last executing test programs: 3m30.45088045s ago: executing program 1 (id=55): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg$inet(r0, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) 3m30.149464151s ago: executing program 1 (id=56): syz_usb_connect$cdc_ncm(0x0, 0x9c, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x8, 0x60, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9ae, 0xb, 0xdf, 0x7}, {0x6, 0x24, 0x1a, 0xe400, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x823a}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x6, 0xf9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x80, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x8c, 0x4}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 3m29.59246446s ago: executing program 1 (id=62): syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xf7, 0xc9}}}, 0x6) 3m29.524735013s ago: executing program 1 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3m29.386205038s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 3m28.960687623s ago: executing program 1 (id=70): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xacba}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x4d6, 0x33}, 0xa, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x8}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 3m17.372432217s ago: executing program 32 (id=38): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], "8029335287b7a081"}}}}}}}, 0x0) 3m13.730488918s ago: executing program 33 (id=70): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xacba}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x4d6, 0x33}, 0xa, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x8}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 2m9.056908612s ago: executing program 6 (id=616): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2m8.116481256s ago: executing program 4 (id=621): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa", 0x47}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 2m7.886913115s ago: executing program 6 (id=625): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/190, 0xbe, 0xe2bc) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000900)}, 0x2}], 0x1, 0x2003, 0x0) 2m7.224563188s ago: executing program 4 (id=627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0xc400941b, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000"], 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xff) 2m6.842853412s ago: executing program 6 (id=631): r0 = socket(0x1, 0x1, 0x0) splice(r0, &(0x7f0000000340)=0xa, r0, &(0x7f0000000500)=0x3, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r5, 0x5) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000891) r6 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getattr(r6, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x79, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x78, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x8, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xdde, 0x11}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x2, 0xa2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x7, 0x3, {0x7, 0x25, 0x1, 0xc, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfc, 0x16, 0xc1, {0x7, 0x25, 0x1, 0x0, 0x3}}}}}}}}]}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x6, &(0x7f00000004c0), 0x4) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000040)={'veth1_to_bridge\x00', @ifru_names='veth1\x00'}) 2m6.230677074s ago: executing program 4 (id=634): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 2m6.152579226s ago: executing program 4 (id=639): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0x987}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mprotect(&(0x7f00004e2000/0x4000)=nil, 0x4000, 0x3) socket$alg(0x26, 0x5, 0x0) 2m5.235007749s ago: executing program 4 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 2m5.176552492s ago: executing program 4 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0xc400941b, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000"], 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xff) 2m3.701725764s ago: executing program 6 (id=651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m3.296785659s ago: executing program 3 (id=653): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0x987}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mprotect(&(0x7f00004e2000/0x4000)=nil, 0x4000, 0x3) socket$alg(0x26, 0x5, 0x0) 2m2.839596315s ago: executing program 6 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 2m2.813667386s ago: executing program 6 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2m2.439469129s ago: executing program 3 (id=658): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2m2.41196646s ago: executing program 3 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0xb4, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x5, 0x7218, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffe}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) 2m1.29459919s ago: executing program 3 (id=664): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0)) 2m0.419241262s ago: executing program 3 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 2m0.418789172s ago: executing program 3 (id=667): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m49.902625848s ago: executing program 34 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0xc400941b, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000"], 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xff) 1m47.464137095s ago: executing program 35 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m44.917408966s ago: executing program 36 (id=667): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 22.91900157s ago: executing program 0 (id=1217): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) 22.875863242s ago: executing program 0 (id=1219): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r0, {0x0, 0x8}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xcc}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2000010) 22.845245643s ago: executing program 0 (id=1222): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002dbbe8308d112888b59f3010203410902"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 20.729441598s ago: executing program 0 (id=1250): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8020) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) getpgid(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_MPATH(r2, 0x0, 0x4080) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) 20.729360478s ago: executing program 0 (id=1251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1, 0x0, 0x0, 0xf00}, 0x0) 20.106983941s ago: executing program 0 (id=1257): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet(0xa, 0x801, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000087c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r1, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x40000000000, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 20.060949393s ago: executing program 37 (id=1257): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet(0xa, 0x801, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000087c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r1, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x40000000000, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 2.769173761s ago: executing program 5 (id=1481): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000000140)='S', 0x1) sendfile(r5, r4, 0x0, 0x80000002) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) 2.665611184s ago: executing program 8 (id=1483): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3d04b63e3ee3755, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs4(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x200044, &(0x7f0000000500)={[{'acl'}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.186982072s ago: executing program 9 (id=1484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10000050) 2.186857262s ago: executing program 9 (id=1485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x2) 1.788880936s ago: executing program 8 (id=1490): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32=r1], 0xfdef) 1.634858052s ago: executing program 2 (id=1493): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x20000021, 0x2, @tid=r2}, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x9000}, {r3, 0x88a0}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 1.634818112s ago: executing program 8 (id=1494): fsopen(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 1.599376863s ago: executing program 8 (id=1495): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.570586994s ago: executing program 8 (id=1496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1.500202297s ago: executing program 2 (id=1498): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888", 0x85}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mprotect(&(0x7f00004e2000/0x4000)=nil, 0x4000, 0x3) socket$alg(0x26, 0x5, 0x0) 1.364081171s ago: executing program 5 (id=1502): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.270978494s ago: executing program 9 (id=1503): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x39, 0x1a, 0xffffffffffffffff, 0x0) 1.13204647s ago: executing program 5 (id=1505): fsopen(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 1.13194058s ago: executing program 9 (id=1506): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) read$FUSE(r1, &(0x7f000000a240)={0x2020}, 0x2020) 1.020094834s ago: executing program 9 (id=1507): unshare(0x26020400) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) 1.019700044s ago: executing program 5 (id=1508): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x800000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 941.907817ms ago: executing program 9 (id=1509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 887.000108ms ago: executing program 5 (id=1511): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x4, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) 884.305428ms ago: executing program 5 (id=1512): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000000140)='S', 0x1) sendfile(r5, r4, 0x0, 0x80000002) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) 635.968007ms ago: executing program 2 (id=1515): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 591.044059ms ago: executing program 7 (id=1516): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/213, 0xd5}], 0x3) 582.93251ms ago: executing program 8 (id=1517): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) recvmsg(r0, &(0x7f00000005c0)={0x0, 0xffffff96, 0x0}, 0x40000100) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 529.967301ms ago: executing program 7 (id=1518): capset(&(0x7f0000001640)={0x19980330}, &(0x7f0000001680)={0x0, 0x397, 0x8, 0xdc00000, 0x8, 0xa54}) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) 470.951833ms ago: executing program 2 (id=1519): unshare(0x26020400) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) 443.967394ms ago: executing program 7 (id=1520): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10b301) ioctl$USBDEVFS_RESET(r0, 0x5514) 425.824105ms ago: executing program 2 (id=1521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a40000000060a010300000000000000000200000014000480100001800a0001006d617463680000000900010073797a30000000000900020073797a3200000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000882) 314.909899ms ago: executing program 7 (id=1522): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd32924031de07", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1}, 0x43) 274.51026ms ago: executing program 2 (id=1523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 135.095996ms ago: executing program 7 (id=1524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x2) 0s ago: executing program 7 (id=1525): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0", 0x89}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mprotect(&(0x7f00004e2000/0x4000)=nil, 0x4000, 0x3) socket$alg(0x26, 0x5, 0x0) kernel console output (not intermixed with test programs): 3][ T5582] mount with iocharset=utf8 to access [ 80.108902][ T5632] loop4: detected capacity change from 0 to 1024 [ 80.124350][ T5632] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 80.553634][ T5666] loop3: detected capacity change from 0 to 1764 [ 80.587619][ T5666] loop3: detected capacity change from 0 to 512 [ 80.604997][ T5666] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 80.617326][ T5666] EXT4-fs (loop3): invalid journal inode [ 80.618432][ T5666] EXT4-fs (loop3): can't get journal size [ 80.657333][ T5656] loop5: detected capacity change from 0 to 32768 [ 80.672914][ T5656] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.310 (5656) [ 80.677066][ T5666] EXT4-fs (loop3): 1 truncate cleaned up [ 80.678065][ T5666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.694782][ T5666] device netdevsim0 entered promiscuous mode [ 80.701144][ T5656] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 80.702926][ T5656] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 80.712957][ T5666] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 80.719174][ T5656] BTRFS info (device loop5): metadata ratio 0 [ 80.760846][ T5656] BTRFS info (device loop5): setting nodatasum [ 80.762005][ T5656] BTRFS info (device loop5): using free space tree [ 80.817096][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 81.011032][ T5656] BTRFS info (device loop5): enabling ssd optimizations [ 81.056492][ T4874] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.113482][ T5676] loop6: detected capacity change from 0 to 32768 [ 81.158185][ T5676] XFS (loop6): Mounting V5 Filesystem [ 81.210478][ T5676] XFS (loop6): Ending clean mount [ 81.276524][ T5039] XFS (loop6): Unmounting Filesystem [ 81.501945][ T5742] binder: 5741:5742 ioctl c0306201 0 returned -14 [ 81.508340][ T5742] binder: 5741:5742 got transaction to invalid handle, 1 [ 81.514418][ T5742] binder: 5742:5741 cannot find target node [ 81.515478][ T5742] binder: 5741:5742 transaction call to 0:0 failed 39/29201/-22, size 0-0 line 3045 [ 81.518040][ T5742] binder: 5741:5742 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 81.530802][ T5742] binder: 5742 RLIMIT_NICE not set [ 81.569058][ T5745] binder: 5741:5745 got transaction to invalid handle, 1 [ 81.570617][ T5745] binder: 5745:5741 cannot find target node [ 81.571803][ T5745] binder: 5741:5745 transaction call to 0:0 failed 40/29201/-22, size 0-0 line 3045 [ 81.902710][ T5754] autofs4:pid:5754:autofs_fill_super: called with bogus options [ 82.288330][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.296167][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.911992][ T5787] loop5: detected capacity change from 0 to 32768 [ 83.983011][ T5787] XFS (loop5): Mounting V5 Filesystem [ 84.042949][ T5787] XFS (loop5): Ending clean mount [ 84.249295][ T5822] autofs4:pid:5822:autofs_fill_super: called with bogus options [ 84.759377][ C1] sched: RT throttling activated [ 84.894383][ T5852] binder: 5851:5852 ioctl c0306201 0 returned -14 [ 84.901491][ T5852] binder: 5851:5852 got transaction to invalid handle, 1 [ 84.902672][ T5852] binder: 5852:5851 cannot find target node [ 84.913326][ T5852] binder: 5851:5852 transaction