT4-fs (loop3): 1 orphan inode deleted [ 88.943981][ T5708] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.208724][ T5721] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 89.691646][ T5733] loop1: detected capacity change from 0 to 1764 [ 89.725334][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 89.768970][ T5737] device syzkaller0 entered promiscuous mode [ 89.993382][ T5747] loop1: detected capacity change from 0 to 4096 [ 90.021924][ T5747] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 90.040539][ T5750] binder: 5749:5750 tried to acquire reference to desc 0, got 1 instead [ 90.045727][ T5750] binder: 5749:5750 ioctl c0306201 0 returned -14 [ 90.052312][ T5750] binder: 5749:5750 BC_FREE_BUFFER u0000000020fff000 matched unreturned or currently freeing buffer [ 90.060297][ T4373] binder: release 5749:5750 transaction 92 out, still active [ 90.061370][ T4326] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 90.062372][ T4373] binder: undelivered TRANSACTION_COMPLETE [ 90.097405][ T4373] binder: send failed reply for transaction 92, target dead [ 90.107152][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.108926][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.194294][ T5767] device syzkaller0 entered promiscuous mode [ 90.326697][ T5776] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 90.672193][ T5787] binder: 5786:5787 ioctl c0306201 0 returned -14 [ 90.675550][ T4373] binder: release 5786:5787 transaction 97 out, still active [ 90.679149][ T4373] binder: undelivered TRANSACTION_COMPLETE [ 90.707116][ T4373] binder: send failed reply for transaction 97, target dead [ 90.718310][ T5785] loop3: detected capacity change from 0 to 4096 [ 90.737198][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.739063][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.753812][ T5785] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 90.777956][ T5792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'. [ 90.799318][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.800938][ T4327] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 90.820987][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.825122][ T5797] loop4: detected capacity change from 0 to 512 [ 90.828706][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.835862][ T5797] netlink: 112 bytes leftover after parsing attributes in process `syz.4.404'. [ 90.837460][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 90.844412][ T5799] device syzkaller0 entered promiscuous mode [ 91.012433][ T5811] device syzkaller0 entered promiscuous mode [ 91.107955][ T5819] binder: 5818:5819 ioctl c0306201 0 returned -14 [ 91.109705][ T5064] binder: release 5818:5819 transaction 102 out, still active [ 91.111103][ T5064] binder: undelivered TRANSACTION_COMPLETE [ 91.119130][ T5064] binder: send failed reply for transaction 102, target dead [ 91.140057][ T5821] device syzkaller0 entered promiscuous mode [ 91.377042][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 91.379290][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 91.380982][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 91.382870][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 91.489687][ T5847] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 91.524132][ T5064] binder: release 5850:5851 transaction 107 out, still active [ 91.630261][ T5855] device syzkaller0 entered promiscuous mode [ 91.636291][ T5167] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 91.816151][ T5167] usb 1-1: Using ep0 maxpacket: 32 [ 91.819773][ T5167] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 91.821079][ T5167] usb 1-1: config 0 has no interface number 0 [ 91.822046][ T5167] usb 1-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 91.823587][ T5167] usb 1-1: config 0 interface 12 has no altsetting 0 [ 91.832027][ T5167] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 91.833407][ T5167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.834631][ T5167] usb 1-1: Product: syz [ 91.835301][ T5167] usb 1-1: Manufacturer: syz [ 91.836041][ T5167] usb 1-1: SerialNumber: syz [ 91.847988][ T5167] usb 1-1: config 0 descriptor?? [ 91.851789][ T5167] f81534 1-1:0.12: required endpoints missing [ 91.897716][ T5869] device syzkaller0 entered promiscuous mode [ 91.957790][ T5871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 91.961751][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.963904][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.965196][ T5871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.018693][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 92.089850][ T5871] device gretap1 entered promiscuous mode [ 92.311559][ T5878] binder_user_error: 6 callbacks suppressed [ 92.311569][ T5878] binder: 5877:5878 tried to acquire reference to desc 0, got 1 instead [ 92.314581][ T5878] binder: 5877:5878 BC_FREE_BUFFER u0000000020fff000 matched unreturned or currently freeing buffer [ 92.405350][ T5881] IPVS: set_ctl: invalid protocol: 43557 170.21.170.170:43690 [ 92.620058][ T5895] loop1: detected capacity change from 0 to 8 [ 92.695978][ T5899] device syzkaller0 entered promiscuous mode [ 92.854274][ T5906] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 92.921621][ T5908] binder: 5907:5908 tried to acquire reference to desc 0, got 1 instead [ 92.926846][ T5908] binder: 5907:5908 BC_FREE_BUFFER u0000000020fff000 matched unreturned or currently freeing buffer [ 92.978186][ T5912] device syzkaller0 entered promiscuous mode [ 93.262327][ T5925] loop1: detected capacity change from 0 to 512 [ 93.299706][ T5929] loop3: detected capacity change from 0 to 8 [ 93.329812][ T5927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.452'. [ 93.344341][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.354226][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.355655][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.595815][ T5940] binder: 5939:5940 tried to acquire reference to desc 0, got 1 instead [ 93.598700][ T5940] binder: 5939:5940 BC_FREE_BUFFER u0000000020fff000 matched unreturned or currently freeing buffer [ 93.936617][ C0] sctp_transport_update_pmtu: 2 callbacks suppressed [ 93.936628][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 94.388525][ T4373] usb 1-1: USB disconnect, device number 9 [ 94.412567][ T5962] loop0: detected capacity change from 0 to 128 [ 94.579399][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.216512][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 95.440318][ T5974] loop0: detected capacity change from 0 to 8 [ 95.866951][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 96.496789][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.136693][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.777783][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.416691][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 98.418487][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 100.337882][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.616779][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.618580][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 102.256876][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 102.258649][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 102.896872][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 104.177631][ T5955] device syzkaller0 entered promiscuous mode [ 104.219622][ T5980] netlink: 'syz.0.466': attribute type 7 has an invalid length. [ 104.312953][ T5987] fuse: Bad value for 'group_id' [ 104.351335][ T5991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.355936][ T5991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.418583][ T6000] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 