last executing test programs: 7m25.056931368s ago: executing program 0 (id=177): add_key$user(&(0x7f0000000240), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$igmp6(0xa, 0x3, 0x2) r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 7m23.992465114s ago: executing program 0 (id=182): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x3b48, &(0x7f00000002c0)={0x0, 0x86a1, 0x1000, 0x0, 0x20004004}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xc, 0x8b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000300)="5456f932731045fecca2245b7bbfb04539020c40f5fcaad5346e21faf67b4664841fe8edfe34cf0ea6daefdd17ba958b07dcdb6eefbdc6a98b8ecf4d468b1d8c1289cf4909d5066c0b8c9ab46cfe580d"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7m23.019268249s ago: executing program 0 (id=184): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x3, 0x0, 0x7fff7ff3}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7m22.412665308s ago: executing program 0 (id=186): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$inet6(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f00000017c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001780)={&(0x7f0000001900)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="14000200626f6e645f736c6176655f30000000000c00018008000300010000000c0001800800030003000000aa7ca4d34de115ec6f0ba8f3daa442b3facb023241ae437d5c06bd0bcef21d02e83e5bd2a3ce3baf1b7083baa4e773f9ede4fd28e7e576d020f98717f09ab6d35bd8b0cadb500ef6e0ddb23d3d43e2b2b5cce80a263c60a9bb0db85999351472121db261f19d1753531937113e534d8b82812a5540e48f503cdf7b1765aea426362954e40f8b"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) 7m22.332265749s ago: executing program 4 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() socket$inet(0x2, 0x2, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 7m21.311478484s ago: executing program 0 (id=190): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x3, 0x0, 0x7fff7ff3}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7m20.503092017s ago: executing program 0 (id=194): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x5, r0, 0x0, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1bf5b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 7m20.501354607s ago: executing program 4 (id=196): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x3, 0x0, 0x7fff7ff3}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7m18.521671567s ago: executing program 4 (id=200): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x3, 0x0, 0x7fff7ff3}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7m17.233263596s ago: executing program 4 (id=203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2a, 0x0, &(0x7f0000000300)="5456f932731045fecca2245b7bbfb04539020c40f5fcaad5346e21faf67b4664841fe8edfe34cf0ea6da"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7m10.022222655s ago: executing program 4 (id=207): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x5, r1, 0x0, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1bf5b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 7m9.846886718s ago: executing program 4 (id=211): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x5, r1, 0x0, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1bf5b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 7m5.07079615s ago: executing program 32 (id=194): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x5, r0, 0x0, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1bf5b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 6m54.311866033s ago: executing program 33 (id=211): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x5, r1, 0x0, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1bf5b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 5m13.127411954s ago: executing program 1 (id=494): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x6}, &(0x7f0000000280)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(0x0, &(0x7f0000000300)=@known='system.posix_acl_access\x00') 5m11.146056073s ago: executing program 1 (id=497): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x110, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, 0x0, &(0x7f00000002c0)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000540)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) 5m9.757523174s ago: executing program 1 (id=502): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000088}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000896000/0x1000)=nil) syz_open_procfs(0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x50}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 4m56.642855623s ago: executing program 1 (id=523): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x70bd2d, 0x25dfdc01, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f00000001c0)=0x4) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0xfea7) 4m55.423892911s ago: executing program 1 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26) 4m48.92231707s ago: executing program 1 (id=544): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_usbip_server_init(0x1) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x490042, 0x0) pwrite64(r4, 0x0, 0x0, 0x8080c61) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=r3], 0x1, 0x122e, &(0x7f0000002580)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000010) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) sendfile(r6, r6, 0x0, 0x1000000000007) 4m31.69345013s ago: executing program 34 (id=544): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_usbip_server_init(0x1) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x490042, 0x0) pwrite64(r4, 0x0, 0x0, 0x8080c61) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=r3], 0x1, 0x122e, &(0x7f0000002580)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000010) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) sendfile(r6, r6, 0x0, 0x1000000000007) 2m3.036355909s ago: executing program 6 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = fsopen(&(0x7f0000001080)='ufs\x00', 0x0) r4 = fsmount(r3, 0x1, 0x7c) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x11, r4}, 0x94) syz_read_part_table(0x1077, &(0x7f0000000000)="$eJzs0LFNBDEUBNA5zt69EwSkVECBxIg9iQpICSiFlJxmEAQfrY9gGwCS9xJbXx6P5fCvjq/9Nkk9JMfsx+iQtCRzkqfNyX3yUclXzVVV2eX9Osm05jImGbnqVT11t8bvX1o/5OZUrc5G02e1zKefO6dlXa8uR/VbljxPyWOSnt2m+WJslvPrNvoffBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/LrvAAAA//8ghCX8") write$P9_RREADLINK(r4, &(0x7f00000011c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) listen(0xffffffffffffffff, 0x9) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCMGET(r5, 0x541e, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r9, 0x5608, 0x3) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000800, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r10, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") 2m1.095665508s ago: executing program 6 (id=847): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000780)={r6, 0x0, 0x4, 0x0, 0x1, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x2, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYBLOB, @ANYRESHEX, @ANYBLOB=',loo']) 1m58.773004303s ago: executing program 6 (id=851): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_usbip_server_init(0x1) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r4 = openat(0xffffffffffffff9c, 0x0, 0x490042, 0x0) pwrite64(r4, 0x0, 0x0, 0x8080c61) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000003c0)={0x1f, &(0x7f0000000280)=[{0x11, '\x00', @data=0x3, 0xfffff801}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=r3], 0x1, 0x122e, &(0x7f0000002580)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000010) r6 = openat(0xffffffffffffff9c, 0x0, 0x10042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) sendfile(r6, r6, 0x0, 0x1000000000007) 1m55.744470289s ago: executing program 6 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = fsopen(&(0x7f0000001080)='ufs\x00', 0x0) r4 = fsmount(r3, 0x1, 0x7c) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x11, r4}, 0x94) syz_read_part_table(0x1077, &(0x7f0000000000)="$eJzs0LFNBDEUBNA5zt69EwSkVECBxIg9iQpICSiFlJxmEAQfrY9gGwCS9xJbXx6P5fCvjq/9Nkk9JMfsx+iQtCRzkqfNyX3yUclXzVVV2eX9Osm05jImGbnqVT11t8bvX1o/5OZUrc5G02e1zKefO6dlXa8uR/VbljxPyWOSnt2m+WJslvPrNvoffBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/LrvAAAA//8ghCX8") write$P9_RREADLINK(r4, &(0x7f00000011c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) listen(0xffffffffffffffff, 0x9) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCMGET(r5, 0x541e, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) 1m51.766678199s ago: executing program 6 (id=860): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) openat(0xffffffffffffff9c, 0x0, 0x14b442, 0x82) 1m45.942421297s ago: executing program 6 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xffff7ffc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000280)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000400)={0x0, 0x25, 0x4}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) 1m30.347427533s ago: executing program 35 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xffff7ffc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000280)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000400)={0x0, 0x25, 0x4}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) 5.122869652s ago: executing program 7 (id=1396): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001ac14142500000000000000000000000000000004000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000e0ffffffffffffff000a000000000000feffffffff7f400002"], 0xc4}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f02000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000", 0xb8) 5.079061323s ago: executing program 7 (id=1398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) sendmsg$tipc(r3, 0x0, 0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 4.214084956s ago: executing program 3 (id=1403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) 3.854718132s ago: executing program 8 (id=1405): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e", 0x32}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.853655392s ago: executing program 7 (id=1406): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x312, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000100)="3803", 0x2}], 0x1}, 0x0) 3.767510913s ago: executing program 2 (id=1407): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fcntl$dupfd(r3, 0x0, r3) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) 3.416641608s ago: executing program 7 (id=1408): syz_io_uring_setup(0x5a55, &(0x7f0000000200)={0x0, 0x3955, 0x8000, 0x1, 0x297}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 3.031286084s ago: executing program 7 (id=1410): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') syz_open_procfs(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.030894184s ago: executing program 8 (id=1411): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000052000/0x1000)=nil, 0x1000, 0x1000001) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f00000000c0)=""/19, &(0x7f0000000080)=0x13) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8000000000000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) setresgid(0xee00, 0xee01, 0x0) r7 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r7, 0xee01, 0x0) keyctl$setperm(0x5, r7, 0x30925) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) keyctl$describe(0x6, r7, 0x0, 0x0) 3.030115784s ago: executing program 5 (id=1412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x304}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28) 2.992202694s ago: executing program 5 (id=1413): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r3}) 2.991344694s ago: executing program 7 (id=1414): mount(0x0, 0x0, 0x0, 0x808000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000800000000000000000001140004"], 0xa0}}, 0x0) 2.972494605s ago: executing program 3 (id=1415): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xfffb, 0x1}, 0x6) 2.903390426s ago: executing program 2 (id=1416): syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x2000005, 0x0, 0x0, 0x0, 0x40], [0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]], '\x00', [{0x0, 0x610cfd08}, {0x2, 0xc}, {0x0, 0x2}, {}, {0x1, 0x4}, {0x0, 0x4}, {}, {0x7}], '\x00', 0x3f9}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.903199375s ago: executing program 3 (id=1417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) sendmsg$tipc(r3, 0x0, 0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000feb000/0x14000)=nil, 0x14000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 2.385009683s ago: executing program 3 (id=1418): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macsec0\x00', 0x0}) 2.295606975s ago: executing program 3 (id=1419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x40}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x4000) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @timestamp, @window={0x3, 0x0, 0x5}, @timestamp, @window={0x3, 0x8, 0x7}, @timestamp, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x40004) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000003c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000280)={0x3, 0x7}, 0x2) r7 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r7, 0x0, 0x0) 1.91769035s ago: executing program 5 (id=1420): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) bind$tipc(r0, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x2}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.91740686s ago: executing program 2 (id=1421): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44090) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 1.888631561s ago: executing program 8 (id=1422): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) bind$tipc(r0, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x2}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.827700402s ago: executing program 5 (id=1423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001ac14142500000000000000000000000000000004000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000e0ffffffffffffff000a000000000000feffffffff7f400002000000000000080000000000000000"], 0xc4}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f02000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000", 0xb8) 1.827522762s ago: executing program 8 (id=1424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x304}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28) 1.827405672s ago: executing program 2 (id=1425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x8880) 1.802086792s ago: executing program 5 (id=1426): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fcntl$dupfd(r3, 0x0, r3) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) 1.801001623s ago: executing program 8 (id=1427): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89101) r4 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x100000000000000) 1.780090703s ago: executing program 2 (id=1428): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x7, &(0x7f00000000c0)=[0xee00, 0xee01, 0xee01, 0xee01, 0x0, 0xee01, 0xee01]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 126.572148ms ago: executing program 5 (id=1429): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x44, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba}}}, &(0x7f0000000440)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xfe, 0x1d0, &(0x7f0000000ac0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x102) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000005c0)=ANY=[@ANYRES16=r4, @ANYRES8, @ANYRESDEC=0x0, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES8=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="7fea7021529f26e1a02c8ab1f66d23d0b2d5c34410548a9fa297de147010a97f20db6cad59b9e34f23b0c3f357b8a72dfeb40a21a2f04d63f9edb3306fd50f80cbcbef11cf29de4eb2f5e9"], 0x1, 0xa8f, &(0x7f0000001400)="$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") r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, 0x0, 0x0) 119.612508ms ago: executing program 3 (id=1430): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r3}) 1.667479ms ago: executing program 8 (id=1431): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) gettid() r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r1, @ANYBLOB="000226bd7000fddbdf251900000005001e00c200000005001e000e0000000500a3000000000006006d00060000000500a3000100000006006d0001000000050060000900000005"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000100)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000009e00), 0x4000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x1a1000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x11, 0x2}) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) getrandom(&(0x7f0000000040)=""/301, 0xffffffffffffff1a, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1bc, 0x19, 0x2, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000, 0x0, 0x0, 0x5}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3507, 0x5, 0x0, 0x0, 0x0, 0x9, 0x1}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 2 (id=1432): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) fstatfs(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Quota mode: none. [ 168.766378][ T6363] loop6: detected capacity change from 0 to 8192 [ 168.873273][ T6363] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.830019][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 171.222447][ T6387] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 171.223941][ T6387] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 171.768908][ T6394] binder: tried to use weak ref as strong ref [ 171.770009][ T6394] binder: 6393:6394 Acquire 1 refcount change on invalid ref 0 ret -22 [ 171.771627][ T6394] binder: 6393:6394 got transaction to invalid handle, 1 [ 171.772729][ T6394] binder: 6394:6393 cannot find target node [ 171.773622][ T6394] binder: 6393:6394 transaction call to 0:0 failed 179/29201/-22, size 0-24 line 3045 [ 171.775236][ T1966] binder: undelivered TRANSACTION_ERROR: 29201 [ 171.880417][ T6398] binder: 6396:6398 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 171.882967][ T6398] binder: 6396:6398 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 171.884763][ T6398] binder: 6398 RLIMIT_NICE not set [ 172.711096][ T6413] loop2: detected capacity change from 0 to 8192 [ 172.723446][ T6413] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.070421][ T6410] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 173.071592][ T6410] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.073095][ T6410] vhci_hcd vhci_hcd.0: Device attached [ 173.075718][ T6411] vhci_hcd: connection closed [ 173.091540][ T4854] vhci_hcd: stop threads [ 173.093035][ T4854] vhci_hcd: release socket [ 173.093773][ T4854] vhci_hcd: disconnect device [ 173.488371][ T6415] binder: 6396:6415 got transaction to invalid handle, 1 [ 173.489473][ T6415] binder: 6415:6396 cannot find target node [ 173.490461][ T6415] binder: 6396:6415 transaction call to 0:0 failed 181/29201/-22, size 72-24 line 3045 [ 173.637157][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 176.024564][ T6450] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 176.026062][ T6450] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 176.415693][ T6457] loop2: detected capacity change from 0 to 8192 [ 176.421140][ T6457] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.688593][ T6459] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 178.689792][ T6459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.691231][ T6459] vhci_hcd vhci_hcd.0: Device attached [ 178.694122][ T6461] vhci_hcd: connection closed [ 178.707731][ T4415] vhci_hcd: stop threads [ 178.709272][ T4415] vhci_hcd: release socket [ 178.709991][ T4415] vhci_hcd: disconnect device [ 179.068130][ T6465] binder: 6464:6465 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 179.078565][ T6465] binder: 6464:6465 Acquire 1 refcount change on invalid ref 0 ret -22 [ 179.079956][ T6465] binder: 6464:6465 got transaction to invalid handle, 1 [ 179.081068][ T6465] binder: 6465:6464 cannot find target node [ 179.082050][ T6465] binder: 6464:6465 transaction call to 0:0 failed 182/29201/-22, size 0-24 line 3045 [ 179.111254][ T5137] binder: undelivered TRANSACTION_ERROR: 29201 [ 179.165863][ T6475] binder: 6474:6475 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 179.186455][ T6475] binder: 6474:6475 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 179.227943][ T6475] binder: 6475 RLIMIT_NICE not set [ 180.634471][ T6489] loop2: detected capacity change from 0 to 8192 [ 180.649694][ T6488] loop6: detected capacity change from 0 to 8192 [ 183.556372][ T6489] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.558849][ T6488] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.613405][ T6493] loop1: detected capacity change from 0 to 128 [ 183.630931][ T6482] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 183.632063][ T6482] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.633357][ T6482] vhci_hcd vhci_hcd.0: Device attached [ 183.640542][ T5720] I/O error, dev loop6, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.654135][ T6493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 183.719986][ T6486] vhci_hcd: connection closed [ 183.724113][ T6499] loop3: detected capacity change from 0 to 128 [ 183.736562][ T4460] vhci_hcd: stop threads [ 183.737592][ T4460] vhci_hcd: release socket [ 183.738229][ T4460] vhci_hcd: disconnect device [ 183.758458][ T6499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.779371][ T6514] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 184.780614][ T6514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.782825][ T6514] vhci_hcd vhci_hcd.0: Device attached [ 185.066827][ T4826] usb 6-1: new low-speed USB device number 3 using vhci_hcd [ 185.229632][ T6515] vhci_hcd: connection reset by peer [ 185.243095][ T5808] vhci_hcd: stop threads [ 185.244522][ T5808] vhci_hcd: release socket [ 185.246444][ T5808] vhci_hcd: disconnect device [ 185.636161][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 185.657080][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 186.514823][ T6537] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 186.516762][ T6537] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 187.211338][ T6556] binder: tried to use weak ref as strong ref [ 187.212595][ T6556] binder: 6555:6556 Acquire 1 refcount change on invalid ref 0 ret -22 [ 187.214235][ T6556] binder: 6555:6556 got transaction to invalid handle, 1 [ 187.215417][ T6556] binder: 6556:6555 cannot find target node [ 187.216273][ T6556] binder: 6555:6556 transaction call to 0:0 failed 186/29201/-22, size 0-24 line 3045 [ 187.222432][ T3899] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.358806][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.360092][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.119367][ T6568] loop6: detected capacity change from 0 to 128 [ 188.122738][ T6570] loop5: detected capacity change from 0 to 128 [ 188.140308][ T6577] binder: 6576:6577 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 188.145173][ T6568] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 188.150412][ T6570] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 188.165339][ T6577] binder: 6576:6577 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 188.177224][ T6577] binder: 6577 RLIMIT_NICE not set [ 189.445340][ T6584] binder: 6576:6584 got transaction to invalid handle, 1 [ 189.446905][ T6584] binder: 6584:6576 cannot find target node [ 189.449047][ T6584] binder: 6576:6584 transaction call to 0:0 failed 188/29201/-22, size 72-24 line 3045 [ 189.456255][ T5350] EXT4-fs (loop5): unmounting filesystem. [ 189.846750][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.304126][ T5431] EXT4-fs (loop6): unmounting filesystem. [ 190.367037][ T4826] vhci_hcd: vhci_device speed not set [ 190.449676][ T6602] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 190.451341][ T6602] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.699188][ T6608] binder: BINDER_SET_CONTEXT_MGR already set [ 190.700405][ T6608] binder: 6607:6608 ioctl 4018620d 200002c0 returned -16 [ 190.798882][ T6608] binder: 6607:6608 got transaction to invalid handle, 1 [ 190.800241][ T6608] binder: 6608:6607 cannot find target node [ 190.801741][ T6608] binder: 6607:6608 transaction call to 0:0 failed 191/29201/-22, size 0-24 line 3045 [ 191.053937][ T5137] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.122313][ T6619] loop1: detected capacity change from 0 to 128 [ 191.814710][ T6626] loop2: detected capacity change from 0 to 8192 [ 191.828275][ T6626] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.203929][ T6622] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 192.205007][ T6622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.206270][ T6622] vhci_hcd vhci_hcd.0: Device attached [ 192.224478][ T6623] vhci_hcd: connection closed [ 192.226259][ T4460] vhci_hcd: stop threads [ 192.243048][ T4460] vhci_hcd: release socket [ 192.244318][ T4460] vhci_hcd: disconnect device [ 192.454605][ T6619] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 192.775376][ T6634] loop6: detected capacity change from 0 to 128 [ 192.804127][ T6634] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 193.056953][ T6637] binder: 6636:6637 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 193.059090][ T6637] binder: 6637 RLIMIT_NICE not set [ 193.130406][ T6640] binder: 6636:6640 tried to acquire reference to desc 0, got 1 instead [ 193.170690][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 193.529815][ T6654] binder: BINDER_SET_CONTEXT_MGR already set [ 193.530857][ T6654] binder: 6653:6654 ioctl 4018620d 200002c0 returned -16 [ 193.532185][ T6654] binder: 6653:6654 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 193.534368][ T6654] binder: 6654 RLIMIT_NICE not set [ 193.547576][ T6650] binder: BINDER_SET_CONTEXT_MGR already set [ 193.548584][ T6650] binder: 6649:6650 ioctl 4018620d 200002c0 returned -16 [ 193.550614][ T6650] binder: tried to use weak ref as strong ref [ 193.551574][ T6650] binder: 6649:6650 Acquire 1 refcount change on invalid ref 0 ret -22 [ 193.552999][ T6650] binder: 6649:6650 got transaction to invalid handle, 1 [ 193.554263][ T6650] binder: 6650:6649 cannot find target node [ 193.555182][ T6650] binder: 6649:6650 transaction call to 0:0 failed 200/29201/-22, size 72-0 line 3045 [ 193.556998][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 193.977811][ T6664] binder: 6653:6664 got transaction to invalid handle, 1 [ 193.979297][ T6664] binder: 6664:6653 cannot find target node [ 193.980482][ T6664] binder: 6653:6664 transaction call to 0:0 failed 201/29201/-22, size 72-24 line 3045 [ 193.994776][ T5431] EXT4-fs (loop6): unmounting filesystem. [ 194.268984][ T6674] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 194.270670][ T6674] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.803073][ T4825] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.955861][ T6681] binder: BINDER_SET_CONTEXT_MGR already set [ 194.962913][ T6681] binder: 6678:6681 ioctl 4018620d 200002c0 returned -16 [ 194.964443][ T6681] binder: 6678:6681 got transaction to invalid handle, 1 [ 195.258887][ T6681] binder: 6681:6678 cannot find target node [ 195.260145][ T6681] binder: 6678:6681 transaction call to 0:0 failed 204/29201/-22, size 0-24 line 3045 [ 195.273836][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.673418][ T6699] ======================================================= [ 195.673418][ T6699] WARNING: The mand mount option has been deprecated and [ 195.673418][ T6699] and is ignored by this kernel. Remove the mand [ 195.673418][ T6699] option from the mount to silence this warning. [ 195.673418][ T6699] ======================================================= [ 197.100289][ T6706] binder: 6706:6701 cannot find target node [ 197.113792][ T6708] loop2: detected capacity change from 0 to 128 [ 197.328166][ T6708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 197.419411][ T6717] loop5: detected capacity change from 0 to 8192 [ 197.428500][ T6717] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.046876][ T6714] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 198.047882][ T6714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.049492][ T6714] vhci_hcd vhci_hcd.0: Device attached [ 198.056520][ T6715] vhci_hcd: connection closed [ 198.058554][ T4932] vhci_hcd: stop threads [ 198.060153][ T4932] vhci_hcd: release socket [ 198.060875][ T4932] vhci_hcd: disconnect device [ 198.509740][ T6721] loop6: detected capacity change from 0 to 128 [ 198.881351][ T6721] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 198.895887][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 199.312286][ T6745] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 199.313413][ T6745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.314838][ T6745] vhci_hcd vhci_hcd.0: Device attached [ 199.443168][ T6748] loop2: detected capacity change from 0 to 8192 [ 199.475886][ T6748] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.885399][ T6746] vhci_hcd: connection closed [ 199.889238][ T4932] vhci_hcd: stop threads [ 199.890759][ T4932] vhci_hcd: release socket [ 199.892333][ T4932] vhci_hcd: disconnect device [ 200.418983][ T5431] EXT4-fs (loop6): unmounting filesystem. [ 200.569818][ T6754] binder_user_error: 3 callbacks suppressed [ 200.569827][ T6754] binder: 6753:6754 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 200.645243][ T6758] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 200.646770][ T6758] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 200.872801][ T6754] binder: 6753:6754 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 200.892035][ T6754] binder: 6754 RLIMIT_NICE not set [ 200.923845][ T6760] binder: 6753:6760 got transaction to invalid handle, 1 [ 200.925214][ T6760] binder_debug: 2 callbacks suppressed [ 200.925228][ T6760] binder: 6760:6753 cannot find target node [ 200.928383][ T6760] binder: 6753:6760 transaction call to 0:0 failed 209/29201/-22, size 72-24 line 3045 [ 201.397795][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.038322][ T6794] binder: tried to use weak ref as strong ref [ 203.039461][ T6794] binder: 6793:6794 Acquire 1 refcount change on invalid ref 0 ret -22 [ 203.054808][ T6794] binder: 6793:6794 got transaction to invalid handle, 