call to 0:0 failed 44/29201/-22, size 0-0 line 3045 [ 84.923145][ T5852] binder: 5851:5852 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.928880][ T5852] binder: 5852 RLIMIT_NICE not set [ 84.974033][ T5856] binder: 5851:5856 got transaction to invalid handle, 1 [ 84.976012][ T5856] binder: 5856:5851 cannot find target node [ 84.978251][ T5856] binder: 5851:5856 transaction call to 0:0 failed 45/29201/-22, size 0-0 line 3045 [ 85.378498][ T4874] XFS (loop5): Unmounting Filesystem [ 86.088876][ T5918] loop6: detected capacity change from 0 to 32768 [ 86.165561][ T5918] XFS (loop6): Mounting V5 Filesystem [ 86.218745][ T5918] XFS (loop6): Ending clean mount [ 86.344933][ T4338] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 86.347952][ T4338] XFS (loop6): Unmount and run xfs_repair [ 86.349266][ T4338] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 86.352369][ T4338] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 86.492902][ T4338] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 86.494436][ T4338] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 86.499025][ T4338] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 86.501252][ T4338] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 86.502784][ T4338] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 86.504334][ T4338] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 86.508891][ T4338] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 86.512024][ T5918] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x14 len 4 error 74 [ 86.515985][ T5918] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x16ec/0x1eec (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 86.518971][ T5918] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 86.576333][ T5039] XFS (loop6): Unmounting Filesystem [ 86.793634][ T5967] autofs4:pid:5967:autofs_fill_super: called with bogus options [ 88.344622][ T6006] binder: 6004:6006 got transaction to invalid handle, 1 [ 88.345837][ T6006] binder_debug: 2 callbacks suppressed [ 88.345843][ T6006] binder: 6006:6004 cannot find target node [ 88.347841][ T6006] binder: 6004:6006 transaction call to 0:0 failed 49/29201/-22, size 0-0 line 3045 [ 88.362557][ T6006] binder: 6004:6006 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 88.365073][ T6006] binder: 6006 RLIMIT_NICE not set [ 88.414206][ T6010] binder: 6004:6010 got transaction to invalid handle, 1 [ 88.415784][ T6010] binder: 6010:6004 cannot find target node [ 88.417020][ T6010] binder: 6004:6010 transaction call to 0:0 failed 50/29201/-22, size 0-0 line 3045 [ 88.825733][ T6015] loop0: detected capacity change from 0 to 32768 [ 88.894172][ T6015] XFS (loop0): Mounting V5 Filesystem [ 88.945937][ T6015] XFS (loop0): Ending clean mount [ 88.975691][ T6015] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 88.983270][ T6015] XFS (loop0): Unmount and run xfs_repair [ 88.984506][ T6015] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 88.989170][ T6015] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 88.994156][ T6015] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 88.998103][ T6015] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 89.007298][ T6015] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 89.011487][ T6015] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 89.015378][ T6015] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 89.019190][ T6015] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 89.026330][ T6015] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 89.030513][ T6015] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x14 len 4 error 74 [ 89.036931][ T6015] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x16ec/0x1eec (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 89.046072][ T6015] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 89.099209][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.133310][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.166067][ T6026] autofs4:pid:6026:autofs_fill_super: called with bogus options [ 89.823104][ T4330] XFS (loop0): Unmounting Filesystem [ 90.092940][ T6047] loop6: detected capacity change from 0 to 32768 [ 90.816337][ T6062] loop5: detected capacity change from 0 to 32768 [ 90.874581][ T6062] XFS (loop5): Mounting V5 Filesystem [ 90.972522][ T6062] XFS (loop5): Ending clean mount [ 91.006628][ T3898] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 91.009796][ T3898] XFS (loop5): Unmount and run xfs_repair [ 91.010935][ T3898] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 91.012350][ T3898] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 91.014449][ T3898] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 91.018266][ T3898] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 91.024165][ T3898] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 91.027918][ T3898] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 91.030546][ T3898] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 91.034329][ T3898] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 91.038006][ T3898] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 91.052409][ T6062] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x14 len 4 error 74 [ 91.057564][ T6062] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x16ec/0x1eec (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 91.060786][ T6062] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 91.076079][ T6079] binder: 6078:6079 got transaction to invalid handle, 1 [ 91.077502][ T6079] binder: 6079:6078 cannot find target node [ 91.078619][ T6079] binder: 6078:6079 transaction call to 0:0 failed 54/29201/-22, size 0-0 line 3045 [ 91.083851][ T4874] XFS (loop5): Unmounting Filesystem [ 91.095264][ T6079] binder: 6078:6079 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 91.097693][ T6079] binder: 6079 RLIMIT_NICE not set [ 91.146319][ T6080] binder: 6078:6080 got transaction to invalid handle, 1 [ 91.147832][ T6080] binder: 6080:6078 cannot find target node [ 91.148956][ T6080] binder: 6078:6080 transaction call to 0:0 failed 55/29201/-22, size 0-0 line 3045 [ 91.240069][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.241766][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.249866][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.379'. [ 91.253111][ T6086] autofs4:pid:6086:autofs_fill_super: called with bogus options [ 91.291351][ T6084] vhci_hcd: invalid port number 236 [ 91.436250][ T4811] Bluetooth: (null): Invalid header checksum [ 91.437516][ T39] Bluetooth: (null): Invalid header checksum [ 91.539559][ T39] Bluetooth: (null): Invalid header checksum [ 91.686735][ T4456] Bluetooth: (null): Invalid header checksum [ 91.832382][ T9] Bluetooth: (null): Invalid header checksum [ 91.941757][ T9] Bluetooth: (null): Invalid header checksum [ 92.893831][ T6177] autofs4:pid:6177:autofs_fill_super: called with bogus options [ 93.251843][ T6198] binder: 6197:6198 got transaction to invalid handle, 1 [ 93.257793][ T6198] binder: 6197:6198 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 93.267102][ T6198] binder: 6198 RLIMIT_NICE not set [ 93.310170][ T6203] binder: 6197:6203 got transaction to invalid handle, 1 [ 94.747301][ T4374] binder_debug: 6 callbacks suppressed [ 94.747314][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.749675][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.086681][ T6231] autofs4:pid:6231:autofs_fill_super: called with bogus options [ 96.963663][ T6300] binder: 6299:6300 got transaction to invalid handle, 1 [ 96.965095][ T6300] binder: 6300:6299 cannot find target node [ 96.969733][ T6300] binder: 6299:6300 transaction call to 0:0 failed 64/29201/-22, size 0-0 line 3045 [ 96.984707][ T6300] binder: 6299:6300 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 96.986969][ T6300] binder: 6300 RLIMIT_NICE not set [ 97.036017][ T6311] binder: 6299:6311 got transaction to invalid handle, 1 [ 97.037365][ T6311] binder: 6311:6299 cannot find target node [ 97.037458][ T6310] autofs4:pid:6310:autofs_fill_super: called with bogus options [ 97.038337][ T6311] binder: 6299:6311 transaction call to 0:0 failed 65/29201/-22, size 0-0 line 3045 [ 97.747144][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.748480][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.579840][ T6368] loop4: detected capacity change from 0 to 32768 [ 98.625701][ T6368] XFS (loop4): Mounting V5 Filesystem [ 98.686720][ T6368] XFS (loop4): Ending clean mount [ 98.707182][ T6368] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 98.718162][ T6368] XFS (loop4): Unmount and run xfs_repair [ 98.725816][ T6368] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 98.731079][ T6368] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 98.732890][ T6368] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 98.746425][ T6368] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 98.755599][ T6368] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 98.773759][ T6368] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 98.775627][ T6368] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 98.806480][ T6368] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 98.817211][ T6368] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 98.852274][ T6368] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x184/0x290" at daddr 0x14 len 4 error 74 [ 98.864791][ T6368] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x16ec/0x1eec (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 98.919560][ T6368] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 99.010024][ T4325] XFS (loop4): Unmounting Filesystem [ 99.486077][ T6392] autofs4:pid:6392:autofs_fill_super: called with bogus options [ 99.583158][ T6397] binder: 6396:6397 got transaction to invalid handle, 1 [ 99.589053][ T6397] binder: 6397:6396 cannot find target node [ 99.595390][ T6397] binder: 6396:6397 transaction call to 0:0 failed 69/29201/-22, size 0-0 line 3045 [ 99.611620][ T6397] binder: 6396:6397 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 99.622249][ T6397] binder: 6397 RLIMIT_NICE not set [ 99.663352][ T6400] binder: 6396:6400 got transaction to invalid handle, 1 [ 100.393002][ T5390] binder_debug: 2 callbacks suppressed [ 100.393014][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.395152][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.404387][ T6432] loop6: detected capacity change from 0 to 32768 [ 101.513538][ T6432] XFS (loop6): Mounting V5 Filesystem [ 101.516642][ T6454] binder: 6453:6454 got transaction to invalid handle, 1 [ 101.524020][ T6454] binder: 6454:6453 cannot find target node [ 101.546785][ T6432] XFS (loop6): Ending clean mount [ 101.548065][ T6454] binder: 6453:6454 transaction call to 0:0 failed 74/29201/-22, size 0-0 line 3045 [ 101.560618][ T6454] binder: 6453:6454 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 101.584840][ T5039] XFS (loop6): Unmounting Filesystem [ 101.612138][ T6459] binder: 6459:6453 cannot find target node [ 101.613378][ T6459] binder: 6453:6459 transaction call to 0:0 failed 75/29201/-22, size 0-0 line 3045 [ 102.337628][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.338877][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.296350][ T6496] loop4: detected capacity change from 0 to 32768 [ 103.418215][ T6496] XFS (loop4): Mounting V5 Filesystem [ 103.585986][ T6496] XFS (loop4): Ending clean mount [ 103.628833][ T4325] XFS (loop4): Unmounting Filesystem [ 104.025445][ T6524] binder_user_error: 2 callbacks suppressed [ 104.025457][ T6524] binder: tried to use weak ref as strong ref [ 104.027781][ T6524] binder: 6523:6524 Acquire 1 refcount change on invalid ref 0 ret -22 [ 104.031446][ T6524] binder: 6523:6524 got transaction to invalid handle, 1 [ 104.035076][ T6524] binder: 6524:6523 cannot find target node [ 104.036093][ T6524] binder: 6523:6524 transaction call to 0:0 failed 78/29201/-22, size 0-0 line 3045 [ 104.795571][ T6552] loop4: detected capacity change from 0 to 32768 [ 104.825441][ T6552] XFS (loop4): Mounting V5 Filesystem [ 104.852196][ T6552] XFS (loop4): Ending clean mount [ 104.866530][ T4325] XFS (loop4): Unmounting Filesystem [ 105.202985][ T6571] binder: tried to use weak ref as strong ref [ 105.204301][ T6571] binder: 6570:6571 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.206257][ T6571] binder: 6570:6571 got transaction to invalid handle, 1 [ 105.788027][ T6603] binder: tried to use weak ref as strong ref [ 105.789845][ T6603] binder: 6602:6603 Acquire 1 refcount change on invalid ref 0 ret -22 [ 105.791580][ T6603] binder: 6602:6603 got transaction to invalid handle, 1 [ 105.792938][ T6603] binder_debug: 4 callbacks suppressed [ 105.792948][ T6603] binder: 6603:6602 cannot find target node [ 105.795104][ T6603] binder: 6602:6603 transaction call to 0:0 failed 84/29201/-22, size 0-0 line 3045 [ 105.797078][ T4338] binder: undelivered TRANSACTION_ERROR: 29201 [ 106.743032][ T6641] binder: 6640:6641 ioctl 4018620d 0 returned -22 [ 106.744512][ T6641] binder: tried to use weak ref as strong ref [ 106.747725][ T6641] binder: 6641:6640 cannot find target node [ 106.757037][ T6641] binder: 6640:6641 transaction call to 0:0 failed 87/29201/-22, size 0-0 line 3045 [ 106.810210][ T6647] binder: 6647:6640 cannot find target node [ 106.811361][ T6647] binder: 6640:6647 transaction call to 0:0 failed 88/29201/-22, size 0-0 line 3045 [ 107.571190][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 107.574525][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.108180][ T6677] autofs4:pid:6677:autofs_fill_super: called with bogus options [ 108.257865][ T6686] binder: 6685:6686 ioctl 4018620d 0 returned -22 [ 108.260298][ T6686] binder: 6686:6685 cannot find target node [ 109.751718][ T6714] autofs4:pid:6714:autofs_fill_super: called with bogus options [ 110.882970][ T6744] binder: 6743:6744 ioctl 4018620d 0 returned -22 [ 110.884631][ T6744] binder_user_error: 11 callbacks suppressed [ 110.884637][ T6744] binder: tried to use weak ref as strong ref [ 110.886759][ T6744] binder: 6743:6744 Acquire 1 refcount change on invalid ref 0 ret -22 [ 110.898959][ T6744] binder: 6743:6744 got transaction to invalid handle, 1 [ 110.900505][ T6744] binder_debug: 5 callbacks suppressed [ 110.900510][ T6744] binder: 6744:6743 cannot find target node [ 110.902690][ T6744] binder: 6743:6744 transaction call to 0:0 failed 95/29201/-22, size 0-0 line 3045 [ 110.929812][ T6744] binder: 6743:6744 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 110.932003][ T6744] binder: 6744 RLIMIT_NICE not set [ 110.981101][ T6747] binder: 6743:6747 got transaction to invalid handle, 1 [ 110.982334][ T6747] binder: 6747:6743 cannot find target node [ 110.983383][ T6747] binder: 6743:6747 transaction call to 0:0 failed 96/29201/-22, size 0-0 line 3045 [ 111.815537][ T4338] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.816848][ T4338] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.855293][ T6762] autofs4:pid:6762:autofs_fill_super: called with bogus options [ 113.196666][ T6795] binder: 6792:6795 ioctl c0306201 0 returned -14 [ 113.198201][ T6795] binder: 6792:6795 got transaction to invalid handle, 1 [ 113.203896][ T6795] binder: 6795:6792 cannot find target node [ 113.204905][ T6795] binder: 6792:6795 transaction call to 0:0 failed 100/29201/-22, size 