104.451141][ T6002] loop0: detected capacity change from 0 to 8 [ 104.475842][ T6004] binder: 6003:6004 tried to acquire reference to desc 0, got 1 instead [ 104.498300][ T6004] binder: 6003:6004 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 104.508754][ T6004] binder: 6004 RLIMIT_NICE not set [ 104.509876][ T6004] binder: 6003:6004 BC_FREE_BUFFER u0000000020fff000 matched unreturned or currently freeing buffer [ 104.519290][ T4374] binder_debug: 11 callbacks suppressed [ 104.519298][ T4374] binder: release 6003:6004 transaction 127 out, still active [ 104.521430][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 104.548038][ T7] binder: send failed reply for transaction 127, target dead [ 104.816937][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 104.818694][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.602152][ T6019] netlink: 'syz.3.480': attribute type 7 has an invalid length. [ 105.703390][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.705071][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.706952][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 105.709440][ C0] vxcan1: j1939_tp_rxtimer: 0x000000004334d2eb: rx timeout, send abort [ 105.777166][ T6022] binder: 6021:6022 unknown command 0 [ 105.778176][ T6022] binder: 6021:6022 ioctl c0306201 200004c0 returned -22 [ 105.784429][ T6022] binder: 6021:6022 got reply transaction with no transaction stack [ 105.785744][ T6022] binder: 6021:6022 transaction reply to 0:0 failed 130/29201/-71, size 0-0 line 2946 [ 105.938367][ T5064] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.980748][ T6040] loop2: detected capacity change from 0 to 4096 [ 106.018462][ T6040] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 106.079142][ T4331] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 106.093563][ T6047] binder: 6046:6047 tried to acquire reference to desc 0, got 1 instead [ 106.100262][ T6047] binder: 6046:6047 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 106.102459][ T6047] binder: 6047 RLIMIT_NICE not set [ 106.104283][ T6047] binder: 6046:6047 BC_FREE_BUFFER u0000000020fff000 matched unreturned or currently freeing buffer [ 106.107178][ T4451] binder: release 6046:6047 transaction 135 out, still active [ 106.108569][ T4451] binder: undelivered TRANSACTION_COMPLETE [ 106.116041][ T4451] binder: send failed reply for transaction 135, target dead [ 106.210796][ C0] vxcan1: j1939_tp_rxtimer: 0x000000004334d2eb: abort rx timeout. Force session deactivation [ 106.624253][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000ebf4546e: rx timeout, send abort [ 106.737371][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 106.739144][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 107.125961][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000ebf4546e: abort rx timeout. Force session deactivation [ 108.017619][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.019486][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.021058][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.022638][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 108.657050][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.216820][ C0] sctp_transport_update_pmtu: 5 callbacks suppressed [ 111.216832][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.219833][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.866597][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.868457][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.870177][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 112.496572][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 112.498378][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 113.136808][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 113.138695][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 113.776550][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.336450][ C0] sctp_transport_update_pmtu: 4 callbacks suppressed [ 116.336461][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 116.662993][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.485'. [ 116.667118][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.669365][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.670587][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.680691][ T6049] netlink: 'syz.2.489': attribute type 12 has an invalid length. [ 116.682039][ T6049] netlink: 132 bytes leftover after parsing attributes in process `syz.2.489'. [ 116.865907][ T6075] netlink: 'syz.1.497': attribute type 10 has an invalid length. [ 116.867961][ T6075] team0: Device bond0 is up. Set it down before adding it as a team port [ 116.916344][ T6078] netlink: 'syz.1.499': attribute type 10 has an invalid length. [ 116.930342][ T6078] team0: Port device virt_wifi0 added [ 116.934416][ T6080] netlink: 'syz.4.498': attribute type 25 has an invalid length. [ 116.935875][ T6080] netlink: 'syz.4.498': attribute type 9 has an invalid length. [ 116.941454][ T6080] netlink: 40 bytes leftover after parsing attributes in process `syz.4.498'. [ 116.977342][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.017424][ T6086] tipc: Enabled bearer , priority 0 [ 117.039391][ T6086] device syzkaller0 entered promiscuous mode [ 117.040954][ T6086] tipc: Resetting bearer [ 117.045290][ T6088] device syzkaller0 entered promiscuous mode [ 117.055786][ T6085] tipc: Resetting bearer [ 117.616960][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.618688][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 117.620201][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.256675][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.258500][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 118.896516][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 119.536406][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 120.817379][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 121.456391][ C0] sctp_transport_update_pmtu: 1 callbacks suppressed [ 121.456404][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.096723][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.098461][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 122.100075][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.377154][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.016511][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 124.018344][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.936478][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.936773][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 125.937580][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.859006][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 128.077517][ T6085] tipc: Disabling bearer [ 128.206140][ T5167] tipc: Node number set to 3765305342 [ 128.340092][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.4.517'. [ 128.367841][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.429518][ T6127] loop1: detected capacity change from 0 to 4096 [ 128.448879][ T6127] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 128.498103][ T6124] device bridge_slave_0 left promiscuous mode [ 128.499440][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.519311][ T4326] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 128.606470][ T6142] loop1: detected capacity change from 0 to 4096 [ 128.625156][ T6142] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 128.678598][ T4326] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 128.711149][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.720806][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.882732][ T6158] binder: 6157:6158 ioctl c0306201 0 returned -14 [ 128.884289][ T6158] binder: 6157:6158 got reply transaction with no