1 [ 203.056145][ T6794] binder: 6794:6793 cannot find target node [ 203.063644][ T6794] binder: 6793:6794 transaction call to 0:0 failed 212/29201/-22, size 72-0 line 3045 [ 203.069677][ T6077] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.178083][ T6805] loop5: detected capacity change from 0 to 128 [ 204.138714][ T6819] loop6: detected capacity change from 0 to 8192 [ 204.301541][ T6819] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.728233][ T6817] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 204.729346][ T6817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.730925][ T6817] vhci_hcd vhci_hcd.0: Device attached [ 204.736118][ T6816] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 204.737182][ T6816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.738578][ T6816] vhci_hcd vhci_hcd.0: Device attached [ 204.741352][ T6821] vhci_hcd: connection closed [ 204.742870][ T6115] vhci_hcd: stop threads [ 204.757150][ T6115] vhci_hcd: release socket [ 204.758884][ T6115] vhci_hcd: disconnect device [ 204.998738][ T5137] usb 6-1: new low-speed USB device number 4 using vhci_hcd [ 205.087130][ T6805] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 205.309279][ T6829] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 205.310774][ T6829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 205.986807][ T6820] vhci_hcd: connection reset by peer [ 206.016842][ T39] vhci_hcd: stop threads [ 206.017652][ T39] vhci_hcd: release socket [ 206.018464][ T39] vhci_hcd: disconnect device [ 206.822627][ T5350] EXT4-fs (loop5): unmounting filesystem. [ 206.834933][ T6845] binder: BINDER_SET_CONTEXT_MGR already set [ 206.835953][ T6845] binder: 6844:6845 ioctl 4018620d 20000100 returned -16 [ 206.864381][ T6848] loop6: detected capacity change from 0 to 128 [ 206.870666][ T6848] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 206.943741][ T6845] binder: 6844:6845 got transaction to invalid handle, 1 [ 206.944966][ T6845] binder: 6845:6844 cannot find target node [ 206.945935][ T6845] binder: 6844:6845 transaction call to 0:0 failed 214/29201/-22, size 72-0 line 3045 [ 207.573692][ T3899] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.604879][ T6861] binder: 6859:6861 ioctl 4018620d 0 returned -22 [ 207.607707][ T6861] binder: 6859:6861 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 207.610603][ T6861] binder: 6859:6861 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 207.612704][ T6861] binder: 6861 RLIMIT_NICE not set [ 207.693046][ T6863] binder: 6859:6863 got transaction to invalid handle, 1 [ 207.694337][ T6863] binder: 6863:6859 cannot find target node [ 207.696027][ T6863] binder: 6859:6863 transaction call to 0:0 failed 217/29201/-22, size 72-24 line 3045 [ 207.896309][ T6866] loop3: detected capacity change from 0 to 8192 [ 208.030169][ T6866] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.372864][ T6864] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 208.374056][ T6864] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.375401][ T6864] vhci_hcd vhci_hcd.0: Device attached [ 208.557075][ T6865] vhci_hcd: connection closed [ 208.557519][ T5736] vhci_hcd: stop threads [ 208.559129][ T5736] vhci_hcd: release socket [ 208.559924][ T5736] vhci_hcd: disconnect device [ 208.616856][ T3899] vhci_hcd: vhci_device speed not set [ 208.720526][ T5431] EXT4-fs (loop6): unmounting filesystem. [ 208.727536][ T6077] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.114079][ T6897] loop2: detected capacity change from 0 to 128 [ 210.731175][ T6902] loop3: detected capacity change from 0 to 8192 [ 210.754476][ T6902] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.170681][ T6901] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 211.171800][ T6901] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.173129][ T6901] vhci_hcd vhci_hcd.0: Device attached [ 211.177026][ T6903] vhci_hcd: connection closed [ 211.179015][ T5736] vhci_hcd: stop threads [ 211.180459][ T5736] vhci_hcd: release socket [ 211.181224][ T5736] vhci_hcd: disconnect device [ 211.487534][ T6897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.588350][ T5137] vhci_hcd: vhci_device speed not set [ 211.901911][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 212.711352][ T6929] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 212.712460][ T6929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.713781][ T6929] vhci_hcd vhci_hcd.0: Device attached [ 212.995087][ T6930] vhci_hcd: connection closed [ 212.997991][ T4777] vhci_hcd: stop threads [ 213.001978][ T4777] vhci_hcd: release socket [ 213.002900][ T4777] vhci_hcd: disconnect device [ 213.017143][ T3899] usb 8-1: new low-speed USB device number 5 using vhci_hcd [ 213.018868][ T3899] usb 8-1: enqueue for inactive port 0 [ 213.111132][ T3899] vhci_hcd: vhci_device speed not set [ 214.307136][ T6947] loop2: detected capacity change from 0 to 8192 [ 214.342031][ T6947] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.756235][ T6945] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 214.757320][ T6945] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.758751][ T6945] vhci_hcd vhci_hcd.0: Device attached [ 214.760276][ T6946] vhci_hcd: connection closed [ 214.762801][ T4772] vhci_hcd: stop threads [ 214.764309][ T4772] vhci_hcd: release socket [ 214.765094][ T4772] vhci_hcd: disconnect device [ 215.694303][ T6961] binder: 6960:6961 ioctl 4018620d 0 returned -22 [ 215.738136][ T6961] binder: 6960:6961 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 215.743089][ T6961] binder: 6960:6961 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 215.745262][ T6961] binder: 6961 RLIMIT_NICE not set [ 215.810248][ T6965] binder: 6960:6965 got transaction to invalid handle, 1 [ 215.811483][ T6965] binder: 6965:6960 cannot find target node [ 215.812601][ T6965] binder: 6960:6965 transaction call to 0:0 failed 220/29201/-22, size 72-24 line 3045 [ 216.527768][ T6970] loop2: detected capacity change from 0 to 8192 [ 216.565194][ T6970] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.023927][ T6966] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 217.025046][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 217.026531][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 217.051198][ T6968] vhci_hcd: connection closed [ 217.052939][ T4777] vhci_hcd: stop threads [ 217.054856][ T4777] vhci_hcd: release socket [ 217.055680][ T4777] vhci_hcd: disconnect device [ 217.222726][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 218.039887][ T6984] loop3: detected capacity change from 0 to 8192 [ 218.507794][ T6984] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.689486][ T6979] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 218.690799][ T6979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.692090][ T6979] vhci_hcd vhci_hcd.0: Device attached [ 218.831047][ T6981] vhci_hcd: connection closed [ 218.875214][ T9] vhci_hcd: stop threads [ 218.877094][ T9] vhci_hcd: release socket [ 218.877981][ T9] vhci_hcd: disconnect device [ 218.896866][ T3899] vhci_hcd: vhci_device speed not set [ 220.372925][ T7000] loop5: detected capacity change from 0 to 8192 [ 220.443539][ T7000] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.798765][ T6997] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 220.799860][ T6997] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 220.801297][ T6997] vhci_hcd vhci_hcd.0: Device attached [ 220.804319][ T6998] vhci_hcd: connection closed [ 220.805515][ T4416] vhci_hcd: stop threads [ 220.808194][ T4416] vhci_hcd: release socket [ 220.809076][ T4416] vhci_hcd: disconnect device [ 221.343482][ T7011] loop1: detected capacity change from 0 to 128 [ 221.375991][ T4328] Bluetooth: hci5: command 0x0406 tx timeout [ 221.433759][ T7011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 221.557305][ T7019] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 221.559667][ T7019] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 222.620505][ T7029] binder: 7028:7029 ioctl 4018620d 0 returned -22 [ 222.638620][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 222.658975][ T7029] binder: 7028:7029 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 222.672029][ T7029] binder: 7028:7029 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 222.674025][ T7029] binder: 7029 RLIMIT_NICE not set [ 224.058025][ T7039] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 224.059085][ T7039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 224.060432][ T7039] vhci_hcd vhci_hcd.0: Device attached [ 224.066397][ T7042] vhci_hcd: connection closed [ 224.070488][ T4460] vhci_hcd: stop threads [ 224.071822][ T4460] vhci_hcd: release socket [ 224.072571][ T4460] vhci_hcd: disconnect device [ 224.230624][ T7047] binder: 7028:7047 got transaction to invalid handle, 1 [ 224.231762][ T7047] binder: 7047:7028 cannot find target node [ 224.232631][ T7047] binder: 7028:7047 transaction call to 0:0 failed 223/29201/-22, size 72-24 line 3045 [ 224.428912][ T3899] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.329227][ T7131] loop2: detected capacity change from 0 to 8192 [ 228.370516][ T7131] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.418110][ T7129] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 228.419161][ T7129] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.420640][ T7129] vhci_hcd vhci_hcd.0: Device attached [ 228.650723][ T7130] vhci_hcd: connection closed [ 228.704249][ T4473] vhci_hcd: stop threads [ 228.705813][ T4473] vhci_hcd: release socket [ 228.706922][ T4473] vhci_hcd: disconnect device [ 229.849023][ T7149] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 229.850263][ T7149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 229.851679][ T7149] vhci_hcd vhci_hcd.0: Device attached [ 229.879682][ T7149] loop1: detected capacity change from 0 to 8192 [ 229.882207][ T7149] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.256374][ T7150] vhci_hcd: connection closed [ 230.291139][ T4415] vhci_hcd: stop threads [ 230.292571][ T4415] vhci_hcd: release socket [ 230.293405][ T4415] vhci_hcd: disconnect device [ 230.336910][ T7001] vhci_hcd: vhci_device speed not set [ 230.411856][ T4328] Bluetooth: hci4: command 0x0406 tx timeout [ 237.854678][ T7228] loop3: detected capacity change from 0 to 128 [ 238.906556][ T7241] loop6: detected capacity change from 0 to 8192 [ 239.350837][ T7241] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.742798][ T7228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 239.744208][ T7238] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 239.745184][ T7238] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.746322][ T7238] vhci_hcd vhci_hcd.0: Device attached [ 239.748192][ T7239] vhci_hcd: connection closed [ 239.748464][ T4460] vhci_hcd: stop threads [ 239.749917][ T4460] vhci_hcd: release socket [ 239.750597][ T4460] vhci_hcd: disconnect device [ 241.260511][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 243.956624][ T7297] loop6: detected capacity change from 0 to 8192 [ 243.958050][ T7298] loop2: detected capacity change from 0 to 8192 [ 246.210669][ T7298] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.211956][ T7297] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.364719][ T5719] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.338780][ T7323] loop2: detected capacity change from 0 to 128 [ 248.474992][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.657229][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.662467][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.693399][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.694858][ T7323] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.728679][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.736560][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.799178][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.800472][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.409669][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 250.807206][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 252.991682][ T4340] Bluetooth: hci0: command 0x041b tx timeout [ 254.784250][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 255.810169][ T4340] Bluetooth: hci0: command 0x040f tx timeout [ 257.836762][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 258.003611][ T7426] loop3: detected capacity change from 0 to 8192 [ 258.027908][ T7426] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.510018][ T7423] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 258.511258][ T7423] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.512642][ T7423] vhci_hcd vhci_hcd.0: Device attached [ 258.515270][ T7424] vhci_hcd: connection closed [ 258.529257][ T7427] vhci_hcd: stop threads [ 258.530719][ T7427] vhci_hcd: release socket [ 258.531497][ T7427] vhci_hcd: disconnect device [ 258.979686][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.983667][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.991257][ T7326] device bridge_slave_0 entered promiscuous mode [ 259.007681][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.683886][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.921011][ T7326] device bridge_slave_1 entered promiscuous mode [ 259.946092][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.748472][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.858964][ T7326] team0: Port device team_slave_0 added [ 262.861019][ T7326] team0: Port device team_slave_1 added [ 262.926802][ T7464] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 262.927920][ T7464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.929084][ T7464] vhci_hcd vhci_hcd.0: Device attached [ 263.090539][ T7473] loop5: detected capacity change from 0 to 8192 [ 263.137529][ T7473] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.326953][ T1966] usb 12-1: new low-speed USB device number 3 using vhci_hcd [ 263.491372][ T7466] vhci_hcd: connection reset by peer [ 263.507683][ T6987] vhci_hcd: stop threads [ 263.508693][ T6987] vhci_hcd: release socket [ 263.509850][ T6987] vhci_hcd: disconnect device [ 265.104773][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.106041][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.958165][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.039718][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.047024][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.106901][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.608758][ T1966] vhci_hcd: vhci_device speed not set [ 268.631988][ T7326] device hsr_slave_0 entered promiscuous mode [ 269.717964][ T7326] device hsr_slave_1 entered promiscuous mode [ 269.919860][ T7326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.921097][ T7326] Cannot create hsr debugfs directory [ 269.937095][ T7517] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 269.938500][ T7517] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 272.876008][ T7545] loop6: detected capacity change from 0 to 128 [ 272.919435][ T7543] binder: BINDER_SET_CONTEXT_MGR already set [ 272.920577][ T7543] binder: 7539:7543 ioctl 4018620d 20000100 returned -16 [ 272.922225][ T7542] binder: 7540:7542 