0-0 line 3045 [ 113.206810][ T6795] binder: 6792:6795 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 113.208956][ T6795] binder: 6795 RLIMIT_NICE not set [ 113.533895][ T6802] binder: 6792:6802 got transaction to invalid handle, 1 [ 113.547430][ T6802] binder: 6802:6792 cannot find target node [ 113.548504][ T6802] binder: 6792:6802 transaction call to 0:0 failed 101/29201/-22, size 0-0 line 3045 [ 115.602907][ T6859] binder: 6858:6859 ioctl c0306201 0 returned -14 [ 116.426740][ T7] binder_debug: 6 callbacks suppressed [ 116.426756][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 116.429030][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 117.963257][ T6904] binder: 6903:6904 ioctl c0306201 0 returned -14 [ 117.964722][ T6904] binder_user_error: 4 callbacks suppressed [ 117.964729][ T6904] binder: 6903:6904 got transaction to invalid handle, 1 [ 117.966979][ T6904] binder: 6904:6903 cannot find target node [ 117.968190][ T6904] binder: 6903:6904 transaction call to 0:0 failed 110/29201/-22, size 0-0 line 3045 [ 118.019854][ T6905] xt_nat: multiple ranges no longer supported [ 118.276014][ T6906] binder: 6903:6906 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 118.278410][ T6906] binder: 6906 RLIMIT_NICE not set [ 118.286972][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.901513][ T6923] random: crng reseeded on system resumption [ 121.055386][ T6959] netlink: 164 bytes leftover after parsing attributes in process `syz.5.605'. [ 121.101751][ T6962] xt_nat: multiple ranges no longer supported [ 121.114598][ T6964] binder: 6963:6964 got transaction to invalid handle, 1 [ 121.115998][ T6964] binder: 6964:6963 cannot find target node [ 121.122481][ T6964] binder: 6963:6964 transaction call to 0:0 failed 114/29201/-22, size 0-0 line 3045 [ 121.131064][ T6964] binder: 6963:6964 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 121.138298][ T6964] binder: 6964 RLIMIT_NICE not set [ 121.182140][ T6972] binder: 6963:6972 got transaction to invalid handle, 1 [ 121.183594][ T6972] binder: 6972:6963 cannot find target node [ 121.184741][ T6972] binder: 6963:6972 transaction call to 0:0 failed 115/29201/-22, size 0-0 line 3045 [ 121.346390][ T6968] loop5: detected capacity change from 0 to 32768 [ 121.362410][ T6968] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 121.543141][ T4318] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 121.943786][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.948270][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.107090][ T6998] netlink: 164 bytes leftover after parsing attributes in process `syz.3.618'. [ 123.166507][ T7012] binder: 7011:7012 got transaction to invalid handle, 1 [ 123.167946][ T7012] binder: 7012:7011 cannot find target node [ 123.169045][ T7012] binder: 7011:7012 transaction call to 0:0 failed 119/29201/-22, size 0-0 line 3045 [ 123.176365][ T7012] binder: 7011:7012 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 123.178973][ T7012] binder: 7012 RLIMIT_NICE not set [ 123.227238][ T7014] binder: 7011:7014 got transaction to invalid handle, 1 [ 123.228601][ T7014] binder: 7014:7011 cannot find target node [ 123.231273][ T7014] binder: 7011:7014 transaction call to 0:0 failed 120/29201/-22, size 0-0 line 3045 [ 123.996976][ T4493] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.998231][ T4493] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.057993][ T7050] xt_nat: multiple ranges no longer supported [ 125.095000][ T7052] binder: 7051:7052 got transaction to invalid handle, 1 [ 125.096399][ T7052] binder: 7052:7051 cannot find target node [ 125.097535][ T7052] binder: 7051:7052 transaction call to 0:0 failed 124/29201/-22, size 0-0 line 3045 [ 125.119888][ T7052] binder: 7051:7052 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 125.126543][ T7052] binder: 7052 RLIMIT_NICE not set [ 125.174373][ T7058] binder: 7051:7058 got transaction to invalid handle, 1 [ 125.920752][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.922104][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.451895][ T7083] random: crng reseeded on system resumption [ 127.307294][ T7095] xt_nat: multiple ranges no longer supported [ 127.577822][ T7097] binder: 7096:7097 got transaction to invalid handle, 1 [ 127.579229][ T7097] binder_debug: 4 callbacks suppressed [ 127.579237][ T7097] binder: 7097:7096 cannot find target node [ 127.582436][ T7097] binder: 7096:7097 transaction call to 0:0 failed 129/29201/-22, size 0-0 line 3045 [ 127.584686][ T7097] binder: 7096:7097 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 127.636249][ T7098] binder: 7098:7096 cannot find target node [ 127.637480][ T7098] binder: 7096:7098 transaction call to 0:0 failed 130/29201/-22, size 0-0 line 3045 [ 128.408609][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.410051][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.119715][ T7126] random: crng reseeded on system resumption [ 130.745687][ T7140] binder_user_error: 2 callbacks suppressed [ 130.745696][ T7140] binder: 7139:7140 got transaction to invalid handle, 1 [ 130.748109][ T7140] binder: 7140:7139 cannot find target node [ 130.749177][ T7140] binder: 7139:7140 transaction call to 0:0 failed 134/29201/-22, size 0-0 line 3045 [ 130.755223][ T7140] binder: 7139:7140 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 130.757331][ T7140] binder: 7140 RLIMIT_NICE not set [ 130.806489][ T7141] binder: 7139:7141 got transaction to invalid handle, 1 [ 130.807945][ T7141] binder: 7141:7139 cannot find target node [ 130.809066][ T7141] binder: 7139:7141 transaction call to 0:0 failed 135/29201/-22, size 0-0 line 3045 [ 132.620317][ T7151] xt_nat: multiple ranges no longer supported [ 134.010214][ T7165] random: crng reseeded on system resumption [ 136.952311][ T7196] binder: 7195:7196 got transaction to invalid handle, 1 [ 136.953723][ T7196] binder_debug: 2 callbacks suppressed [ 136.953736][ T7196] binder: 7196:7195 cannot find target node [ 136.955884][ T7196] binder: 7195:7196 transaction call to 0:0 failed 139/29201/-22, size 0-0 line 3045 [ 136.958015][ T7196] binder: 7195:7196 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 136.966174][ T7196] binder: 7196 RLIMIT_NICE not set [ 137.009492][ T7197] binder: 7195:7197 got transaction to invalid handle, 1 [ 137.010931][ T7197] binder: 7197:7195 cannot find target node [ 137.011927][ T7197] binder: 7195:7197 transaction call to 0:0 failed 140/29201/-22, size 0-0 line 3045 [ 137.789462][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 137.790659][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.738183][ T7214] xt_nat: multiple ranges no longer supported [ 140.617683][ T7224] random: crng reseeded on system resumption [ 141.467586][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.470629][ T4336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.472296][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.473972][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.475439][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.476822][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.750693][ T7233] chnl_net:caif_netlink_parms(): no params data found [ 141.784482][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.785858][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.787560][ T7233] device bridge_slave_0 entered promiscuous mode [ 141.789868][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.799603][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.801316][ T7233] device bridge_slave_1 entered promiscuous mode [ 141.808651][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.821970][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.830257][ T7233] team0: Port device team_slave_0 added [ 141.832203][ T7233] team0: Port device team_slave_1 added [ 141.838342][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.842213][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.846949][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.850929][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.852126][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.856712][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.174975][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.221066][ T7233] device hsr_slave_0 entered promiscuous mode [ 142.233300][ T7233] device hsr_slave_1 entered promiscuous mode [ 142.289495][ T7233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.290880][ T7233] Cannot create hsr debugfs directory [ 142.331433][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.363228][ T7256] binder: 7255:7256 tried to acquire reference to desc 0, got 1 instead [ 142.365091][ T7256] binder: 7255:7256 ioctl c0306201 0 returned -14 [ 142.366311][ T7256] binder: 7255:7256 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 142.368545][ T7256] binder: 7256 RLIMIT_NICE not set [ 142.417380][ T7256] binder: 7256 RLIMIT_NICE not set [ 142.425411][ T4375] binder: release 7255:7256 transaction 145 in, still active [ 142.426823][ T4375] binder: send failed reply for transaction 145 to 7255:7257 [ 142.428375][ T4375] binder: undelivered TRANSACTION_COMPLETE [ 142.429442][ T4375] binder: undelivered TRANSACTION_ERROR: 29189 [ 142.431240][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.467088][ T7233] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 142.503699][ T7233] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 142.580455][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.584068][ T7233] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 142.630530][ T7233] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 142.677394][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.678777][ T7233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.680708][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.681939][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.701657][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.706133][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.708510][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.713928][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.724552][ T7233] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.727075][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.729053][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.734132][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.735464][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.745520][ T7233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.747377][ T7233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.756680][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.758722][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.761436][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.762820][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.764416][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.766325][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.768154][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.777722][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.781725][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.783620][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.785470][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.787347][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.789193][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.794751][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.796501][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.798359][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.928936][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.932115][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.933529][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.307697][ T7233] device veth0_vlan entered promiscuous mode [ 143.310383][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.312178][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.313810][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.315356][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.317742][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.319192][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.325713][ T7233] device veth1_vlan entered promiscuous mode [ 143.338077][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.353645][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.355253][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.356919][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.392745][ T7233] device veth0_macvtap entered promiscuous mode [ 143.395645][ T7233] device veth1_macvtap entered promiscuous mode [ 143.405124][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.407739][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.410155][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.411983][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.413835][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.417039][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.418876][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.420826][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.422546][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.424265][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.426938][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.428478][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.433179][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.434958][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.438022][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.482623][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.484580][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.486216][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.488002][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.492178][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.493957][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.495711][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.497560][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.499331][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.502359][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.504773][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.508238][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.513314][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.516612][ T7233] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.518280][ T7233] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.520089][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 143.522840][ T7233] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.524484][ T7233] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.642629][ T4456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.644325][ T4456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.647888][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.698875][ T4456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.701017][ T4456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.703286][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.867366][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.882706][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.885092][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.888528][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.891552][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.893689][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.315796][ T7352] random: crng reseeded on system resumption [ 145.081786][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 145.126607][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.129247][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.135867][ T7325] device bridge_slave_0 entered promiscuous mode [ 145.484446][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.485821][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.487478][ T7325] device bridge_slave_1 entered promiscuous mode [ 145.550318][ T39] device hsr_slave_0 left promiscuous mode [ 145.584518][ T39] device hsr_slave_1 left promiscuous mode [ 145.599745][ T4332] Bluetooth: hci1: command 0x041b tx timeout [ 145.639481][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.640870][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.644324][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.645692][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.650342][ T39] device bridge_slave_1 left promiscuous mode [ 145.651450][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.690247][ T39] device bridge_slave_0 left promiscuous mode [ 145.691459][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.733813][ T7387] binder: 7385:7387 tried to acquire reference to desc 0, got 1 instead [ 145.735733][ T7387] binder: 7385:7387 ioctl c0306201 0 returned -14 [ 145.737080][ T7387] binder: 7385:7387 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 145.740417][ T7387] binder: 7387 RLIMIT_NICE not set [ 145.788493][ T7387] binder: 7387 RLIMIT_NICE not set [ 145.790530][ T39] device veth1_macvtap left promiscuous mode [ 145.790976][ T4374] binder: release 7385:7391 transaction 150 out, still active [ 145.791652][ T39] device veth0_macvtap left promiscuous mode [ 145.793045][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 145.794328][ T39] device veth1_vlan left promiscuous mode [ 145.799549][ T39] device veth0_vlan left promiscuous mode [ 145.809677][ T5728] binder: release 7385:7387 transaction 150 in, still active [ 145.811001][ T5728] binder: send failed reply for transaction 150, target dead [ 145.919680][ T4332] Bluetooth: hci0: command 0x0409 tx timeout [ 146.449362][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.451986][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.457464][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.459912][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.462124][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.463786][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.686579][ T7407] random: crng reseeded on system resumption [ 147.679600][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 147.999605][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 148.563305][ T4332] Bluetooth: hci4: command 0x0409 tx timeout [ 148.601900][ T39] team0 (unregistering): Port device team_slave_1 removed [ 148.780947][ T39] team0 (unregistering): Port device team_slave_0 removed [ 148.940396][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.141260][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.759707][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 150.079488][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 150.581146][ T39] bond0 (unregistering): Released all slaves [ 150.640044][ T4332] Bluetooth: hci4: command 0x041b tx timeout [ 150.795332][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.797914][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.887885][ T7325] team0: Port device team_slave_0 added [ 150.891995][ T7325] team0: Port device team_slave_1 added [ 150.918737][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.924142][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.928727][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.940379][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.941671][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.963459][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.971570][ T7433] binder: 7432:7433 tried to acquire reference to desc 0, got 1 instead [ 150.973320][ T7433] binder: 7432:7433 ioctl c0306201 0 returned -14 [ 150.985184][ T7433] binder: 7432:7433 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 150.987419][ T7433] binder: 7433 RLIMIT_NICE not set [ 151.037804][ T7433] binder: 7433 RLIMIT_NICE not set [ 151.039360][ T5721] binder: release 7432:7443 transaction 155 out, still active [ 151.040934][ T5721] binder: undelivered TRANSACTION_COMPLETE [ 151.051630][ T7325] device hsr_slave_0 entered promiscuous mode [ 151.069478][ T5721] binder: release 7432:7433 transaction 155 in, still active [ 151.070834][ T5721] binder: send failed reply for transaction 155, target dead [ 151.090070][ T7325] device hsr_slave_1 entered promiscuous mode [ 151.109560][ T7325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.111053][ T7325] Cannot create hsr debugfs directory [ 151.196111][ T7400] chnl_net:caif_netlink_parms(): no params data found [ 151.571556][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.573060][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.574884][ T7400] device bridge_slave_0 entered promiscuous mode [ 151.582218][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.583740][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.587747][ T7400] device bridge_slave_1 entered promiscuous mode [ 151.596360][ T7400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.600123][ T7400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.607651][ T7325] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 151.650572][ T7325] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 151.693269][ T7325] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 151.742706][ T7400] team0: Port device team_slave_0 added [ 151.744818][ T7400] team0: Port device team_slave_1 added [ 151.756093][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.757569][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.765480][ T7400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.768389][ T7325] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 152.095085][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.099012][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.104132][ T7400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.159655][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 152.282897][ T7400] device hsr_slave_0 entered promiscuous mode [ 152.319941][ T7400] device hsr_slave_1 entered promiscuous mode [ 152.339868][ T7400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.341456][ T7400] Cannot create hsr debugfs directory [ 152.361420][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.377767][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.383707][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.399297][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.730494][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 152.856948][ T7500] binder: 7499:7500 tried to acquire reference to desc 0, got 1 instead [ 152.858858][ T7500] binder: 7499:7500 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 152.861545][ T7500] binder: 7500 RLIMIT_NICE not set [ 152.910242][ T7500] binder: 7500 RLIMIT_NICE not set [ 152.911803][ T1515] binder: release 7499:7501 transaction 160 out, still active [ 152.913202][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 152.925064][ T1515] binder: release 7499:7500 transaction 160 in, still active [ 152.926473][ T1515] binder: send failed reply for transaction 160, target dead [ 153.153874][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.164455][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.166268][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.168893][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.170379][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.178144][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.185993][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.191004][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.194868][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.196167][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.241958][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.248741][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.250745][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.252503][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.255145][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.256902][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.263128][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.265375][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.279353][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.284703][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.330948][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.335199][ T7325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.337509][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.344943][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.346746][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.424899][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.512512][ T7400] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 153.605946][ T4332] Bluetooth: hci2: command 0x0406 tx timeout [ 153.637981][ T7400] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 153.786237][ T7400] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 153.933075][ T7400] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 154.036231][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.038536][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.048881][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.337995][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.362316][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.364269][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.367149][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.378027][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.379967][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.383763][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.385036][ T4945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.393736][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.398813][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.402603][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.403939][ T4945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.407561][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.410668][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.426169][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.428257][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.435119][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.439238][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.444585][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.448633][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.453728][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.502077][ T39] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.507399][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.509252][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.511450][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.514863][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.582398][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.594099][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.596031][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.603503][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.605351][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.608243][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.612239][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.671414][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.675722][ T7325] device veth0_vlan entered promiscuous mode [ 154.687023][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.688735][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.695399][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.703797][ T7325] device veth1_vlan entered promiscuous mode [ 154.713332][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.715276][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.717130][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.725996][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.790542][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.796516][ T7325] device veth0_macvtap entered promiscuous mode [ 154.798971][ T7325] device veth1_macvtap entered promiscuous mode [ 154.800437][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 154.807677][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.810369][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.812181][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.814020][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.815970][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.819739][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.824837][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.827531][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.830067][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.832234][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.834988][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.846151][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.848016][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.857221][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.862569][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.874358][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.876442][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.882226][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.884274][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.897580][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.901175][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.903051][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.905086][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.907340][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.909180][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.913642][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.916895][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.918961][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.938017][ T7325] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.943188][ T7325] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.947003][ T7325] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.951825][ T7325] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.969003][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.971156][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.996416][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.998377][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.002957][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.005890][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.023891][ T7400] device veth0_vlan entered promiscuous mode [ 155.061446][ T7400] device veth1_vlan entered promiscuous mode [ 155.085058][ T5128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.086776][ T5128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.088258][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.091518][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.093227][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.124599][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.127553][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.142802][ T7400] device veth0_macvtap entered promiscuous mode [ 155.150118][ T7400] device veth1_macvtap entered promiscuous mode [ 155.157738][ T5128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.159238][ T5128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.161778][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.163566][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.165116][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.177586][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.188954][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.195129][ T7588] binder: 7587:7588 tried to acquire reference to desc 0, got 1 instead [ 155.197134][ T7588] binder: 7587:7588 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 155.197760][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.209512][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.211358][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.214721][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.216564][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.218597][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.220550][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.222376][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.224267][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.226227][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.228888][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.231764][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.233639][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.242059][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.244049][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.245902][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.248682][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.251024][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.253422][ T5390] binder: release 7587:7591 transaction 165 out, still active [ 155.254829][ T5390] binder: undelivered TRANSACTION_COMPLETE [ 155.261408][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.264388][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.267293][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.275940][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.278897][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.281059][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.283125][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.285916][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.092653][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.094557][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.097918][ T7400] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.102685][ T7400] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.105079][ T7400] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.108462][ T7400] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.280069][ T7613] xt_nat: multiple ranges no longer supported [ 156.434862][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.438924][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.447519][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.461942][ T5042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.463399][ T5042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.465285][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.521865][ T7615] loop7: detected capacity change from 0 to 32768 [ 156.897477][ T7639] binder_user_error: 2 callbacks suppressed [ 156.897490][ T7639] binder: 7638:7639 tried to acquire reference to desc 0, got 1 instead [ 156.902626][ T7639] binder: 7638:7639 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 156.905102][ T7639] binder: 7639 RLIMIT_NICE not set [ 156.960954][ T7639] binder: 7639 RLIMIT_NICE not set [ 156.965389][ T5390] binder_debug: 2 callbacks suppressed [ 156.965401][ T5390] binder: release 7638:7640 transaction 170 out, still active [ 156.967913][ T5390] binder: undelivered TRANSACTION_COMPLETE [ 156.996880][ T24] binder: release 7638:7639 transaction 170 in, still active [ 156.998437][ T24] binder: send failed reply for transaction 170, target dead [ 157.889565][ T5390] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.111856][ T5390] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.113870][ T5390] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.119294][ T5390] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 158.122323][ T5390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.126662][ T5390] usb 1-1: Product: syz [ 158.128104][ T5390] usb 1-1: Manufacturer: syz [ 158.129236][ T5390] usb 1-1: SerialNumber: syz [ 158.152798][ T7673] loop7: detected capacity change from 0 to 32768 [ 158.430613][ T7700] binder: 7699:7700 tried to acquire reference to desc 0, got 1 instead [ 158.437119][ T7700] binder: 7699:7700 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 158.448445][ T7700] binder: 7700 RLIMIT_NICE not set [ 158.481053][ T7671] vhci_hcd: invalid port number 236 [ 158.488348][ T7700] binder: 7700 RLIMIT_NICE not set [ 158.493881][ T7] binder: release 7699:7708 transaction 175 out, still active [ 158.495326][ T7] binder: undelivered TRANSACTION_COMPLETE [ 158.503516][ T7] binder: release 7699:7700 transaction 175 in, still active [ 158.504928][ T7] binder: send failed reply for transaction 175, target dead [ 158.652428][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.757'. [ 158.662022][ T5390] usb 1-1: unit 4 not found! [ 158.678474][ T5390] usb 1-1: USB disconnect, device number 7 [ 158.823632][ T7718] xt_nat: multiple ranges no longer supported [ 158.890230][ T4318] udevd[4318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.247364][ T39] device hsr_slave_0 left promiscuous mode [ 159.432351][ T39] device hsr_slave_1 left promiscuous mode [ 159.539693][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.541447][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.575347][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.576871][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.584718][ T39] device bridge_slave_1 left promiscuous mode [ 159.586023][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.273374][ T39] device bridge_slave_0 left promiscuous mode [ 160.276788][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.332681][ T39] device hsr_slave_0 left promiscuous mode [ 160.380111][ T7761] binder: 7760:7761 tried to acquire reference to desc 0, got 1 instead [ 160.384270][ T7761] binder: 7760:7761 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 160.391060][ T39] device hsr_slave_1 left promiscuous mode [ 160.435678][ T4338] binder: release 7760:7767 transaction 180 out, still active [ 160.437072][ T4338] binder: undelivered TRANSACTION_COMPLETE [ 160.469557][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.471300][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.505438][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.506876][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.508532][ T39] device bridge_slave_1 left promiscuous mode [ 160.512350][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.541466][ T7773] vhci_hcd: invalid port number 236 [ 160.550696][ T39] device bridge_slave_0 left promiscuous mode [ 160.551968][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.615967][ T7762] loop8: detected capacity change from 0 to 32768 [ 160.644127][ T7762] non-latin1 character 0x466c found in JFS file name [ 160.645652][ T7762] mount with iocharset=utf8 to access [ 160.729649][ T39] device veth1_macvtap left promiscuous mode [ 160.730815][ T39] device veth0_macvtap left promiscuous mode [ 160.731942][ T39] device veth1_vlan left promiscuous mode [ 160.734816][ T39] device veth0_vlan left promiscuous mode [ 160.849597][ T39] device veth1_macvtap left promiscuous mode [ 160.850808][ T39] device veth0_macvtap left promiscuous mode [ 160.852986][ T39] device veth1_vlan left promiscuous mode [ 160.854026][ T39] device veth0_vlan left promiscuous mode [ 162.659753][ T7799] xt_nat: multiple ranges no longer supported [ 163.342915][ T39] team0 (unregistering): Port device team_slave_1 removed [ 163.727870][ T39] team0 (unregistering): Port device team_slave_0 removed [ 163.950603][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.149948][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.291936][ T7805] binder_user_error: 2 callbacks suppressed [ 164.291945][ T7805] binder: 7804:7805 tried to acquire reference to desc 0, got 1 instead [ 164.294872][ T7805] binder: 7804:7805 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 164.297215][ T7805] binder: 7805 RLIMIT_NICE not set [ 164.346372][ T7805] binder: 7805 RLIMIT_NICE not set [ 164.347686][ T4493] binder_debug: 2 callbacks suppressed [ 164.347692][ T4493] binder: release 7804:7806 transaction 185 out, still active [ 164.350056][ T4493] binder: undelivered TRANSACTION_COMPLETE [ 164.357127][ T4493] binder: release 7804:7805 transaction 185 in, still active [ 164.358437][ T4493] binder: send failed reply for transaction 185, target dead [ 165.860866][ T39] bond0 (unregistering): Released all slaves [ 167.404588][ T7834] xt_nat: multiple ranges no longer supported [ 168.141549][ T39] team0 (unregistering): Port device team_slave_1 removed [ 168.334091][ T39] team0 (unregistering): Port device team_slave_0 removed [ 168.760769][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.970139][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.058044][ T7840] binder: 7839:7840 tried to acquire reference to desc 0, got 1 instead [ 169.067894][ T7840] binder: 7839:7840 ioctl c0306201 0 returned -14 [ 169.069130][ T7840] binder: 7839:7840 got new transaction with bad transaction stack, transaction 190 has target 7839:0 [ 169.071761][ T7840] binder: 7839:7840 transaction call to 7839:0 failed 191/29201/-71, size 0-0 line 3105 [ 169.077298][ T4493] binder: release 7839:7840 transaction 190 out, still active [ 169.078688][ T4493] binder: undelivered TRANSACTION_COMPLETE [ 169.080820][ T4493] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.085562][ T4493] binder: send failed reply for transaction 190, target dead [ 170.721594][ T39] bond0 (unregistering): Released all slaves [ 171.229108][ T7873] binder: 7872:7873 tried to acquire reference to desc 0, got 1 instead [ 171.231991][ T7873] binder: 7872:7873 ioctl c0306201 0 returned -14 [ 171.234145][ T7875] xt_nat: multiple ranges no longer supported [ 171.514263][ T7873] binder: 7872:7873 got new transaction with bad transaction stack, transaction 196 has target 7872:0 [ 171.516432][ T7873] binder: 7872:7873 transaction call to 7872:0 failed 197/29201/-71, size 0-0 line 3105 [ 171.528725][ T5390] binder: release 7872:7873 transaction 196 out, still active [ 171.533816][ T5390] binder: undelivered TRANSACTION_COMPLETE [ 171.537196][ T5390] binder: undelivered TRANSACTION_ERROR: 29201 [ 171.567073][ T5390] binder: send failed reply for transaction 196, target dead [ 172.688312][ T7927] netlink: 44 bytes leftover after parsing attributes in process `syz.0.825'. [ 172.731481][ T7931] binder: 7930:7931 tried to acquire reference to desc 0, got 1 instead [ 172.733511][ T7931] binder: 7930:7931 ioctl c0306201 0 returned -14 [ 172.734913][ T7931] binder: 7930:7931 got new transaction with bad transaction stack, transaction 202 has target 7930:0 [ 172.739784][ T7931] binder: 7930:7931 transaction call to 7930:0 failed 203/29201/-71, size 0-0 line 3105 [ 172.749357][ T3898] binder: release 7930:7931 transaction 202 out, still active [ 172.750914][ T3898] binder: undelivered TRANSACTION_COMPLETE [ 172.751973][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 172.794837][ T4425] binder: send failed reply for transaction 202, target dead [ 172.953569][ T7942] xt_nat: multiple ranges no longer supported [ 173.041306][ T7935] loop0: detected capacity change from 0 to 32768 [ 174.446915][ T8001] netlink: 44 bytes leftover after parsing attributes in process `syz.8.838'. [ 174.769735][ T8005] binder: 8004:8005 tried to acquire reference to desc 0, got 1 instead [ 174.772273][ T8005] binder: 8004:8005 got new transaction with bad transaction stack, transaction 208 has target 8004:0 [ 175.037376][ T8021] xt_nat: multiple ranges no longer supported [ 175.064616][ T8013] loop0: detected capacity change from 0 to 32768 [ 176.183698][ T8055] netlink: 44 bytes leftover after parsing attributes in process `syz.8.851'. [ 176.242872][ T8062] binder: 8061:8062 tried to acquire reference to desc 0, got 1 instead [ 176.245009][ T8062] binder: 8061:8062 got new transaction with bad transaction stack, transaction 214 has target 8061:0 [ 177.277608][ T8069] loop8: detected capacity change from 0 to 32768 [ 177.580869][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.9.864'. [ 177.639157][ T8110] xt_nat: multiple ranges no longer supported [ 177.736766][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.749180][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.839821][ T8118] binder: 8117:8118 tried to acquire reference to desc 0, got 1 instead [ 177.842944][ T8118] binder: 8117:8118 got new transaction with bad transaction stack, transaction 220 has target 8117:0 [ 177.845066][ T8118] binder_debug: 10 callbacks suppressed [ 177.845079][ T8118] binder: 8117:8118 transaction call to 8117:0 failed 221/29201/-71, size 0-0 line 3105 [ 177.848224][ T4425] binder: release 8117:8118 transaction 220 out, still active [ 177.849746][ T4425] binder: undelivered TRANSACTION_COMPLETE [ 177.850814][ T4425] binder: undelivered TRANSACTION_ERROR: 29201 [ 177.859020][ T4425] binder: send failed reply for transaction 220, target dead [ 179.523105][ T4336] Bluetooth: hci5: command 0x0406 tx timeout [ 179.714919][ T8158] loop0: detected capacity change from 0 to 32768 [ 179.779668][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz.9.876'. [ 179.842964][ T8177] binder: 8176:8177 tried to acquire reference to desc 0, got 1 instead [ 179.854534][ T8177] binder: 8176:8177 got new transaction with bad transaction stack, transaction 226 has target 8176:0 [ 179.862724][ T8177] binder: 8176:8177 transaction call to 8176:0 failed 227/29201/-71, size 0-0 line 3105 [ 179.868324][ T4493] binder: release 8176:8177 transaction 226 out, still active [ 179.870069][ T4493] binder: undelivered TRANSACTION_COMPLETE [ 179.871130][ T4493] binder: undelivered TRANSACTION_ERROR: 29201 [ 179.901899][ T4493] binder: send failed reply for transaction 226, target dead [ 179.963958][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.965850][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.066714][ T8188] xt_nat: multiple ranges no longer supported [ 182.357203][ T8243] loop9: detected capacity change from 0 to 131072 [ 182.366243][ T8243] F2FS-fs (loop9): invalid crc value [ 182.386953][ T8243] F2FS-fs (loop9): Found nat_bits in checkpoint [ 182.412113][ T8243] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 