transaction stack [ 128.889085][ T6158] binder: 6157:6158 transaction reply to 0:0 failed 138/29201/-71, size 0-0 line 2946 [ 128.892940][ T6161] binder: 6160:6161 tried to acquire reference to desc 0, got 1 instead [ 128.901223][ T6161] binder: 6160:6161 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 128.903861][ T6161] binder: 6161 RLIMIT_NICE not set [ 128.905216][ T6161] binder: 6160:6161 BC_FREE_BUFFER u0000000020fff000 matched unreturned or currently freeing buffer [ 128.908205][ T4451] binder: release 6160:6161 transaction 143 out, still active [ 128.909636][ T4451] binder: undelivered TRANSACTION_COMPLETE [ 128.919685][ T4451] binder: send failed reply for transaction 143, target dead [ 128.971498][ T6163] loop4: detected capacity change from 0 to 4096 [ 128.999130][ T6163] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 129.013976][ T6165] device syzkaller0 entered promiscuous mode [ 129.059229][ T4339] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 129.106171][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.323276][ T6177] Invalid ELF header magic: != ELF [ 129.352939][ T6182] binder: 6181:6182 tried to acquire reference to desc 0, got 1 instead [ 129.363523][ T6182] binder: 6181:6182 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 129.365563][ T6182] binder: 6182 RLIMIT_NICE not set [ 129.367006][ T6182] binder: 6181:6182 BC_FREE_BUFFER u0000000020fff000 matched unreturned or currently freeing buffer [ 129.369095][ T4374] binder: release 6181:6182 transaction 148 out, still active [ 129.370414][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 129.383700][ T4374] binder: send failed reply for transaction 148, target dead [ 129.393992][ T6185] loop4: detected capacity change from 0 to 1764 [ 129.407455][ T6188] binder: 6187:6188 tried to acquire reference to desc 0, got 1 instead [ 129.409226][ T6186] binder: 6184:6186 ioctl c0306201 0 returned -14 [ 129.410726][ T6186] binder: 6184:6186 transaction reply to 0:0 failed 156/29201/-71, size 0-0 line 2946 [ 129.416846][ T4374] binder: release 6187:6188 transaction 155 out, still active [ 129.453154][ T6193] device syzkaller0 entered promiscuous mode [ 129.914618][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.925761][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.436700][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 130.443447][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 130.445645][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 130.450417][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 130.452842][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 130.458583][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 130.460031][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 130.463187][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.467881][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.469549][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.473342][ T6222] loop0: detected capacity change from 0 to 1764 [ 130.509635][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 130.513148][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.515590][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.521947][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.550402][ T6228] device syzkaller0 entered promiscuous mode [ 130.653881][ T6231] loop0: detected capacity change from 0 to 4096 [ 130.663432][ T6231] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 130.785296][ T6235] loop0: detected capacity change from 0 to 4096 [ 130.844503][ T6235] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 130.881020][ T4332] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 131.008625][ T6263] loop2: detected capacity change from 0 to 4096 [ 131.015151][ T6263] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 131.041640][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.043292][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.111268][ T6267] device syzkaller0 entered promiscuous mode [ 131.361826][ T6298] device syzkaller0 entered promiscuous mode [ 131.474707][ T6310] loop3: detected capacity change from 0 to 4096 [ 131.488854][ T6311] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.508431][ T6313] fuse: Bad value for 'fd' [ 131.577699][ T6317] binder: BINDER_SET_CONTEXT_MGR already set [ 131.578810][ T6317] binder: 6316:6317 ioctl 4018620d 20004a80 returned -16 [ 131.595732][ T6321] binder: BINDER_SET_CONTEXT_MGR already set [ 131.602297][ T6321] binder: 6320:6321 ioctl 4018620d 20004a80 returned -16 [ 131.704993][ T6319] device syzkaller0 entered promiscuous mode [ 131.909403][ T6344] device syzkaller0 entered promiscuous mode [ 131.914562][ T6346] fuse: Bad value for 'fd' [ 131.938340][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.940517][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.028275][ T6352] team0: Device xfrm0 is of different type [ 132.244927][ T6359] loop3: detected capacity change from 0 to 1764 [ 132.328349][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.330112][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.389380][ T6365] device syzkaller0 entered promiscuous mode [ 132.438853][ T6369] fuse: Bad value for 'fd' [ 132.542220][ T6363] SQUASHFS error: zlib decompression failed, data probably corrupt [ 132.543849][ T6363] SQUASHFS error: Failed to read block 0x9b: -5 [ 132.544973][ T6363] SQUASHFS error: Unable to read metadata cache entry [99] [ 132.557249][ T6363] SQUASHFS error: Unable to read inode 0x127 [ 132.582326][ T6378] device syzkaller0 entered promiscuous mode [ 132.623122][ T6367] XFS (loop4): Mounting V5 Filesystem [ 132.682741][ T6367] XFS (loop4): Starting recovery (logdev: internal) [ 132.703835][ T6367] XFS (loop4): Ending recovery (logdev: internal) [ 132.759397][ T4339] XFS (loop4): Unmounting Filesystem [ 132.793219][ T6398] fuse: Bad value for 'fd' [ 132.850428][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 132.853874][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.859922][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.861425][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.976596][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 133.257758][ T6407] device syzkaller0 entered promiscuous mode [ 133.430924][ T6420] device syzkaller0 entered promiscuous mode [ 133.569795][ T6422] set_capacity_and_notify: 3 callbacks suppressed [ 133.569805][ T6422] loop4: detected capacity change from 0 to 40427 [ 133.577476][ T6422] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 133.580669][ T6422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 133.584511][ T6422] F2FS-fs (loop4): invalid crc value [ 133.586861][ T6422] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 133.603451][ T6422] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.635209][ T6422] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 133.639909][ T6422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.678484][ T6422] syz.4.632: attempt to access beyond end of device [ 133.678484][ T6422] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 133.688174][ T6422] syz.4.632: attempt to access beyond end of device [ 133.688174][ T6422] loop4: rw=2049, sector=53264, nr_sectors = 16 limit=40427 [ 133.691456][ T6422] syz.4.632: attempt to access beyond end of device [ 133.691456][ T6422] loop4: rw=2049, sector=53312, nr_sectors = 32 limit=40427 [ 133.697899][ T6422] syz.4.632: attempt to access beyond end of device [ 133.697899][ T6422] loop4: rw=2049, sector=53376, nr_sectors = 32 limit=40427 [ 133.700247][ T6422] syz.4.632: attempt to access beyond end of device [ 133.700247][ T6422] loop4: rw=2049, sector=53432, nr_sectors = 32 limit=40427 [ 133.702742][ T6422] syz.4.632: attempt to access beyond end of device [ 133.702742][ T6422] loop4: rw=2049, sector=53472, nr_sectors = 16 limit=40427 [ 133.723381][ T6422] syz.4.632: attempt to access beyond end of device [ 133.723381][ T6422] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 133.725891][ T6422] syz.4.632: attempt to access beyond end of device [ 133.725891][ T6422] loop4: rw=2049, sector=53264, nr_sectors = 8 limit=40427 [ 133.789368][ T4339] syz-executor: attempt to access beyond end of device [ 133.789368][ T4339] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.814498][ T6447] binder: 6446:6447 unknown command 0 [ 133.820085][ T6447] binder: 6446:6447 ioctl c0306201 200004c0 returned -22 [ 133.824007][ T6447] binder: 6446:6447 ioctl c0306201 0 returned -14 [ 133.913513][ T6456] device syzkaller0 entered promiscuous mode [ 133.969504][ T6460] binder_user_error: 51 callbacks suppressed [ 133.969514][ T6460] binder: 6459:6460 tried to acquire reference to desc 0, got 1 instead [ 133.982359][ T6460] binder: 6459:6460 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 133.984651][ T6460] binder: 6460 RLIMIT_NICE not set [ 133.986145][ T6460] binder: 6459:6460 BC_FREE_BUFFER u0000000020fff000 matched unreturned or currently freeing buffer [ 134.005976][ T6462] device syzkaller0 entered promiscuous mode [ 134.046416][ T5064] binder_debug: 48 callbacks suppressed [ 134.046426][ T5064] binder: send failed reply for transaction 227 to 6459:6460 [ 134.048797][ T5064] binder: undelivered TRANSACTION_COMPLETE [ 134.049741][ T5064] binder: undelivered TRANSACTION_ERROR: 29189 [ 134.164560][ T6470] fuse: Invalid rootmode [ 134.176866][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.257551][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 134.269085][ T6476] binder: 6475:6476 tried to acquire reference to desc 0, got 1 instead [ 134.275723][ T6476] binder: 6475:6476 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 134.278173][ T6476] binder: 6476 RLIMIT_NICE not set [ 134.279056][ T6476] binder: 6476 RLIMIT_NICE not set [ 134.286158][ T4374] binder: release 6475:6476 transaction 232 out, still active [ 134.287521][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 134.291111][ T4374] binder: release 6475:6476 transaction 232 in, still active [ 134.292373][ T4374] binder: send failed reply for transaction 232, target dead [ 134.357992][ T14] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.359537][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.361920][ T14] usb 1-1: config 0 descriptor?? [ 134.365594][ T14] cp210x 1-1:0.0: cp210x converter detected [ 134.383610][ T6484] binder: 6482:6484 tried to acquire reference to desc 0, got 1 instead [ 134.388487][ T6484] binder: 6482:6484 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 134.393258][ T4374] binder: release 6482:6484 transaction 237 out, still active [ 134.394620][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 134.407764][ T6483] loop2: detected capacity change from 0 to 4096 [ 134.410300][ T4374] binder: send failed reply for transaction 237, target dead [ 134.432213][ T6483] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 134.443972][ T6486] device syzkaller0 entered promiscuous mode [ 134.578781][ T6490] device syzkaller0 entered promiscuous mode [ 134.768781][ T14] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 134.778040][ T14] usb 1-1: cp210x converter now attached to ttyUSB0 [ 134.889977][ T6522] device syzkaller0 entered promiscuous mode [ 134.896750][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 134.972946][ T4451] usb 1-1: USB disconnect, device number 10 [ 134.981184][ T4451] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 134.994254][ T4451] cp210x 1-1:0.0: device disconnected [ 135.048691][ T6530] device syzkaller0 entered promiscuous mode [ 135.862874][ T6560] binder: 6559:6560 unknown command 0 [ 135.863969][ T6560] binder: 6559:6560 ioctl c0306201 200004c0 returned -22 [ 135.865548][ T6560] binder: 6559:6560 ioctl c0306201 0 returned -14 [ 135.932057][ T6562] device syzkaller0 entered promiscuous mode [ 136.008739][ T6566] device syzkaller0 entered promiscuous mode [ 136.306346][ T6586] binder: 6585:6586 unknown command 0 [ 136.307411][ T6586] binder: 6585:6586 ioctl c0306201 200004c0 returned -22 [ 136.341619][ T6591] device syzkaller0 entered promiscuous mode [ 136.344744][ T6589] device syzkaller0 entered promiscuous mode [ 136.472412][ T6601] binder: BINDER_SET_CONTEXT_MGR already set [ 136.473545][ T6601] binder: 6600:6601 ioctl 4018620d 20004a80 returned -16 [ 136.486672][ T4451] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 136.530661][ T6605] fuse: Bad value for 'rootmode' [ 136.581244][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.708'. [ 136.585307][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 136.596898][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 136.598236][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 136.602278][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 136.603760][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 136.605229][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 136.607393][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 136.609941][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.612323][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.613872][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.636919][ T6617] device gretap1 entered promiscuous mode [ 136.638380][ T6617] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 136.668268][ T6622] loop4: detected capacity change from 0 to 256 [ 136.668507][ T4451] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.670955][ T4451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.674619][ T6622] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.679304][ T4451] usb 1-1: config 0 descriptor?? [ 136.687348][ T4451] cp210x 1-1:0.0: cp210x converter detected [ 136.760005][ T6626] binder: 6625:6626 unknown command 0 [ 136.761444][ T6626] binder: 6625:6626 ioctl c0306201 200004c0 returned -22 [ 136.812007][ T6633] device syzkaller0 entered promiscuous mode [ 136.875244][ T6635] fuse: Bad value for 'rootmode' [ 136.961044][ T6642] device syzkaller0 entered promiscuous mode [ 137.083066][ T4451] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 137.089487][ T4451] usb 1-1: cp210x converter now attached to ttyUSB0 [ 137.214694][ T6661] binder: 6660:6661 unknown command 0 [ 137.215635][ T6661] binder: 6660:6661 ioctl c0306201 200004c0 returned -22 [ 137.243051][ T6666] fuse: Unknown parameter 'use00000000000000000000' [ 137.264887][ T6668] device syzkaller0 entered promiscuous mode [ 137.289315][ T4451] usb 1-1: USB disconnect, device number 11 [ 137.291845][ T4451] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.300229][ T4451] cp210x 1-1:0.0: device disconnected [ 137.361025][ T6671] device syzkaller0 entered promiscuous mode [ 137.427293][ T6681] device syzkaller0 entered promiscuous mode [ 137.575435][ T6697] fuse: Unknown parameter 'use00000000000000000000' [ 137.620146][ T6700] binder: 6698:6700 unknown command 0 [ 137.621224][ T6700] binder: 6698:6700 ioctl c0306201 200004c0 returned -22 [ 137.729038][ T6713] device syzkaller0 entered promiscuous mode [ 137.805422][ T6705] loop2: detected capacity change from 0 to 40427 [ 137.810477][ T6705] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 137.811944][ T6705] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.813804][ T6705] F2FS-fs (loop2): invalid crc value [ 137.814851][ T6705] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 137.840054][ T6705] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.859765][ T6710] loop3: detected capacity change from 0 to 32768 [ 