last executing test programs:

2m51.793676581s ago: executing program 1 (id=783):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000001c0)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000300)="6a40c53fb1", 0x5, 0x2404c081, &(0x7f00000003c0)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r1, &(0x7f0000000140)='7', 0x1)
shutdown(r0, 0x1)

2m51.466593845s ago: executing program 1 (id=786):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$unix(0x1, 0x3, 0x0)
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x21, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

2m51.409408561s ago: executing program 1 (id=788):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x7ff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x5407, 0x20000c, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x80, 0x29, 0x0, @broadcast, @local}}}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x1000, 0x0)
r3 = dup3(r2, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper]})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x88}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m51.380450644s ago: executing program 1 (id=789):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, r1)
getpgid(r1)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1400e, &(0x7f00000004c0), 0x1, 0x44b, &(0x7f0000000980)="$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")

2m51.31531875s ago: executing program 1 (id=792):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

2m50.847981098s ago: executing program 1 (id=803):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)

2m50.847803768s ago: executing program 32 (id=803):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)

2m50.846824518s ago: executing program 2 (id=805):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)

2m50.824800611s ago: executing program 2 (id=806):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000440)={[{@debug}, {@test_dummy_encryption_v1}, {@resuid={'resuid', 0x3d, 0xee01}}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20034, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000380)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x808b}, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
sendfile(r0, r0, 0x0, 0x1000000000007)

2m50.720276951s ago: executing program 2 (id=807):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000001c0)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000300)="6a40c53fb1", 0x5, 0x2404c081, &(0x7f00000003c0)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r1, &(0x7f0000000140)='7', 0x1)
shutdown(r0, 0x1)

2m50.63138181s ago: executing program 2 (id=808):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, r1)
getpgid(r1)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1400e, &(0x7f00000004c0), 0x1, 0x44b, &(0x7f0000000980)="$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")

2m50.596981033s ago: executing program 2 (id=809):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)}], 0x1)
unshare(0x22020600)
pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000280)={0x1e, 0x0, 0x4fe9, 0x0, 0xffffffff, 0x4, 0xfffffffffffffffe, 0xffffffffffffffef}, 0x0, 0x0, 0x0)

2m50.060594118s ago: executing program 0 (id=815):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)

2m49.992095055s ago: executing program 0 (id=817):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="6a40c53fb1", 0x5, 0x2404c081, &(0x7f00000003c0)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r1, &(0x7f0000000140)='7', 0x1)
shutdown(r0, 0x1)

2m49.934617011s ago: executing program 0 (id=818):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x0, 0x9, 0x3, 0xd1ea, 0x7, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x6, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x4, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x6, 0xc28, 0x2, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x5, 0x4, 0x7, 0x8, 0xfffffff9, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x6, 0x80000000, 0xffff, 0x6, 0x5, 0x8000, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x80020200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000042, 0x2, 0x7, 0x7, 0x102, 0x4, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x3, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x7ffc, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x7, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0x4, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0xfffffffe, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x1e, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x0, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x4, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x49da, 0x1, 0x3, 0x80ea6, 0x6, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x4, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x9, 0x14, 0x62, 0x8, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0x9, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x1, 0x84d3, 0xfffffefd, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x1004, 0x2, 0x6, 0x2, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x409, 0x101, 0xefba, 0x101, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0xc0, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x40)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000bc0)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d40)="80", 0x1}], 0x1}, 0x4)

2m49.875916307s ago: executing program 2 (id=820):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9102})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}}, 0x4084)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1})
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', <r5=>0x0})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000005c0), 0x56)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000780)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)="27030200591114120600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

2m49.867337268s ago: executing program 33 (id=820):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9102})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}}, 0x4084)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1})
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', <r5=>0x0})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000005c0), 0x56)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000780)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)="27030200591114120600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

2m49.679008267s ago: executing program 0 (id=822):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, r1)
getpgid(r1)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1400e, &(0x7f00000004c0), 0x1, 0x44b, &(0x7f0000000980)="$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")

2m49.604482774s ago: executing program 0 (id=823):
syz_emit_vhci(0x0, 0x27)

2m48.866146419s ago: executing program 0 (id=828):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000002e00)={[{@dax_never}, {@nombcache}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@inlinecrypt}, {@grpid}, {@nobarrier}, {@quota}]}, 0x3, 0x56f, &(0x7f00000004c0)="$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")
lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000240)={[], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}]}, 0x2, 0x79a, &(0x7f0000000a40)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001240)=0x8)
r0 = getpid()
sched_setaffinity(r0, 0xfffffffffffffcd0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000001280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001380), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000013c0), 0x10106, 0x2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

2m48.802016276s ago: executing program 34 (id=828):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000002e00)={[{@dax_never}, {@nombcache}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@inlinecrypt}, {@grpid}, {@nobarrier}, {@quota}]}, 0x3, 0x56f, &(0x7f00000004c0)="$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")
lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000240)={[], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}]}, 0x2, 0x79a, &(0x7f0000000a40)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001240)=0x8)
r0 = getpid()
sched_setaffinity(r0, 0xfffffffffffffcd0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000001280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001380), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000013c0), 0x10106, 0x2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

3.809448232s ago: executing program 6 (id=1559):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
setns(0xc9, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000780)=[{&(0x7f00000007c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

3.747760068s ago: executing program 6 (id=1562):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}}, 0x0)

3.623774141s ago: executing program 6 (id=1566):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x1000040, 0x2, @thr={0x0, 0x0}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)

3.589827904s ago: executing program 3 (id=1567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='1', 0x1)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}})

2.637594821s ago: executing program 6 (id=1571):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000500))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000640)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire]})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000f40)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000008c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000009c0)={0x50, 0x0, &(0x7f0000000a00)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x32, 0x0, 0x0}}, @dead_binder_done={0x40086310, 0x3}]})

2.580067167s ago: executing program 3 (id=1573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002240)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0)

2.474015228s ago: executing program 3 (id=1576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}}, 0x0)

2.047633271s ago: executing program 3 (id=1578):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x800)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000640)='./file0\x00', 0x200008, &(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x1, 0x392, &(0x7f00000006c0)="$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")
socket$inet(0x2, 0x3, 0x6)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
fanotify_init(0x20, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mtd(&(0x7f0000000a80), 0x0, 0x8000)
socketpair(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
readv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/13, 0xd}, {0x0, 0xffb6}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r2 = gettid()
tkill(r2, 0x21)

1.915319415s ago: executing program 3 (id=1580):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0)
pipe2(0x0, 0x80000)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c)
recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1)
r4 = inotify_init1(0x800)
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x9400002f)
setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000680)='net/snmp\x00')
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2808080, &(0x7f0000000580)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c756d61736b3d3030303030303030303030303030303030372c747a3d5554432c756e695f786c6174653d302c726f6469722c73686f72746e616d653d77696e6e742c6e66733d7374616c655f72772c73686f72746e616d653d6c6f7765722c696f636861727365743d6575632d6a702c73686f72746e616d653d77696e39352c005710b297f355f3c49eee0c77e26f780a8f7cd899e43a0b892a1a767a6c9401b8decc1d1881ac7b96224fa270ace2039d57059f82a318804fe17064cbb2534478"], 0x81, 0x2ae, &(0x7f0000000740)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=")
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000a00)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r6, &(0x7f0000000a40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendmsg$inet(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="c9", 0x1}], 0x1}, 0x4004045)
sendfile(r6, r7, 0x0, 0x7ffff006)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000b80)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c80)=0x40)
preadv(r5, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/7, 0x7}], 0x1, 0xe7, 0xf)

1.512703396s ago: executing program 5 (id=1581):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x1000040, 0x2, @thr={0x0, 0x0}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)

1.455913571s ago: executing program 6 (id=1583):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='1', 0x1)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}})

1.315567535s ago: executing program 7 (id=1588):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}}, 0x0)

1.287159369s ago: executing program 4 (id=1589):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000640)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000008c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x44, 0x0, &(0x7f0000000a00)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})

1.189580719s ago: executing program 7 (id=1590):
shmctl$IPC_STAT(0x0, 0x2, 0xfffffffffffffffe)

1.100055657s ago: executing program 7 (id=1591):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x800)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000640)='./file0\x00', 0x200008, &(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x1, 0x392, &(0x7f00000006c0)="$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")
socket$inet(0x2, 0x3, 0x6)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
fanotify_init(0x20, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mtd(&(0x7f0000000a80), 0x0, 0x8000)
socketpair(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
readv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/13, 0xd}, {0x0, 0xffb6}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r2 = gettid()
tkill(r2, 0x21)

1.047666283s ago: executing program 7 (id=1592):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b)

942.197453ms ago: executing program 3 (id=1593):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf)
ioctl$TCSBRK(r1, 0x400455c8, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xc0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x2b)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0xc)

492.036779ms ago: executing program 5 (id=1594):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000015c0)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}]}}]}, 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)

400.932349ms ago: executing program 6 (id=1595):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000500))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f00000005c0)=[@increfs]})
r1 = dup3(0xffffffffffffffff, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000640)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000f40)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000008c0)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000009c0)={0x50, 0x0, &(0x7f0000000a00)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x32, 0x0, 0x0}}, @dead_binder_done={0x40086310, 0x3}]})

335.992346ms ago: executing program 4 (id=1596):
r0 = socket(0xa, 0x5, 0x0)
listen(r0, 0x1ff)
sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00'], 0x30}, 0x4000040)

318.464687ms ago: executing program 5 (id=1597):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x200000)
pwrite64(r0, &(0x7f0000000300)="0000010042", 0x5, 0x1be)
pwrite64(r0, &(0x7f0000000340)="55aa", 0x2, 0x1fe)
pwrite64(r0, &(0x7f0000000380), 0x0, 0xc00)
pwrite64(r0, &(0x7f00000003c0)="0002000b", 0x4, 0xc0c)
pwrite64(r0, &(0x7f0000000400)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30)
pwrite64(r0, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23)
pwrite64(r0, &(0x7f0000000480)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b)
pwrite64(r0, &(0x7f00000004c0)='PRIVHEAD', 0x8, 0x1e8000)
r1 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

254.856023ms ago: executing program 4 (id=1598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002240)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0)

253.917844ms ago: executing program 5 (id=1599):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)

240.931835ms ago: executing program 4 (id=1600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}}, 0x0)

211.306318ms ago: executing program 5 (id=1601):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
setns(0xc9, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000780)=[{&(0x7f00000007c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

166.426503ms ago: executing program 5 (id=1602):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20)

94.85899ms ago: executing program 7 (id=1603):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x800)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000640)='./file0\x00', 0x200008, &(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x1, 0x392, &(0x7f00000006c0)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=")
socket$inet(0x2, 0x3, 0x6)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
fanotify_init(0x20, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mtd(&(0x7f0000000a80), 0x0, 0x8000)
socketpair(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
readv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/13, 0xd}, {0x0, 0xffb6}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r2 = gettid()
tkill(r2, 0x21)

78.620592ms ago: executing program 4 (id=1604):
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x1000040, 0x2, @thr={0x0, 0x0}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)

2.189779ms ago: executing program 4 (id=1605):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='1', 0x1)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}})

0s ago: executing program 7 (id=1606):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0)
pipe2(0x0, 0x80000)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c)
recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1)
r4 = inotify_init1(0x800)
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x9400002f)
setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000680)='net/snmp\x00')
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000a00)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r6, &(0x7f0000000a40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendmsg$inet(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="c9", 0x1}], 0x1}, 0x4004045)
sendfile(r6, r7, 0x0, 0x7ffff006)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000b80)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c80)=0x40)
preadv(r5, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/7, 0x7}], 0x1, 0xe7, 0xf)

kernel console output (not intermixed with test programs):