182.442960][ T8263] binder: 8261:8263 tried to acquire reference to desc 0, got 1 instead [ 182.445161][ T8263] binder: 8261:8263 got new transaction with bad transaction stack, transaction 232 has target 8261:0 [ 182.484965][ T8265] netlink: 20 bytes leftover after parsing attributes in process `syz.5.892'. [ 182.592115][ T8254] loop0: detected capacity change from 0 to 32768 [ 182.733327][ T8277] xt_nat: multiple ranges no longer supported [ 182.802712][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.804603][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.031075][ T8280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.271047][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.279182][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.484886][ T8303] loop9: detected capacity change from 0 to 256 [ 183.486361][ T8303] exfat: Deprecated parameter 'namecase' [ 183.487367][ T8303] exfat: Deprecated parameter 'namecase' [ 183.512256][ T8303] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf9ff927, utbl_chksum : 0xe619d30d) [ 184.356515][ T8334] binder: 8333:8334 tried to acquire reference to desc 0, got 1 instead [ 184.363343][ T8334] binder: 8333:8334 got new transaction with bad transaction stack, transaction 238 has target 8333:0 [ 184.366998][ T8334] binder_debug: 5 callbacks suppressed [ 184.367012][ T8334] binder: 8333:8334 transaction call to 8333:0 failed 239/29201/-71, size 0-0 line 3105 [ 184.393193][ T4377] binder: release 8333:8334 transaction 238 out, still active [ 184.394759][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 184.395841][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 184.423509][ T4377] binder: send failed reply for transaction 238, target dead [ 184.538478][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 184.992716][ T8347] xt_nat: multiple ranges no longer supported [ 185.246631][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.248460][ T8365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.519579][ T8365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.521108][ T8364] loop0: detected capacity change from 0 to 256 [ 185.542983][ T8364] exfat: Deprecated parameter 'namecase' [ 185.544240][ T8364] exfat: Deprecated parameter 'namecase' [ 185.555483][ T8364] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf9ff927, utbl_chksum : 0xe619d30d) [ 186.427469][ T8393] binder: 8390:8393 tried to acquire reference to desc 0, got 1 instead [ 186.434991][ T8393] binder: 8390:8393 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 186.457899][ T8393] binder: 8393 RLIMIT_NICE not set [ 186.459087][ T8393] binder: 8390:8393 got new transaction with bad transaction stack, transaction 244 has target 8390:0 [ 186.472389][ T8393] binder: 8390:8393 transaction call to 8390:0 failed 245/29201/-71, size 0-0 line 3105 [ 186.483980][ T4425] binder: release 8390:8393 transaction 244 out, still active [ 186.485581][ T4425] binder: undelivered TRANSACTION_COMPLETE [ 186.486621][ T4425] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.497716][ T4425] binder: send failed reply for transaction 244, target dead [ 187.010300][ T8406] xt_nat: multiple ranges no longer supported [ 187.113907][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.925'. [ 187.183347][ T8427] loop0: detected capacity change from 0 to 256 [ 187.186132][ T8427] exfat: Deprecated parameter 'namecase' [ 187.187305][ T8427] exfat: Deprecated parameter 'namecase' [ 187.200971][ T8427] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf9ff927, utbl_chksum : 0xe619d30d) [ 187.352917][ T8435] binder: 8434:8435 tried to acquire reference to desc 0, got 1 instead [ 187.364658][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.365859][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.371376][ T8435] binder: 8434:8435 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 187.487557][ T8433] loop0: detected capacity change from 0 to 32768 [ 188.490422][ T8474] xt_nat: multiple ranges no longer supported [ 188.696174][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.939'. [ 188.851580][ T8489] binder_user_error: 1 callbacks suppressed [ 188.851590][ T8489] binder: 8488:8489 tried to acquire reference to desc 0, got 1 instead [ 188.855056][ T8489] binder: 8488:8489 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 188.857566][ T8489] binder: 8489 RLIMIT_NICE not set [ 188.858661][ T8489] binder: 8488:8489 got new transaction with bad transaction stack, transaction 256 has target 8488:0 [ 188.909952][ T8494] loop5: detected capacity change from 0 to 256 [ 189.217419][ T8494] exfat: Deprecated parameter 'namecase' [ 189.218697][ T8494] exfat: Deprecated parameter 'namecase' [ 189.247441][ T8494] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf9ff927, utbl_chksum : 0xe619d30d) [ 190.184085][ T8520] xt_nat: multiple ranges no longer supported [ 190.983840][ T8533] binder: 8532:8533 tried to acquire reference to desc 0, got 1 instead [ 190.986276][ T8533] binder: 8532:8533 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 191.028887][ T8523] loop8: detected capacity change from 0 to 131072 [ 191.053071][ T8533] binder: 8533 RLIMIT_NICE not set [ 191.054627][ T8523] F2FS-fs (loop8): invalid crc value [ 191.066526][ T8533] binder: 8532:8533 got new transaction with bad transaction stack, transaction 262 has target 8532:0 [ 191.072010][ T8533] binder_debug: 11 callbacks suppressed [ 191.072024][ T8533] binder: 8532:8533 transaction call to 8532:0 failed 263/29201/-71, size 0-0 line 3105 [ 191.076358][ T5721] binder: release 8532:8533 transaction 262 out, still active [ 191.077777][ T5721] binder: undelivered TRANSACTION_COMPLETE [ 191.078729][ T5721] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.099040][ T5721] binder: send failed reply for transaction 262, target dead [ 191.102381][ T8523] F2FS-fs (loop8): Found nat_bits in checkpoint [ 191.120925][ T8523] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 192.651224][ T8579] xt_nat: multiple ranges no longer supported [ 192.932460][ T8596] binder: 8595:8596 tried to acquire reference to desc 0, got 1 instead [ 193.029777][ T8596] binder: 8595:8596 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 193.032426][ T8596] binder: 8595:8596 transaction call to 8595:0 failed 269/29201/-71, size 0-0 line 3105 [ 193.035475][ T5721] binder: release 8595:8596 transaction 268 out, still active [ 193.037028][ T5721] binder: undelivered TRANSACTION_COMPLETE [ 193.038208][ T5721] binder: undelivered TRANSACTION_ERROR: 29201 [ 193.067768][ T5721] binder: send failed reply for transaction 268, target dead [ 193.265390][ T8599] loop9: detected capacity change from 0 to 131072 [ 193.267943][ T8599] F2FS-fs (loop9): invalid crc value [ 193.323288][ T8599] F2FS-fs (loop9): Found nat_bits in checkpoint [ 193.334072][ T8599] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 194.816099][ T8651] xt_nat: multiple ranges no longer supported [ 195.345097][ T8668] binder_user_error: 2 callbacks suppressed [ 195.345107][ T8668] binder: 8667:8668 tried to acquire reference to desc 0, got 1 instead [ 195.354866][ T8668] binder: 8667:8668 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 195.367030][ T8668] binder: 8668 RLIMIT_NICE not set [ 195.368315][ T8668] binder: 8667:8668 got new transaction with bad transaction stack, transaction 274 has target 8667:0 [ 196.873496][ T8702] loop5: detected capacity change from 0 to 131072 [ 196.880680][ T8702] F2FS-fs (loop5): invalid crc value [ 196.921740][ T8702] F2FS-fs (loop5): Found nat_bits in checkpoint [ 196.938051][ T8702] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 197.080977][ T8721] binder: 8720:8721 tried to acquire reference to desc 0, got 1 instead [ 197.083402][ T8721] binder: 8720:8721 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 197.085869][ T8721] binder: 8721 RLIMIT_NICE not set [ 197.087323][ T8721] binder: 8720:8721 got new transaction with bad transaction stack, transaction 280 has target 8720:0 [ 197.089322][ T8721] binder_debug: 5 callbacks suppressed [ 197.089333][ T8721] binder: 8720:8721 transaction call to 8720:0 failed 281/29201/-71, size 0-0 line 3105 [ 197.098460][ T5721] binder: release 8720:8721 transaction 280 out, still active [ 197.100547][ T5721] binder: undelivered TRANSACTION_COMPLETE [ 197.101715][ T5721] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.639190][ T1515] binder: send failed reply for transaction 280, target dead [ 198.310669][ T8731] loop5: detected capacity change from 0 to 32768 [ 198.322280][ T8751] xt_nat: multiple ranges no longer supported [ 198.887359][ T8762] loop7: detected capacity change from 0 to 256 [ 198.889107][ T8762] exfat: Deprecated parameter 'namecase' [ 198.891795][ T8762] exfat: Deprecated parameter 'namecase' [ 198.911220][ T8762] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf9ff927, utbl_chksum : 0xe619d30d) [ 199.232954][ T8781] binder: 8780:8781 tried to acquire reference to desc 0, got 1 instead [ 199.238465][ T8781] binder: 8780:8781 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 199.246567][ T8781] binder: 8780:8781 transaction call to 8780:0 failed 287/29201/-71, size 0-0 line 3105 [ 199.256805][ T1515] binder: release 8780:8781 transaction 286 out, still active [ 199.258178][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 199.259218][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.282174][ T1515] binder: send failed reply for transaction 286, target dead [ 201.415640][ T8836] loop0: detected capacity change from 0 to 256 [ 201.428863][ T8836] exfat: Deprecated parameter 'namecase' [ 201.434025][ T8836] exfat: Deprecated parameter 'namecase' [ 201.456339][ T8836] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf9ff927, utbl_chksum : 0xe619d30d) [ 201.602984][ T8842] binder_user_error: 2 callbacks suppressed [ 201.603048][ T8842] binder: 8840:8842 tried to acquire reference to desc 0, got 1 instead [ 201.626917][ T8842] binder: 8840:8842 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 201.629329][ T8842] binder: 8842 RLIMIT_NICE not set [ 201.644231][ T8842] binder: 8840:8842 got new transaction with bad transaction stack, transaction 292 has target 8840:0 [ 201.716921][ T8849] binder: 8848:8849 tried to acquire reference to desc 0, got 1 instead [ 201.721798][ T8849] binder: 8848:8849 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 201.724087][ T8849] binder: 8849 RLIMIT_NICE not set [ 201.729811][ T8849] binder: 8848:8849 got new transaction with bad transaction stack, transaction 298 has target 8848:0 [ 202.388249][ T8852] loop9: detected capacity change from 0 to 32768 [ 202.507887][ T8877] xt_nat: multiple ranges no longer supported [ 203.627886][ T8902] loop0: detected capacity change from 0 to 256 [ 203.643915][ T8902] exfat: Deprecated parameter 'namecase' [ 203.648982][ T8902] exfat: Deprecated parameter 'namecase' [ 203.670480][ T8902] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf9ff927, utbl_chksum : 0xe619d30d) [ 203.872732][ T8915] binder: 8914:8915 tried to acquire reference to desc 0, got 1 instead [ 203.876460][ T8915] binder: 8914:8915 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 203.895431][ T8915] binder_debug: 10 callbacks suppressed [ 203.895440][ T8915] binder: 8914:8915 transaction call to 8914:0 failed 305/29201/-71, size 0-0 line 3105 [ 203.900165][ T4377] binder: release 8914:8915 transaction 304 out, still active [ 203.901506][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 203.902527][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.935207][ T4377] binder: send failed reply for transaction 304, target dead [ 205.492304][ T8981] binder: 8978:8981 transaction call to 8978:0 failed 311/29201/-71, size 0-0 line 3105 [ 205.497409][ T3898] binder: release 8978:8981 transaction 310 out, still active [ 205.500292][ T3898] binder: undelivered TRANSACTION_COMPLETE [ 205.502526][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.521459][ T4374] binder: send failed reply for transaction 310, target dead [ 205.817455][ T8999] xt_nat: multiple ranges no longer supported [ 206.330713][ T8947] loop0: detected capacity change from 0 to 131072 [ 206.344031][ T8947] F2FS-fs (loop0): invalid crc value [ 206.384084][ T8947] F2FS-fs (loop0): Found nat_bits in checkpoint [ 206.434512][ T8947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 207.322109][ T9052] binder_user_error: 6 callbacks suppressed [ 207.322119][ T9052] binder: 9051:9052 tried to acquire reference to desc 0, got 1 instead [ 207.337518][ T9052] binder: 9051:9052 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 207.347082][ T9052] binder: 9052 RLIMIT_NICE not set [ 207.348346][ T9052] binder: 9051:9052 got new transaction with bad transaction stack, transaction 316 has target 9051:0 [ 208.819151][ T9126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.829608][ T9126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.921911][ T9073] loop7: detected capacity change from 0 to 131072 [ 208.928258][ T9073] F2FS-fs (loop7): invalid crc value [ 209.035336][ T9138] random: crng reseeded on system resumption [ 209.258478][ T9073] F2FS-fs (loop7): Found nat_bits in checkpoint [ 209.267075][ T9073] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 209.358223][ T9146] binder: 9145:9146 tried to acquire reference to desc 0, got 1 instead [ 209.373590][ T9146] binder: 9145:9146 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 209.382889][ T9146] binder: 9146 RLIMIT_NICE not set [ 209.384142][ T9146] binder: 9145:9146 got new transaction with bad transaction stack, transaction 322 has target 9145:0 [ 209.392617][ T9146] binder_debug: 5 callbacks suppressed [ 209.392634][ T9146] binder: 9145:9146 transaction call to 9145:0 failed 323/29201/-71, size 0-0 line 3105 [ 209.398065][ T4374] binder: release 9145:9146 transaction 322 out, still active [ 209.401781][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 209.403464][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.420188][ T3898] binder: send failed reply for transaction 322, target dead [ 211.155122][ T9237] loop0: detected capacity change from 0 to 64 [ 211.563730][ T9237] hfs: request for non-existent node 131072 in B*Tree [ 211.567269][ T9237] hfs: request for non-existent node 131072 in B*Tree [ 211.591268][ T9243] binder: 9242:9243 tried to acquire reference to desc 0, got 1 instead [ 211.593228][ T9243] binder: 9242:9243 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 211.605108][ T9243] binder: 9242:9243 transaction call to 9242:0 failed 329/29201/-71, size 0-0 line 3105 [ 211.608849][ T4374] binder: release 9242:9243 transaction 328 out, still active [ 211.610583][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 211.611674][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.627903][ T4374] binder: send failed reply for transaction 328, target dead [ 212.028820][ T9282] usb usb8: usbfs: process 9282 (syz.5.1090) did not claim interface 0 before use [ 213.248298][ T9314] loop8: detected capacity change from 0 to 32768 [ 213.316144][ T9314] JBD2: Ignoring recovery information on journal [ 213.401783][ T9314] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 213.507141][ T9326] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 214.691303][ T7325] ocfs2: Unmounting device (7,8) on (node local) [ 214.820306][ T4374] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 215.011979][ T4374] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.014024][ T4374] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.015971][ T4374] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.017711][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.022932][ T9331] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.093611][ T9352] loop5: detected capacity change from 0 to 16 [ 215.097800][ T9352] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 215.150266][ T9357] loop5: detected capacity change from 0 to 1024 [ 215.154759][ T9357] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 215.283895][ T4374] usb 1-1: USB disconnect, device number 8 [ 215.784058][ T55] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 215.850188][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.851831][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.018108][ T9371] loop7: detected capacity change from 0 to 32768 [ 216.023355][ T9371] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 216.489805][ T4318] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 216.773025][ T9367] loop8: detected capacity change from 0 to 131072 [ 216.777352][ T9367] F2FS-fs (loop8): invalid crc value [ 216.804652][ T9367] F2FS-fs (loop8): Found nat_bits in checkpoint [ 216.812467][ T9367] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 217.068143][ T9410] loop7: detected capacity change from 0 to 64 [ 217.115336][ T9410] hfs: request for non-existent node 131072 in B*Tree [ 217.116703][ T9410] hfs: request for non-existent node 131072 in B*Tree [ 217.808343][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.810562][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.818261][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 218.289208][ T9431] loop9: detected capacity change from 0 to 256 [ 218.314400][ T9431] FAT-fs (loop9): Directory bread(block 64) failed [ 218.315868][ T9431] FAT-fs (loop9): Directory bread(block 65) failed [ 218.317569][ T9431] FAT-fs (loop9): Directory bread(block 66) failed [ 218.318881][ T9431] FAT-fs (loop9): Directory bread(block 67) failed [ 218.323564][ T9431] FAT-fs (loop9): Directory bread(block 68) failed [ 218.324828][ T9431] FAT-fs (loop9): Directory bread(block 69) failed [ 218.326122][ T9431] FAT-fs (loop9): Directory bread(block 70) failed [ 218.328008][ T9431] FAT-fs (loop9): Directory bread(block 71) failed [ 218.329293][ T9431] FAT-fs (loop9): Directory bread(block 72) failed [ 218.331277][ T9431] FAT-fs (loop9): Directory bread(block 73) failed [ 218.781594][ T5042] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 219.072338][ T4809] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 220.175765][ T9478] loop0: detected capacity change from 0 to 32768 [ 220.176012][ T9476] loop9: detected capacity change from 0 to 32768 [ 220.181524][ T9478] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1151 (9478) [ 220.185088][ T9476] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 220.186598][ T9476] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 220.208422][ T9478] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 220.210432][ T9478] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 220.211974][ T9478] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 220.212724][ T9476] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 220.213497][ T9478] BTRFS info (device loop0): use zstd compression, level 3 [ 220.215278][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 220.215977][ T9478] BTRFS info (device loop0): force clearing of disk cache [ 220.217298][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 220.218445][ T9478] BTRFS info (device loop0): enabling disk space caching [ 220.220797][ T9478] BTRFS info (device loop0): disk space caching is enabled [ 220.242508][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 25ms [ 220.245038][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 220.246590][ T9476] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 220.258128][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1153'. [ 220.307034][ T9476] gfs2: fsid=syz:syz.0: found 1 quota changes [ 220.342624][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a453630d: rx timeout, send abort [ 220.378892][ T9491] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 220.378892][ T9491] inode = 11 2339 [ 220.378892][ T9491] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 220.392397][ T9491] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 220.394155][ T9491] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9491 [gfs2_quotad] gfs2_quota_sync+0x2cc/0x500 [ 220.395991][ T9491] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 220.397403][ T9491] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 220.613395][ T9504] loop8: detected capacity change from 0 to 256 [ 220.906369][ C1] vcan0: j1939_tp_rxtimer: 0x000000002a5bfda2: rx timeout, send abort [ 220.907870][ C1] vcan0: j1939_tp_rxtimer: 0x00000000a453630d: abort rx timeout. Force session deactivation [ 220.927235][ T9504] FAT-fs (loop8): Directory bread(block 64) failed [ 220.928396][ T9504] FAT-fs (loop8): Directory bread(block 65) failed [ 220.929893][ T9504] FAT-fs (loop8): Directory bread(block 66) failed [ 220.930998][ T9504] FAT-fs (loop8): Directory bread(block 67) failed [ 220.932225][ T9504] FAT-fs (loop8): Directory bread(block 68) failed [ 220.933466][ T9504] FAT-fs (loop8): Directory bread(block 69) failed [ 220.934724][ T9504] FAT-fs (loop8): Directory bread(block 70) failed [ 220.935980][ T9504] FAT-fs (loop8): Directory bread(block 71) failed [ 220.937214][ T9504] FAT-fs (loop8): Directory bread(block 72) failed [ 220.938393][ T9504] FAT-fs (loop8): Directory bread(block 73) failed [ 221.029309][ T9491] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 221.032876][ T9491] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 221.035608][ T9491] gfs2: fsid=syz:syz.0: File system withdrawn [ 221.036780][ T9491] CPU: 1 PID: 9491 Comm: gfs2_quotad Not tainted syzkaller #0 [ 221.038142][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 221.040045][ T9491] Call trace: [ 221.040705][ T9491] dump_backtrace+0x1c0/0x1ec [ 221.041607][ T9491] show_stack+0x2c/0x3c [ 221.042382][ T9491] __dump_stack+0x30/0x40 [ 221.043192][ T9491] dump_stack_lvl+0xf4/0x15c [ 221.044082][ T9491] dump_stack+0x1c/0x5c [ 221.044813][ T9491] gfs2_withdraw+0x9ec/0x127c [ 221.045699][ T9491] gfs2_consist_inode_i+0xf0/0x10c [ 221.046631][ T9491] gfs2_inode_refresh+0x918/0xd64 [ 221.047607][ T9491] inode_go_instantiate+0x4c/0x68 [ 221.048546][ T9491] gfs2_instantiate+0x178/0x2b4 [ 221.049464][ T9491] gfs2_glock_wait+0x1b4/0x298 [ 221.050323][ T9491] gfs2_glock_nq+0x8bc/0x11c4 [ 221.051204][ T9491] do_sync+0x41c/0xaec [ 221.051940][ T9491] gfs2_quota_sync+0x2cc/0x500 [ 221.052794][ T9491] gfs2_quotad+0x2d8/0x500 [ 221.053590][ T9491] kthread+0x250/0x2d8 [ 221.054328][ T9491] ret_from_fork+0x10/0x20 [ 221.156579][ T7400] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 221.159118][ T7400] CPU: 0 PID: 7400 Comm: syz-executor Not tainted syzkaller #0 [ 221.160588][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 221.162539][ T7400] Call trace: [ 221.163219][ T7400] dump_backtrace+0x1c0/0x1ec [ 221.164069][ T7400] show_stack+0x2c/0x3c [ 221.164853][ T7400] __dump_stack+0x30/0x40 [ 221.165654][ T7400] dump_stack_lvl+0xf4/0x15c [ 221.166531][ T7400] dump_stack+0x1c/0x5c [ 221.167366][ T7400] gfs2_assert_warn_i+0x16c/0x26c [ 221.168350][ T7400] gfs2_quota_cleanup+0x464/0x668 [ 221.169361][ T7400] gfs2_put_super+0x1f0/0x760 [ 221.170322][ T7400] generic_shutdown_super+0x130/0x324 [ 221.171396][ T7400] kill_block_super+0x70/0xdc [ 221.172323][ T7400] gfs2_kill_sb+0xc0/0xd4 [ 221.173180][ T7400] deactivate_locked_super+0xac/0x120 [ 221.174292][ T7400] deactivate_super+0xe4/0x104 [ 221.175172][ T7400] cleanup_mnt+0x390/0x418 [ 221.175967][ T7400] __cleanup_mnt+0x20/0x30 [ 221.176796][ T7400] task_work_run+0x1ec/0x278 [ 221.177683][ T7400] do_notify_resume+0x1fa0/0x2aa4 [ 221.178646][ T7400] el0_svc+0x98/0x128 [ 221.179453][ T7400] el0t_64_sync_handler+0x84/0xf0 [ 221.180451][ T7400] el0t_64_sync+0x18c/0x190 [ 221.181405][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.225018][ T9478] BTRFS info (device loop0): enabling ssd optimizations [ 221.226944][ T9478] BTRFS info (device loop0): rebuilding free space tree [ 221.235142][ T9478] BTRFS info (device loop0): disabling free space tree [ 221.236416][ T9478] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 221.238128][ T9478] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.407873][ C1] vcan0: j1939_tp_rxtimer: 0x000000002a5bfda2: abort rx timeout. Force session deactivation [ 222.058053][ T4330] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 222.198993][ T9540] loop7: detected capacity change from 0 to 1764 [ 223.275599][ T9560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.277471][ T9560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.319539][ T9560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.551760][ T9569] loop8: detected capacity change from 0 to 1024 [ 223.555504][ T9569] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 224.396061][ T9587] loop0: detected capacity change from 0 to 1764 [ 224.900823][ T9591] loop0: detected capacity change from 0 to 32768 [ 224.908348][ T9591] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1180 (9591) [ 224.933705][ T9591] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.935510][ T9591] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 224.936920][ T9591] BTRFS info (device loop0): setting nodatacow, compression disabled [ 224.938277][ T9591] BTRFS info (device loop0): force clearing of disk cache [ 224.945929][ T9591] BTRFS info (device loop0): turning on sync discard [ 224.957791][ T9591] BTRFS info (device loop0): turning off barriers [ 224.959003][ T9591] BTRFS info (device loop0): use no compression [ 224.959539][ T9607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.961706][ T9604] loop8: detected capacity change from 0 to 2048 [ 224.964504][ T9607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.969868][ T9591] BTRFS info (device loop0): disabling free space tree [ 224.971115][ T9591] BTRFS info (device loop0): enabling ssd optimizations [ 224.972305][ T9591] BTRFS info (device loop0): using spread ssd allocation scheme [ 224.975186][ T9604] UDF-fs: bad mount option "gid=00000000000000060928" or missing value [ 224.976999][ T9591] BTRFS info (device loop0): not using ssd optimizations [ 224.978264][ T9591] BTRFS info (device loop0): not using spread ssd allocation scheme [ 225.035995][ T9354] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.095639][ T9591] BTRFS info (device loop0): rebuilding free space tree [ 225.106676][ T9591] BTRFS info (device loop0): disabling free space tree [ 225.107892][ T9591] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.110308][ T9591] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.158100][ T4330] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 225.177368][ T9639] loop8: detected capacity change from 0 to 1024 [ 225.185733][ T9639] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 225.425164][ T9650] loop7: detected capacity change from 0 to 1764 [ 226.019077][ T9673] qrtr: Invalid version 0 [ 226.050265][ T9673] lo speed is unknown, defaulting to 1000 [ 226.051562][ T9673] lo speed is unknown, defaulting to 1000 [ 226.057759][ T9673] lo speed is unknown, defaulting to 1000 [ 226.065387][ T9673] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 226.073611][ T9673] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 226.135668][ T9673] lo speed is unknown, defaulting to 1000 [ 226.138564][ T9673] lo speed is unknown, defaulting to 1000 [ 226.141271][ T9673] lo speed is unknown, defaulting to 1000 [ 226.143235][ T9673] lo speed is unknown, defaulting to 1000 [ 226.145016][ T9673] lo speed is unknown, defaulting to 1000 [ 227.222816][ T9719] loop7: detected capacity change from 0 to 1024 [ 227.230398][ T9719] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 227.319041][ T9726] loop7: detected capacity change from 0 to 1764 [ 228.232919][ T9777] bond0: (slave bond_slave_1): Releasing backup interface [ 228.233578][ T9775] loop5: detected capacity change from 0 to 1024 [ 228.246482][ T9775] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 229.242345][ T9803] binder_user_error: 2 callbacks suppressed [ 229.242355][ T9803] binder: 9798:9803 tried to acquire reference to desc 0, got 1 instead [ 229.519502][ T1515] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 229.739432][ T1515] usb 1-1: Using ep0 maxpacket: 8 [ 229.742673][ T1515] usb 1-1: unable to get BOS descriptor or descriptor too short [ 229.744233][ T1515] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 229.746366][ T1515] usb 1-1: config 0 has no interfaces? [ 229.748065][ T1515] usb 1-1: config 0 has no interfaces? [ 229.749918][ T1515] usb 1-1: config 0 has no interfaces? [ 229.751597][ T1515] usb 1-1: config 0 has no interfaces? [ 229.753345][ T1515] usb 1-1: config 0 has no interfaces? [ 229.755080][ T1515] usb 1-1: config 0 has no interfaces? [ 229.756804][ T1515] usb 1-1: config 0 has no interfaces? [ 229.758429][ T1515] usb 1-1: config 0 has no interfaces? [ 229.760982][ T1515] usb 1-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59 [ 229.762641][ T1515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.764122][ T1515] usb 1-1: Product: syz [ 229.764890][ T1515] usb 1-1: Manufacturer: syz [ 229.765724][ T1515] usb 1-1: SerialNumber: syz [ 229.767599][ T1515] usb 1-1: config 0 descriptor?? [ 229.976624][ T4377] usb 1-1: USB disconnect, device number 9 [ 230.062345][ T1515] binder: release 9798:9803 transaction 334 out, still active [ 230.063878][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 230.068815][ T5721] binder: send failed reply for transaction 334, target dead [ 230.096456][ T9833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.104023][ T9833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.215403][ T9843] sctp: [Deprecated]: syz.9.1240 (pid 9843) Use of int in max_burst socket option. [ 230.215403][ T9843] Use struct sctp_assoc_value instead [ 230.264864][ T4332] Bluetooth: Wrong link type (-22) [ 230.669021][ T9870] netlink: 'syz.7.1252': attribute type 12 has an invalid length. [ 230.671242][ T9870] capability: warning: `syz.7.1252' uses deprecated v2 capabilities in a way that may be insecure [ 231.258231][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.270130][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.272231][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.274568][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.276322][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.277851][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.426305][ T625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.443692][ T9888] lo speed is unknown, defaulting to 1000 [ 231.537318][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.542651][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.583722][ T625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.588961][ T9888] chnl_net:caif_netlink_parms(): no