137.869858][ T6705] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 137.871134][ T6705] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.877051][ T6705] syz.2.745: attempt to access beyond end of device [ 137.877051][ T6705] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 137.950136][ T6727] fuse: Unknown parameter 'use00000000000000000000' [ 137.972021][ T6731] binder: 6729:6731 ioctl c0306201 0 returned -14 [ 138.032100][ T6736] binder: 6735:6736 unknown command 0 [ 138.033042][ T6736] binder: 6735:6736 ioctl c0306201 200004c0 returned -22 [ 138.096582][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 138.159649][ T6751] loop2: detected capacity change from 0 to 24 [ 138.173254][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 138.395471][ T6749] loop1: detected capacity change from 0 to 40427 [ 138.404938][ T6749] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 138.406623][ T6749] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.408615][ T6749] F2FS-fs (loop1): invalid crc value [ 138.409586][ T6749] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 138.422122][ T6749] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.435569][ T6749] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 138.445064][ T6749] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.833461][ T6763] device syzkaller0 entered promiscuous mode [ 138.899515][ T6786] fuse: Unknown parameter 'user_i00000000000000000000' [ 138.916559][ T6780] device syzkaller0 entered promiscuous mode [ 138.925846][ T6788] binder: 6787:6788 ioctl c0306201 0 returned -14 [ 139.028804][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.030415][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.037236][ T6794] binder: 6793:6794 unknown command 0 [ 139.038115][ T6794] binder: 6793:6794 ioctl c0306201 200004c0 returned -22 [ 139.039584][ T6794] binder_user_error: 42 callbacks suppressed [ 139.039589][ T6794] binder: 6793:6794 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 139.042719][ T6794] binder: 6794 RLIMIT_NICE not set [ 139.079038][ T6799] overlayfs: upper fs does not support file handles, falling back to index=off. [ 139.080630][ T6799] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 139.167308][ T6812] binder: 6808:6812 tried to acquire reference to desc 0, got 1 instead [ 139.172910][ T6812] binder: 6808:6812 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 139.174953][ T6812] binder: 6812 RLIMIT_NICE not set [ 139.175946][ T6812] binder: 6812 RLIMIT_NICE not set [ 139.184735][ T6812] binder: 6808:6812 ioctl c0306201 0 returned -14 [ 139.188450][ T7] binder_debug: 26 callbacks suppressed [ 139.188462][ T7] binder: release 6808:6812 transaction 289 out, still active [ 139.190655][ T7] binder: undelivered TRANSACTION_COMPLETE [ 139.193470][ T6813] device syzkaller0 entered promiscuous mode [ 139.268030][ T7] binder: release 6808:6812 transaction 289 in, still active [ 139.270527][ T7] binder: send failed reply for transaction 289, target dead [ 139.273214][ T6819] device syzkaller0 entered promiscuous mode [ 139.376489][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 139.607690][ T6854] binder: 6853:6854 tried to acquire reference to desc 0, got 1 instead [ 139.609455][ T6854] binder: 6853:6854 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 139.624928][ T6854] binder: 6854 RLIMIT_NICE not set [ 139.627397][ T6854] binder: 6854 RLIMIT_NICE not set [ 139.631204][ T4374] binder: release 6853:6854 transaction 294 out, still active [ 139.632542][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 139.646929][ T4374] binder: release 6853:6854 transaction 294 in, still active [ 139.648326][ T4374] binder: send failed reply for transaction 294, target dead [ 139.662281][ T6858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.796'. [ 139.663794][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 139.670840][ T6861] fuse: Unknown parameter 'user_i00000000000000000000' [ 139.682082][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 139.683529][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 139.684871][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 139.696616][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 139.698042][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 139.699447][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 139.701467][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.703634][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.704854][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.731979][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 139.740904][ T6865] device syzkaller0 entered promiscuous mode [ 139.902327][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.904023][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.016592][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 140.066156][ T7] binder: release 6891:6892 transaction 299 out, still active [ 140.067587][ T7] binder: undelivered TRANSACTION_COMPLETE [ 140.124276][ T6898] fuse: Unknown parameter 'user_id00000000000000000000' [ 140.252115][ T6906] device syzkaller0 entered promiscuous mode [ 140.459308][ T6927] fuse: Unknown parameter 'user_id00000000000000000000' [ 140.923366][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.826'. [ 140.928978][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.931478][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.935809][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.956651][ T6948] device syzkaller0 entered promiscuous mode [ 141.100404][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.103732][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.265911][ T6968] fuse: Unknown parameter 'user_id00000000000000000000' [ 141.293898][ T6970] device syzkaller0 entered promiscuous mode [ 141.518695][ T6980] device syzkaller0 entered promiscuous mode [ 141.585486][ T6974] loop2: detected capacity change from 0 to 32768 [ 141.606036][ T6974] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 141.607608][ T6974] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 141.680343][ T6974] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 141.685773][ T4451] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 141.687368][ T4451] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 141.689833][ T6990] loop1: detected capacity change from 0 to 128 [ 141.691380][ T6990] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.707493][ T6990] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.723749][ T4451] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 141.725667][ T4451] gfs2: fsid=syz:syz.0: jid=0: Done [ 141.727921][ T6974] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 141.763506][ T6942] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.937220][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 141.939059][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 142.204708][ T7002] device syzkaller0 entered promiscuous mode [ 142.222933][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.851'. [ 142.225265][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 142.229674][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 142.231303][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 142.232724][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 142.234100][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 142.235572][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 142.239459][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 142.242663][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.246517][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.247859][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.263240][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 