1][ T5847] bond0: (slave bond_slave_0): interface is now down
[  142.689523][ T5847] bond0: (slave bond_slave_1): interface is now down
[  142.723273][ T5847] bond0: (slave bond_slave_0): interface is now down
[  142.724594][ T5847] bond0: (slave bond_slave_1): interface is now down
[  142.742395][ T5880] bond0: (slave bond_slave_0): interface is now down
[  142.743624][ T5880] bond0: (slave bond_slave_1): interface is now down
[  142.764500][ T7605] bond0: (slave bond_slave_0): interface is now down
[  142.765731][ T7605] bond0: (slave bond_slave_1): interface is now down
[  142.785746][ T5880] bond0: (slave bond_slave_0): interface is now down
[  142.787093][ T5880] bond0: (slave bond_slave_1): interface is now down
[  142.812216][ T5880] bond0: (slave bond_slave_0): interface is now down
[  142.813564][ T5880] bond0: (slave bond_slave_1): interface is now down
[  142.829038][    T9] bond0: (slave bond_slave_0): interface is now down
[  142.830478][    T9] bond0: (slave bond_slave_1): interface is now down
[  142.855132][ T4682] bond0: (slave bond_slave_0): interface is now down
[  142.856365][ T4682] bond0: (slave bond_slave_1): interface is now down
[  142.883292][ T5847] bond0: (slave bond_slave_0): interface is now down
[  142.884456][ T5847] bond0: (slave bond_slave_1): interface is now down
[  142.905473][ T4682] bond0: (slave bond_slave_0): interface is now down
[  142.906767][ T4682] bond0: (slave bond_slave_1): interface is now down
[  142.928087][ T4682] bond0: (slave bond_slave_0): interface is now down
[  142.929389][ T4682] bond0: (slave bond_slave_1): interface is now down
[  142.948266][ T5847] bond0: (slave bond_slave_0): interface is now down
[  142.949563][ T5847] bond0: (slave bond_slave_1): interface is now down
[  142.977576][ T5847] bond0: (slave bond_slave_0): interface is now down
[  142.978802][ T5847] bond0: (slave bond_slave_1): interface is now down
[  142.997061][ T5847] bond0: (slave bond_slave_0): interface is now down
[  142.998371][ T5847] bond0: (slave bond_slave_1): interface is now down
[  143.037265][ T5847] bond0: (slave bond_slave_0): interface is now down
[  143.038705][ T5847] bond0: (slave bond_slave_1): interface is now down
[  143.073890][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.097186][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.132729][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.143125][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.186967][    T9] bond0: (slave bond_slave_0): interface is now down
[  143.188375][    T9] bond0: (slave bond_slave_1): interface is now down
[  143.222555][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.228165][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.263040][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.264356][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.285019][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.286339][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.306647][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.307909][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.327675][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.329132][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.349364][ T5126] bond0: (slave bond_slave_0): interface is now down
[  143.350619][ T5126] bond0: (slave bond_slave_1): interface is now down
[  143.370935][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.372190][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.392592][ T5126] bond0: (slave bond_slave_0): interface is now down
[  143.394016][ T5126] bond0: (slave bond_slave_1): interface is now down
[  143.414343][ T5126] bond0: (slave bond_slave_0): interface is now down
[  143.415595][ T5126] bond0: (slave bond_slave_1): interface is now down
[  143.435953][ T5126] bond0: (slave bond_slave_0): interface is now down
[  143.437235][ T5126] bond0: (slave bond_slave_1): interface is now down
[  143.457666][ T5126] bond0: (slave bond_slave_0): interface is now down
[  143.459130][ T5126] bond0: (slave bond_slave_1): interface is now down
[  143.490175][ T4682] bond0: (slave bond_slave_0): interface is now down
[  143.491368][ T4682] bond0: (slave bond_slave_1): interface is now down
[  143.511835][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.513073][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.533502][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.534720][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.555164][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.556544][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.587750][ T5126] bond0: (slave bond_slave_0): interface is now down
[  143.589078][ T5126] bond0: (slave bond_slave_1): interface is now down
[  143.609412][ T5126] bond0: (slave bond_slave_0): interface is now down
[  143.610602][ T5126] bond0: (slave bond_slave_1): interface is now down
[  143.631113][ T4682] bond0: (slave bond_slave_0): interface is now down
[  143.632370][ T4682] bond0: (slave bond_slave_1): interface is now down
[  143.652836][    T9] bond0: (slave bond_slave_0): interface is now down
[  143.654195][    T9] bond0: (slave bond_slave_1): interface is now down
[  143.675269][    T9] bond0: (slave bond_slave_0): interface is now down
[  143.676547][    T9] bond0: (slave bond_slave_1): interface is now down
[  143.696254][    T9] bond0: (slave bond_slave_0): interface is now down
[  143.697440][    T9] bond0: (slave bond_slave_1): interface is now down
[  143.717738][ T5126] bond0: (slave bond_slave_0): interface is now down
[  143.718874][ T5126] bond0: (slave bond_slave_1): interface is now down
[  143.739448][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.740833][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.761183][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.762346][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.783900][ T5847] bond0: (slave bond_slave_0): interface is now down
[  143.785136][ T5847] bond0: (slave bond_slave_1): interface is now down
[  143.807288][ T7776] loop6: detected capacity change from 0 to 4096
[  143.809269][ T7776] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  143.813778][   T27] audit: type=1800 audit(138.744:400): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38177 res=0 errno=0
[  143.815843][ T7776] EXT4-fs (loop6): Test dummy encryption mode enabled
[  143.830029][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.831315][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.836561][ T7776] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[  143.838264][ T7776] System zones: 0-5
[  143.839723][ T7776] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  143.859153][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.860433][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.889534][ T6676] EXT4-fs (loop6): unmounting filesystem.
[  143.891747][    T9] bond0: (slave bond_slave_0): interface is now down
[  143.892972][    T9] bond0: (slave bond_slave_1): interface is now down
[  143.914553][ T4682] bond0: (slave bond_slave_0): interface is now down
[  143.915771][ T4682] bond0: (slave bond_slave_1): interface is now down
[  143.933090][ T7780] loop6: detected capacity change from 0 to 4096
[  143.934670][    T9] bond0: (slave bond_slave_0): interface is now down
[  143.935930][    T9] bond0: (slave bond_slave_1): interface is now down
[  143.938241][ T7780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  143.939773][ T7780] EXT4-fs (loop6): Test dummy encryption mode enabled
[  143.942046][   T27] audit: type=1800 audit(138.864:401): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38177 res=0 errno=0
[  143.946141][ T7780] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[  143.947608][ T7780] System zones: 0-5
[  143.952101][ T7780] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  143.960595][ T5126] bond0: (slave bond_slave_0): interface is now down
[  143.961805][ T5126] bond0: (slave bond_slave_1): interface is now down
[  143.977976][ T7605] bond0: (slave bond_slave_0): interface is now down
[  143.979267][ T7605] bond0: (slave bond_slave_1): interface is now down
[  143.994762][ T6676] EXT4-fs (loop6): unmounting filesystem.
[  144.001396][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.002589][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.023078][ T7605] bond0: (slave bond_slave_0): interface is now down
[  144.024276][ T7605] bond0: (slave bond_slave_1): interface is now down
[  144.044124][ T5126] bond0: (slave bond_slave_0): interface is now down
[  144.045405][ T5126] bond0: (slave bond_slave_1): interface is now down
[  144.064938][ T4682] bond0: (slave bond_slave_0): interface is now down
[  144.066107][ T4682] bond0: (slave bond_slave_1): interface is now down
[  144.086268][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.087497][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.108022][ T4682] bond0: (slave bond_slave_0): interface is now down
[  144.109228][ T4682] bond0: (slave bond_slave_1): interface is now down
[  144.129625][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.130830][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.151474][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.152846][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.173815][ T5126] bond0: (slave bond_slave_0): interface is now down
[  144.175102][ T5126] bond0: (slave bond_slave_1): interface is now down
[  144.206026][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.207264][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.227637][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.228862][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.249310][ T5126] bond0: (slave bond_slave_0): interface is now down
[  144.250788][ T5126] bond0: (slave bond_slave_1): interface is now down
[  144.271328][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.272562][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.303111][ T4682] bond0: (slave bond_slave_0): interface is now down
[  144.304338][ T4682] bond0: (slave bond_slave_1): interface is now down
[  144.324732][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.325917][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.368498][ T7605] bond0: (slave bond_slave_0): interface is now down
[  144.369786][ T7605] bond0: (slave bond_slave_1): interface is now down
[  144.392284][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.393772][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.411431][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.413033][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.433290][ T7605] bond0: (slave bond_slave_0): interface is now down
[  144.434433][ T7605] bond0: (slave bond_slave_1): interface is now down
[  144.462512][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.463742][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.477649][ T4682] bond0: (slave bond_slave_0): interface is now down
[  144.478931][ T4682] bond0: (slave bond_slave_1): interface is now down
[  144.502224][ T4682] bond0: (slave bond_slave_0): interface is now down
[  144.503432][ T4682] bond0: (slave bond_slave_1): interface is now down
[  144.574005][ T7605] bond0: (slave bond_slave_0): interface is now down
[  144.591186][ T7605] bond0: (slave bond_slave_1): interface is now down
[  144.628166][ T7605] bond0: (slave bond_slave_0): interface is now down
[  144.634987][ T7605] bond0: (slave bond_slave_1): interface is now down
[  144.671544][ T5126] bond0: (slave bond_slave_0): interface is now down
[  144.672918][ T5126] bond0: (slave bond_slave_1): interface is now down
[  144.693479][ T4472] bond0: (slave bond_slave_0): interface is now down
[  144.699387][ T4472] bond0: (slave bond_slave_1): interface is now down
[  144.714990][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.716361][ T4414] bond0: (slave bond_slave_1): interface is now down
[  144.736585][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.737796][ T4414] bond0: (slave bond_slave_1): interface is now down
[  144.758236][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.759450][ T4414] bond0: (slave bond_slave_1): interface is now down
[  144.791169][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.792417][ T4414] bond0: (slave bond_slave_1): interface is now down
[  144.812396][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.813677][ T4414] bond0: (slave bond_slave_1): interface is now down
[  144.834133][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.835427][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.856159][ T5847] bond0: (slave bond_slave_0): interface is now down
[  144.857296][ T5847] bond0: (slave bond_slave_1): interface is now down
[  144.877427][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.878658][ T4414] bond0: (slave bond_slave_1): interface is now down
[  144.899078][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.900246][ T4414] bond0: (slave bond_slave_1): interface is now down
[  144.920732][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.922108][ T4414] bond0: (slave bond_slave_1): interface is now down
[  144.942406][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.943684][ T4414] bond0: (slave bond_slave_1): interface is now down
[  144.964088][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.965293][ T4414] bond0: (slave bond_slave_1): interface is now down
[  144.985758][ T4414] bond0: (slave bond_slave_0): interface is now down
[  144.986867][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.018376][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.019791][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.039964][ T4472] bond0: (slave bond_slave_0): interface is now down
[  145.041197][ T4472] bond0: (slave bond_slave_1): interface is now down
[  145.072645][   T39] bond0: (slave bond_slave_0): interface is now down
[  145.073953][   T39] bond0: (slave bond_slave_1): interface is now down
[  145.104994][   T39] bond0: (slave bond_slave_0): interface is now down
[  145.106131][   T39] bond0: (slave bond_slave_1): interface is now down
[  145.127160][   T39] bond0: (slave bond_slave_0): interface is now down
[  145.128388][   T39] bond0: (slave bond_slave_1): interface is now down
[  145.148672][ T5847] bond0: (slave bond_slave_0): interface is now down
[  145.149916][ T5847] bond0: (slave bond_slave_1): interface is now down
[  145.170512][   T39] bond0: (slave bond_slave_0): interface is now down
[  145.171890][   T39] bond0: (slave bond_slave_1): interface is now down
[  145.191665][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.192911][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.213892][ T7605] bond0: (slave bond_slave_0): interface is now down
[  145.215225][ T7605] bond0: (slave bond_slave_1): interface is now down
[  145.235125][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.262855][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.289806][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.291017][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.311433][   T39] bond0: (slave bond_slave_0): interface is now down
[  145.312664][   T39] bond0: (slave bond_slave_1): interface is now down
[  145.337568][ T7605] bond0: (slave bond_slave_0): interface is now down
[  145.338728][ T7605] bond0: (slave bond_slave_1): interface is now down
[  145.354386][ T7605] bond0: (slave bond_slave_0): interface is now down
[  145.355727][ T7605] bond0: (slave bond_slave_1): interface is now down
[  145.380363][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.381720][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.397671][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.398866][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.448045][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.473512][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.507179][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.517758][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.571148][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.576789][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.630203][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.631537][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.657780][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.670082][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.690274][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.692560][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.712404][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.713599][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.733663][ T7605] bond0: (slave bond_slave_0): interface is now down
[  145.734938][ T7605] bond0: (slave bond_slave_1): interface is now down
[  145.755285][ T7605] bond0: (slave bond_slave_0): interface is now down
[  145.756576][ T7605] bond0: (slave bond_slave_1): interface is now down
[  145.787811][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.789059][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.809469][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.810821][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.831208][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.832429][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.856927][ T4472] bond0: (slave bond_slave_0): interface is now down
[  145.858174][ T4472] bond0: (slave bond_slave_1): interface is now down