params data found [ 231.606752][ T9888] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.608315][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.610111][ T9888] device bridge_slave_0 entered promiscuous mode [ 231.612239][ T9888] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.613481][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.615055][ T9888] device bridge_slave_1 entered promiscuous mode [ 231.622731][ T9888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.626144][ T9888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.635810][ T9888] team0: Port device team_slave_0 added [ 231.637867][ T9888] team0: Port device team_slave_1 added [ 231.681585][ T625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.690412][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.691886][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.696647][ T9888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.699853][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.701172][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.705998][ T9888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.762034][ T9888] device hsr_slave_0 entered promiscuous mode [ 231.800011][ T9888] device hsr_slave_1 entered promiscuous mode [ 231.895621][ T625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.031492][T10012] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.1294' sets config #1 [ 233.139818][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1296'. [ 233.359537][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 234.322286][T10113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.323961][T10113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.933078][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.935879][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.001358][ T625] device hsr_slave_0 left promiscuous mode [ 235.049890][ T625] device hsr_slave_1 left promiscuous mode [ 235.109949][ T625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.111358][ T625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.112905][ T625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.114326][ T625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.115819][ T625] device bridge_slave_1 left promiscuous mode [ 235.116908][ T625] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.150065][ T625] device bridge_slave_0 left promiscuous mode [ 235.151327][ T625] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.292565][ T625] device veth1_macvtap left promiscuous mode [ 235.293787][ T625] device veth0_macvtap left promiscuous mode [ 235.294911][ T625] device veth1_vlan left promiscuous mode [ 235.295972][ T625] device veth0_vlan left promiscuous mode [ 235.309056][T10179] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 235.311649][T10179] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.449514][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 235.832356][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.834844][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.529466][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 237.702722][ T625] team0 (unregistering): Port device team_slave_1 removed [ 237.891620][ T625] team0 (unregistering): Port device team_slave_0 removed [ 238.212068][ T625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.501146][ T625] bond0 (unregistering): Released all slaves [ 239.609477][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 239.997145][T10239] xt_nat: multiple ranges no longer supported [ 240.074752][T10248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.077820][T10248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.450434][ T9888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.490821][ T9888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.544362][ T9888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.590560][ T9888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.684983][ T9888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.696525][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.698260][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.733906][ T9888] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.737676][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.739580][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.741207][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.742494][ T4945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.743952][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.752258][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.757536][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.761282][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.762523][ T4945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.765330][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.776313][ T9888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.780882][ T9888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.786581][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.788724][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.794016][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.798050][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.802269][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.806227][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.811195][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.815101][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.817910][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.822985][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.825697][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.980349][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.981822][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.997472][ T9888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.024008][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.025926][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.048285][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.050131][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.052665][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.054601][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.057564][ T9888] device veth0_vlan entered promiscuous mode [ 241.074819][ T9888] device veth1_vlan entered promiscuous mode [ 241.095901][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.097576][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.099108][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.102885][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.107030][ T9888] device veth0_macvtap entered promiscuous mode [ 241.116039][ T9888] device veth1_macvtap entered promiscuous mode [ 241.125543][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.127377][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.138873][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.141300][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.143096][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.155163][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.156941][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.158840][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.168139][ T9888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.175909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.177681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.179227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.182041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.186695][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.188519][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.196300][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.198177][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.200881][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.202612][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.204683][ T9888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.206507][ T9888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.215532][ T9888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.221400][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.223285][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.237633][ T9888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.239190][ T9888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.245760][ T9888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.252127][ T9888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.308980][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.310533][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.311975][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.335411][ T4945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.337027][ T4945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.338546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.408728][T10343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.429712][T10343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.707063][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.709871][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.636935][T10565] capability: warning: `syz.2.1429' uses 32-bit capabilities (legacy support in use) [ 246.309411][T10681] xt_nat: multiple ranges no longer supported [ 246.874151][T10702] Bluetooth: MGMT ver 1.22 [ 247.953260][T10772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.954975][T10772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.063378][T10761] loop5: detected capacity change from 0 to 32768 [ 248.069637][T10761] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1471 (10761) [ 248.073383][T10761] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 248.075478][T10761] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 248.079267][T10761] BTRFS info (device loop5): setting nodatacow, compression disabled [ 248.082211][T10761] BTRFS info (device loop5): force clearing of disk cache [ 248.084648][T10761] BTRFS info (device loop5): turning on sync discard [ 248.086008][T10761] BTRFS info (device loop5): turning off barriers [ 248.089718][T10761] BTRFS info (device loop5): use no compression [ 248.091975][T10761] BTRFS info (device loop5): disabling free space tree [ 248.095484][T10761] BTRFS info (device loop5): enabling ssd optimizations [ 248.096874][T10761] BTRFS info (device loop5): using spread ssd allocation scheme [ 248.099357][T10761] BTRFS info (device loop5): not using ssd optimizations [ 248.102204][T10761] BTRFS info (device loop5): not using spread ssd allocation scheme [ 248.220558][T10761] BTRFS info (device loop5): rebuilding free space tree [ 248.223991][T10761] BTRFS info (device loop5): disabling free space tree [ 248.225246][T10761] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 248.226929][T10761] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 248.288066][ T4874] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 248.801199][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.802485][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.943290][T10910] binder: BINDER_SET_CONTEXT_MGR already set [ 249.944431][T10910] binder: 10909:10910 ioctl 4018620d 20000100 returned -16 [ 249.952226][T10910] binder: tried to use weak ref as strong ref [ 249.953477][T10910] binder: 10909:10910 Acquire 1 refcount change on invalid ref 0 ret -22 [ 249.955077][T10910] binder: 10909:10910 got transaction to invalid handle, 1 [ 249.956308][T10910] binder: 10910:10909 cannot find target node [ 249.957401][T10910] binder: 10909:10910 transaction async to 0:0 failed 337/29201/-22, size 0-0 line 3045 [ 250.072788][ T3898] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.124445][ T3898] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.142879][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 250.278790][T10932] binder: 10931:10932 tried to acquire reference to desc 0, got 1 instead [ 250.285775][T10926] fido_id[10926]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 250.296513][ T3898] binder: release 10931:10932 transaction 342 out, still active [ 250.298201][ T3898] binder: undelivered TRANSACTION_COMPLETE [ 250.309476][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1510'. [ 250.328697][ T3898] binder: send failed reply for transaction 342, target dead [ 251.359611][ T9491] Unable to handle kernel paging request at virtual address ffff700004570cd1 [ 251.361301][ T9491] KASAN: maybe wild-memory-access in range [0xffff800022b86688-0xffff800022b8668f] [ 251.363063][ T9491] Mem abort info: [ 251.363747][ T9491] ESR = 0x0000000096000007 [ 251.364580][ T9491] EC = 0x25: DABT (current EL), IL = 32 bits [ 251.365655][ T9491] SET = 0, FnV = 0 [ 251.366331][ T9491] EA = 0, S1PTW = 0 [ 251.367036][ T9491] FSC = 0x07: level 3 translation fault [ 251.368069][ T9491] Data abort info: [ 251.368750][ T9491] ISV = 0, ISS = 0x00000007 [ 251.369631][ T9491] CM = 0, WnR = 0 [ 251.370327][ T9491] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000002229cd000 [ 251.371775][ T9491] [ffff700004570cd1] pgd=000000023ea48003, p4d=000000023ea48003, pud=000000023ea47003, pmd=100000010c46c003, pte=0000000000000000 [ 251.374208][ T9491] Internal error: Oops: 0000000096000007 [#1] PREEMPT SMP [ 251.375478][ T9491] Modules linked in: [ 251.376194][ T9491] CPU: 1 PID: 9491 Comm: gfs2_quotad Not tainted syzkaller #0 [ 251.377633][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 251.379517][ T9491] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 251.380988][ T9491] pc : __lock_acquire+0xb60/0x6800 [ 251.381959][ T9491] lr : __lock_acquire+0xb28/0x6800 [ 251.382966][ T9491] sp : ffff800021f77940 [ 251.383768][ T9491] x29: ffff800021f77b50 x28: dfff800000000000 x27: 0000000000000001 [ 251.385450][ T9491] x26: ffff0000e4932638 x25: ffff0000e4932630 x24: ffffffffffffffff [ 251.387025][ T9491] x23: 0000000000000000 x22: ffff0000e4932658 x21: ffff0000e4931bc0 [ 251.388583][ T9491] x20: 0000000000000000 x19: ffff800022b86688 x18: ffff800011b9bf60 [ 251.390092][ T9491] x17: 1fffe00033eaa57e x16: ffff80000804309c x15: ffff80001521d000 [ 251.391644][ T9491] x14: 0000000000000001 x13: 1ffff000043eefb3 x12: 0000000000ff0100 [ 251.393200][ T9491] x11: ff0080000a8df510 x10: ffff80001811b940 x9 : ffff80001811b940 [ 251.394752][ T9491] x8 : 1ffff00004570cd1 x7 : ffff8000082b16dc x6 : 0000000000000000 [ 251.396214][ T9491] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 251.397701][ T9491] x2 : 0000000000000008 x1 : ffff0000e4932638 x0 : 0000000000000001 [ 251.399205][ T9491] Call trace: [ 251.399824][ T9491] __lock_acquire+0xb60/0x6800 [ 251.400722][ T9491] lock_acquire+0x20c/0x63c [ 251.401556][ T9491] _raw_spin_lock_irqsave+0x6c/0xb0 [ 251.402517][ T9491] finish_wait+0xc8/0x1ac [ 251.403337][ T9491] gfs2_quotad+0x390/0x500 [ 251.404157][ T9491] kthread+0x250/0x2d8 [ 251.404916][ T9491] ret_from_fork+0x10/0x20 [ 251.405771][ T9491] Code: 93407d08 d346fd08 8b080d33 d343fe68 (387c6908) [ 251.407068][ T9491] ---[ end trace 0000000000000000 ]--- [ 251.705088][ T9491] Kernel panic - not syncing: Oops: Fatal exception [ 251.706240][ T9491] SMP: stopping secondary CPUs [ 251.707106][ T9491] Kernel Offset: disabled [ 251.707975][ T9491] CPU features: 0x080000,000f0097,a65bfea7 [ 251.709088][ T9491] Memory Limit: none [ 251.997129][ T9491] Rebooting in 86400 seconds..