142.470859][ T7014] fuse: Bad value for 'fd' [ 142.738751][ T7024] loop2: detected capacity change from 0 to 32768 [ 142.755954][ T7024] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 142.757675][ T7024] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 142.780067][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.782065][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.788087][ T7024] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 142.790123][ T5167] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 142.791367][ T5167] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 142.808217][ T5167] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 16ms [ 142.810718][ T5167] gfs2: fsid=syz:syz.0: jid=0: Done [ 142.811701][ T7024] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 142.820166][ T7032] device syzkaller0 entered promiscuous mode [ 142.954172][ T7038] fuse: Bad value for 'fd' [ 143.067242][ T4451] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 143.067242][ T4451] bh = 9386 (magic number) [ 143.067242][ T4451] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 492 [ 143.067306][ T4374] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 143.067306][ T4374] bh = 9381 (magic number) [ 143.067306][ T4374] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 492 [ 143.070908][ T14] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 143.070908][ T14] bh = 9387 (magic number) [ 143.070908][ T14] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 492 [ 143.076759][ T4374] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 143.157961][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.159750][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.216511][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.286117][ T5167] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.455489][ T7055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.874'. [ 143.459219][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.461464][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.462962][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.488407][ T5167] usb 1-1: Using ep0 maxpacket: 32 [ 143.490668][ T5167] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 143.492252][ T5167] usb 1-1: config 0 has no interface number 0 [ 143.493455][ T5167] usb 1-1: config 0 interface 12 has no altsetting 0 [ 143.496525][ T5167] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 143.498035][ T5167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.499403][ T5167] usb 1-1: Product: syz [ 143.500131][ T5167] usb 1-1: Manufacturer: syz [ 143.500938][ T5167] usb 1-1: SerialNumber: syz [ 143.502830][ T5167] usb 1-1: config 0 descriptor?? [ 143.691775][ T7059] device syzkaller0 entered promiscuous mode [ 143.861952][ T7061] device syzkaller0 entered promiscuous mode [ 144.143398][ T7069] loop3: detected capacity change from 0 to 4096 [ 144.153303][ T7069] ntfs3: Unknown parameter 'windows_names' [ 144.183151][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.185747][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.338242][ T7081] device syzkaller0 entered promiscuous mode [ 144.396368][ T7079] loop3: detected capacity change from 0 to 32768 [ 144.402857][ T7079] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.885 (7079) [ 144.410906][ T7079] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.412919][ T7079] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 144.414512][ T7079] BTRFS info (device loop3): force clearing of disk cache [ 144.415664][ T7079] BTRFS info (device loop3): metadata ratio 0 [ 144.417446][ T7079] BTRFS info (device loop3): enabling ssd optimizations [ 144.419779][ T7079] BTRFS info (device loop3): using spread ssd allocation scheme [ 144.421003][ T7079] BTRFS info (device loop3): using free space tree [ 144.431563][ T7079] BTRFS info (device loop3): rebuilding free space tree [ 144.471496][ T7101] device syzkaller0 entered promiscuous mode [ 144.496986][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 144.502236][ T4827] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 144.563633][ T4327] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.678961][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.888'. [ 144.680519][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 144.689313][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 144.690578][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 144.691806][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 144.693053][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 144.694912][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 144.698273][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 144.704641][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.708813][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.710162][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.714509][ T5167] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 144.715876][ T5167] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 144.717286][ T5167] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 144.718565][ T5167] f81534: probe of 1-1:0.12 failed with error -71 [ 144.726410][ T5167] usb 1-1: USB disconnect, device number 12 [ 144.728027][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 145.137244][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 145.548453][ T7135] device syzkaller0 entered promiscuous mode [ 145.553406][ T7133] device syzkaller0 entered promiscuous mode [ 145.693851][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.695592][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.000523][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 146.417310][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.419039][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 146.484810][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.909'. [ 146.504967][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.507763][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.908'. [ 146.509452][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 146.514542][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 146.515880][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 146.519056][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 146.520494][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 146.522070][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.524265][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 146.525688][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 146.528418][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.531034][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.532373][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.539101][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 146.627392][ T7163] device syzkaller0 entered promiscuous mode [ 146.712493][ T7165] device syzkaller0 entered promiscuous mode [ 146.764947][ T7167] loop1: detected capacity change from 0 to 136 [ 146.999062][ T7171] loop4: detected capacity change from 0 to 32768 [ 147.011449][ T7171] read_mapping_page failed! [ 147.012773][ T7171] ERROR: (device loop4): txAbort: [ 147.012773][ T7171] [ 147.026300][ T4339] ERROR: (device loop4): diFree: numfree > numinos [ 147.026300][ T4339] [ 147.056687][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.066611][ T7177] fuse: Unknown parameter '0x0000000000000003' [ 147.109268][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.112046][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.116163][ T7183] overlayfs: failed to resolve './file0': -2 [ 147.199755][ T7190] device syzkaller0 entered promiscuous mode [ 