[  145.874483][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.875842][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.896212][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.897538][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.917894][ T4472] bond0: (slave bond_slave_0): interface is now down
[  145.919548][ T4472] bond0: (slave bond_slave_1): interface is now down
[  145.939476][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.940821][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.972018][ T4414] bond0: (slave bond_slave_0): interface is now down
[  145.973399][ T4414] bond0: (slave bond_slave_1): interface is now down
[  145.993697][   T39] bond0: (slave bond_slave_0): interface is now down
[  145.994836][   T39] bond0: (slave bond_slave_1): interface is now down
[  146.015397][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.016815][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.047892][ T4472] bond0: (slave bond_slave_0): interface is now down
[  146.049939][ T4472] bond0: (slave bond_slave_1): interface is now down
[  146.082073][ T4472] bond0: (slave bond_slave_0): interface is now down
[  146.083361][ T4472] bond0: (slave bond_slave_1): interface is now down
[  146.112920][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.114479][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.134574][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.135832][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.156307][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.157580][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.178407][ T4472] bond0: (slave bond_slave_0): interface is now down
[  146.179620][ T4472] bond0: (slave bond_slave_1): interface is now down
[  146.199643][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.200913][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.221826][ T4414] bond0: (slave bond_slave_0): interface is now down
[  146.223017][ T4414] bond0: (slave bond_slave_1): interface is now down
[  146.253807][ T4472] bond0: (slave bond_slave_0): interface is now down
[  146.255088][ T4472] bond0: (slave bond_slave_1): interface is now down
[  146.275598][   T39] bond0: (slave bond_slave_0): interface is now down
[  146.276792][   T39] bond0: (slave bond_slave_1): interface is now down
[  146.300618][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.301880][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.318837][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.320174][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.340449][   T39] bond0: (slave bond_slave_0): interface is now down
[  146.341800][   T39] bond0: (slave bond_slave_1): interface is now down
[  146.362239][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.363566][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.394773][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.396027][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.416532][ T4414] bond0: (slave bond_slave_0): interface is now down
[  146.417793][ T4414] bond0: (slave bond_slave_1): interface is now down
[  146.438004][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.439155][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.470722][ T7605] bond0: (slave bond_slave_0): interface is now down
[  146.472051][ T7605] bond0: (slave bond_slave_1): interface is now down
[  146.492230][ T4414] bond0: (slave bond_slave_0): interface is now down
[  146.493487][ T4414] bond0: (slave bond_slave_1): interface is now down
[  146.513998][ T4472] bond0: (slave bond_slave_0): interface is now down
[  146.515331][ T4472] bond0: (slave bond_slave_1): interface is now down
[  146.535944][ T7605] bond0: (slave bond_slave_0): interface is now down
[  146.537099][ T7605] bond0: (slave bond_slave_1): interface is now down
[  146.568182][ T4414] bond0: (slave bond_slave_0): interface is now down
[  146.569331][ T4414] bond0: (slave bond_slave_1): interface is now down
[  146.589814][ T4414] bond0: (slave bond_slave_0): interface is now down
[  146.591231][ T4414] bond0: (slave bond_slave_1): interface is now down
[  146.611949][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.613175][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.633152][ T7605] bond0: (slave bond_slave_0): interface is now down
[  146.634380][ T7605] bond0: (slave bond_slave_1): interface is now down
[  146.665604][   T39] bond0: (slave bond_slave_0): interface is now down
[  146.666825][   T39] bond0: (slave bond_slave_1): interface is now down
[  146.687294][ T4414] bond0: (slave bond_slave_0): interface is now down
[  146.688583][ T4414] bond0: (slave bond_slave_1): interface is now down
[  146.708944][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.710252][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.730648][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.731823][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.752339][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.753796][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.773977][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.775261][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.806512][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.807905][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.839028][ T4414] bond0: (slave bond_slave_0): interface is now down
[  146.840192][ T4414] bond0: (slave bond_slave_1): interface is now down
[  146.860670][ T4414] bond0: (slave bond_slave_0): interface is now down
[  146.861991][ T4414] bond0: (slave bond_slave_1): interface is now down
[  146.893256][ T5126] bond0: (slave bond_slave_0): interface is now down
[  146.894495][ T5126] bond0: (slave bond_slave_1): interface is now down
[  146.915145][   T39] bond0: (slave bond_slave_0): interface is now down
[  146.916573][   T39] bond0: (slave bond_slave_1): interface is now down
[  146.947464][ T4414] bond0: (slave bond_slave_0): interface is now down
[  146.949041][ T4414] bond0: (slave bond_slave_1): interface is now down
[  146.969044][ T4414] bond0: (slave bond_slave_0): interface is now down
[  146.970163][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.001617][   T39] bond0: (slave bond_slave_0): interface is now down
[  147.002810][   T39] bond0: (slave bond_slave_1): interface is now down
[  147.023570][ T4472] bond0: (slave bond_slave_0): interface is now down
[  147.024912][ T4472] bond0: (slave bond_slave_1): interface is now down
[  147.044989][ T7605] bond0: (slave bond_slave_0): interface is now down
[  147.046360][ T7605] bond0: (slave bond_slave_1): interface is now down
[  147.066657][ T7605] bond0: (slave bond_slave_0): interface is now down
[  147.067879][ T7605] bond0: (slave bond_slave_1): interface is now down
[  147.088376][   T39] bond0: (slave bond_slave_0): interface is now down
[  147.089627][   T39] bond0: (slave bond_slave_1): interface is now down
[  147.120795][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.121997][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.143390][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.144693][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.179695][ T7605] bond0: (slave bond_slave_0): interface is now down
[  147.181038][ T7605] bond0: (slave bond_slave_1): interface is now down
[  147.197196][ T5126] bond0: (slave bond_slave_0): interface is now down
[  147.198396][ T5126] bond0: (slave bond_slave_1): interface is now down
[  147.218876][   T39] bond0: (slave bond_slave_0): interface is now down
[  147.219992][   T39] bond0: (slave bond_slave_1): interface is now down
[  147.240155][   T39] bond0: (slave bond_slave_0): interface is now down
[  147.241356][   T39] bond0: (slave bond_slave_1): interface is now down
[  147.261787][ T7605] bond0: (slave bond_slave_0): interface is now down
[  147.263159][ T7605] bond0: (slave bond_slave_1): interface is now down
[  147.286358][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.287553][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.319288][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.320493][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.384115][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.390978][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.575980][ T5126] bond0: (slave bond_slave_0): interface is now down
[  147.577386][ T5126] bond0: (slave bond_slave_1): interface is now down
[  147.597656][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.599034][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.619350][   T39] bond0: (slave bond_slave_0): interface is now down
[  147.620446][   T39] bond0: (slave bond_slave_1): interface is now down
[  147.640991][   T39] bond0: (slave bond_slave_0): interface is now down
[  147.642198][   T39] bond0: (slave bond_slave_1): interface is now down
[  147.662746][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.663928][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.684364][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.685616][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.706019][   T39] bond0: (slave bond_slave_0): interface is now down
[  147.707179][   T39] bond0: (slave bond_slave_1): interface is now down
[  147.727701][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.728864][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.749468][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.750595][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.771066][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.772252][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.792705][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.793902][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.814639][ T4472] bond0: (slave bond_slave_0): interface is now down
[  147.816097][ T4472] bond0: (slave bond_slave_1): interface is now down
[  147.846964][ T4472] bond0: (slave bond_slave_0): interface is now down
[  147.848228][ T4472] bond0: (slave bond_slave_1): interface is now down
[  147.869112][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.870185][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.890333][ T4472] bond0: (slave bond_slave_0): interface is now down
[  147.891678][ T4472] bond0: (slave bond_slave_1): interface is now down
[  147.922846][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.924300][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.944448][ T4414] bond0: (slave bond_slave_0): interface is now down
[  147.945874][ T4414] bond0: (slave bond_slave_1): interface is now down
[  147.977022][ T7605] bond0: (slave bond_slave_0): interface is now down
[  147.978207][ T7605] bond0: (slave bond_slave_1): interface is now down
[  147.999132][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.003188][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.020351][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.024433][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.052871][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.054148][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.076970][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.078235][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.096218][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.097430][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.116442][ T7810] loop6: detected capacity change from 0 to 4096
[  148.123632][   T27] audit: type=1800 audit(142.720:402): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38177 res=0 errno=0
[  148.128828][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.129985][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.135748][ T7810] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  148.137294][ T7810] EXT4-fs (loop6): Test dummy encryption mode enabled
[  148.145340][ T7810] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[  148.146945][ T7810] System zones: 0-5
[  148.148311][ T7810] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  148.161703][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.162836][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.183792][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.185081][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.205426][ T4472] bond0: (slave bond_slave_0): interface is now down
[  148.206723][ T4472] bond0: (slave bond_slave_1): interface is now down
[  148.208896][ T6676] EXT4-fs (loop6): unmounting filesystem.
[  148.226346][ T4472] bond0: (slave bond_slave_0): interface is now down
[  148.227582][ T4472] bond0: (slave bond_slave_1): interface is now down
[  148.248384][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.249735][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.274496][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.275678][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.295957][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.297138][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.313429][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.314641][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.334938][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.336206][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.356476][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.357994][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.378273][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.379522][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.403714][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.404919][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.421659][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.422844][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.447914][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.449166][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.464696][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.465989][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.497197][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.498460][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.534672][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.535942][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.551418][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.552640][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.583908][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.585173][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.606105][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.607245][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.627339][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.628618][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.649025][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.650607][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.671292][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.672568][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.695486][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.696821][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.725162][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.726434][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.760181][ T7605] bond0: (slave bond_slave_0): interface is now down
[  148.766699][ T7605] bond0: (slave bond_slave_1): interface is now down
[  148.802841][ T5126] bond0: (slave bond_slave_0): interface is now down
[  148.807807][ T5126] bond0: (slave bond_slave_1): interface is now down
[  148.822594][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.823907][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.844254][ T4414] bond0: (slave bond_slave_0): interface is now down
[  148.845543][ T4414] bond0: (slave bond_slave_1): interface is now down
[  148.876806][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.882719][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.898485][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.899989][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.923035][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.924435][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.941848][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.943253][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.963652][   T39] bond0: (slave bond_slave_0): interface is now down
[  148.965025][   T39] bond0: (slave bond_slave_1): interface is now down
[  148.984949][ T5888] bond0: (slave bond_slave_0): interface is now down
[  148.986343][ T5888] bond0: (slave bond_slave_1): interface is now down
[  149.006558][ T7605] bond0: (slave bond_slave_0): interface is now down
[  149.007754][ T7605] bond0: (slave bond_slave_1): interface is now down
[  149.028255][ T7605] bond0: (slave bond_slave_0): interface is now down
[  149.029507][ T7605] bond0: (slave bond_slave_1): interface is now down
[  149.050821][ T5031] bond0: (slave bond_slave_0): interface is now down
[  149.051997][ T5031] bond0: (slave bond_slave_1): interface is now down
[  149.071597][   T39] bond0: (slave bond_slave_0): interface is now down
[  149.072964][   T39] bond0: (slave bond_slave_1): interface is now down
[  149.093293][   T39] bond0: (slave bond_slave_0): interface is now down
[  149.094601][   T39] bond0: (slave bond_slave_1): interface is now down
[  149.114963][   T39] bond0: (slave bond_slave_0): interface is now down
[  149.116290][   T39] bond0: (slave bond_slave_1): interface is now down
[  149.136667][ T7605] bond0: (slave bond_slave_0): interface is now down
[  149.138060][ T7605] bond0: (slave bond_slave_1): interface is now down
[  149.158294][ T7605] bond0: (slave bond_slave_0): interface is now down