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 272.924154][ T7542] binder: 7542 RLIMIT_NICE not set [ 272.928343][ T7545] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 272.939182][ T7543] binder: BINDER_SET_CONTEXT_MGR already set [ 272.940558][ T7543] binder: 7539:7543 ioctl 4018620d 200002c0 returned -16 [ 273.010464][ T7550] binder: 7540:7550 tried to acquire reference to desc 0, got 1 instead [ 273.011067][ T7552] binder: 7539:7552 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 273.017624][ T7552] binder: 7552 RLIMIT_NICE not set [ 273.021225][ T7543] binder: 7539:7543 got transaction to invalid handle, 1 [ 273.022456][ T7543] binder: 7543:7539 cannot find target node [ 273.023400][ T7543] binder: 7539:7543 transaction call to 0:0 failed 229/29201/-22, size 72-24 line 3045 [ 273.026925][ T7550] binder: 7540:7550 ioctl c0306201 0 returned -14 [ 273.049465][ T7001] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.080939][ T7559] loop3: detected capacity change from 0 to 128 [ 273.126344][ T7559] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 273.829419][ T6056] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.177011][ T5431] EXT4-fs (loop6): unmounting filesystem. [ 274.184832][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 274.276420][ T7326] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 274.736361][ T7326] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.317110][ T7586] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 275.318669][ T7586] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 277.663343][ T6056] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.697006][ T7326] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 277.858750][ T7326] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 282.204354][ T6056] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.315082][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.334708][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.374576][ T5736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.376220][ T5736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.387702][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.389409][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.390823][ T4777] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.391802][ T4777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.393369][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.404711][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.407226][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.408688][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.409722][ T4854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.523488][ T7633] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 282.524645][ T7633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 282.875629][ T7633] vhci_hcd vhci_hcd.0: Device attached [ 283.095402][ T7633] loop5: detected capacity change from 0 to 8192 [ 283.203832][ T7633] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.486975][ T7634] vhci_hcd: connection closed [ 283.487626][ T4854] vhci_hcd: stop threads [ 283.489225][ T4854] vhci_hcd: release socket [ 283.490079][ T4854] vhci_hcd: disconnect device [ 283.998367][ T6056] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.418800][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.422035][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.425231][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.428138][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.434313][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.438441][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.922363][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.883004][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.884785][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.900870][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.902478][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.908572][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.112365][ T7670] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 287.112392][ T7670] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 288.838149][ T7679] loop3: detected capacity change from 0 to 128 [ 288.867288][ T7679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 289.609795][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 289.621440][ T6056] tipc: Left network mode [ 289.877043][ T7697] loop2: detected capacity change from 0 to 128 [ 289.914139][ T7697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 291.065450][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.075871][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.077253][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.101776][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 291.109062][ T7719] binder: 7718:7719 ioctl 4018620d 0 returned -22 [ 291.117379][ T7719] binder: BINDER_SET_CONTEXT_MGR already set [ 291.118452][ T7719] binder: 7718:7719 ioctl 4018620d 200002c0 returned -16 [ 291.122067][ T7719] binder: 7718:7719 got transaction to invalid handle, 1 [ 291.123221][ T7719] binder: 7719:7718 cannot find target node [ 291.124096][ T7719] binder: 7718:7719 transaction call to 0:0 failed 231/29201/-22, size 0-24 line 3045 [ 292.186871][ T5137] binder: undelivered TRANSACTION_ERROR: 29201 [ 292.273639][ T7735] binder: BINDER_SET_CONTEXT_MGR already set [ 292.274619][ T7735] binder: 7734:7735 ioctl 4018620d 20000100 returned -16 [ 292.277246][ T7735] binder: BINDER_SET_CONTEXT_MGR already set [ 292.278271][ T7735] binder: 7734:7735 ioctl 4018620d 200002c0 returned -16 [ 296.044424][ T7790] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 296.045623][ T7790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 296.047351][ T7790] vhci_hcd vhci_hcd.0: Device attached [ 296.093613][ T7790] loop6: detected capacity change from 0 to 8192 [ 296.102242][ T7790] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.521129][ T7791] vhci_hcd: connection closed [ 297.587113][ T7427] vhci_hcd: stop threads [ 297.592731][ T7427] vhci_hcd: release socket [ 297.597470][ T7427] vhci_hcd: disconnect device [ 297.702223][ T7808] binder: 7805:7808 ioctl 4018620d 0 returned -22 [ 297.720089][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.721960][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.723536][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.725007][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.726475][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.730367][ T7808] binder: 7805:7808 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 297.732166][ T7807] binder: BINDER_SET_CONTEXT_MGR already set [ 297.733123][ T7807] binder: 7806:7807 ioctl 4018620d 200002c0 returned -16 [ 297.740436][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.743942][ T7808] binder: 7805:7808 got transaction to invalid handle, 1 [ 297.745139][ T7808] binder: 7808:7805 cannot find target node [ 297.746033][ T7808] binder: 7805:7808 transaction call to 0:0 failed 235/29201/-22, size 0-24 line 3045 [ 297.759638][ T7326] device veth0_vlan entered promiscuous mode [ 297.781142][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.242519][ T7326] device veth1_vlan entered promiscuous mode [ 303.705371][ T7863] binder: 7862:7863 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 303.711574][ T7863] binder: 7862:7863 got transaction to invalid handle, 1 [ 303.712867][ T7863] binder: 7863:7862 cannot find target node [ 303.713960][ T7863] binder: 7862:7863 transaction call to 0:0 failed 238/29201/-22, size 72-0 line 3045 [ 303.715898][ T4831] binder: undelivered TRANSACTION_ERROR: 29201 [ 304.238278][ T7870] binder: 7869:7870 ioctl 4018620d 0 returned -22 [ 304.241158][ T7870] binder: BINDER_SET_CONTEXT_MGR already set [ 304.242142][ T7870] binder: 7869:7870 ioctl 4018620d 200002c0 returned -16 [ 304.307536][ T7872] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 304.308953][ T7872] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 305.172924][ T7870] binder: 7869:7870 got transaction to invalid handle, 1 [ 305.174119][ T7870] binder: 7870:7869 cannot find target node [ 305.175036][ T7870] binder: 7869:7870 transaction call to 0:0 failed 240/29201/-22, size 0-24 line 3045 [ 305.184802][ T1966] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.206794][ T7875] tipc: Cannot configure node identity twice [ 305.239088][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.240797][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.245953][ T7326] device veth0_macvtap entered promiscuous mode [ 305.266235][ T7326] device veth1_macvtap entered promiscuous mode [ 309.505328][ T4340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.508735][ T4340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.511005][ T4340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.513515][ T4340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.515050][ T4340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 309.516322][ T4340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.637227][ T7897] tipc: Cannot configure node identity twice [ 309.649718][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.748017][ T7929] binder: 7927:7929 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 309.750880][ T7929] binder: 7927:7929 got transaction to invalid handle, 1 [ 309.751979][ T7929] binder: 7929:7927 cannot find target node [ 309.752949][ T7929] binder: 7927:7929 transaction call to 0:0 failed 243/29201/-22, size 72-0 line 3045 [ 309.754726][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 311.733297][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.734479][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.736235][ T4340] Bluetooth: hci1: command 0x0409 tx timeout [ 311.746063][ T6056] device hsr_slave_0 left promiscuous mode [ 311.817339][ T6056] device hsr_slave_1 left promiscuous mode [ 311.853071][ T7942] binder: BINDER_SET_CONTEXT_MGR already set [ 311.854137][ T7942] binder: 7941:7942 ioctl 4018620d 200002c0 returned -16 [ 311.929762][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.931203][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.932939][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.934056][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.935393][ T6056] device bridge_slave_1 left promiscuous mode [ 311.936581][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.148799][ T7949] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 312.150430][ T7949] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 312.846627][ T6056] device bridge_slave_0 left promiscuous mode [ 312.848598][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.396833][ T6056] device veth1_macvtap left promiscuous mode [ 313.406011][ T6056] device veth0_macvtap left promiscuous mode [ 313.437106][ T6056] device veth1_vlan left promiscuous mode [ 313.459329][ T6056] device veth0_vlan left promiscuous mode [ 313.836458][ T4340] Bluetooth: hci1: command 0x041b tx timeout [ 315.011342][ T7969] loop6: detected capacity change from 0 to 128 [ 315.031008][ T7969] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 315.998103][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 317.240793][ T7989] loop3: detected capacity change from 0 to 128 [ 317.251586][ T7989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 318.086729][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 319.589908][ T6056] team0 (unregistering): Port device team_slave_1 removed [ 319.749037][ T6056] team0 (unregistering): Port device team_slave_0 removed [ 319.907513][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.107482][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.678707][ T6056] bond0 (unregistering): Released all slaves [ 322.039590][ T7960] tipc: Cannot configure node identity twice [ 322.099316][ T5431] EXT4-fs (loop6): unmounting filesystem. [ 322.106393][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 322.274101][ T8013] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 322.275752][ T8013] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 322.620882][ T7911] chnl_net:caif_netlink_parms(): no params data found [ 322.641764][ T7911] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.645101][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.496273][ T7911] device bridge_slave_0 entered promiscuous mode [ 323.524059][ T7911] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.534174][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.542517][ T7911] device bridge_slave_1 entered promiscuous mode [ 323.599076][ T7911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.601801][ T7911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.013935][ T7911] team0: Port device team_slave_0 added [ 324.017797][ T7911] team0: Port device team_slave_1 added [ 324.023952][ T7911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.025172][ T7911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.036811][ T7911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.877876][ T7911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.879263][ T7911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.893787][ T7911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.263937][ T7911] device hsr_slave_0 entered promiscuous mode [ 325.275293][ T8058] loop2: detected capacity change from 0 to 128 [ 325.327474][ T7911] device hsr_slave_1 entered promiscuous mode [ 325.332820][ T8058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 326.053721][ T7911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.055199][ T7911] Cannot create hsr debugfs directory [ 326.056369][ T8061] tipc: Cannot configure node identity twice [ 326.130749][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 327.615576][ T8098] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 327.617065][ T8098] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 328.072116][ T8088] tipc: Cannot configure node identity twice [ 328.075591][ T8099] tipc: Started in network mode [ 328.076446][ T8099] tipc: Node identity 4, cluster identity 4711 [ 328.077606][ T8099] tipc: Node number set to 4 [ 328.757769][ T8112] tipc: Cannot configure node identity twice [ 328.904723][ T8110] tipc: Cannot configure node identity twice [ 329.779892][ T8119] tipc: Cannot configure node identity twice [ 330.062835][ T8127] binder: 8121:8127 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 330.085493][ T8127] binder: 8121:8127 got transaction to invalid handle, 1 [ 330.089664][ T8127] binder: 8127:8121 cannot find target node [ 330.090760][ T8127] binder: 8121:8127 transaction call to 0:0 failed 246/29201/-22, size 72-0 line 3045 [ 330.095180][ T5137] binder: undelivered TRANSACTION_ERROR: 29201 [ 332.153252][ T8149] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 332.154771][ T8149] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 332.328130][ T8139] tipc: Cannot configure node identity twice [ 332.689017][ T8159] tipc: Cannot configure node identity twice [ 335.212815][ T7911] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 335.937158][ T8190] tipc: Cannot configure node identity twice [ 336.049024][ T7911] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 336.508274][ T7911] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 336.692620][ T7911] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 338.433315][ T8209] tipc: Cannot configure node identity twice [ 338.798005][ T8216] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 338.799550][ T8216] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 339.037554][ T7911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.042401][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.044041][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.052727][ T7911] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.060712][ T6056] device hsr_slave_0 left promiscuous mode [ 339.090079][ T6056] device hsr_slave_1 left promiscuous mode [ 339.168105][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.170855][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.175099][ T6056] device bridge_slave_1 left promiscuous mode [ 339.178397][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.217808][ T6056] device bridge_slave_0 left promiscuous mode [ 339.219143][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.284336][ T6056] device veth1_macvtap left promiscuous mode [ 339.285817][ T6056] device veth0_macvtap left promiscuous mode [ 339.289213][ T6056] device veth1_vlan left promiscuous mode [ 339.291346][ T6056] device veth0_vlan left promiscuous mode [ 344.384197][ T8287] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 344.385863][ T8287] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 345.589457][ T6056] team0 (unregistering): Port device team_slave_1 removed [ 345.749433][ T6056] team0 (unregistering): Port device team_slave_0 removed [ 345.909966][ T6056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.108031][ T6056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.327712][ T6056] bond0 (unregistering): Released all slaves [ 347.627802][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.629411][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.630947][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.632075][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.633352][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.634852][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.636590][ T4415] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.637830][ T4415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.639549][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.641252][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.642891][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.646130][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.648044][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.649712][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.651419][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.652879][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.655411][ T8268] tipc: Cannot configure node identity twice [ 347.687034][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.688678][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.724467][ T7911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.726500][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.745141][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.746907][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.843770][ T8303] tipc: Cannot configure node identity twice [ 350.170480][ T8313] tipc: Cannot configure node identity twice [ 351.360072][ T7911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.375879][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.378973][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.577135][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 351.578742][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.593452][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.595009][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.597557][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.599186][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.611874][ T7911] device veth0_vlan entered promiscuous mode [ 351.615439][ T7911] device veth1_vlan entered promiscuous mode [ 351.634293][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 351.635868][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 351.638404][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.639809][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.643710][ T7911] device veth0_macvtap entered promiscuous mode [ 351.652657][ T7911] device veth1_macvtap entered promiscuous mode [ 351.670450][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.672495][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.673957][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.675602][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.682664][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.684217][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.685777][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.695468][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.703514][ T7911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.704772][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.706315][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.710772][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.712228][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.715377][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.721203][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.722937][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.734403][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.786192][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.796459][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.878386][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.880037][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.882530][ T7911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.885069][ T7911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.886521][ T7911] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.889530][ T7911] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.559751][ T7911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.348989][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.351582][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.421153][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.422534][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.423742][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.642776][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.650570][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.653790][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 355.836401][ T8387] loop3: detected capacity change from 0 to 128 [ 355.878849][ T8388] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 355.880240][ T8388] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 355.965802][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 358.162311][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 361.137440][ T8418] tipc: Cannot configure node identity twice [ 365.241767][ T8444] tipc: Cannot configure node identity twice [ 365.342388][ T8457] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 365.343913][ T8457] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 366.427022][ T8484] loop2: detected capacity change from 0 to 8192 [ 366.433644][ T8484] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.911795][ T8481] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 366.912839][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.914100][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 366.953143][ T8483] vhci_hcd: connection closed [ 366.980057][ T7041] vhci_hcd: stop threads [ 366.982098][ T7041] vhci_hcd: release socket [ 366.982993][ T7041] vhci_hcd: disconnect device [ 367.410735][ T8488] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 367.411858][ T8488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.413014][ T8488] vhci_hcd vhci_hcd.0: Device attached [ 367.437606][ T8488] loop5: detected capacity change from 0 to 8192 [ 367.863329][ T8488] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.871184][ T8490] vhci_hcd: connection closed [ 367.871310][ T7041] vhci_hcd: stop threads [ 367.873139][ T7041] vhci_hcd: release socket [ 367.873973][ T7041] vhci_hcd: disconnect device [ 367.960967][ T6077] usb 12-1: new low-speed USB device number 4 using vhci_hcd [ 367.962432][ T6077] usb 12-1: enqueue for inactive port 0 [ 368.043264][ T6077] vhci_hcd: vhci_device speed not set [ 369.727173][ T8527] loop5: detected capacity change from 0 to 128 [ 369.807387][ T8527] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 370.615200][ T5350] EXT4-fs (loop5): unmounting filesystem. [ 371.063878][ T8550] tipc: Cannot configure node identity twice [ 375.993958][ T8582] tipc: Cannot configure node identity twice [ 377.337064][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.338242][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.367856][ T8606] loop5: detected capacity change from 0 to 8192 [ 377.472656][ T8606] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 378.046633][ T8599] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 378.047771][ T8599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.049117][ T8599] vhci_hcd vhci_hcd.0: Device attached [ 378.054536][ T8602] vhci_hcd: connection closed [ 378.057667][ T5808] vhci_hcd: stop threads [ 378.059188][ T5808] vhci_hcd: release socket [ 378.059951][ T5808] vhci_hcd: disconnect device [ 381.055464][ T8630] tipc: Started in network mode [ 381.056503][ T8630] tipc: Node identity 4, cluster identity 4711 [ 381.057696][ T8630] tipc: Node number set to 4 [ 386.215692][ T8689] loop3: detected capacity change from 0 to 8192 [ 386.454548][ T8686] loop5: detected capacity change from 0 to 128 [ 386.628730][ T8686] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 387.076493][ T8689] Dev loop3: unable to read RDB block 8 [ 387.077845][ T8689] loop3: unable to read partition table [ 387.078933][ T8689] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 387.460712][ T5350] EXT4-fs (loop5): unmounting filesystem. [ 389.120798][ T8736] loop6: detected capacity change from 0 to 8192 [ 390.371540][ T8732] loop7: detected capacity change from 0 to 1024 [ 390.374988][ T8732] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 390.376503][ T8732] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 390.378670][ T8736] Dev loop6: unable to read RDB block 8 [ 390.379719][ T8736] loop6: unable to read partition table [ 390.380669][ T8736] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 390.686062][ T8732] EXT4-fs error (device loop7): ext4_get_journal_inode:5762: inode #5: comm syz.7.830: unexpected bad inode w/o EXT4_IGET_BAD [ 391.455677][ T8755] loop6: detected capacity change from 0 to 8192 [ 391.649199][ T8732] EXT4-fs (loop7): no journal found [ 391.650146][ T8732] EXT4-fs (loop7): can't get journal size [ 391.816939][ T8732] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 391.863960][ T7911] EXT4-fs (loop7): unmounting filesystem. [ 392.330916][ T8766] tipc: Cannot configure node identity twice [ 393.944652][ T8805] loop7: detected capacity change from 0 to 8192 [ 394.766934][ T8801] tipc: Cannot configure node identity twice [ 394.867408][ T8805] Dev loop7: unable to read RDB block 8 [ 394.868523][ T8805] loop7: unable to read partition table [ 394.869555][ T8805] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 395.230707][ T8814] loop6: detected capacity change from 0 to 8192 [ 397.969099][ T8839] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 397.970268][ T8839] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.971375][ T8839] vhci_hcd vhci_hcd.0: Device attached [ 398.077791][ T8850] loop5: detected capacity change from 0 to 8192 [ 398.391075][ T8850] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 399.184022][ T8842] vhci_hcd: connection closed [ 399.187070][ T4415] vhci_hcd: stop threads [ 399.188493][ T4415] vhci_hcd: release socket [ 399.189238][ T4415] vhci_hcd: disconnect device [ 399.266748][ T112] vhci_hcd: vhci_device speed not set [ 399.284678][ T8849] tipc: Cannot configure node identity twice [ 400.355027][ T8859] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 400.356059][ T8859] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.357469][ T8859] vhci_hcd vhci_hcd.0: Device attached [ 400.396157][ T8861] vhci_hcd: connection closed [ 400.424470][ T39] vhci_hcd: stop threads [ 400.426067][ T39] vhci_hcd: release socket [ 400.426910][ T39] vhci_hcd: disconnect device [ 400.948261][ T8870] loop7: detected capacity change from 0 to 8192 [ 402.942152][ T8890] netlink: 'syz.2.857': attribute type 4 has an invalid length. [ 403.257844][ T8892] loop6: detected capacity change from 0 to 8192 [ 406.154106][ T8892] Dev loop6: unable to read RDB block 8 [ 406.155053][ T8892] loop6: unable to read partition table [ 406.155933][ T8892] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 407.284799][ T8921] loop2: detected capacity change from 0 to 8192 [ 407.305948][ T8921] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.722300][ T8918] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 407.723431][ T8918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.724787][ T8918] vhci_hcd vhci_hcd.0: Device attached [ 407.761218][ T8919] vhci_hcd: connection closed [ 407.786533][ T569] vhci_hcd: stop threads [ 407.794927][ T569] vhci_hcd: release socket [ 407.797174][ T569] vhci_hcd: disconnect device [ 408.159465][ T8925] binder: 8923:8925 got transaction to invalid handle, 1 [ 408.160631][ T8925] binder: 8925:8923 cannot find target node [ 408.189071][ T8925] binder: 8923:8925 transaction call to 0:0 failed 250/29201/-22, size 72-0 line 3045 [ 408.203101][ T1966] binder: undelivered TRANSACTION_ERROR: 29201 [ 410.408084][ T8959] loop5: detected capacity change from 0 to 8192 [ 413.001669][ T8975] loop3: detected capacity change from 0 to 8192 [ 415.463976][ T8984] binder: 8983:8984 got transaction to invalid handle, 1 [ 415.465184][ T8984] binder: 8984:8983 cannot find target node [ 415.466167][ T8984] binder: 8983:8984 transaction call to 0:0 failed 254/29201/-22, size 72-0 line 3045 [ 415.477152][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 415.506449][ T8975] Dev loop3: unable to read RDB block 8 [ 415.509209][ T8975] loop3: unable to read partition table [ 415.511001][ T8975] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 415.647295][ T8986] loop2: detected capacity change from 0 to 8192 [ 416.989498][ T8998] loop7: detected capacity change from 0 to 8192 [ 417.262095][ T8986] Dev loop2: unable to read RDB block 8 [ 417.264675][ T8986] loop2: unable to read partition table [ 417.266246][ T8986] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 417.910791][ T8993] binder: BINDER_SET_CONTEXT_MGR already set [ 417.911756][ T8993] binder: 8991:8993 ioctl 4018620d 200002c0 returned -16 [ 417.949619][ T8993] binder: 8991:8993 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 417.951596][ T8993] binder: 8993 RLIMIT_NICE not set [ 418.023479][ T9001] binder: 8991:9001 got transaction to invalid handle, 1 [ 418.024752][ T9001] binder: 9001:8991 