147.414964][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 147.423484][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 147.424920][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 147.426929][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 147.428289][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 147.429794][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 147.431107][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 147.433324][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.435347][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.439122][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.445677][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 147.517750][ T7219] fuse: Unknown parameter '0x0000000000000003' [ 147.541827][ T7223] overlayfs: failed to resolve './file0': -2 [ 147.569999][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.932'. [ 147.573673][ T7221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.577417][ T7221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.578686][ T7221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.644443][ T7229] loop4: detected capacity change from 0 to 2048 [ 147.652670][ T7229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.696484][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 147.786255][ T5167] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 147.908428][ T7236] device syzkaller0 entered promiscuous mode [ 147.986241][ T5167] usb 1-1: Using ep0 maxpacket: 32 [ 147.988660][ T5167] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 147.990084][ T5167] usb 1-1: config 0 has no interface number 0 [ 147.991097][ T5167] usb 1-1: config 0 interface 12 has no altsetting 0 [ 147.993714][ T5167] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 147.995498][ T5167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.997177][ T5167] usb 1-1: Product: syz [ 147.997896][ T5167] usb 1-1: Manufacturer: syz [ 147.998711][ T5167] usb 1-1: SerialNumber: syz [ 148.000806][ T5167] usb 1-1: config 0 descriptor?? [ 148.099379][ T4374] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 148.101050][ T4374] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 148.103337][ T4374] gfs2: fsid=syz:syz.0: File system withdrawn [ 148.104475][ T4374] CPU: 1 PID: 4374 Comm: kworker/1:4 Not tainted syzkaller #0 [ 148.105766][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 148.107701][ T4374] Workqueue: delete_workqueue delete_work_func [ 148.108844][ T4374] Call trace: [ 148.109452][ T4374] dump_backtrace+0x1c4/0x1f0 [ 148.110370][ T4374] show_stack+0x2c/0x3c [ 148.111165][ T4374] __dump_stack+0x30/0x40 [ 148.111998][ T4374] dump_stack_lvl+0xf4/0x15c [ 148.112842][ T4374] dump_stack+0x1c/0x5c [ 148.113591][ T4374] gfs2_withdraw+0x9f8/0x1244 [ 148.114433][ T4374] gfs2_meta_check_ii+0x80/0x9c [ 148.115355][ T4374] gfs2_meta_buffer+0x22c/0x2f0 [ 148.116207][ T4374] gfs2_inode_refresh+0xb0/0xe64 [ 148.117090][ T4374] inode_go_instantiate+0x4c/0x68 [ 148.117955][ T4374] gfs2_instantiate+0x178/0x2b4 [ 148.118820][ T4374] gfs2_inode_lookup+0x5ac/0xafc [ 148.119703][ T4374] gfs2_lookup_by_inum+0x60/0xf8 [ 148.120594][ T4374] delete_work_func+0x14c/0x584 [ 148.121456][ T4374] process_one_work+0x7e4/0x13bc [ 148.122337][ T4374] worker_thread+0x8cc/0xfe8 [ 148.123109][ T4374] kthread+0x254/0x2e0 [ 148.123841][ T4374] ret_from_fork+0x10/0x20 [ 148.336565][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.338458][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 148.533128][ T7249] fuse: Unknown parameter '0x0000000000000003' [ 148.563608][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 148.813350][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.826386][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.978663][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.067035][ T7279] device syzkaller0 entered promiscuous mode [ 149.217476][ T7284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.951'. [ 149.219277][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 149.227350][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 149.231198][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 149.232606][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 149.233938][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 149.245847][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 149.252328][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 149.259591][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.269980][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.277944][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.326582][ T7291] fuse: Unknown parameter '0x0000000000000003' [ 149.328140][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 149.447323][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 149.462436][ T5167] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 149.463848][ T5167] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 149.465016][ T5167] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 149.468534][ T5167] f81534: probe of 1-1:0.12 failed with error -71 [ 149.473514][ T5167] usb 1-1: USB disconnect, device number 13 [ 149.616452][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 149.902810][ T7322] device syzkaller0 entered promiscuous mode [ 149.951560][ T7324] device syzkaller0 entered promiscuous mode [ 150.001294][ T7330] fuse: Unknown parameter 'fd0x0000000000000003' [ 150.033024][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.034823][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.287946][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 150.296997][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 150.301876][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 150.306816][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 150.308168][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 150.309539][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 150.310815][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 150.312197][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 150.314400][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.318967][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.320309][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.328104][ T7347] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 150.410350][ T7360] device syzkaller0 entered promiscuous mode [ 150.494448][ T7363] fuse: Unknown parameter 'fd0x0000000000000003' [ 150.596715][ T7370] device syzkaller0 entered promiscuous mode [ 150.896468][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 151.167086][ T7390] fuse: Unknown parameter 'fd0x0000000000000003' [ 151.277418][ T7396] device syzkaller0 entered promiscuous mode [ 151.294808][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.311702][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.540842][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 151.542690][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 151.544645][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 151.619420][ T7415] device syzkaller0 entered promiscuous mode [ 151.771878][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.775146][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.932809][ T7435] device syzkaller0 entered promiscuous mode [ 152.479742][ T7455] device syzkaller0 entered promiscuous mode [ 152.486437][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.488289][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.660469][ T7459] loop4: detected capacity change from 0 to 32768 [ 152.701722][ T7459] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 152.713179][ T7468] device syzkaller0 entered promiscuous mode [ 152.715675][ T7459] JBD2: Ignoring