[  149.159622][ T7605] bond0: (slave bond_slave_1): interface is now down
[  149.180000][   T39] bond0: (slave bond_slave_0): interface is now down
[  149.181217][   T39] bond0: (slave bond_slave_1): interface is now down
[  149.201771][ T5888] bond0: (slave bond_slave_0): interface is now down
[  149.203182][ T5888] bond0: (slave bond_slave_1): interface is now down
[  149.223788][   T39] bond0: (slave bond_slave_0): interface is now down
[  149.225037][   T39] bond0: (slave bond_slave_1): interface is now down
[  149.245086][ T5888] bond0: (slave bond_slave_0): interface is now down
[  149.246466][ T5888] bond0: (slave bond_slave_1): interface is now down
[  149.266702][ T5031] bond0: (slave bond_slave_0): interface is now down
[  149.268022][ T5031] bond0: (slave bond_slave_1): interface is now down
[  149.288386][   T39] bond0: (slave bond_slave_0): interface is now down
[  149.289932][   T39] bond0: (slave bond_slave_1): interface is now down
[  149.310275][ T4472] bond0: (slave bond_slave_0): interface is now down
[  149.311361][ T4472] bond0: (slave bond_slave_1): interface is now down
[  149.331728][   T39] bond0: (slave bond_slave_0): interface is now down
[  149.333136][   T39] bond0: (slave bond_slave_1): interface is now down
[  149.353376][ T7605] bond0: (slave bond_slave_0): interface is now down
[  149.354592][ T7605] bond0: (slave bond_slave_1): interface is now down
[  149.375058][ T7605] bond0: (slave bond_slave_0): interface is now down
[  149.376226][ T7605] bond0: (slave bond_slave_1): interface is now down
[  149.396742][ T7605] bond0: (slave bond_slave_0): interface is now down
[  149.397879][ T7605] bond0: (slave bond_slave_1): interface is now down
[  149.418388][   T39] bond0: (slave bond_slave_0): interface is now down
[  149.419734][   T39] bond0: (slave bond_slave_1): interface is now down
[  149.440079][   T39] bond0: (slave bond_slave_0): interface is now down
[  149.441331][   T39] bond0: (slave bond_slave_1): interface is now down
[  149.462277][ T4472] bond0: (slave bond_slave_0): interface is now down
[  149.472610][ T4472] bond0: (slave bond_slave_1): interface is now down
[  149.503545][   T39] bond0: (slave bond_slave_0): interface is now down
[  149.504932][   T39] bond0: (slave bond_slave_1): interface is now down
[  149.508314][ T7726] netlink: 'syz.4.1093': attribute type 10 has an invalid length.
[  149.510932][ T7726] device syz_tun entered promiscuous mode
[  149.530672][ T7726] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  149.539662][ T4471] bond0: (slave bond_slave_0): interface is now down
[  149.541083][ T4471] bond0: (slave bond_slave_1): interface is now down
[  149.542214][ T4471] bond0: (slave syz_tun): interface is now down
[  149.545258][ T4471] bond0: now running without any active interface!
[  149.654896][ T5071] device hsr_slave_0 left promiscuous mode
[  149.941689][ T5071] device hsr_slave_1 left promiscuous mode
[  149.959840][ T7841] loop4: detected capacity change from 0 to 4096
[  149.968055][ T7841] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  149.970929][   T27] audit: type=1800 audit(144.427:403): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  149.976149][ T7841] EXT4-fs (loop4): Test dummy encryption mode enabled
[  149.987737][ T7841] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[  149.989546][ T7841] System zones: 0-5
[  149.991134][ T7841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  149.993773][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.995447][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.997296][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.999003][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.000760][ T5071] device bridge_slave_1 left promiscuous mode
[  150.003268][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.047972][ T5071] device bridge_slave_0 left promiscuous mode
[  150.049212][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.104917][ T5071] device hsr_slave_0 left promiscuous mode
[  150.111155][ T4340] EXT4-fs (loop4): unmounting filesystem.
[  150.147170][ T5071] device hsr_slave_1 left promiscuous mode
[  150.220638][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.222474][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.224316][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.225777][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.227269][ T5071] device bridge_slave_1 left promiscuous mode
[  150.228387][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.277170][ T5071] device bridge_slave_0 left promiscuous mode
[  150.279626][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.409709][ T7876] binder: tried to use weak ref as strong ref
[  150.411179][ T7876] binder: 7875:7876 Acquire 1 refcount change on invalid ref 0 ret -22
[  150.413225][ T7876] binder: 7875:7876 got transaction to invalid handle, 1
[  150.414644][ T7876] binder: 7876:7875 cannot find target node
[  150.417127][ T5071] device veth1_macvtap left promiscuous mode
[  150.419345][ T5071] device veth0_macvtap left promiscuous mode
[  150.422616][ T5071] device veth1_vlan left promiscuous mode
[  150.424071][ T7876] binder: 7875:7876 transaction call to 0:0 failed 173/29201/-22, size 72-24 line 3062
[  150.425903][ T5071] device veth0_vlan left promiscuous mode
[  150.491613][ T4403] binder: undelivered TRANSACTION_ERROR: 29201
[  150.545718][ T5071] device veth1_macvtap left promiscuous mode
[  150.546923][ T5071] device veth0_macvtap left promiscuous mode
[  150.548080][ T5071] device veth1_vlan left promiscuous mode
[  150.549099][ T5071] device veth0_vlan left promiscuous mode
[  150.587255][ T7890] loop5: detected capacity change from 0 to 4096
[  150.607888][ T7890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  150.610064][ T7890] EXT4-fs (loop5): Test dummy encryption mode enabled
[  150.622406][ T7890] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[  150.624179][ T7890] System zones: 0-5
[  150.625629][ T7890] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  150.672412][ T6629] EXT4-fs (loop5): unmounting filesystem.
[  150.940006][ T7913] binder: tried to use weak ref as strong ref
[  150.941354][ T7913] binder: 7912:7913 Acquire 1 refcount change on invalid ref 0 ret -22
[  150.943272][ T7913] binder: 7912:7913 got transaction to invalid handle, 1
[  150.944737][ T7913] binder: 7913:7912 cannot find target node
[  150.946088][ T7913] binder: 7912:7913 transaction call to 0:0 failed 176/29201/-22, size 72-24 line 3062
[  150.980092][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  152.835468][ T7921] binder: 7920:7921 ioctl 4018620d 0 returned -22
[  152.836848][ T7921] binder: tried to use weak ref as strong ref
[  152.837876][ T7921] binder: 7920:7921 Acquire 1 refcount change on invalid ref 0 ret -22
[  152.839535][ T7921] binder: 7920:7921 got transaction to invalid handle, 1
[  152.840636][ T7921] binder: 7921:7920 cannot find target node
[  152.841635][ T7921] binder: 7920:7921 transaction call to 0:0 failed 179/29201/-22, size 72-24 line 3062
[  152.930116][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  153.356705][ T5071] team0 (unregistering): Port device team_slave_1 removed
[  153.548278][ T5071] team0 (unregistering): Port device team_slave_0 removed
[  153.721919][ T5071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.911175][ T5071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.499851][ T5071] bond0 (unregistering): Released all slaves
[  157.927966][ T5071] team0 (unregistering): Port device team_slave_1 removed
[  158.101456][ T5071] team0 (unregistering): Port device team_slave_0 removed
[  158.307241][ T5071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.523063][ T5071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.887690][ T4333] Bluetooth: hci3: command 0x0406 tx timeout
[  160.181468][ T5071] bond0 (unregistering): Released all slaves
[  160.451968][   T27] audit: type=1800 audit(154.097:404): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174250 res=0 errno=0
[  160.455626][   T27] audit: type=1800 audit(154.107:405): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=174254 res=0 errno=0
[  160.462438][ T7884] netlink: 'syz.4.1142': attribute type 10 has an invalid length.
[  160.471235][   T27] audit: type=1800 audit(154.116:406): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174333 res=0 errno=0
[  160.484623][   T27] audit: type=1800 audit(154.134:407): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=174337 res=0 errno=0
[  160.529542][ T7938] FAULT_INJECTION: forcing a failure.
[  160.529542][ T7938] name failslab, interval 1, probability 0, space 0, times 0
[  160.536150][ T7938] CPU: 1 PID: 7938 Comm: syz.6.1155 Not tainted syzkaller #0
[  160.537601][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  160.539713][ T7938] Call trace:
[  160.540374][ T7938]  dump_backtrace+0x1c4/0x1f0
[  160.541284][ T7938]  show_stack+0x2c/0x3c
[  160.542080][ T7938]  __dump_stack+0x30/0x40
[  160.542890][ T7938]  dump_stack_lvl+0xf4/0x15c
[  160.543729][ T7938]  dump_stack+0x1c/0x5c
[  160.544496][ T7938]  should_fail_ex+0x3cc/0x524
[  160.545367][ T7938]  __should_failslab+0xc0/0x11c
[  160.546253][ T7938]  should_failslab+0x10/0x28
[  160.547104][ T7938]  __kmem_cache_alloc_node+0x7c/0x318
[  160.548104][ T7938]  __kmalloc+0xc4/0x180
[  160.548872][ T7938]  tomoyo_realpath_from_path+0xc4/0x508
[  160.549889][ T7938]  tomoyo_path_number_perm+0x1c4/0x540
[  160.550868][ T7938]  tomoyo_file_ioctl+0x2c/0x3c
[  160.551693][ T7938]  security_file_ioctl+0x80/0xbc
[  160.552548][ T7938]  __arm64_sys_ioctl+0xa8/0x1c8
[  160.553432][ T7938]  invoke_syscall+0x98/0x290
[  160.554265][ T7938]  el0_svc_common+0x13c/0x258
[  160.555111][ T7938]  do_el0_svc+0x5c/0x134
[  160.555945][ T7938]  el0_svc+0x58/0x12c
[  160.556652][ T7938]  el0t_64_sync_handler+0x84/0xf0
[  160.557537][ T7938]  el0t_64_sync+0x18c/0x190
[  160.598713][ T7938] ERROR: Out of memory at tomoyo_realpath_from_path.
[  160.656004][ T7963] ip_tables: iptables: counters copy to user failed while replacing table
[  161.124798][ T7980] binder: 7975:7980 ioctl 4018620d 0 returned -22
[  161.135079][ T7980] binder: tried to use weak ref as strong ref
[  161.136477][ T7980] binder: 7975:7980 Acquire 1 refcount change on invalid ref 0 ret -22
[  161.146935][ T7980] binder: 7975:7980 got transaction to invalid handle, 1
[  161.148471][ T7980] binder: 7980:7975 cannot find target node
[  161.154913][ T7980] binder: 7975:7980 transaction call to 0:0 failed 182/29201/-22, size 72-24 line 3062
[  161.190318][ T4432] binder: undelivered TRANSACTION_ERROR: 29201
[  161.462351][ T7991] loop7: detected capacity change from 0 to 1024
[  161.464402][ T7991] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  161.468714][   T27] audit: type=1804 audit(155.038:408): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="udevd" name="/sys/devices/virtual/block/loop7/uevent" dev="sysfs" ino=38278 res=1 errno=0
[  161.478321][   T27] audit: type=1800 audit(155.038:409): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38278 res=0 errno=0
[  161.499792][ T7996] netlink: 'syz.4.1167': attribute type 10 has an invalid length.
[  161.514982][ T7991] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  161.640481][ T8018] device syzkaller0 entered promiscuous mode
[  161.647171][   T27] audit: type=1800 audit(155.205:410): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=174811 res=0 errno=0
[  161.729578][ T8027] loop4: detected capacity change from 0 to 512
[  161.731540][ T8027] EXT4-fs: Ignoring removed oldalloc option
[  161.739620][   T27] audit: type=1800 audit(155.288:411): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  161.752052][ T8027] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1172: corrupted in-inode xattr
[  161.757999][ T8027] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1172: couldn't read orphan inode 15 (err -117)
[  161.760294][ T8027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  161.772468][ T8027] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1172: corrupted in-inode xattr
[  161.803952][ T4340] EXT4-fs (loop4): unmounting filesystem.
[  162.125075][ T6719] EXT4-fs (loop7): unmounting filesystem.
[  162.182491][ T8051] binder: 8050:8051 ioctl c0306201 0 returned -14
[  162.184253][ T8051] binder: 8050:8051 got transaction to invalid handle, 1
[  162.191723][ T8051] binder: 8051:8050 cannot find target node
[  162.192838][ T8051] binder: 8050:8051 transaction call to 0:0 failed 186/29201/-22, size 72-24 line 3062
[  162.211330][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  163.303755][ T8073] loop6: detected capacity change from 0 to 2048
[  163.308766][   T27] audit: type=1800 audit(156.736:412): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38177 res=0 errno=0
[  163.329946][ T8073] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  163.362261][ T6676] EXT4-fs (loop6): unmounting filesystem.
[  173.576852][ T8061] netlink: 'syz.4.1180': attribute type 10 has an invalid length.
[  173.643465][ T8089] loop4: detected capacity change from 0 to 256
[  173.648427][ T8092] binder: 8088:8092 ioctl c0306201 0 returned -14
[  173.649713][ T8092] binder: 8088:8092 got transaction to invalid handle, 1
[  173.651032][ T8092] binder: 8092:8088 cannot find target node
[  173.657459][ T8092] binder: 8088:8092 transaction call to 0:0 failed 190/29201/-22, size 72-24 line 3062
[  173.702419][   T27] audit: type=1800 audit(166.286:413): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  173.714899][ T8089] FAT-fs (loop4): Directory bread(block 64) failed
[  173.716392][ T8089] FAT-fs (loop4): Directory bread(block 65) failed
[  173.717926][ T8089] FAT-fs (loop4): Directory bread(block 66) failed
[  173.719109][ T8089] FAT-fs (loop4): Directory bread(block 67) failed
[  173.720251][ T8089] FAT-fs (loop4): Directory bread(block 68) failed
[  173.721337][ T8089] FAT-fs (loop4): Directory bread(block 69) failed
[  173.722474][ T8089] FAT-fs (loop4): Directory bread(block 70) failed
[  173.723550][ T8089] FAT-fs (loop4): Directory bread(block 71) failed
[  173.724663][ T8089] FAT-fs (loop4): Directory bread(block 72) failed
[  173.725749][ T8089] FAT-fs (loop4): Directory bread(block 73) failed
[  173.750057][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  174.315642][ T8140] syz.4.1190: attempt to access beyond end of device
[  174.315642][ T8140] loop4: rw=1, sector=1800, nr_sectors = 2056 limit=256
[  174.434763][ T8151] device syzkaller0 entered promiscuous mode
[  174.764812][ T5031] kworker/u4:11: attempt to access beyond end of device
[  174.764812][ T5031] loop4: rw=1, sector=3856, nr_sectors = 11424 limit=256
[  174.781103][ T5031] kworker/u4:11: attempt to access beyond end of device
[  174.781103][ T5031] loop4: rw=1, sector=15280, nr_sectors = 4408 limit=256
[  174.790307][ T5031] kworker/u4:11: attempt to access beyond end of device
[  174.790307][ T5031] loop4: rw=1, sector=19688, nr_sectors = 6664 limit=256
[  174.879643][ T8172] binder: 8171:8172 ioctl c0306201 0 returned -14
[  174.881911][ T8172] binder: 8171:8172 got transaction to invalid handle, 1
[  174.883196][ T8172] binder: 8172:8171 cannot find target node
[  174.884222][ T8172] binder: 8171:8172 transaction call to 0:0 failed 194/29201/-22, size 72-24 line 3062
[  174.909332][ T4399] binder: undelivered TRANSACTION_ERROR: 29201
[  175.053471][ T8181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1209'.
[  175.109078][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1209'.
[  176.613645][ T8194] loop6: detected capacity change from 0 to 256
[  176.618940][   T27] audit: type=1800 audit(169.017:414): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38177 res=0 errno=0
[  176.641232][ T8194] FAT-fs (loop6): Directory bread(block 64) failed
[  176.642402][ T8194] FAT-fs (loop6): Directory bread(block 65) failed
[  176.644180][ T8194] FAT-fs (loop6): Directory bread(block 66) failed
[  176.645353][ T8194] FAT-fs (loop6): Directory bread(block 67) failed
[  176.646585][ T8194] FAT-fs (loop6): Directory bread(block 68) failed
[  176.647723][ T8194] FAT-fs (loop6): Directory bread(block 69) failed
[  176.649133][ T8194] FAT-fs (loop6): Directory bread(block 70) failed
[  176.650467][ T8194] FAT-fs (loop6): Directory bread(block 71) failed
[  176.651676][ T8194] FAT-fs (loop6): Directory bread(block 72) failed
[  176.652804][ T8194] FAT-fs (loop6): Directory bread(block 73) failed
[  176.843810][ T8194] syz.6.1213: attempt to access beyond end of device
[  176.843810][ T8194] loop6: rw=1, sector=1800, nr_sectors = 2056 limit=256
[  177.538857][ T4472] kworker/u4:8: attempt to access beyond end of device
[  177.538857][ T4472] loop6: rw=1, sector=3856, nr_sectors = 5936 limit=256
[  177.546237][ T4472] kworker/u4:8: attempt to access beyond end of device
[  177.546237][ T4472] loop6: rw=1, sector=9792, nr_sectors = 2048 limit=256
[  177.551106][ T4472] kworker/u4:8: attempt to access beyond end of device
[  177.551106][ T4472] loop6: rw=1, sector=11840, nr_sectors = 2224 limit=256
[  177.557508][ T4472] kworker/u4:8: attempt to access beyond end of device
[  177.557508][ T4472] loop6: rw=1, sector=14064, nr_sectors = 4096 limit=256
[  177.564711][ T4472] kworker/u4:8: attempt to access beyond end of device
[  177.564711][ T4472] loop6: rw=1, sector=18160, nr_sectors = 4112 limit=256
[  186.350472][ T8164] netlink: 'syz.3.1202': attribute type 10 has an invalid length.
[  186.363168][ T5847] bond0: (slave bond_slave_0): interface is now down
[  186.364874][ T5847] bond0: (slave bond_slave_1): interface is now down
[  186.365953][ T5847] bond0: (slave syz_tun): interface is now down
[  186.409802][  T118] bond0: (slave bond_slave_0): interface is now down
[  186.411151][  T118] bond0: (slave bond_slave_1): interface is now down
[  186.412481][  T118] bond0: (slave syz_tun): interface is now down
[  186.430525][ T5847] bond0: (slave bond_slave_0): interface is now down
[  186.431806][ T5847] bond0: (slave bond_slave_1): interface is now down
[  186.433066][ T5847] bond0: (slave syz_tun): interface is now down
[  186.451871][ T4682] bond0: (slave bond_slave_0): interface is now down
[  186.453180][ T4682] bond0: (slave bond_slave_1): interface is now down
[  186.454548][ T4682] bond0: (slave syz_tun): interface is now down
[  186.457486][ T4682] bond0: now running without any active interface!
[  186.482204][ T8224] loop5: detected capacity change from 0 to 512
[  186.507951][   T27] audit: type=1800 audit(178.143:415): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38076 res=0 errno=0
[  186.907190][ T8237] loop5: detected capacity change from 0 to 256
[  186.946696][ T8237] FAT-fs (loop5): Directory bread(block 64) failed
[  186.959304][ T8237] FAT-fs (loop5): Directory bread(block 65) failed
[  186.969858][ T8237] FAT-fs (loop5): Directory bread(block 66) failed
[  186.974012][ T8237] FAT-fs (loop5): Directory bread(block 67) failed
[  186.977138][ T8237] FAT-fs (loop5): Directory bread(block 68) failed
[  186.979091][ T8237] FAT-fs (loop5): Directory bread(block 69) failed
[  186.980731][ T8237] FAT-fs (loop5): Directory bread(block 70) failed
[  186.989070][ T8237] FAT-fs (loop5): Directory bread(block 71) failed
[  186.990670][ T8237] FAT-fs (loop5): Directory bread(block 72) failed
[  186.998469][ T8237] FAT-fs (loop5): Directory bread(block 73) failed
[  187.241093][ T8255] bio_check_eod: 2 callbacks suppressed
[  187.241104][ T8255] syz.5.1224: attempt to access beyond end of device
[  187.241104][ T8255] loop5: rw=1, sector=1800, nr_sectors = 2056 limit=256
[  187.353030][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1230'.
[  187.355164][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1230'.
[  187.389522][ T8271] netlink: 'syz.4.1231': attribute type 10 has an invalid length.
[  187.465174][ T8281] binder: 8280:8281 tried to acquire reference to desc 0, got 1 instead
[  187.486006][ T8277] device syzkaller0 entered promiscuous mode
[  187.489372][ T8281] binder: 8280:8281 got reply transaction with no transaction stack
[  187.490904][ T8281] binder: 8280:8281 transaction reply to 0:0 failed 200/29201/-71, size 50-0 line 2963
[  187.514671][ T8288] loop0: detected capacity change from 0 to 4096
[  187.537257][ T4399] binder: release 8280:8281 transaction 199 out, still active
[  187.538706][ T4399] binder: undelivered TRANSACTION_COMPLETE
[  187.539955][ T4399] binder: undelivered TRANSACTION_ERROR: 29201
[  187.541131][ T4399] binder: send failed reply for transaction 199, target dead
[  187.558609][ T8288] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  187.565736][ T8288] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  187.573169][ T8288]  loop0:
[  187.873595][  T283] kworker/u4:4: attempt to access beyond end of device
[  187.873595][  T283] loop5: rw=1, sector=3856, nr_sectors = 26056 limit=256
[  187.891737][  T283] kworker/u4:4: attempt to access beyond end of device
[  187.891737][  T283] loop5: rw=1, sector=29912, nr_sectors = 3480 limit=256
[  187.897317][  T283] kworker/u4:4: attempt to access beyond end of device
[  187.897317][  T283] loop5: rw=1, sector=33392, nr_sectors = 680 limit=256
[  188.168372][ T8309] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1242'.
[  188.223962][ T8310] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1242'.
[  189.159284][ T8318] binder: 8317:8318 tried to acquire reference to desc 0, got 1 instead
[  189.163132][ T8318] binder: 8317:8318 got reply transaction with no transaction stack
[  189.164599][ T8318] binder: 8317:8318 transaction reply to 0:0 failed 206/29201/-71, size 50-0 line 2963
[  189.175306][ T4399] binder: release 8317:8318 transaction 205 out, still active
[  189.176958][ T4399] binder: undelivered TRANSACTION_COMPLETE
[  189.178106][ T4399] binder: undelivered TRANSACTION_ERROR: 29201
[  189.179315][ T4399] binder: send failed reply for transaction 205, target dead
[  189.196616][ T4333] Bluetooth: hci1: unexpected event 0x1c length: 7 > 5
[  190.151285][ T8333] loop5: detected capacity change from 0 to 256
[  190.162539][ T8333] FAT-fs (loop5): Directory bread(block 64) failed
[  190.162558][   T27] audit: type=1800 audit(181.511:416): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38076 res=0 errno=0
[  190.163933][ T8333] FAT-fs (loop5): Directory bread(block 65) failed
[  190.168544][ T8333] FAT-fs (loop5): Directory bread(block 66) failed
[  190.169886][ T8333] FAT-fs (loop5): Directory bread(block 67) failed
[  190.171251][ T8333] FAT-fs (loop5): Directory bread(block 68) failed
[  190.172789][ T8333] FAT-fs (loop5): Directory bread(block 69) failed
[  190.174144][ T8333] FAT-fs (loop5): Directory bread(block 70) failed
[  190.175466][ T8333] FAT-fs (loop5): Directory bread(block 71) failed
[  190.176747][ T8333] FAT-fs (loop5): Directory bread(block 72) failed
[  190.178061][ T8333] FAT-fs (loop5): Directory bread(block 73) failed
[  190.375813][ T8336] syz.5.1251: attempt to access beyond end of device
[  190.375813][ T8336] loop5: rw=1, sector=1800, nr_sectors = 2056 limit=256
[  190.657863][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  190.659949][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  190.661367][ T3940]  loop0:
[  190.671499][   T27] audit: type=1800 audit(181.981:417): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  191.071786][ T5031] kworker/u4:11: attempt to access beyond end of device
[  191.071786][ T5031] loop5: rw=1, sector=3856, nr_sectors = 2280 limit=256
[  191.077582][ T5031] kworker/u4:11: attempt to access beyond end of device
[  191.077582][ T5031] loop5: rw=1, sector=6136, nr_sectors = 3520 limit=256
[  191.087041][ T5031] kworker/u4:11: attempt to access beyond end of device
[  191.087041][ T5031] loop5: rw=1, sector=9656, nr_sectors = 7168 limit=256
[  191.101822][ T5031] kworker/u4:11: attempt to access beyond end of device
[  191.101822][ T5031] loop5: rw=1, sector=16824, nr_sectors = 12848 limit=256
[  191.112860][ T5031] kworker/u4:11: attempt to access beyond end of device
[  191.112860][ T5031] loop5: rw=1, sector=29672, nr_sectors = 4704 limit=256
[  191.196102][ T8343] loop5: detected capacity change from 0 to 512
[  191.207260][   T27] audit: type=1800 audit(182.470:418): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38076 res=0 errno=0
[  193.538946][ T8363] binder: 8362:8363 tried to acquire reference to desc 0, got 1 instead
[  193.541435][ T8363] binder: 8362:8363 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  193.543813][ T8363] binder: 8363 RLIMIT_NICE not set
[  193.544659][ T8363] binder: 8363 RLIMIT_NICE not set
[  193.552121][   T22] binder: release 8362:8363 transaction 211 out, still active
[  193.553533][   T22] binder: undelivered TRANSACTION_COMPLETE
[  193.554700][   T22] binder: release 8362:8363 transaction 211 in, still active
[  193.556170][   T22] binder: send failed reply for transaction 211, target dead
[  193.653539][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  193.655381][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  193.656608][ T3940]  loop0:
[  193.662423][   T27] audit: type=1800 audit(184.749:419): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  193.676867][ T8372] loop4: detected capacity change from 0 to 256
[  193.684236][   T27] audit: type=1800 audit(184.768:420): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  193.689638][ T8372] FAT-fs (loop4): Directory bread(block 64) failed
[  193.693652][ T8372] FAT-fs (loop4): Directory bread(block 65) failed
[  193.695077][ T8372] FAT-fs (loop4): Directory bread(block 66) failed
[  193.696292][ T8372] FAT-fs (loop4): Directory bread(block 67) failed
[  193.697748][ T8372] FAT-fs (loop4): Directory bread(block 68) failed
[  193.699156][ T8372] FAT-fs (loop4): Directory bread(block 69) failed
[  193.700447][ T8372] FAT-fs (loop4): Directory bread(block 70) failed
[  193.705702][ T8372] FAT-fs (loop4): Directory bread(block 71) failed
[  193.706800][ T8372] FAT-fs (loop4): Directory bread(block 72) failed
[  193.707846][ T8372] FAT-fs (loop4): Directory bread(block 73) failed
[  193.910653][ T8372] syz.4.1264: attempt to access beyond end of device
[  193.910653][ T8372] loop4: rw=1, sector=1800, nr_sectors = 2048 limit=256
[  193.914314][ T8372] syz.4.1264: attempt to access beyond end of device
[  193.914314][ T8372] loop4: rw=1, sector=3848, nr_sectors = 8 limit=256
[  194.596439][ T5888] kworker/u4:16: attempt to access beyond end of device
[  194.596439][ T5888] loop4: rw=1, sector=3856, nr_sectors = 3264 limit=256
[  194.603227][ T5888] kworker/u4:16: attempt to access beyond end of device
[  194.603227][ T5888] loop4: rw=1, sector=7120, nr_sectors = 4096 limit=256
[  194.610196][ T5888] kworker/u4:16: attempt to access beyond end of device
[  194.610196][ T5888] loop4: rw=1, sector=11216, nr_sectors = 4080 limit=256
[  194.626742][ T5888] kworker/u4:16: attempt to access beyond end of device
[  194.626742][ T5888] loop4: rw=1, sector=15296, nr_sectors = 8192 limit=256
[  194.643712][ T5888] kworker/u4:16: attempt to access beyond end of device
[  194.643712][ T5888] loop4: rw=1, sector=23488, nr_sectors = 10888 limit=256
[  194.724598][ T8377] binder: 8376:8377 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  194.726850][ T8377] binder: 8377 RLIMIT_NICE not set
[  194.780643][ T8378] binder: 8376:8378 got reply transaction with no transaction stack
[  194.782090][ T8378] binder: 8376:8378 transaction reply to 0:0 failed 213/29201/-71, size 50-0 line 2963
[  195.631993][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  196.476408][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  196.477732][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  197.569740][ T8391] FAULT_INJECTION: forcing a failure.
[  197.569740][ T8391] name fail_futex, interval 1, probability 0, space 0, times 0
[  197.572345][ T8391] CPU: 1 PID: 8391 Comm: syz.4.1270 Not tainted syzkaller #0
[  197.573596][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  197.575208][ T8391] Call trace:
[  197.575827][ T8391]  dump_backtrace+0x1c4/0x1f0
[  197.576726][ T8391]  show_stack+0x2c/0x3c
[  197.577513][ T8391]  __dump_stack+0x30/0x40
[  197.578348][ T8391]  dump_stack_lvl+0xf4/0x15c
[  197.579243][ T8391]  dump_stack+0x1c/0x5c
[  197.580008][ T8391]  should_fail_ex+0x3cc/0x524
[  197.580881][ T8391]  should_fail+0x14/0x24
[  197.581651][ T8391]  get_futex_key+0x904/0xfb0
[  197.582509][ T8391]  futex_wait_setup+0xbc/0x320
[  197.583408][ T8391]  futex_wait+0x164/0x424
[  197.584210][ T8391]  do_futex+0x2e8/0x340
[  197.584998][ T8391]  __arm64_sys_futex+0x390/0x414
[  197.585923][ T8391]  invoke_syscall+0x98/0x290
[  197.586790][ T8391]  el0_svc_common+0x13c/0x258
[  197.587810][ T8391]  do_el0_svc+0x5c/0x134
[  197.588717][ T8391]  el0_svc+0x58/0x12c
[  197.589516][ T8391]  el0t_64_sync_handler+0x84/0xf0
[  197.590545][ T8391]  el0t_64_sync+0x18c/0x190
[  197.616520][ T8393] binder: 8392:8393 tried to acquire reference to desc 0, got 1 instead
[  197.618974][ T8393] binder: 8392:8393 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  197.621393][ T8393] binder: 8393 RLIMIT_NICE not set
[  197.628988][ T4492] binder: release 8392:8393 transaction 218 out, still active
[  197.630431][ T4492] binder: undelivered TRANSACTION_COMPLETE
[  197.632101][ T4492] binder: release 8392:8393 transaction 218 in, still active
[  197.633623][ T4492] binder: send failed reply for transaction 218, target dead
[  198.676083][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  198.677839][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  198.679053][ T3940]  loop0:
[  198.682737][   T27] audit: type=1800 audit(189.372:421): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  198.696984][ T8405] loop4: detected capacity change from 0 to 256
[  198.706417][   T27] audit: type=1800 audit(189.391:422): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  198.715489][ T8405] FAT-fs (loop4): Directory bread(block 64) failed
[  198.716797][ T8405] FAT-fs (loop4): Directory bread(block 65) failed
[  198.718035][ T8405] FAT-fs (loop4): Directory bread(block 66) failed
[  198.719673][ T8405] FAT-fs (loop4): Directory bread(block 67) failed
[  198.720925][ T8405] FAT-fs (loop4): Directory bread(block 68) failed
[  198.721988][ T8405] FAT-fs (loop4): Directory bread(block 69) failed
[  198.723126][ T8405] FAT-fs (loop4): Directory bread(block 70) failed
[  198.724213][ T8405] FAT-fs (loop4): Directory bread(block 71) failed
[  198.728853][ T8405] FAT-fs (loop4): Directory bread(block 72) failed
[  198.730066][ T8405] FAT-fs (loop4): Directory bread(block 73) failed
[  198.926340][ T8405] syz.4.1275: attempt to access beyond end of device
[  198.926340][ T8405] loop4: rw=1, sector=1800, nr_sectors = 2056 limit=256
[  199.618757][ T5888] kworker/u4:16: attempt to access beyond end of device
[  199.618757][ T5888] loop4: rw=1, sector=3856, nr_sectors = 4336 limit=256
[  199.625821][ T5888] kworker/u4:16: attempt to access beyond end of device
[  199.625821][ T5888] loop4: rw=1, sector=8192, nr_sectors = 3840 limit=256
[  199.632695][ T5888] kworker/u4:16: attempt to access beyond end of device
[  199.632695][ T5888] loop4: rw=1, sector=12032, nr_sectors = 3736 limit=256
[  199.638129][ T5888] kworker/u4:16: attempt to access beyond end of device
[  199.638129][ T5888] loop4: rw=1, sector=15768, nr_sectors = 2048 limit=256
[  199.642959][ T5888] kworker/u4:16: attempt to access beyond end of device
[  199.642959][ T5888] loop4: rw=1, sector=17816, nr_sectors = 2048 limit=256
[  199.647881][ T5888] kworker/u4:16: attempt to access beyond end of device
[  199.647881][ T5888] loop4: rw=1, sector=19864, nr_sectors = 2416 limit=256
[  199.659314][ T5888] kworker/u4:16: attempt to access beyond end of device
[  199.659314][ T5888] loop4: rw=1, sector=22280, nr_sectors = 12096 limit=256
[  199.746410][ T8410] binder_user_error: 1 callbacks suppressed
[  199.746420][ T8410] binder: 8409:8410 tried to acquire reference to desc 0, got 1 instead
[  199.751886][ T8410] binder: 8409:8410 got reply transaction with no transaction stack
[  199.753271][ T8410] binder: 8409:8410 transaction reply to 0:0 failed 224/29201/-71, size 50-0 line 2963
[  199.755161][ T4492] binder: release 8409:8410 transaction 223 out, still active
[  199.756508][ T4492] binder: undelivered TRANSACTION_COMPLETE
[  199.768607][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  199.769876][ T4492] binder: send failed reply for transaction 223, target dead
[  200.234477][ T8434] binder: 8433:8434 tried to acquire reference to desc 0, got 1 instead
[  200.241869][ T8434] binder: 8433:8434 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  200.244686][ T8438] loop6: detected capacity change from 0 to 512
[  200.250160][ T8434] binder: 8434 RLIMIT_NICE not set
[  200.251195][ T8434] binder: 8434 RLIMIT_NICE not set
[  200.282754][ T4492] binder: release 8433:8434 transaction 229 in, still active
[  200.289950][ T4492] binder: send failed reply for transaction 229 to 8433:8434
[  200.295392][ T4492] binder: undelivered TRANSACTION_COMPLETE
[  200.299875][ T4492] binder: undelivered TRANSACTION_ERROR: 29189
[  200.339141][ T8448] loop7: detected capacity change from 0 to 256
[  200.354797][ T8450] FAULT_INJECTION: forcing a failure.
[  200.354797][ T8450] name fail_futex, interval 1, probability 0, space 0, times 0
[  200.360935][ T8448] FAT-fs (loop7): Directory bread(block 64) failed
[  200.364541][ T8448] FAT-fs (loop7): Directory bread(block 65) failed
[  200.367385][ T8450] CPU: 0 PID: 8450 Comm: syz.6.1287 Not tainted syzkaller #0
[  200.368637][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  200.370468][ T8450] Call trace:
[  200.371096][ T8450]  dump_backtrace+0x1c4/0x1f0
[  200.371986][ T8450]  show_stack+0x2c/0x3c
[  200.372785][ T8450]  __dump_stack+0x30/0x40
[  200.373600][ T8450]  dump_stack_lvl+0xf4/0x15c
[  200.373800][ T8448] FAT-fs (loop7): Directory bread(block 66) failed
[  200.374523][ T8450]  dump_stack+0x1c/0x5c
[  200.375985][ T8448] FAT-fs (loop7): Directory bread(block 67) failed
[  200.376577][ T8450]  should_fail_ex+0x3cc/0x524
[  200.378605][ T8450]  should_fail+0x14/0x24
[  200.379414][ T8450]  get_futex_key+0x904/0xfb0
[  200.380294][ T8450]  futex_wait_setup+0xbc/0x320
[  200.380816][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  200.381165][ T8450]  futex_wait+0x164/0x424
[  200.383959][ T8450]  do_futex+0x2e8/0x340
[  200.384725][ T8450]  __arm64_sys_futex+0x390/0x414
[  200.385667][ T8448] FAT-fs (loop7): Directory bread(block 68) failed
[  200.385675][ T8450]  invoke_syscall+0x98/0x290
[  200.387251][ T8448] FAT-fs (loop7): Directory bread(block 69) failed
[  200.387714][ T8450]  el0_svc_common+0x13c/0x258
[  200.389429][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  200.389681][ T8450]  do_el0_svc+0x5c/0x134
[  200.391779][ T8450]  el0_svc+0x58/0x12c
[  200.392525][ T8450]  el0t_64_sync_handler+0x84/0xf0
[  200.393395][ T3940]  loop0:
[  200.393454][ T8450]  el0t_64_sync+0x18c/0x190