recovery information on journal [ 152.757771][ T7459] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 152.780412][ T7459] [ 152.780822][ T7459] ====================================================== [ 152.781978][ T7459] WARNING: possible circular locking dependency detected [ 152.783126][ T7459] syzkaller #0 Not tainted [ 152.783984][ T7459] ------------------------------------------------------ [ 152.785289][ T7459] syz.4.1012/7459 is trying to acquire lock: [ 152.786363][ T7459] ffff0000ce5f9488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x158/0x68c [ 152.788273][ T7459] [ 152.788273][ T7459] but task is already holding lock: [ 152.789550][ T7459] ffff0000f544bf60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x190/0x318 [ 152.791376][ T7459] [ 152.791376][ T7459] which lock already depends on the new lock. [ 152.791376][ T7459] [ 152.793138][ T7459] [ 152.793138][ T7459] the existing dependency chain (in reverse order) is: [ 152.794596][ T7459] [ 152.794596][ T7459] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 152.796099][ T7459] down_read+0x64/0x300 [ 152.796918][ T7459] ocfs2_read_virt_blocks+0x23c/0x8c8 [ 152.797861][ T7459] ocfs2_find_entry+0x314/0x1d90 [ 152.798752][ T7459] ocfs2_find_files_on_disk+0x128/0x40c [ 152.799759][ T7459] ocfs2_lookup_ino_from_name+0x60/0x114 [ 152.800752][ T7459] ocfs2_get_system_file_inode+0x2c0/0x68c [ 152.801800][ T7459] ocfs2_init_global_system_inodes+0x2b4/0x5c0 [ 152.802894][ T7459] ocfs2_fill_super+0x22ec/0x4198 [ 152.803813][ T7459] mount_bdev+0x264/0x35c [ 152.804611][ T7459] ocfs2_mount+0x44/0x58 [ 152.805400][ T7459] legacy_get_tree+0xd8/0x174 [ 152.806230][ T7459] vfs_get_tree+0x90/0x278 [ 152.807043][ T7459] do_new_mount+0x228/0x804 [ 152.807888][ T7459] path_mount+0x5ac/0xe6c [ 152.808693][ T7459] __arm64_sys_mount+0x4a0/0x5a0 [ 152.809566][ T7459] invoke_syscall+0x98/0x290 [ 152.810378][ T7459] el0_svc_common+0x13c/0x258 [ 152.811210][ T7459] do_el0_svc+0x5c/0x134 [ 152.811997][ T7459] el0_svc+0x58/0x128 [ 152.812739][ T7459] el0t_64_sync_handler+0x84/0xf0 [ 152.813662][ T7459] el0t_64_sync+0x18c/0x190 [ 152.814517][ T7459] [ 152.814517][ T7459] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 152.815924][ T7459] __lock_acquire+0x2808/0x6634 [ 152.816820][ T7459] lock_acquire+0x20c/0x638 [ 152.817663][ T7459] __mutex_lock_common+0x1a0/0x1f3c [ 152.818601][ T7459] mutex_lock_nested+0x38/0x44 [ 152.819474][ T7459] ocfs2_get_system_file_inode+0x158/0x68c [ 152.820493][ T7459] ocfs2_reserve_local_alloc_bits+0xcc/0x2830 [ 152.821554][ T7459] ocfs2_reserve_clusters_with_limit+0x188/0xa3c [ 152.822685][ T7459] ocfs2_lock_allocators+0x270/0x530 [ 152.823638][ T7459] ocfs2_extend_allocation+0x37c/0x1760 [ 152.824590][ T7459] ocfs2_extend_no_holes+0x1a4/0x438 [ 152.825524][ T7459] ocfs2_expand_nonsparse_inode+0x134/0x3b0 [ 152.826578][ T7459] ocfs2_write_begin_nolock+0xea4/0x3a80 [ 152.827559][ T7459] ocfs2_write_begin+0x1b4/0x318 [ 152.828465][ T7459] generic_perform_write+0x240/0x508 [ 152.829400][ T7459] __generic_file_write_iter+0x130/0x250 [ 152.830422][ T7459] ocfs2_file_write_iter+0x13ac/0x1cd0 [ 152.831439][ T7459] vfs_write+0x3c8/0x7c8 [ 152.832240][ T7459] ksys_write+0x12c/0x228 [ 152.833059][ T7459] __arm64_sys_write+0x7c/0x90 [ 152.833950][ T7459] invoke_syscall+0x98/0x290 [ 152.834842][ T7459] el0_svc_common+0x13c/0x258 [ 152.835693][ T7459] do_el0_svc+0x5c/0x134 [ 152.836544][ T7459] el0_svc+0x58/0x128 [ 152.837272][ T7459] el0t_64_sync_handler+0x84/0xf0 [ 152.838204][ T7459] el0t_64_sync+0x18c/0x190 [ 152.839020][ T7459] [ 152.839020][ T7459] other info that might help us debug this: [ 152.839020][ T7459] [ 152.840662][ T7459] Possible unsafe locking scenario: [ 152.840662][ T7459] [ 152.841878][ T7459] CPU0 CPU1 [ 152.842734][ T7459] ---- ---- [ 152.843613][ T7459] lock(&ocfs2_file_ip_alloc_sem_key); [ 152.844511][ T7459] lock(&osb->system_file_mutex); [ 152.845719][ T7459] lock(&ocfs2_file_ip_alloc_sem_key); [ 152.847045][ T7459] lock(&osb->system_file_mutex); [ 152.847930][ T7459] [ 152.847930][ T7459] *** DEADLOCK *** [ 152.847930][ T7459] [ 152.849280][ T7459] 4 locks held by syz.4.1012/7459: [ 152.850116][ T7459] #0: ffff0000d132b768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 152.851762][ T7459] #1: ffff0000f769a460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 152.853353][ T7459] #2: ffff0000f544c2c8 (&sb->s_type->i_mutex_key#34){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x3ac/0x1cd0 [ 152.855195][ T7459] #3: ffff0000f544bf60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x190/0x318 [ 152.857029][ T7459] [ 152.857029][ T7459] stack backtrace: [ 152.858016][ T7459] CPU: 0 PID: 7459 Comm: syz.4.1012 Not tainted syzkaller #0 [ 152.859262][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 152.860864][ T7459] Call trace: [ 152.861411][ T7459] dump_backtrace+0x1c4/0x1f0 [ 152.862192][ T7459] show_stack+0x2c/0x3c [ 152.862913][ T7459] __dump_stack+0x30/0x40 [ 152.863698][ T7459] dump_stack_lvl+0xf4/0x15c [ 152.864452][ T7459] dump_stack+0x1c/0x5c [ 152.865138][ T7459] print_circular_bug+0x148/0x1b0 [ 152.865947][ T7459] check_noncircular+0x264/0x2f8 [ 152.866752][ T7459] __lock_acquire+0x2808/0x6634 [ 152.867594][ T7459] lock_acquire+0x20c/0x638 [ 152.868344][ T7459] __mutex_lock_common+0x1a0/0x1f3c [ 152.869230][ T7459] mutex_lock_nested+0x38/0x44 [ 152.870038][ T7459] ocfs2_get_system_file_inode+0x158/0x68c [ 152.871009][ T7459] ocfs2_reserve_local_alloc_bits+0xcc/0x2830 [ 152.872003][ T7459] ocfs2_reserve_clusters_with_limit+0x188/0xa3c [ 152.873043][ T7459] ocfs2_lock_allocators+0x270/0x530 [ 152.873918][ T7459] ocfs2_extend_allocation+0x37c/0x1760 [ 152.874878][ T7459] ocfs2_extend_no_holes+0x1a4/0x438 [ 152.875741][ T7459] ocfs2_expand_nonsparse_inode+0x134/0x3b0 [ 152.876713][ T7459] ocfs2_write_begin_nolock+0xea4/0x3a80 [ 152.877669][ T7459] ocfs2_write_begin+0x1b4/0x318 [ 152.878486][ T7459] generic_perform_write+0x240/0x508 [ 152.879325][ T7459] __generic_file_write_iter+0x130/0x250 [ 152.880276][ T7459] ocfs2_file_write_iter+0x13ac/0x1cd0 [ 152.881199][ T7459] vfs_write+0x3c8/0x7c8 [ 152.881918][ T7459] ksys_write+0x12c/0x228 [ 152.882661][ T7459] __arm64_sys_write+0x7c/0x90 [ 152.883482][ T7459] invoke_syscall+0x98/0x290 [ 152.884279][ T7459] el0_svc_common+0x13c/0x258 [ 152.885027][ T7459] do_el0_svc+0x5c/0x134 [ 152.885712][ T7459] el0_svc+0x58/0x128 [ 152.886357][ T7459] el0t_64_sync_handler+0x84/0xf0 [ 152.887281][ T7459] el0t_64_sync+0x18c/0x190 [ 152.900994][ T7473] (syz.4.1012,7473,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 152.962209][ T4339] ocfs2: Unmounting device (7,4) on (node local) [ 153.616269][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 153.617430][ T4342] Bluetooth: hci4: command 0x0406 tx timeout [ 153.617434][ T4337] Bluetooth: hci1: command 0x0406 tx timeout [ 153.618647][ T4342] Bluetooth: hci0: command 0x0406 tx timeout [ 153.619636][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 154.096544][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 154.736377][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.657725][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.659516][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.661308][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 156.663364][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.778052][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.779612][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.781186][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.782738][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.784363][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 161.785985][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512