[  200.396157][ T8448] FAT-fs (loop7): Directory bread(block 70) failed
[  200.405541][ T8448] FAT-fs (loop7): Directory bread(block 71) failed
[  200.411006][ T8448] FAT-fs (loop7): Directory bread(block 72) failed
[  200.418212][   T27] audit: type=1800 audit(190.978:423): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  200.419107][ T8448] FAT-fs (loop7): Directory bread(block 73) failed
[  200.699143][ T8470] syz.7.1286: attempt to access beyond end of device
[  200.699143][ T8470] loop7: rw=1, sector=1800, nr_sectors = 2056 limit=256
[  200.772776][ T8476] device syzkaller0 entered promiscuous mode
[  200.923027][ T8489] FAULT_INJECTION: forcing a failure.
[  200.923027][ T8489] name fail_futex, interval 1, probability 0, space 0, times 0
[  200.925293][ T8489] CPU: 0 PID: 8489 Comm: syz.4.1294 Not tainted syzkaller #0
[  200.926513][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  200.928158][ T8489] Call trace:
[  200.928700][ T8489]  dump_backtrace+0x1c4/0x1f0
[  200.929495][ T8489]  show_stack+0x2c/0x3c
[  200.930260][ T8489]  __dump_stack+0x30/0x40
[  200.931064][ T8489]  dump_stack_lvl+0xf4/0x15c
[  200.931916][ T8489]  dump_stack+0x1c/0x5c
[  200.932700][ T8489]  should_fail_ex+0x3cc/0x524
[  200.933569][ T8489]  should_fail+0x14/0x24
[  200.934391][ T8489]  get_futex_key+0x904/0xfb0
[  200.935256][ T8489]  futex_wait_setup+0xbc/0x320
[  200.936118][ T8489]  futex_wait+0x164/0x424
[  200.936910][ T8489]  do_futex+0x2e8/0x340
[  200.937668][ T8489]  __arm64_sys_futex+0x390/0x414
[  200.938574][ T8489]  invoke_syscall+0x98/0x290
[  200.939430][ T8489]  el0_svc_common+0x13c/0x258
[  200.940303][ T8489]  do_el0_svc+0x5c/0x134
[  200.941086][ T8489]  el0_svc+0x58/0x12c
[  200.941861][ T8489]  el0t_64_sync_handler+0x84/0xf0
[  200.942782][ T8489]  el0t_64_sync+0x18c/0x190
[  201.002915][ T8493] binder: 8492:8493 tried to acquire reference to desc 0, got 1 instead
[  201.008207][ T8493] binder: 8492:8493 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  201.010397][ T8493] binder: 8493 RLIMIT_NICE not set
[  201.018351][ T8493] binder: 8493 RLIMIT_NICE not set
[  201.047210][   T24] binder: release 8492:8493 transaction 234 out, still active
[  201.186369][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  201.188256][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  201.189498][ T3940]  loop0:
[  201.199998][   T27] audit: type=1800 audit(191.697:424): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  201.210112][ T8508] FAULT_INJECTION: forcing a failure.
[  201.210112][ T8508] name fail_futex, interval 1, probability 0, space 0, times 0
[  201.217672][ T8508] CPU: 1 PID: 8508 Comm: syz.4.1299 Not tainted syzkaller #0
[  201.219005][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  201.220811][ T8508] Call trace:
[  201.221364][ T8508]  dump_backtrace+0x1c4/0x1f0
[  201.222157][ T8508]  show_stack+0x2c/0x3c
[  201.222982][ T8508]  __dump_stack+0x30/0x40
[  201.223858][ T8508]  dump_stack_lvl+0xf4/0x15c
[  201.224756][ T8508]  dump_stack+0x1c/0x5c
[  201.225605][ T8508]  should_fail_ex+0x3cc/0x524
[  201.226537][ T8508]  should_fail+0x14/0x24
[  201.227349][ T8508]  get_futex_key+0x904/0xfb0
[  201.228240][ T8508]  futex_wait_setup+0xbc/0x320
[  201.229181][ T8508]  futex_wait+0x164/0x424
[  201.229973][ T8508]  do_futex+0x2e8/0x340
[  201.230755][ T8508]  __arm64_sys_futex+0x390/0x414
[  201.231672][ T8508]  invoke_syscall+0x98/0x290
[  201.232540][ T8508]  el0_svc_common+0x13c/0x258
[  201.233443][ T8508]  do_el0_svc+0x5c/0x134
[  201.234243][ T8508]  el0_svc+0x58/0x12c
[  201.235027][ T8508]  el0t_64_sync_handler+0x84/0xf0
[  201.235948][ T8508]  el0t_64_sync+0x18c/0x190
[  201.565693][ T5888] kworker/u4:16: attempt to access beyond end of device
[  201.565693][ T5888] loop7: rw=1, sector=3856, nr_sectors = 8496 limit=256
[  201.577988][ T5888] kworker/u4:16: attempt to access beyond end of device
[  201.577988][ T5888] loop7: rw=1, sector=12352, nr_sectors = 2904 limit=256
[  201.753167][   T27] audit: type=1800 audit(192.205:425): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175692 res=0 errno=0
[  201.758785][   T27] audit: type=1800 audit(192.205:426): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175702 res=0 errno=0
[  202.436894][ T8555] loop4: detected capacity change from 0 to 512
[  202.487640][ T8557] FAULT_INJECTION: forcing a failure.
[  202.487640][ T8557] name fail_futex, interval 1, probability 0, space 0, times 0
[  202.489780][ T8557] CPU: 0 PID: 8557 Comm: syz.4.1311 Not tainted syzkaller #0
[  202.491023][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  202.492770][ T8557] Call trace:
[  202.493385][ T8557]  dump_backtrace+0x1c4/0x1f0
[  202.494259][ T8557]  show_stack+0x2c/0x3c
[  202.494994][ T8557]  __dump_stack+0x30/0x40
[  202.495798][ T8557]  dump_stack_lvl+0xf4/0x15c
[  202.496666][ T8557]  dump_stack+0x1c/0x5c
[  202.497452][ T8557]  should_fail_ex+0x3cc/0x524
[  202.498336][ T8557]  should_fail+0x14/0x24
[  202.499138][ T8557]  get_futex_key+0x904/0xfb0
[  202.499971][ T8557]  futex_wait_setup+0xbc/0x320
[  202.500860][ T8557]  futex_wait+0x164/0x424
[  202.501687][ T8557]  do_futex+0x2e8/0x340
[  202.502470][ T8557]  __arm64_sys_futex+0x390/0x414
[  202.503405][ T8557]  invoke_syscall+0x98/0x290
[  202.504247][ T8557]  el0_svc_common+0x13c/0x258
[  202.505141][ T8557]  do_el0_svc+0x5c/0x134
[  202.505942][ T8557]  el0_svc+0x58/0x12c
[  202.506704][ T8557]  el0t_64_sync_handler+0x84/0xf0
[  202.507650][ T8557]  el0t_64_sync+0x18c/0x190
[  203.493468][ T8565] loop4: detected capacity change from 0 to 256
[  203.498729][   T27] audit: type=1800 audit(193.810:427): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  203.500082][ T8565] FAT-fs (loop4): Directory bread(block 64) failed
[  203.503624][ T8565] FAT-fs (loop4): Directory bread(block 65) failed
[  203.504906][ T8565] FAT-fs (loop4): Directory bread(block 66) failed
[  203.506257][ T8565] FAT-fs (loop4): Directory bread(block 67) failed
[  203.507607][ T8565] FAT-fs (loop4): Directory bread(block 68) failed
[  203.508978][ T8565] FAT-fs (loop4): Directory bread(block 69) failed
[  203.519063][ T8565] FAT-fs (loop4): Directory bread(block 70) failed
[  203.520994][ T8565] FAT-fs (loop4): Directory bread(block 71) failed
[  203.522300][ T8565] FAT-fs (loop4): Directory bread(block 72) failed
[  203.523498][ T8565] FAT-fs (loop4): Directory bread(block 73) failed
[  204.553430][   T27] audit: type=1800 audit(194.798:428): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175735 res=0 errno=0
[  204.559216][   T27] audit: type=1800 audit(194.798:429): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175745 res=0 errno=0
[  205.781391][   T27] audit: type=1800 audit(195.923:430): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1321" name="block2mtd" dev="sysfs" ino=6231 res=0 errno=0
[  209.232064][ T8588] block2mtd: error: cannot open device /d
[  209.251900][ T8590] FAULT_INJECTION: forcing a failure.
[  209.251900][ T8590] name fail_futex, interval 1, probability 0, space 0, times 0
[  209.254470][ T8590] CPU: 0 PID: 8590 Comm: syz.4.1322 Not tainted syzkaller #0
[  209.255780][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  209.257571][ T8590] Call trace:
[  209.258231][ T8590]  dump_backtrace+0x1c4/0x1f0
[  209.259177][ T8590]  show_stack+0x2c/0x3c
[  209.259993][ T8590]  __dump_stack+0x30/0x40
[  209.260852][ T8590]  dump_stack_lvl+0xf4/0x15c
[  209.261747][ T8590]  dump_stack+0x1c/0x5c
[  209.262533][ T8590]  should_fail_ex+0x3cc/0x524
[  209.263380][ T8590]  should_fail+0x14/0x24
[  209.264138][ T8590]  get_futex_key+0x904/0xfb0
[  209.264971][ T8590]  futex_wake+0x10c/0x458
[  209.265754][ T8590]  do_futex+0x2c4/0x340
[  209.266502][ T8590]  __arm64_sys_futex+0x390/0x414
[  209.267378][ T8590]  invoke_syscall+0x98/0x290
[  209.268208][ T8590]  el0_svc_common+0x13c/0x258
[  209.269039][ T8590]  do_el0_svc+0x5c/0x134
[  209.269819][ T8590]  el0_svc+0x58/0x12c
[  209.270563][ T8590]  el0t_64_sync_handler+0x84/0xf0
[  209.271522][ T8590]  el0t_64_sync+0x18c/0x190
[  210.293431][ T8598] loop4: detected capacity change from 0 to 256
[  210.300025][ T8598] FAT-fs (loop4): Directory bread(block 64) failed
[  210.301345][   T27] audit: type=1800 audit(200.094:431): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  210.305718][ T8598] FAT-fs (loop4): Directory bread(block 65) failed
[  210.307029][ T8598] FAT-fs (loop4): Directory bread(block 66) failed
[  210.316418][ T8598] FAT-fs (loop4): Directory bread(block 67) failed
[  210.317624][ T8598] FAT-fs (loop4): Directory bread(block 68) failed
[  210.318861][ T8598] FAT-fs (loop4): Directory bread(block 69) failed
[  210.320096][ T8598] FAT-fs (loop4): Directory bread(block 70) failed
[  210.321243][ T8598] FAT-fs (loop4): Directory bread(block 71) failed
[  210.322388][ T8598] FAT-fs (loop4): Directory bread(block 72) failed
[  210.323549][ T8598] FAT-fs (loop4): Directory bread(block 73) failed
[  210.516248][ T8598] bio_check_eod: 10 callbacks suppressed
[  210.516260][ T8598] syz.4.1325: attempt to access beyond end of device
[  210.516260][ T8598] loop4: rw=1, sector=1800, nr_sectors = 2048 limit=256
[  210.520629][ T8598] syz.4.1325: attempt to access beyond end of device
[  210.520629][ T8598] loop4: rw=1, sector=3848, nr_sectors = 8 limit=256
[  211.212972][ T5880] kworker/u4:15: attempt to access beyond end of device
[  211.212972][ T5880] loop4: rw=1, sector=3856, nr_sectors = 2472 limit=256
[  211.223883][ T5880] kworker/u4:15: attempt to access beyond end of device
[  211.223883][ T5880] loop4: rw=1, sector=6328, nr_sectors = 4096 limit=256
[  211.230981][ T5880] kworker/u4:15: attempt to access beyond end of device
[  211.230981][ T5880] loop4: rw=1, sector=10424, nr_sectors = 4088 limit=256
[  211.239301][ T5880] kworker/u4:15: attempt to access beyond end of device
[  211.239301][ T5880] loop4: rw=1, sector=14512, nr_sectors = 6304 limit=256
[  211.250658][ T5880] kworker/u4:15: attempt to access beyond end of device
[  211.250658][ T5880] loop4: rw=1, sector=20816, nr_sectors = 9624 limit=256
[  211.259747][ T5880] kworker/u4:15: attempt to access beyond end of device
[  211.259747][ T5880] loop4: rw=1, sector=30440, nr_sectors = 3936 limit=256
[  211.469173][ T8610] binder_user_error: 9 callbacks suppressed
[  211.469182][ T8610] binder: 8609:8610 tried to acquire reference to desc 0, got 1 instead
[  211.472662][ T8610] binder: 8609:8610 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  211.475082][ T8610] binder: 8610 RLIMIT_NICE not set
[  211.476351][ T8610] binder: 8610 RLIMIT_NICE not set
[  211.481653][ T8610] binder: 8610 RLIMIT_NICE not set
[  211.493974][   T24] binder_debug: 10 callbacks suppressed
[  211.493985][   T24] binder: undelivered TRANSACTION_COMPLETE
[  211.495983][   T24] binder: undelivered transaction 251, process died.
[  211.505176][   T24] binder: undelivered TRANSACTION_COMPLETE
[  211.713450][ T8616] loop4: detected capacity change from 0 to 512
[  211.723262][   T27] audit: type=1800 audit(201.404:432): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  211.785854][ T8618] FAULT_INJECTION: forcing a failure.
[  211.785854][ T8618] name fail_futex, interval 1, probability 0, space 0, times 0
[  211.788588][ T8618] CPU: 0 PID: 8618 Comm: syz.4.1333 Not tainted syzkaller #0
[  211.789929][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  211.791817][ T8618] Call trace:
[  211.792439][ T8618]  dump_backtrace+0x1c4/0x1f0
[  211.793334][ T8618]  show_stack+0x2c/0x3c
[  211.794130][ T8618]  __dump_stack+0x30/0x40
[  211.795031][ T8618]  dump_stack_lvl+0xf4/0x15c
[  211.795955][ T8618]  dump_stack+0x1c/0x5c
[  211.796768][ T8618]  should_fail_ex+0x3cc/0x524
[  211.797708][ T8618]  should_fail+0x14/0x24
[  211.798526][ T8618]  get_futex_key+0x904/0xfb0
[  211.799414][ T8618]  futex_wake+0x10c/0x458
[  211.800277][ T8618]  do_futex+0x2c4/0x340
[  211.801110][ T8618]  __arm64_sys_futex+0x390/0x414
[  211.802071][ T8618]  invoke_syscall+0x98/0x290
[  211.802977][ T8618]  el0_svc_common+0x13c/0x258
[  211.803829][ T8618]  do_el0_svc+0x5c/0x134
[  211.804620][ T8618]  el0_svc+0x58/0x12c
[  211.805378][ T8618]  el0t_64_sync_handler+0x84/0xf0
[  211.806357][ T8618]  el0t_64_sync+0x18c/0x190
[  212.823533][ T8626] loop4: detected capacity change from 0 to 256
[  212.828209][   T27] audit: type=1800 audit(202.428:433): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  212.838324][ T8626] FAT-fs (loop4): Directory bread(block 64) failed
[  212.839569][ T8626] FAT-fs (loop4): Directory bread(block 65) failed
[  212.840680][ T8626] FAT-fs (loop4): Directory bread(block 66) failed
[  212.842393][ T8626] FAT-fs (loop4): Directory bread(block 67) failed
[  212.843801][ T8626] FAT-fs (loop4): Directory bread(block 68) failed
[  212.844876][ T8626] FAT-fs (loop4): Directory bread(block 69) failed
[  212.845961][ T8626] FAT-fs (loop4): Directory bread(block 70) failed
[  212.847155][ T8626] FAT-fs (loop4): Directory bread(block 71) failed
[  212.848321][ T8626] FAT-fs (loop4): Directory bread(block 72) failed
[  212.849392][ T8626] FAT-fs (loop4): Directory bread(block 73) failed
[  213.252935][ T8549] netlink: 'syz.7.1308': attribute type 10 has an invalid length.
[  213.255132][ T8549] device syz_tun entered promiscuous mode
[  213.269932][ T8549] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  213.274763][ T4472] bond0: (slave bond_slave_0): interface is now down
[  213.290677][ T4472] bond0: (slave bond_slave_1): interface is now down
[  213.298551][ T4472] bond0: (slave syz_tun): interface is now down
[  213.325918][ T4472] bond0: now running without any active interface!
[  213.340210][ T8641] binder: 8640:8641 tried to acquire reference to desc 0, got 1 instead
[  213.344959][ T8641] binder: 8640:8641 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  213.353665][ T8641] binder: 8641 RLIMIT_NICE not set
[  213.354674][ T8641] binder: 8641 RLIMIT_NICE not set
[  213.355889][ T8641] binder: 8641 RLIMIT_NICE not set
[  213.366620][ T4376] binder: undelivered TRANSACTION_COMPLETE
[  213.367654][ T4376] binder: undelivered transaction 257, process died.
[  213.369405][ T4376] binder: undelivered TRANSACTION_COMPLETE
[  213.857946][ T8658] device syzkaller0 entered promiscuous mode
[  214.367723][    T7] binder: release 8697:8698 transaction 262 out, still active
[  214.371866][    T7] binder: undelivered TRANSACTION_COMPLETE
[  214.373662][    T7] binder: release 8697:8698 transaction 262 in, still active
[  214.375196][    T7] binder: send failed reply for transaction 262, target dead
[  220.925935][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  225.679340][ T8696] netlink: 'syz.7.1351': attribute type 10 has an invalid length.
[  225.766266][ T8726] loop5: detected capacity change from 0 to 256
[  225.777219][   T27] audit: type=1800 audit(214.377:434): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38076 res=0 errno=0
[  225.814305][ T8726] FAT-fs (loop5): Directory bread(block 64) failed
[  225.816106][ T8726] FAT-fs (loop5): Directory bread(block 65) failed
[  225.817325][ T8726] FAT-fs (loop5): Directory bread(block 66) failed
[  225.818499][ T8726] FAT-fs (loop5): Directory bread(block 67) failed
[  225.819965][ T8726] FAT-fs (loop5): Directory bread(block 68) failed
[  225.821037][ T8726] FAT-fs (loop5): Directory bread(block 69) failed
[  225.826836][ T8726] FAT-fs (loop5): Directory bread(block 70) failed
[  225.828161][ T8726] FAT-fs (loop5): Directory bread(block 71) failed
[  225.829351][ T8726] FAT-fs (loop5): Directory bread(block 72) failed
[  225.830499][ T8726] FAT-fs (loop5): Directory bread(block 73) failed
[  225.898674][ T8742] binder_user_error: 5 callbacks suppressed
[  225.898685][ T8742] binder: tried to use weak ref as strong ref
[  225.901611][ T8742] binder: 8741:8742 Acquire 1 refcount change on invalid ref 0 ret -22
[  225.903499][ T8742] binder: 8741:8742 got transaction to invalid handle, 1
[  225.904766][ T8742] binder: 8742:8741 cannot find target node
[  225.905799][ T8742] binder: 8741:8742 transaction call to 0:0 failed 265/29201/-22, size 0-0 line 3062
[  225.908734][ T8742] binder: 8741:8742 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  225.910851][ T8742] binder: 8742 RLIMIT_NICE not set
[  225.913638][ T8742] binder: 8741:8742 got reply transaction with no transaction stack
[  225.915630][ T8742] binder: 8741:8742 transaction reply to 0:0 failed 266/29201/-71, size 50-0 line 2963
[  225.917703][ T4401] binder: undelivered TRANSACTION_ERROR: 29201
[  225.929978][ T4401] binder: undelivered TRANSACTION_ERROR: 29201
[  226.280738][ T8744] binder: 8743:8744 tried to acquire reference to desc 0, got 1 instead
[  226.283768][ T8744] binder: 8743:8744 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  226.289783][ T8744] binder: 8744 RLIMIT_NICE not set
[  226.291284][ T8744] binder: 8744 RLIMIT_NICE not set
[  226.529080][ T4399] binder: release 8743:8744 transaction 271 out, still active
[  226.530737][ T4399] binder: undelivered TRANSACTION_COMPLETE
[  226.532755][ T4399] binder: release 8743:8744 transaction 271 in, still active
[  226.534569][ T4399] binder: send failed reply for transaction 271, target dead
[  226.540263][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  226.602311][ T8766] netlink: 'syz.6.1367': attribute type 10 has an invalid length.
[  226.608244][ T8766] device syz_tun entered promiscuous mode
[  226.619637][ T8766] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  226.638111][ T4472] bond0: (slave syz_tun): interface is now down
[  226.642686][ T4472] bond0: now running without any active interface!
[  226.763620][ T8781] device syzkaller0 entered promiscuous mode
[  226.817500][ T8783] loop4: detected capacity change from 0 to 256
[  227.075158][   T27] audit: type=1800 audit(215.577:435): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  227.164228][ T8797] binder: 8797:8794 cannot find target node
[  227.377696][ T8822] loop6: detected capacity change from 0 to 256
[  227.460924][ T8822] FAT-fs (loop6): Directory bread(block 64) failed
[  227.467365][ T8822] FAT-fs (loop6): Directory bread(block 65) failed
[  227.468607][ T8822] FAT-fs (loop6): Directory bread(block 66) failed
[  227.469849][ T8822] FAT-fs (loop6): Directory bread(block 67) failed
[  227.471067][ T8822] FAT-fs (loop6): Directory bread(block 68) failed
[  227.477880][ T8822] FAT-fs (loop6): Directory bread(block 69) failed
[  227.482382][ T8822] FAT-fs (loop6): Directory bread(block 70) failed
[  227.489639][ T8822] FAT-fs (loop6): Directory bread(block 71) failed
[  227.490999][ T8822] FAT-fs (loop6): Directory bread(block 72) failed
[  227.492149][ T8822] FAT-fs (loop6): Directory bread(block 73) failed
[  228.462659][ T8848] binder_alloc: 8847: binder_alloc_buf, no vma
[  230.523242][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  230.525146][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  230.526510][ T3940]  loop0:
[  230.530992][   T27] audit: type=1800 audit(218.769:436): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  230.558644][ T8872] loop3: detected capacity change from 0 to 256
[  230.565434][   T27] audit: type=1800 audit(218.797:437): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37874 res=0 errno=0
[  230.591782][ T8872] FAT-fs (loop3): Directory bread(block 64) failed
[  230.593600][ T8872] FAT-fs (loop3): Directory bread(block 65) failed
[  230.594864][ T8872] FAT-fs (loop3): Directory bread(block 66) failed
[  230.596042][ T8872] FAT-fs (loop3): Directory bread(block 67) failed
[  230.597247][ T8872] FAT-fs (loop3): Directory bread(block 68) failed
[  230.598441][ T8872] FAT-fs (loop3): Directory bread(block 69) failed
[  230.599644][ T8872] FAT-fs (loop3): Directory bread(block 70) failed
[  230.600829][ T8872] FAT-fs (loop3): Directory bread(block 71) failed
[  230.604352][ T8872] FAT-fs (loop3): Directory bread(block 72) failed
[  230.605534][ T8872] FAT-fs (loop3): Directory bread(block 73) failed
[  231.519247][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1395'.
[  231.575344][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1395'.
[  239.200329][ T8888] binder_user_error: 16 callbacks suppressed
[  239.200341][ T8888] binder: 8887:8888 tried to acquire reference to desc 0, got 1 instead
[  239.205734][ T8888] binder_alloc: 8887: binder_alloc_buf, no vma
[  239.206832][ T8888] binder_debug: 13 callbacks suppressed
[  239.206842][ T8888] binder: cannot allocate buffer: vma cleared, target dead or dying
[  239.207833][ T8888] binder: 8887:8888 transaction call to 8887:0 failed 291/29189/-3, size 0-0 line 3247
[  239.850025][ T8888] binder: 8887:8888 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  239.878174][ T8888] binder: 8888 RLIMIT_NICE not set
[  239.888723][ T8896] binder: 8887:8896 got reply transaction with no transaction stack
[  239.890377][ T8896] binder: 8887:8896 transaction reply to 0:0 failed 292/29201/-71, size 50-0 line 2963
[  240.089142][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[  240.090441][   T24] binder: undelivered TRANSACTION_ERROR: 29189
[  240.106279][ T8919] loop4: detected capacity change from 0 to 256
[  240.117102][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  240.119025][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  240.136747][ T3940]  loop0:
[  240.155823][ T8919] FAT-fs (loop4): Directory bread(block 64) failed
[  240.156114][   T27] audit: type=1800 audit(227.646:438): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  240.157133][ T8919] FAT-fs (loop4): Directory bread(block 65) failed
[  240.177858][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1406'.
[  240.196206][ T8919] FAT-fs (loop4): Directory bread(block 66) failed
[  240.197567][ T8919] FAT-fs (loop4): Directory bread(block 67) failed
[  240.254254][ T8919] FAT-fs (loop4): Directory bread(block 68) failed
[  240.255579][ T8919] FAT-fs (loop4): Directory bread(block 69) failed
[  240.275989][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1406'.
[  240.277753][ T8923] FAULT_INJECTION: forcing a failure.
[  240.277753][ T8923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.280033][ T8923] CPU: 0 PID: 8923 Comm: syz.6.1406 Not tainted syzkaller #0
[  240.281380][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  240.283387][ T8923] Call trace:
[  240.284045][ T8923]  dump_backtrace+0x1c4/0x1f0
[  240.284998][ T8923]  show_stack+0x2c/0x3c
[  240.285838][ T8923]  __dump_stack+0x30/0x40
[  240.286694][ T8923]  dump_stack_lvl+0xf4/0x15c
[  240.287577][ T8923]  dump_stack+0x1c/0x5c
[  240.288354][ T8923]  should_fail_ex+0x3cc/0x524
[  240.289271][ T8923]  should_fail+0x14/0x24
[  240.290102][ T8923]  should_fail_usercopy+0x20/0x30
[  240.290982][ T8923]  copyout+0x2c/0x148
[  240.291711][ T8923]  _copy_to_iter+0x418/0xeac
[  240.292574][ T8923]  simple_copy_to_iter+0x5c/0x80
[  240.293456][ T8923]  __skb_datagram_iter+0xd8/0x680
[  240.294366][ T8923]  skb_copy_datagram_iter+0x124/0x338
[  240.295346][ T8923]  netlink_recvmsg+0x25c/0xb08
[  240.296224][ T8923]  ____sys_recvmsg+0x270/0x754
[  240.297110][ T8923]  do_recvmmsg+0x36c/0x9d8
[  240.297914][ T8923]  __arm64_sys_recvmmsg+0x184/0x244
[  240.298867][ T8923]  invoke_syscall+0x98/0x290
[  240.299701][ T8923]  el0_svc_common+0x13c/0x258
[  240.300561][ T8923]  do_el0_svc+0x5c/0x134
[  240.301353][ T8923]  el0_svc+0x58/0x12c
[  240.302136][ T8923]  el0t_64_sync_handler+0x84/0xf0
[  240.302876][ T8928] Bluetooth: Error in BCSP hdr checksum
[  240.303004][ T8923]  el0t_64_sync+0x18c/0x190
[  240.303245][   T27] audit: type=1800 audit(227.756:439): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176274 res=0 errno=0
[  240.304935][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1406'.
[  240.306810][ T8919] FAT-fs (loop4): Directory bread(block 70) failed
[  240.308648][   T27] audit: type=1800 audit(227.756:440): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176284 res=0 errno=0
[  240.309710][ T8919] FAT-fs (loop4): Directory bread(block 71) failed
[  240.389001][ T8934] loop5: detected capacity change from 0 to 256
[  240.604239][ T8919] FAT-fs (loop4): Directory bread(block 72) failed
[  240.605440][ T8919] FAT-fs (loop4): Directory bread(block 73) failed
[  240.632845][   T27] audit: type=1800 audit(228.089:441): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38076 res=0 errno=0
[  240.676791][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1408'.
[  240.679186][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1408'.
[  241.201067][   T27] audit: type=1800 audit(228.605:442): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1412" name="block2mtd" dev="sysfs" ino=6231 res=0 errno=0
[  241.360999][ T8985] binder: 8984:8985 tried to acquire reference to desc 0, got 1 instead
[  241.362775][ T8985] binder_alloc: 8984: binder_alloc_buf, no vma
[  241.363875][ T8985] binder: cannot allocate buffer: vma cleared, target dead or dying
[  241.363906][ T8985] binder: 8984:8985 transaction call to 8984:0 failed 297/29189/-3, size 0-0 line 3247
[  241.367727][ T8985] binder: 8984:8985 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  241.369871][ T8985] binder: 8985 RLIMIT_NICE not set
[  241.706225][ T8990] binder: 8984:8990 got reply transaction with no transaction stack
[  241.708092][ T8990] binder: 8984:8990 transaction reply to 0:0 failed 298/29201/-71, size 50-0 line 2963
[  241.793055][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  241.795006][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  241.796167][ T3940]  loop0:
[  241.802504][   T27] audit: type=1800 audit(229.168:443): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  241.832119][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1419'.
[  241.838954][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1419'.
[  241.863545][ T9006] loop4: detected capacity change from 0 to 256
[  241.870827][   T27] audit: type=1800 audit(229.224:444): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  241.884488][ T9006] FAT-fs (loop4): Directory bread(block 64) failed
[  241.888134][ T9006] FAT-fs (loop4): Directory bread(block 65) failed
[  241.890407][ T9006] FAT-fs (loop4): Directory bread(block 66) failed
[  241.891909][ T9006] FAT-fs (loop4): Directory bread(block 67) failed
[  241.893445][ T9006] FAT-fs (loop4): Directory bread(block 68) failed
[  241.894733][ T9006] FAT-fs (loop4): Directory bread(block 69) failed
[  241.909906][ T9006] FAT-fs (loop4): Directory bread(block 70) failed
[  241.915403][ T9006] FAT-fs (loop4): Directory bread(block 71) failed
[  241.917847][ T9006] FAT-fs (loop4): Directory bread(block 72) failed
[  241.949509][ T9006] FAT-fs (loop4): Directory bread(block 73) failed
[  242.287277][ T4403] binder: undelivered TRANSACTION_ERROR: 29189
[  242.291229][ T4403] binder: undelivered TRANSACTION_ERROR: 29201
[  242.330398][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1421'.
[  242.639909][   T48] Bluetooth: hci5: command 0x1003 tx timeout
[  242.643014][ T4333] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  242.658510][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1421'.
[  242.660717][ T9015] FAULT_INJECTION: forcing a failure.
[  242.660717][ T9015] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  242.663494][ T9015] CPU: 1 PID: 9015 Comm: syz.5.1421 Not tainted syzkaller #0
[  242.665121][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  242.667022][ T9015] Call trace:
[  242.667653][ T9015]  dump_backtrace+0x1c4/0x1f0
[  242.668599][ T9015]  show_stack+0x2c/0x3c
[  242.669422][ T9015]  __dump_stack+0x30/0x40
[  242.670283][ T9015]  dump_stack_lvl+0xf4/0x15c
[  242.671216][ T9015]  dump_stack+0x1c/0x5c
[  242.672070][ T9015]  should_fail_ex+0x3cc/0x524
[  242.672952][ T9015]  should_fail+0x14/0x24
[  242.673726][ T9015]  should_fail_usercopy+0x20/0x30
[  242.674699][ T9015]  copyout+0x2c/0x148
[  242.675441][ T9015]  _copy_to_iter+0x418/0xeac
[  242.676335][ T9015]  simple_copy_to_iter+0x5c/0x80
[  242.677280][ T9015]  __skb_datagram_iter+0xd8/0x680
[  242.678231][ T9015]  skb_copy_datagram_iter+0x124/0x338
[  242.679220][ T9015]  netlink_recvmsg+0x25c/0xb08
[  242.680099][ T9015]  ____sys_recvmsg+0x270/0x754
[  242.680973][ T9015]  do_recvmmsg+0x36c/0x9d8
[  242.681785][ T9015]  __arm64_sys_recvmmsg+0x184/0x244
[  242.682724][ T9015]  invoke_syscall+0x98/0x290
[  242.683571][ T9015]  el0_svc_common+0x13c/0x258
[  242.684445][ T9015]  do_el0_svc+0x5c/0x134
[  242.685268][ T9015]  el0_svc+0x58/0x12c
[  242.686016][ T9015]  el0t_64_sync_handler+0x84/0xf0
[  242.686969][ T9015]  el0t_64_sync+0x18c/0x190
[  242.693729][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1421'.
[  242.727177][   T27] audit: type=1800 audit(230.017:445): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1424" name="block2mtd" dev="sysfs" ino=6231 res=0 errno=0
[  242.870831][ T9039] netlink: 'syz.3.1430': attribute type 72 has an invalid length.
[  242.876490][ T9039] netlink: 'syz.3.1430': attribute type 72 has an invalid length.
[  242.931442][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  242.933285][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  242.934461][ T3940]  loop0:
[  242.949599][   T27] audit: type=1800 audit(230.229:446): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  243.001406][ T9054] binder: tried to use weak ref as strong ref
[  243.005310][ T9054] binder: 9048:9054 Acquire 1 refcount change on invalid ref 0 ret -22
[  243.552451][ T9067] FAULT_INJECTION: forcing a failure.
[  243.552451][ T9067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.554714][ T9067] CPU: 1 PID: 9067 Comm: syz.3.1435 Not tainted syzkaller #0
[  243.556088][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  243.557984][ T9067] Call trace:
[  243.558617][ T9067]  dump_backtrace+0x1c4/0x1f0
[  243.559534][ T9067]  show_stack+0x2c/0x3c
[  243.560355][ T9067]  __dump_stack+0x30/0x40
[  243.561187][ T9067]  dump_stack_lvl+0xf4/0x15c
[  243.562073][ T9067]  dump_stack+0x1c/0x5c
[  243.562947][ T9067]  should_fail_ex+0x3cc/0x524
[  243.563822][ T9067]  should_fail+0x14/0x24
[  243.564626][ T9067]  should_fail_usercopy+0x20/0x30
[  243.565572][ T9067]  copy_msghdr_from_user+0xc4/0x4e0
[  243.566552][ T9067]  do_recvmmsg+0x338/0x9d8
[  243.567380][ T9067]  __arm64_sys_recvmmsg+0x184/0x244
[  243.568360][ T9067]  invoke_syscall+0x98/0x290
[  243.569244][ T9067]  el0_svc_common+0x13c/0x258
[  243.570112][ T9067]  do_el0_svc+0x5c/0x134
[  243.570927][ T9067]  el0_svc+0x58/0x12c
[  243.571640][ T9067]  el0t_64_sync_handler+0x84/0xf0
[  243.572532][ T9067]  el0t_64_sync+0x18c/0x190
[  244.529397][   T27] audit: type=1800 audit(231.678:447): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1440" name="block2mtd" dev="sysfs" ino=6231 res=0 errno=0
[  244.572953][ T9104] Bluetooth: Error in BCSP hdr checksum
[  244.592775][ T9107] netlink: 'syz.6.1442': attribute type 72 has an invalid length.
[  244.594788][ T9107] netlink: 'syz.6.1442': attribute type 72 has an invalid length.
[  244.628976][ T9112] binder_user_error: 1 callbacks suppressed
[  244.628985][ T9112] binder: tried to use weak ref as strong ref
[  244.631321][ T9112] binder: 9111:9112 Acquire 1 refcount change on invalid ref 0 ret -22
[  244.633173][ T9112] binder: 9111:9112 got transaction to invalid handle, 1
[  244.634574][ T9112] binder_debug: 3 callbacks suppressed
[  244.634587][ T9112] binder: 9112:9111 cannot find target node
[  244.637034][ T9112] binder: 9111:9112 transaction call to 0:0 failed 304/29201/-22, size 0-0 line 3062
[  244.641290][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  244.643181][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  244.644339][ T3940]  loop0:
[  244.649665][ T4403] binder: undelivered TRANSACTION_ERROR: 29201
[  245.310223][ T9150] netlink: 'syz.3.1456': attribute type 72 has an invalid length.
[  245.312405][ T9150] netlink: 'syz.3.1456': attribute type 72 has an invalid length.
[  245.334587][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  245.336690][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  245.338172][ T3940]  loop0:
[  245.350425][ T9154] binder: tried to use weak ref as strong ref
[  245.351728][ T9154] binder: 9153:9154 Acquire 1 refcount change on invalid ref 0 ret -22
[  245.354268][ T9154] binder: 9153:9154 got transaction to invalid handle, 1
[  245.356175][ T9154] binder: 9154:9153 cannot find target node
[  245.357701][ T9154] binder: 9153:9154 transaction call to 0:0 failed 307/29201/-22, size 0-0 line 3062
[  245.366643][ T4403] binder: undelivered TRANSACTION_ERROR: 29201
[  245.711020][ T9173] loop5: detected capacity change from 0 to 512
[  245.827111][ T9177] __nla_validate_parse: 8 callbacks suppressed
[  245.827125][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1468'.
[  245.838031][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1468'.
[  245.854690][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  245.854700][   T27] audit: type=1800 audit(232.905:453): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1470" name="block2mtd" dev="sysfs" ino=6231 res=0 errno=0
[  245.870696][ T9183] binder: BINDER_SET_CONTEXT_MGR already set
[  245.871836][ T9183] binder: 9182:9183 ioctl 4018620d 20000640 returned -16
[  245.873429][ T9183] binder: 9182:9183 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  245.885071][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  245.896122][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  245.897364][ T3940]  loop0:
[  245.901186][   T27] audit: type=1800 audit(232.942:454): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  245.902587][ T9183] binder: 9183 RLIMIT_NICE not set
[  245.929853][ T9187] binder: 9182:9187 got reply transaction with no transaction stack
[  245.933951][ T9187] binder: 9182:9187 transaction reply to 0:0 failed 310/29201/-71, size 50-0 line 2963
[  246.171980][ T9201] loop6: detected capacity change from 0 to 512
[  246.671299][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1481'.
[  246.673601][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1481'.
[  246.703010][   T27] audit: type=1800 audit(233.689:455): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1482" name="block2mtd" dev="sysfs" ino=6231 res=0 errno=0
[  246.764040][ T4342] Bluetooth: hci5: command 0x1003 tx timeout
[  246.765271][ T4333] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  246.789098][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  246.791217][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  246.792510][ T3940]  loop0:
[  246.796999][ T4376] binder: undelivered TRANSACTION_ERROR: 29201
[  246.819659][   T27] audit: type=1800 audit(233.782:456): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  246.867519][ T9222] loop4: detected capacity change from 0 to 512
[  246.880775][   T27] audit: type=1800 audit(233.846:457): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  246.984190][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1492'.
[  246.986248][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1492'.
[  247.019057][   T27] audit: type=1800 audit(233.975:458): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176539 res=0 errno=0
[  247.024159][   T27] audit: type=1800 audit(233.985:459): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176549 res=0 errno=0
[  247.027152][   T27] audit: type=1800 audit(233.985:460): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1493" name="block2mtd" dev="sysfs" ino=6231 res=0 errno=0
[  247.118046][ T9242] binder: BINDER_SET_CONTEXT_MGR already set
[  247.125129][ T9242] binder: 9241:9242 ioctl 4018620d 20000640 returned -16
[  247.133525][ T9242] binder: 9241:9242 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  247.189192][ T9247] binder: 9241:9247 transaction reply to 0:0 failed 313/29201/-71, size 50-0 line 2963
[  248.016632][ T4403] binder: undelivered TRANSACTION_ERROR: 29201
[  248.130452][ T9263] loop7: detected capacity change from 0 to 256
[  248.377071][   T27] audit: type=1800 audit(235.221:461): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38278 res=0 errno=0
[  248.427397][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  248.429854][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  248.431292][ T3940]  loop0:
[  248.439019][   T27] audit: type=1800 audit(235.286:462): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  249.277902][ T4333] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  249.603154][ T9298] loop4: detected capacity change from 0 to 512
[  249.642290][ T9300] binder: BINDER_SET_CONTEXT_MGR already set
[  249.644024][ T9300] binder: 9299:9300 ioctl 4018620d 20000640 returned -16
[  250.003713][ T9313] FAULT_INJECTION: forcing a failure.
[  250.003713][ T9313] name fail_futex, interval 1, probability 0, space 0, times 0
[  250.012292][ T9313] CPU: 1 PID: 9313 Comm: syz.7.1519 Not tainted syzkaller #0
[  250.013649][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  250.015560][ T9313] Call trace:
[  250.016235][ T9313]  dump_backtrace+0x1c4/0x1f0
[  250.017161][ T9313]  show_stack+0x2c/0x3c
[  250.017972][ T9313]  __dump_stack+0x30/0x40
[  250.018832][ T9313]  dump_stack_lvl+0xf4/0x15c
[  250.019713][ T9313]  dump_stack+0x1c/0x5c
[  250.020489][ T9313]  should_fail_ex+0x3cc/0x524
[  250.021351][ T9313]  should_fail+0x14/0x24
[  250.022135][ T9313]  get_futex_key+0x904/0xfb0
[  250.022991][ T9313]  futex_wait_setup+0xbc/0x320
[  250.023902][ T9313]  futex_wait+0x164/0x424
[  250.024725][ T9313]  do_futex+0x2e8/0x340
[  250.025512][ T9313]  __arm64_sys_futex+0x390/0x414
[  250.026433][ T9313]  invoke_syscall+0x98/0x290
[  250.027245][ T9313]  el0_svc_common+0x13c/0x258
[  250.028098][ T9313]  do_el0_svc+0x5c/0x134
[  250.028859][ T9313]  el0_svc+0x58/0x12c
[  250.029564][ T9313]  el0t_64_sync_handler+0x84/0xf0
[  250.030515][ T9313]  el0t_64_sync+0x18c/0x190
[  250.648143][ T4399] binder_debug: 1 callbacks suppressed
[  250.648153][ T4399] binder: undelivered TRANSACTION_ERROR: 29201
[  250.666096][ T9238] block2mtd: error: cannot open device /
[  250.791729][ T9350] loop4: detected capacity change from 0 to 256
[  250.804987][ T9350] FAT-fs (loop4): Directory bread(block 64) failed
[  250.806506][ T9350] FAT-fs (loop4): Directory bread(block 65) failed
[  250.807768][ T9350] FAT-fs (loop4): Directory bread(block 66) failed
[  250.808961][ T9350] FAT-fs (loop4): Directory bread(block 67) failed
[  250.810380][ T9350] FAT-fs (loop4): Directory bread(block 68) failed
[  250.812526][ T9350] FAT-fs (loop4): Directory bread(block 69) failed
[  250.814583][ T9350] FAT-fs (loop4): Directory bread(block 70) failed
[  250.816321][ T9350] FAT-fs (loop4): Directory bread(block 71) failed
[  251.199501][ T9350] FAT-fs (loop4): Directory bread(block 72) failed
[  251.201211][ T9350] FAT-fs (loop4): Directory bread(block 73) failed
[  251.838332][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  251.842759][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  251.845310][ T3940]  loop0:
[  251.864544][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  251.864559][   T27] audit: type=1800 audit(238.441:467): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  252.117395][ T9380] binder_user_error: 5 callbacks suppressed
[  252.117411][ T9380] binder: 9379:9380 got transaction to invalid handle, 1
[  252.120137][ T9380] binder: 9380:9379 cannot find target node
[  252.121153][ T9380] binder: 9379:9380 transaction call to 0:0 failed 320/29201/-22, size 0-0 line 3062
[  252.123929][ T9380] binder: 9379:9380 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  252.126332][ T9380] binder: 9380 RLIMIT_NICE not set
[  252.179461][ T9383] binder: 9379:9383 got reply transaction with no transaction stack
[  252.180941][ T9383] binder: 9379:9383 transaction reply to 0:0 failed 321/29201/-71, size 50-0 line 2963
[  252.790771][ T9403] binder: 9402:9403 tried to acquire reference to desc 0, got 1 instead
[  252.792871][ T9403] binder: 9402:9403 got reply transaction with bad transaction stack, transaction 326 has target 9402:0
[  252.795358][ T9403] binder: 9402:9403 transaction reply to 0:0 failed 327/29201/-71, size 0-0 line 2978
[  252.797798][ T9403] binder: 9402:9403 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  252.801234][ T9403] binder: 9403 RLIMIT_NICE not set
[  252.802138][ T9403] binder: 9403 RLIMIT_NICE not set
[  252.803505][ T9403] binder: 9403 RLIMIT_NICE not set
[  252.804421][ T9403] binder_alloc: 9402: binder_alloc_buf, no vma
[  252.805511][ T9403] binder: cannot allocate buffer: vma cleared, target dead or dying
[  252.805543][ T9403] binder: 9402:9403 transaction reply to 9402:9403 failed 328/29189/-3, size 0-0 line 3247
[  252.808692][ T9403] binder: send failed reply for transaction 326 to 9402:9403
[  252.811623][ T4403] binder: undelivered TRANSACTION_COMPLETE
[  252.812895][ T4403] binder: undelivered TRANSACTION_ERROR: 29201
[  252.865693][ T9407] loop4: detected capacity change from 0 to 256
[  252.874312][   T27] audit: type=1800 audit(239.373:468): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37975 res=0 errno=0
[  252.892326][ T9407] FAT-fs (loop4): Directory bread(block 64) failed
[  252.893789][ T9407] FAT-fs (loop4): Directory bread(block 65) failed
[  252.895194][ T9407] FAT-fs (loop4): Directory bread(block 66) failed
[  252.897551][ T9407] FAT-fs (loop4): Directory bread(block 67) failed
[  252.900246][ T9407] FAT-fs (loop4): Directory bread(block 68) failed
[  252.902878][ T9407] FAT-fs (loop4): Directory bread(block 69) failed
[  252.905350][ T9407] FAT-fs (loop4): Directory bread(block 70) failed
[  252.909081][ T9407] FAT-fs (loop4): Directory bread(block 71) failed
[  252.911585][ T9407] FAT-fs (loop4): Directory bread(block 72) failed
[  252.915872][ T9407] FAT-fs (loop4): Directory bread(block 73) failed
[  253.201438][ T4333] Bluetooth: hci5: command 0x1003 tx timeout
[  253.201644][   T48] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  253.313081][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  253.316018][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  253.318534][ T3940]  loop0:
[  253.329416][   T27] audit: type=1800 audit(239.798:469): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  254.007955][ T9437] binder: BINDER_SET_CONTEXT_MGR already set
[  254.009775][ T9437] binder: 9433:9437 ioctl 4018620d 20000640 returned -16
[  255.127757][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  255.129737][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  255.133382][ T3940]  loop0:
[  255.138079][   T27] audit: type=1800 audit(241.468:470): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  255.156513][   T27] audit: type=1800 audit(241.477:471): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177399 res=0 errno=0
[  255.175546][   T27] audit: type=1800 audit(241.486:472): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177409 res=0 errno=0
[  255.202540][ T9464] loop5: detected capacity change from 0 to 256
[  255.211722][   T27] audit: type=1800 audit(241.532:473): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38076 res=0 errno=0
[  255.224905][ T9464] FAT-fs (loop5): Directory bread(block 64) failed
[  255.234913][ T9464] FAT-fs (loop5): Directory bread(block 65) failed
[  255.236385][ T9464] FAT-fs (loop5): Directory bread(block 66) failed
[  255.242851][ T9464] FAT-fs (loop5): Directory bread(block 67) failed
[  255.245935][ T9464] FAT-fs (loop5): Directory bread(block 68) failed
[  255.251904][ T9464] FAT-fs (loop5): Directory bread(block 69) failed
[  255.255275][ T9464] FAT-fs (loop5): Directory bread(block 70) failed
[  255.258984][ T9464] FAT-fs (loop5): Directory bread(block 71) failed
[  255.261371][ T9464] FAT-fs (loop5): Directory bread(block 72) failed
[  255.263945][ T9464] FAT-fs (loop5): Directory bread(block 73) failed
[  256.142119][ T9521] loop5: detected capacity change from 0 to 512
[  256.156601][ T9521] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  256.160562][ T9521] FAT-fs (loop5): Filesystem has been set read-only
[  256.211887][ T9527] binder_debug: 10 callbacks suppressed
[  256.211897][ T9527] binder: 9527:9525 cannot find target node
[  256.221637][ T9527] binder: 9525:9527 transaction call to 0:0 failed 337/29201/-22, size 0-0 line 3062
[  256.279339][ T9537] binder: 9525:9537 transaction reply to 0:0 failed 338/29201/-71, size 50-0 line 2963
[  256.301846][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  256.303910][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  256.305341][ T3940]  loop0:
[  256.311780][   T27] audit: type=1800 audit(242.547:474): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  256.790075][ T4401] binder: undelivered TRANSACTION_ERROR: 29201
[  256.821115][ T9560] loop3: detected capacity change from 0 to 512
[  256.827627][   T27] audit: type=1800 audit(243.027:475): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37874 res=0 errno=0
[  257.050507][ T9576] loop3: detected capacity change from 0 to 256
[  257.298092][ T4403] binder: undelivered TRANSACTION_ERROR: 29201
[  257.336221][   T27] audit: type=1800 audit(243.498:476): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37874 res=0 errno=0
[  257.340294][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  257.341035][ T4333] Bluetooth: hci5: command 0x1003 tx timeout
[  257.341689][   T48] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  257.468815][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  257.473290][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  257.474493][ T3940]  loop0:
[  257.477929][   T27] audit: type=1800 audit(243.627:477): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  257.579081][ T9608] binder_user_error: 12 callbacks suppressed
[  257.579091][ T9608] binder: 9606:9608 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  257.584721][ T9608] binder: 9608 RLIMIT_NICE not set
[  257.634131][ T9614] binder: 9606:9614 got reply transaction with no transaction stack
[  257.635972][ T9614] binder: 9606:9614 transaction reply to 0:0 failed 340/29201/-71, size 0-0 line 2963
[  257.713823][ T9624] loop7: detected capacity change from 0 to 512
[  257.895741][   T27] audit: type=1800 audit(244.005:478): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177807 res=0 errno=0
[  257.900255][   T27] audit: type=1800 audit(244.014:479): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177817 res=0 errno=0
[  258.432331][ T9654] binder: BINDER_SET_CONTEXT_MGR already set
[  258.433704][ T9654] binder: 9653:9654 ioctl 4018620d 20000640 returned -16
[  258.436555][ T9654] binder: 9653:9654 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  258.439067][ T9654] binder: 9654 RLIMIT_NICE not set
[  258.482336][ T4403] binder: undelivered TRANSACTION_ERROR: 29201
[  258.496458][ T9659] binder: 9653:9659 got reply transaction with no transaction stack
[  258.497840][ T9659] binder: 9653:9659 transaction reply to 0:0 failed 342/29201/-71, size 50-0 line 2963
[  258.561703][ T3940] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  258.563924][ T3940] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  258.565258][ T3940]  loop0:
[  258.581359][   T27] audit: type=1800 audit(244.642:480): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37571 res=0 errno=0
[  258.763551][ T9687] loop7: detected capacity change from 0 to 512
[  258.845240][ T9684] 
[  258.845785][ T9684] ======================================================
[  258.847122][ T9684] WARNING: possible circular locking dependency detected
[  258.848419][ T9684] syzkaller #0 Not tainted
[  258.849252][ T9684] ------------------------------------------------------
[  258.850515][ T9684] syz.5.1602/9684 is trying to acquire lock:
[  258.851588][ T9684] ffff0000fe442870 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: process_measurement+0x2d4/0x17fc
[  258.853523][ T9684] 
[  258.853523][ T9684] but task is already holding lock:
[  258.854842][ T9684] ffff0000cab79948 (&mm->mmap_lock){++++}-{3:3}, at: __arm64_sys_remap_file_pages+0x1d0/0x670
[  258.856736][ T9684] 
[  258.856736][ T9684] which lock already depends on the new lock.
[  258.856736][ T9684] 
[  258.858608][ T9684] 
[  258.858608][ T9684] the existing dependency chain (in reverse order) is:
[  258.860210][ T9684] 
[  258.860210][ T9684] -> #1 (&mm->mmap_lock){++++}-{3:3}:
[  258.861613][ T9684]        __might_fault+0xc4/0x124
[  258.862542][ T9684]        fault_in_readable+0x118/0x3e8
[  258.863535][ T9684]        fault_in_iov_iter_readable+0xc8/0x2dc
[  258.864663][ T9684]        generic_perform_write+0x184/0x508
[  258.865747][ T9684]        __generic_file_write_iter+0x130/0x250
[  258.866888][ T9684]        generic_file_write_iter+0xb4/0x2b0
[  258.867994][ T9684]        vfs_write+0x3c8/0x7c8
[  258.868943][ T9684]        ksys_write+0x12c/0x228
[  258.869877][ T9684]        __arm64_sys_write+0x7c/0x90
[  258.871022][ T9684]        invoke_syscall+0x98/0x290
[  258.872081][ T9684]        el0_svc_common+0x13c/0x258
[  258.873042][ T9684]        do_el0_svc+0x5c/0x134
[  258.873968][ T9684]        el0_svc+0x58/0x12c
[  258.874818][ T9684]        el0t_64_sync_handler+0x84/0xf0
[  258.875864][ T9684]        el0t_64_sync+0x18c/0x190
[  258.876809][ T9684] 
[  258.876809][ T9684] -> #0 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}:
[  258.878428][ T9684]        __lock_acquire+0x3504/0x7280
[  258.879404][ T9684]        lock_acquire+0x210/0x63c
[  258.880324][ T9684]        down_write+0x5c/0x88
[  258.881189][ T9684]        process_measurement+0x2d4/0x17fc
[  258.882235][ T9684]        ima_file_mmap+0xe8/0x140
[  258.883154][ T9684]        security_mmap_file+0x130/0x178
[  258.884230][ T9684]        __arm64_sys_remap_file_pages+0x47c/0x670
[  258.885415][ T9684]        invoke_syscall+0x98/0x290
[  258.886366][ T9684]        el0_svc_common+0x13c/0x258
[  258.887331][ T9684]        do_el0_svc+0x5c/0x134
[  258.888208][ T9684]        el0_svc+0x58/0x12c
[  258.889037][ T9684]        el0t_64_sync_handler+0x84/0xf0
[  258.890065][ T9684]        el0t_64_sync+0x18c/0x190
[  258.891006][ T9684] 
[  258.891006][ T9684] other info that might help us debug this:
[  258.891006][ T9684] 
[  258.892756][ T9684]  Possible unsafe locking scenario:
[  258.892756][ T9684] 
[  258.894093][ T9684]        CPU0                    CPU1
[  258.895063][ T9684]        ----                    ----
[  258.896043][ T9684]   lock(&mm->mmap_lock);
[  258.896838][ T9684]                                lock(&sb->s_type->i_mutex_key#15);
[  258.898270][ T9684]                                lock(&mm->mmap_lock);
[  258.899497][ T9684]   lock(&sb->s_type->i_mutex_key#15);
[  258.900505][ T9684] 
[  258.900505][ T9684]  *** DEADLOCK ***
[  258.900505][ T9684] 
[  258.901932][ T9684] 1 lock held by syz.5.1602/9684:
[  258.902832][ T9684]  #0: ffff0000cab79948 (&mm->mmap_lock){++++}-{3:3}, at: __arm64_sys_remap_file_pages+0x1d0/0x670
[  258.904773][ T9684] 
[  258.904773][ T9684] stack backtrace:
[  258.905835][ T9684] CPU: 0 PID: 9684 Comm: syz.5.1602 Not tainted syzkaller #0
[  258.907170][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  258.908984][ T9684] Call trace:
[  258.909562][ T9684]  dump_backtrace+0x1c4/0x1f0
[  258.910402][ T9684]  show_stack+0x2c/0x3c
[  258.911160][ T9684]  __dump_stack+0x30/0x40
[  258.911936][ T9684]  dump_stack_lvl+0xf4/0x15c
[  258.912753][ T9684]  dump_stack+0x1c/0x5c
[  258.913549][ T9684]  print_circular_bug+0x148/0x1b0
[  258.914503][ T9684]  check_noncircular+0x290/0x370
[  258.915434][ T9684]  __lock_acquire+0x3504/0x7280
[  258.916383][ T9684]  lock_acquire+0x210/0x63c
[  258.917283][ T9684]  down_write+0x5c/0x88
[  258.918120][ T9684]  process_measurement+0x2d4/0x17fc
[  258.919166][ T9684]  ima_file_mmap+0xe8/0x140
[  258.920060][ T9684]  security_mmap_file+0x130/0x178
[  258.921007][ T9684]  __arm64_sys_remap_file_pages+0x47c/0x670
[  258.922097][ T9684]  invoke_syscall+0x98/0x290
[  258.923053][ T9684]  el0_svc_common+0x13c/0x258
[  258.924012][ T9684]  do_el0_svc+0x5c/0x134
[  258.924854][ T9684]  el0_svc+0x58/0x12c
[  258.925636][ T9684]  el0t_64_sync_handler+0x84/0xf0
[  258.926610][ T9684]  el0t_64_sync+0x18c/0x190
[  259.337719][ T4401] binder: undelivered TRANSACTION_ERROR: 29201
[  259.779504][ T4333] Bluetooth: hci2: command 0x0406 tx timeout
[  260.115282][ T4342] Bluetooth: hci5: command 0x1003 tx timeout
[  260.116512][   T48] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  263.063723][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  263.065112][ T2065] ieee802154 phy1 wpan1: encryption failed: -22