cannot find target node [ 418.025624][ T9001] binder: 8991:9001 transaction call to 0:0 failed 256/29201/-22, size 72-24 line 3045 [ 418.724243][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 419.224293][ T9023] netlink: 64 bytes leftover after parsing attributes in process `syz.3.882'. [ 421.284403][ T9045] tipc: Cannot configure node identity twice [ 421.634314][ T9047] binder: 9046:9047 got transaction to invalid handle, 1 [ 421.635647][ T9047] binder: 9047:9046 cannot find target node [ 421.636600][ T9047] binder: 9046:9047 transaction call to 0:0 failed 260/29201/-22, size 72-0 line 3045 [ 421.644259][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 422.262465][ T9054] netlink: 64 bytes leftover after parsing attributes in process `syz.7.888'. [ 422.959534][ T9063] loop2: detected capacity change from 0 to 128 [ 423.070670][ T9069] binder: BINDER_SET_CONTEXT_MGR already set [ 423.076177][ T9069] binder: 9067:9069 ioctl 4018620d 20000100 returned -16 [ 423.179115][ T9071] netlink: 'syz.7.890': attribute type 4 has an invalid length. [ 423.281203][ T9072] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 423.449644][ T9073] binder: BINDER_SET_CONTEXT_MGR already set [ 423.451051][ T9073] binder: 9067:9073 ioctl 4018620d 200002c0 returned -16 [ 423.455853][ T9069] binder: 9067:9069 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 423.463518][ T9069] binder: 9069 RLIMIT_NICE not set [ 423.464853][ T9069] binder: 9067:9069 got transaction to invalid handle, 1 [ 423.474636][ T9069] binder: 9069:9067 cannot find target node [ 423.475758][ T9069] binder: 9067:9069 transaction call to 0:0 failed 262/29201/-22, size 72-24 line 3045 [ 423.491543][ T9063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 423.508518][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 424.484873][ T9088] netlink: 64 bytes leftover after parsing attributes in process `syz.7.894'. [ 424.628916][ T9095] netlink: 'syz.3.893': attribute type 4 has an invalid length. [ 424.968933][ T9094] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 425.332339][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 425.369401][ T9097] netlink: 'syz.5.895': attribute type 4 has an invalid length. [ 425.421580][ T9098] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 425.483068][ T9107] binder: BINDER_SET_CONTEXT_MGR already set [ 425.484369][ T9107] binder: 9106:9107 ioctl 4018620d 20000100 returned -16 [ 425.583342][ T9109] loop7: detected capacity change from 0 to 8192 [ 426.639499][ T9107] binder: 9106:9107 got transaction to invalid handle, 1 [ 426.640676][ T9107] binder: 9107:9106 cannot find target node [ 426.641507][ T9107] binder: 9106:9107 transaction call to 0:0 failed 264/29201/-22, size 72-0 line 3045 [ 426.643214][ T4831] binder: undelivered TRANSACTION_ERROR: 29201 [ 426.649211][ T9112] loop5: detected capacity change from 0 to 128 [ 426.859059][ T9112] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 427.517427][ T9136] netlink: 64 bytes leftover after parsing attributes in process `syz.3.901'. [ 427.643846][ T5350] EXT4-fs (loop5): unmounting filesystem. [ 428.137412][ T9145] netlink: 64 bytes leftover after parsing attributes in process `syz.2.905'. [ 428.457646][ T9149] binder: 9148:9149 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 428.470007][ T9149] binder: 9149 RLIMIT_NICE not set [ 428.583467][ T9156] binder: 9148:9156 tried to acquire reference to desc 0, got 1 instead [ 429.018681][ T9167] netlink: 'syz.7.907': attribute type 4 has an invalid length. [ 429.022654][ T9167] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 429.088545][ T9170] block device autoloading is deprecated and will be removed. [ 429.284166][ T9172] tipc: Cannot configure node identity twice [ 429.645649][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.657413][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.660001][ T4333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.667178][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.671070][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 429.672493][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.326079][ T9185] loop5: detected capacity change from 0 to 8192 [ 431.515423][ T9191] binder: BINDER_SET_CONTEXT_MGR already set [ 431.519292][ T9191] binder: 9183:9191 ioctl 4018620d 20000100 returned -16 [ 431.526585][ T9191] binder: 9183:9191 got transaction to invalid handle, 1 [ 431.534328][ T9191] binder: 9191:9183 cannot find target node [ 431.535335][ T9191] binder: 9183:9191 transaction call to 0:0 failed 271/29201/-22, size 72-0 line 3045 [ 431.604667][ T4474] binder: undelivered TRANSACTION_ERROR: 29201 [ 431.680925][ T9201] loop5: detected capacity change from 0 to 128 [ 431.775878][ T9207] netlink: 64 bytes leftover after parsing attributes in process `syz.2.912'. [ 431.905793][ T4340] Bluetooth: hci0: command 0x0409 tx timeout [ 431.927301][ T9208] tipc: Cannot configure node identity twice [ 432.041755][ T9201] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 432.556146][ T9221] binder: 9220:9221 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 432.564739][ T5350] EXT4-fs (loop5): unmounting filesystem. [ 432.571236][ T9221] binder: 9221 RLIMIT_NICE not set [ 432.899578][ T9228] binder: 9220:9228 tried to acquire reference to desc 0, got 1 instead [ 432.912168][ T9159] chnl_net:caif_netlink_parms(): no params data found [ 433.442164][ T9234] netlink: 64 bytes leftover after parsing attributes in process `syz.3.920'. [ 433.453257][ T9242] binder: BINDER_SET_CONTEXT_MGR already set [ 433.453287][ T9242] binder: 9241:9242 ioctl 4018620d 20000100 returned -16 [ 433.454539][ T9242] binder: BINDER_SET_CONTEXT_MGR already set [ 433.454546][ T9242] binder: 9241:9242 ioctl 4018620d 200002c0 returned -16 [ 433.454691][ T9242] binder: 9241:9242 got transaction to invalid handle, 1 [ 433.454709][ T9242] binder: 9242:9241 cannot find target node [ 433.454717][ T9242] binder: 9241:9242 transaction call to 0:0 failed 278/29201/-22, size 0-24 line 3045 [ 433.454914][ T4831] binder: undelivered TRANSACTION_ERROR: 29201 [ 433.552580][ T9245] netlink: 64 bytes leftover after parsing attributes in process `syz.7.921'. [ 433.946542][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 434.041184][ T9254] binder: BINDER_SET_CONTEXT_MGR already set [ 434.042294][ T9254] binder: 9253:9254 ioctl 4018620d 20000100 returned -16 [ 434.049603][ T9254] binder: 9253:9254 got transaction to invalid handle, 1 [ 434.050804][ T9254] binder: 9254:9253 cannot find target node [ 434.051734][ T9254] binder: 9253:9254 transaction call to 0:0 failed 280/29201/-22, size 72-0 line 3045 [ 434.065898][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 434.065977][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.069444][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.071502][ T9159] device bridge_slave_0 entered promiscuous mode [ 434.074497][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.075649][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.095296][ T9159] device bridge_slave_1 entered promiscuous mode [ 434.301190][ T9258] loop7: detected capacity change from 0 to 8192 [ 434.324427][ T9260] loop3: detected capacity change from 0 to 8192 [ 439.294887][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 439.329884][ T4340] Bluetooth: hci1: command 0x0406 tx timeout [ 439.337325][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.338480][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.347700][ T9260] Dev loop3: unable to read RDB block 8 [ 439.348700][ T9260] loop3: unable to read partition table [ 439.349580][ T9260] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 439.380700][ T9159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.383134][ T9159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.395489][ T9159] team0: Port device team_slave_0 added [ 439.396024][ T9258] Dev loop7: unable to read RDB block 8 [ 439.397485][ T9258] loop7: unable to read partition table [ 439.398387][ T9258] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 439.401061][ T9159] team0: Port device team_slave_1 added [ 439.427267][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.428375][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.432061][ T9159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.478245][ T9267] binder: BINDER_SET_CONTEXT_MGR already set [ 439.479286][ T9267] binder: 9266:9267 ioctl 4018620d 20000100 returned -16 [ 439.484650][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.485726][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.550980][ T9267] binder: BINDER_SET_CONTEXT_MGR already set [ 439.551986][ T9267] binder: 9266:9267 ioctl 4018620d 200002c0 returned -16 [ 439.553186][ T9267] binder: 9266:9267 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 439.555059][ T9267] binder: 9267 RLIMIT_NICE not set [ 439.556242][ T8725] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 439.556280][ T9159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.659029][ T9274] netlink: 64 bytes leftover after parsing attributes in process `syz.2.928'. [ 439.897259][ T9276] binder: 9266:9276 got transaction to invalid handle, 1 [ 439.899653][ T9276] binder: 9276:9266 cannot find target node [ 439.902146][ T9276] binder: 9266:9276 transaction call to 0:0 failed 282/29201/-22, size 72-24 line 3045 [ 440.068815][ T9278] loop3: detected capacity change from 0 to 8192 [ 440.536916][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 440.661789][ T9283] binder: BINDER_SET_CONTEXT_MGR already set [ 440.662895][ T9283] binder: 9281:9283 ioctl 4018620d 20000100 returned -16 [ 440.689205][ T9283] binder: BINDER_SET_CONTEXT_MGR already set [ 440.690208][ T9283] binder: 9281:9283 ioctl 4018620d 200002c0 returned -16 [ 440.780805][ T9283] binder: 9281:9283 got transaction to invalid handle, 1 [ 440.784769][ T9283] binder: 9283:9281 cannot find target node [ 440.785732][ T9283] binder: 9281:9283 transaction call to 0:0 failed 284/29201/-22, size 0-24 line 3045 [ 441.356784][ T4340] Bluetooth: hci0: command 0x0419 tx timeout [ 441.626921][ T4474] binder: undelivered TRANSACTION_ERROR: 29201 [ 441.656801][ T9287] loop7: detected capacity change from 0 to 8192 [ 442.423445][ T9297] binder: BINDER_SET_CONTEXT_MGR already set [ 442.679579][ T9297] binder: 9295:9297 ioctl 4018620d 20000100 returned -16 [ 442.690864][ T9297] binder: 9295:9297 ioctl 4018620d 0 returned -22 [ 442.694219][ T9297] binder: 9295:9297 got transaction to invalid handle, 1 [ 442.696986][ T9297] binder: 9297:9295 cannot find target node [ 442.697989][ T9297] binder: 9295:9297 transaction call to 0:0 failed 286/29201/-22, size 72-0 line 3045 [ 442.703915][ T5808] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.708511][ T4474] binder: undelivered TRANSACTION_ERROR: 29201 [ 442.761934][ T9159] device hsr_slave_0 entered promiscuous mode [ 442.829922][ T9159] device hsr_slave_1 entered promiscuous mode [ 442.867084][ T9159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.868712][ T9159] Cannot create hsr debugfs directory [ 443.269458][ T5808] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.273815][ T9303] netlink: 'syz.5.938': attribute type 4 has an invalid length. [ 443.276526][ T9303] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 443.781254][ T9309] netlink: 64 bytes leftover after parsing attributes in process `syz.3.939'. [ 443.828350][ T5808] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.182534][ T9313] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 444.237700][ T9317] netlink: 'syz.2.940': attribute type 4 has an invalid length. [ 444.826123][ T9331] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 444.968899][ T9330] netlink: 'syz.7.942': attribute type 4 has an invalid length. [ 445.061127][ T9337] binder: BINDER_SET_CONTEXT_MGR already set [ 445.062184][ T9337] binder: 9336:9337 ioctl 4018620d 20000100 returned -16 [ 445.079521][ T9337] binder: BINDER_SET_CONTEXT_MGR already set [ 445.081740][ T9337] binder: 9336:9337 ioctl 4018620d 200002c0 returned -16 [ 445.090125][ T9337] binder: 9336:9337 got transaction to invalid handle, 1 [ 445.091332][ T9337] binder: 9337:9336 cannot find target node [ 445.092563][ T9337] binder: 9336:9337 transaction call to 0:0 failed 288/29201/-22, size 0-24 line 3045 [ 445.100850][ T4826] binder: undelivered TRANSACTION_ERROR: 29201 [ 445.663652][ T5808] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.805118][ T9344] netlink: 'syz.3.943': attribute type 4 has an invalid length. [ 445.836615][ T9342] tipc: Cannot configure node identity twice [ 446.002759][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 446.003829][ T9350] binder: 9347:9350 ioctl 4018620d 20000100 returned -16 [ 446.006347][ T9159] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 446.006399][ T9350] binder: 9347:9350 ioctl 4018620d 0 returned -22 [ 446.009637][ T9350] binder: 9347:9350 got transaction to invalid handle, 1 [ 446.010753][ T9350] binder: 9350:9347 cannot find target node [ 446.011690][ T9350] binder: 9347:9350 transaction call to 0:0 failed 290/29201/-22, size 72-0 line 3045 [ 446.013485][ T7951] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.574775][ T9355] tipc: Cannot configure node identity twice [ 446.577951][ T9361] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 446.602030][ T9159] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 446.731933][ T9159] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 447.921039][ T9366] tipc: Cannot configure node identity twice [ 447.922595][ T9370] netlink: 'syz.2.951': attribute type 4 has an invalid length. [ 447.930284][ T9159] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 448.716324][ T9375] netlink: 64 bytes leftover after parsing attributes in process `syz.2.952'. [ 449.255959][ T9390] netlink: 64 bytes leftover after parsing attributes in process `syz.5.956'. [ 449.727838][ T5808] tipc: Left network mode [ 450.014448][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.018428][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.020080][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.048147][ T9159] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.097829][ T9395] binder: BINDER_SET_CONTEXT_MGR already set [ 450.098871][ T9395] binder: 9394:9395 ioctl 4018620d 20000100 returned -16 [ 450.107097][ T9401] binder: BINDER_SET_CONTEXT_MGR already set [ 450.109410][ T9401] binder: 9397:9401 ioctl 4018620d 20000100 returned -16 [ 450.126591][ T9395] binder: BINDER_SET_CONTEXT_MGR already set [ 450.127911][ T9395] binder: 9394:9395 ioctl 4018620d 200002c0 returned -16 [ 450.128231][ T9401] binder: 9397:9401 ioctl 4018620d 0 returned -22 [ 450.129225][ T9395] binder: 9394:9395 got transaction to invalid handle, 1 [ 450.130693][ T9401] binder: 9397:9401 got transaction to invalid handle, 1 [ 450.130949][ T9395] binder: 9395:9394 cannot find target node [ 450.132382][ T9401] binder: 9401:9397 cannot find target node [ 450.137330][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.139168][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.140549][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.141657][ T6987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.142991][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.145196][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.149903][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.151011][ T6987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.152344][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.153791][ T9395] binder: 9394:9395 transaction call to 0:0 failed 293/29201/-22, size 0-24 line 3045 [ 450.155893][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.162889][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 450.451931][ T9401] binder: 9397:9401 transaction call to 0:0 failed 294/29201/-22, size 72-0 line 3045 [ 450.459161][ T7001] binder: undelivered TRANSACTION_ERROR: 29201 [ 450.556532][ T9422] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 450.720889][ T9427] netlink: 64 bytes leftover after parsing attributes in process `syz.5.961'. [ 451.069746][ T9429] netlink: 64 bytes leftover after parsing attributes in process `syz.7.962'. [ 451.466988][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 451.470286][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 451.472232][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 451.474574][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 451.484097][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.485878][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.493697][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.500365][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 451.502573][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.504164][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 451.914116][ T9432] netlink: 64 bytes leftover after parsing attributes in process `syz.5.963'. [ 453.164776][ T9444] loop5: detected capacity change from 0 to 8192 [ 453.636735][ T9407] netlink: 'syz.3.960': attribute type 4 has an invalid length. [ 453.637495][ T9444] Dev loop5: unable to read RDB block 8 [ 453.638995][ T9444] loop5: unable to read partition table [ 453.639893][ T9444] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 453.652137][ T9159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 454.778211][ T9460] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 454.910428][ T9470] netlink: 64 bytes leftover after parsing attributes in process `syz.5.969'. [ 455.151478][ T9467] binder: 9466:9467 got transaction to invalid handle, 1 [ 455.152933][ T9467] binder: 9467:9466 cannot find target node [ 455.153861][ T9467] binder: 9466:9467 transaction call to 0:0 failed 298/29201/-22, size 0-24 line 3045 [ 455.155729][ T7001] binder: undelivered TRANSACTION_ERROR: 29201 [ 455.445707][ T9486] netlink: 64 bytes leftover after parsing attributes in process `syz.3.972'. [ 455.700181][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 455.702687][ T6115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 455.956683][ T9492] netlink: 64 bytes leftover after parsing attributes in process `syz.2.973'. [ 456.266965][ T9490] loop5: detected capacity change from 0 to 8192 [ 457.450219][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.442945][ T9516] netlink: 'syz.5.977': attribute type 4 has an invalid length. [ 459.992888][ T9547] binder: BINDER_SET_CONTEXT_MGR already set [ 459.994032][ T9547] binder: 9545:9547 ioctl 4018620d 20000100 returned -16 [ 460.033567][ T9547] binder: BINDER_SET_CONTEXT_MGR already set [ 460.034606][ T9547] binder: 9545:9547 ioctl 4018620d 200002c0 returned -16 [ 460.039458][ T9547] binder: 9545:9547 got transaction to invalid handle, 1 [ 460.040671][ T9547] binder: 9547:9545 cannot find target node [ 460.041607][ T9547] binder: 9545:9547 transaction call to 0:0 failed 300/29201/-22, size 0-24 line 3045 [ 460.043524][ T7001] binder: undelivered TRANSACTION_ERROR: 29201 [ 460.240359][ T9556] netlink: 64 bytes leftover after parsing attributes in process `syz.3.983'. [ 461.051558][ T9565] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 461.080246][ T9563] netlink: 'syz.2.985': attribute type 4 has an invalid length. [ 461.082879][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 461.084682][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 461.403417][ T9571] loop5: detected capacity change from 0 to 8192 [ 461.669122][ T9571] loop5: detected capacity change from 0 to 1024 [ 461.675592][ T9571] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 461.677327][ T9571] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 461.689644][ T9571] EXT4-fs error (device loop5): ext4_get_journal_inode:5762: inode #5: comm syz.5.986: unexpected bad inode w/o EXT4_IGET_BAD [ 461.695649][ T9571] EXT4-fs (loop5): no journal found [ 461.696561][ T9571] EXT4-fs (loop5): can't get journal size [ 461.826840][ T9571] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 462.374405][ T9159] device veth0_vlan entered promiscuous mode [ 462.380801][ T9159] device veth1_vlan entered promiscuous mode [ 462.395834][ T9159] device veth0_macvtap entered promiscuous mode [ 462.506032][ T9580] netlink: 64 bytes leftover after parsing attributes in process `syz.2.989'. [ 462.755436][ T9159] device veth1_macvtap entered promiscuous mode [ 462.773888][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 462.775855][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 462.778888][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 462.781754][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 462.842965][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 462.845694][ T5350] EXT4-fs (loop5): unmounting filesystem. [ 462.847300][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 462.849245][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 462.901822][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.909840][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.914613][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.920706][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.924533][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.941489][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.954499][ T9588] netlink: 64 bytes leftover after parsing attributes in process `syz.3.990'. [ 462.987576][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.992058][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.002663][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.009035][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.024424][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.034514][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.043932][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.049949][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.054885][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.537192][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.543302][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.549141][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.556995][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.558794][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.562552][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.580860][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.582481][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 463.584058][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 463.585459][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 463.588114][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.589878][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.591888][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 463.593380][ T6987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 464.566878][ T9613] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 464.611644][ T9617] loop7: detected capacity change from 0 to 8192 [ 465.438851][ T9592] netlink: 'syz.5.991': attribute type 4 has an invalid length. [ 465.469868][ T9159] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.471283][ T9159] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.472601][ T9159] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.473983][ T9159] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.522842][ T4854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.524133][ T4854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.525469][ T4854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.526526][ T4854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.646994][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 465.661781][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 465.688705][ T9616] netlink: 'syz.3.994': attribute type 4 has an invalid length. [ 466.187646][ T9645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.189297][ T9645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.440677][ T9668] loop2: detected capacity change from 0 to 128 [ 466.752884][ T5808] device hsr_slave_0 left promiscuous mode [ 466.977448][ T5808] device hsr_slave_1 left promiscuous mode [ 467.163662][ T9684] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 467.268094][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.270970][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.274785][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.279284][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.282916][ T5808] device bridge_slave_1 left promiscuous mode [ 467.288246][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.739905][ T9700] loop7: detected capacity change from 0 to 32768 [ 467.776366][ T9700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1014 (9700) [ 467.790838][ T9700] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 467.792483][ T9700] BTRFS info (device loop7): using crc32c (crc32c-generic) checksum algorithm [ 467.793859][ T9700] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 467.795464][ T9700] BTRFS info (device loop7): trying to use backup root at mount time [ 467.796704][ T9700] BTRFS info (device loop7): enabling ssd optimizations [ 467.797806][ T9700] BTRFS info (device loop7): using spread ssd allocation scheme [ 467.798988][ T9700] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 467.800462][ T9700] BTRFS info (device loop7): use lzo compression, level 0 [ 467.801447][ T9700] BTRFS info (device loop7): turning off barriers [ 467.802410][ T9700] BTRFS info (device loop7): disabling tree log [ 467.803364][ T9700] BTRFS info (device loop7): using free space tree [ 467.806605][ T5808] device bridge_slave_0 left promiscuous mode [ 467.807854][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.008244][ T5808] device veth1_macvtap left promiscuous mode [ 468.017954][ T5808] device veth0_macvtap left promiscuous mode [ 468.029113][ T5808] device veth1_vlan left promiscuous mode [ 468.033968][ T5808] device veth0_vlan left promiscuous mode [ 468.245012][ T7911] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 468.819004][ T9755] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 468.823431][ T9755] CIFS mount error: No usable UNC path provided in device string! [ 468.823431][ T9755] [ 468.825237][ T9755] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 469.662734][ T9764] loop5: detected capacity change from 0 to 512 [ 469.686847][ T9764] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 469.861812][ T9766] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1031'. [ 469.919860][ T9768] loop7: detected capacity change from 0 to 1024 [ 469.963446][ T9768] hfsplus: invalid length 3840 has been corrected to 255 [ 470.492017][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 470.961288][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 471.150340][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.397673][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.888443][ T5808] bond0 (unregistering): Released all slaves [ 473.172785][ T9688] netlink: 'syz.8.904': attribute type 4 has an invalid length. [ 473.225898][ T9773] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1034'. [ 473.388228][ T9796] loop5: detected capacity change from 0 to 1024 [ 473.871041][ T9821] loop5: detected capacity change from 0 to 16 [ 473.890769][ T9821] erofs: (device loop5): mounted with root inode @ nid 36. [ 473.928832][ T9829] loop2: detected capacity change from 0 to 2048 [ 474.019339][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1047'. [ 474.021356][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1047'. [ 474.286580][ T9829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.350913][ T9841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.372632][ T9841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.461209][ T9850] binder: BINDER_SET_CONTEXT_MGR already set [ 474.462382][ T9850] binder: 9842:9850 ioctl 4018620d 20000100 returned -16 [ 474.579852][ T9855] binder: 9842:9855 ioctl c0306201 0 returned -14 [ 474.809906][ T9862] loop2: detected capacity change from 0 to 256 [ 474.841912][ T9862] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 474.973450][ T9869] loop8: detected capacity change from 0 to 8 [ 475.619266][ T9874] syz.3.1065 uses obsolete (PF_INET,SOCK_PACKET) [ 475.976362][ T9876] xt_socket: unknown flags 0x40 [ 476.075579][ T9894] loop3: detected capacity change from 0 to 128 [ 476.126033][ T9894] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 476.199029][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 476.554012][ T27] audit: type=1326 audit(476.540:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1075" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5377b68 code=0x7ffc0000 [ 476.565251][ T9920] libceph: resolve '400' (ret=-3): failed [ 476.572318][ T27] audit: type=1326 audit(476.540:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1075" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5377b68 code=0x7ffc0000 [ 476.575809][ T27] audit: type=1326 audit(476.540:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1075" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5377b68 code=0x7ffc0000 [ 476.633179][ T27] audit: type=1326 audit(476.560:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1075" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5377b68 code=0x7ffc0000 [ 476.654246][ T27] audit: type=1326 audit(476.560:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1075" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=242 compat=0 ip=0xffffb5377b68 code=0x7ffc0000 [ 476.679193][ T27] audit: type=1326 audit(476.560:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1075" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5377b68 code=0x7ffc0000 [ 476.756089][ T27] audit: type=1326 audit(476.560:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1075" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5377b68 code=0x7ffc0000 [ 476.764690][ T27] audit: type=1326 audit(476.560:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1075" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5377b68 code=0x7ffc0000 [ 476.771191][ T27] audit: type=1326 audit(476.560:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1075" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5377b68 code=0x7ffc0000 [ 476.774939][ T27] audit: type=1326 audit(476.560:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1075" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffffb5377b68 code=0x7ffc0000 [ 477.194420][ T9926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.216187][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1086'. [ 477.225267][ T9926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.326232][ T9952] loop7: detected capacity change from 0 to 40427 [ 477.335522][ T9952] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 477.336976][ T9952] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 477.340501][ T9952] F2FS-fs (loop7): invalid crc value [ 477.350013][ T9952] F2FS-fs (loop7): Found nat_bits in checkpoint [ 477.370738][ T9952] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 477.372076][ T9952] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 477.456320][ T9968] syz.3.1091: vmalloc error: size 2305843009213693955, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 477.464102][ T9968] CPU: 1 PID: 9968 Comm: syz.3.1091 Not tainted syzkaller #0 [ 477.465367][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 477.467029][ T9968] Call trace: [ 477.467596][ T9968] dump_backtrace+0x1c4/0x1f0 [ 477.468457][ T9968] show_stack+0x2c/0x3c [ 477.469201][ T9968] __dump_stack+0x30/0x40 [ 477.469905][ T9968] dump_stack_lvl+0xf4/0x15c [ 477.470685][ T9968] dump_stack+0x1c/0x5c [ 477.471390][ T9968] warn_alloc+0x214/0x324 [ 477.472181][ T9968] __vmalloc_node_range+0x118/0xe70 [ 477.473116][ T9968] vmalloc+0x9c/0xd4 [ 477.473821][ T9968] dvb_dvr_do_ioctl+0x120/0x1f8 [ 477.474621][ T9968] dvb_usercopy+0x248/0x45c [ 477.475459][ T9968] dvb_dvr_ioctl+0x3c/0x54 [ 477.476149][ T9968] __arm64_sys_ioctl+0x14c/0x1c8 [ 477.476973][ T9968] invoke_syscall+0x98/0x290 [ 477.477737][ T9968] el0_svc_common+0x13c/0x258 [ 477.478555][ T9968] do_el0_svc+0x5c/0x134 [ 477.479314][ T9968] el0_svc+0x58/0x128 [ 477.479990][ T9968] el0t_64_sync_handler+0x84/0xf0 [ 477.480820][ T9968] el0t_64_sync+0x18c/0x190 [ 477.805604][ T9968] Mem-Info: [ 477.806261][ T9968] active_anon:17715 inactive_anon:0 isolated_anon:0 [ 477.806261][ T9968] active_file:5046 inactive_file:2419 isolated_file:0 [ 477.806261][ T9968] unevictable:768 dirty:145 writeback:0 [ 477.806261][ T9968] slab_reclaimable:19713 slab_unreclaimable:94164 [ 477.806261][ T9968] mapped:34942 shmem:11751 pagetables:840 [ 477.806261][ T9968] sec_pagetables:0 bounce:0 [ 477.806261][ T9968] kernel_misc_reclaimable:0 [ 477.806261][ T9968] free:1433245 free_pcp:3129 free_cma:7360 [ 477.824327][ T9968] Node 0 active_anon:71060kB inactive_anon:0kB active_file:20184kB inactive_file:9676kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:139868kB dirty:580kB writeback:0kB shmem:47004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9892kB pagetables:3360kB sec_pagetables:0kB all_unreclaimable? no [ 477.832805][ T9968] Node 0 DMA free:3076864kB boost:0kB min:20660kB low:25824kB high:30988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 477.838355][ T9968] lowmem_reserve[]: 0 0 3551 3551 3551 [ 477.839487][ T9968] Node 0 Normal free:2654608kB boost:0kB min:24392kB low:30488kB high:36584kB reserved_highatomic:0KB active_anon:74060kB inactive_anon:0kB active_file:20184kB inactive_file:9676kB unevictable:3072kB writepending:580kB present:5242880kB managed:3640316kB mlocked:0kB bounce:0kB free_pcp:10764kB local_pcp:3132kB free_cma:0kB [ 477.844594][ T9968] lowmem_reserve[]: 0 0 0 0 0 [ 477.845703][ T9968] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 477.848642][ T9968] Node 0 Normal: 87*4kB (UME) 840*8kB (UM) 421*16kB (UME) 339*32kB (UME) 122*64kB (UE) 135*128kB (UE) 18*256kB (UE) 12*512kB (UME) 8*1024kB (UME) 6*2048kB (UM) 628*4096kB (UM) = 2653260kB [ 477.852098][ T9968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.853806][ T9968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 477.855586][ T9968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 477.857495][ T9968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 477.859232][ T9968] 20936 total pagecache pages [ 477.859989][ T9968] 0 pages in swap cache [ 477.860813][ T9968] Free swap = 124484kB [ 477.861424][ T9968] Total swap = 124996kB [ 477.862289][ T9968] 2097152 pages RAM [ 477.862906][ T9968] 0 pages HighMem/MovableOnly [ 477.863802][ T9968] 417025 pages reserved [ 477.864435][ T9968] 8192 pages cma reserved [ 477.865321][ T9968] 0 pages hwpoisoned [ 477.929089][ T9976] loop3: detected capacity change from 0 to 2048 [ 478.284402][ T9976] hpfs: hpfs_map_sector(): read error [ 478.370790][ T9981] loop2: detected capacity change from 0 to 4096 [ 478.381474][ T9981] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 478.511712][ T4338] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 478.514144][ T4338] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 478.518050][ T4338] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 478.554787][ T9992] loop3: detected capacity change from 0 to 1024 [ 478.633095][ T9995] loop7: detected capacity change from 0 to 4096 [ 478.641571][ T9995] ntfs3: Unknown parameter 'windows_names' [ 479.302602][T10013] loop8: detected capacity change from 0 to 32768 [ 479.493118][T10015] loop5: detected capacity change from 0 to 2048 [ 479.497422][T10013] 9pnet_fd: Insufficient options for proto=fd [ 479.500485][T10013] ERROR: (device loop8): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 479.500485][T10013] [ 479.530881][T10013] ERROR: (device loop8): remounting filesystem as read-only [ 479.532228][T10013] ERROR: (device loop8): txAbort: [ 479.532228][T10013] [ 479.567813][T10015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.394511][ T9159] ERROR: (device loop8): xtTruncate: XT_GETPAGE: xtree page corrupt [ 480.394511][ T9159] [ 480.428322][T10033] Bluetooth: MGMT ver 1.22 [ 480.751336][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1119'. [ 480.751401][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1119'. [ 481.372865][T10059] loop2: detected capacity change from 0 to 40427 [ 481.375183][T10059] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 481.376951][T10059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 481.379466][T10059] F2FS-fs (loop2): invalid crc value [ 481.393371][T10059] F2FS-fs (loop2): Found nat_bits in checkpoint [ 481.420160][T10059] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 481.421414][T10059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 481.856812][ T3899] libceph: connect (1)[c::]:6789 error -101 [ 481.858084][ T3899] libceph: mon0 (1)[c::]:6789 connect error [ 481.990516][T10045] loop5: detected capacity change from 0 to 65536 [ 481.995139][T10045] (syz.5.1117,10045,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 481.996949][T10045] (syz.5.1117,10045,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 482.294219][T10083] ceph: No mds server is up or the cluster is laggy [ 482.294443][ T3899] libceph: connect (1)[c::]:6789 error -101 [ 482.297879][ T3899] libceph: mon0 (1)[c::]:6789 connect error [ 482.442470][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.443980][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.814946][T10124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1137'. [ 482.939651][T10132] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1140'. [ 483.284715][T10140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'. [ 483.405622][T10150] tipc: Can't bind to reserved service type 0 [ 485.388079][T10191] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1161'. [ 485.512743][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1159'. [ 485.514400][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1159'. [ 485.817139][T10186] loop7: detected capacity change from 0 to 32768 [ 485.875277][T10186] XFS (loop7): Mounting V5 Filesystem [ 485.883161][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 485.883170][ T27] audit: type=1326 audit(485.870:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.8.1165" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa177b68 code=0x7ffc0000 [ 485.889597][ T27] audit: type=1326 audit(485.880:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.8.1165" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa177b68 code=0x7ffc0000 [ 485.896045][ T27] audit: type=1326 audit(485.880:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.8.1165" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa177b68 code=0x7ffc0000 [ 485.970004][ T27] audit: type=1326 audit(485.880:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.8.1165" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=291 compat=0 ip=0xffffaa177b68 code=0x7ffc0000 [ 485.987266][T10222] loop8: detected capacity change from 0 to 256 [ 485.993824][ T27] audit: type=1326 audit(485.880:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.8.1165" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa177b68 code=0x7ffc0000 [ 485.998227][ T27] audit: type=1326 audit(485.880:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.8.1165" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa177b68 code=0x7ffc0000 [ 486.002007][ T27] audit: type=1326 audit(485.880:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.8.1165" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa177b68 code=0x7ffc0000 [ 486.005744][ T27] audit: type=1326 audit(485.880:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.8.1165" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffffaa177b68 code=0x7ffc0000 [ 486.010496][ T27] audit: type=1326 audit(485.880:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.8.1165" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa177b68 code=0x7ffc0000 [ 486.014914][ T27] audit: type=1326 audit(485.880:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.8.1165" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffaa177b68 code=0x7ffc0000 [ 486.281039][T10222] exfat: Unknown parameter 'zero_size_dir' [ 486.298730][T10186] XFS (loop7): Ending clean mount [ 486.323932][ T7911] XFS (loop7): Unmounting Filesystem [ 486.651291][T10233] loop5: detected capacity change from 0 to 8192 [ 486.662588][T10233] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 486.980741][T10231] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 486.982000][T10231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.983288][T10231] vhci_hcd vhci_hcd.0: Device attached [ 487.242830][T10232] vhci_hcd: connection closed [ 487.243457][ T4969] vhci_hcd: stop threads [ 487.245136][ T4969] vhci_hcd: release socket [ 487.245896][ T4969] vhci_hcd: disconnect device [ 487.316895][ T22] vhci_hcd: vhci_device speed not set [ 488.047833][T10243] netlink: 'syz.2.1184': attribute type 4 has an invalid length. [ 488.227686][T10243] securityfs: Unknown parameter 'm8{>bvçZ000&' [ 488.368326][T10244] loop8: detected capacity change from 0 to 8192 [ 488.801432][T10250] loop2: detected capacity change from 0 to 128 [ 488.919319][T10250] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 488.924457][T10250] hpfs: filesystem error: improperly stopped [ 488.925410][T10250] hpfs: You really don't want any checks? You are crazy... [ 488.926556][T10250] hpfs: hpfs_map_sector(): read error [ 489.248067][T10250] hpfs: code page support is disabled [ 489.267626][T10250] hpfs: hpfs_map_4sectors(): unaligned read [ 489.272124][T10250] hpfs: hpfs_map_4sectors(): unaligned read [ 489.273183][T10250] hpfs: filesystem error: unable to find root dir [ 489.531897][T10260] loop2: detected capacity change from 0 to 4096 [ 489.534012][T10260] ntfs3: Unknown parameter 'windows_names' [ 489.878170][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'. [ 489.879628][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 491.398233][T10300] loop5: detected capacity change from 0 to 8192 [ 491.767974][T10304] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1189'. [ 492.254356][T10316] libceph: resolve '400' (ret=-3): failed [ 492.256307][T10316] 9pnet_fd: Insufficient options for proto=fd [ 492.257904][T10316] raw_sendmsg: syz.2.1192 forgot to set AF_INET. Fix it! [ 492.509871][T10314] loop8: detected capacity change from 0 to 4096 [ 492.604788][T10327] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 492.677918][T10332] loop5: detected capacity change from 0 to 764 [ 492.704120][T10330] Symlink component flag not implemented [ 492.723890][T10330] Symlink component flag not implemented (15) [ 492.856301][T10330] overlayfs: unrecognized mount option "ŠM)Iˆm0–“ÒøÐÄ—¤--./file0" or missing value [ 493.031303][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1198'. [ 493.032708][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1198'. [ 493.517715][T10368] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1201'. [ 493.519735][T10360] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1201'. [ 493.627073][T10375] loop2: detected capacity change from 0 to 4096 [ 493.651235][T10382] loop3: detected capacity change from 0 to 2048 [ 493.653211][T10375] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 493.654403][T10375] UDF-fs: Scanning with blocksize 512 failed [ 493.660431][T10382] UDF-fs: bad mount option "gid=00000000000000060928" or missing value [ 493.671067][T10375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.708109][ T7995] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.164737][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 494.166541][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 494.230725][T10402] netlink: 'syz.5.1211': attribute type 5 has an invalid length. [ 494.235906][T10402] capability: warning: `syz.5.1211' uses deprecated v2 capabilities in a way that may be insecure [ 494.242109][T10402] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 494.339569][T10417] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1214'. [ 494.548905][T10341] autofs4:pid:10341:autofs_fill_super: called with bogus options [ 494.652546][T10442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.654232][T10442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.684432][T10446] loop7: detected capacity change from 0 to 4096 [ 494.697421][T10447] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.400698][T10493] device syzkaller0 entered promiscuous mode [ 495.702458][T10515] __nla_validate_parse: 3 callbacks suppressed [ 495.702470][T10515] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1242'. [ 495.705629][T10509] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1242'. [ 496.054902][T10532] loop7: detected capacity change from 0 to 64 [ 496.136094][T10532] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 496.761642][T10573] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1256'. [ 496.763470][T10569] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1256'. [ 498.100990][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.105177][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.215170][T10611] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1269'. [ 498.217315][T10610] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1269'. [ 498.287342][T10615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.288799][T10615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.322668][T10597] loop7: detected capacity change from 0 to 32768 [ 498.349527][T10597] XFS (loop7): Mounting V5 Filesystem [ 498.366559][T10597] XFS (loop7): Ending clean mount [ 498.383341][ T7911] XFS (loop7): Unmounting Filesystem [ 498.434245][T10630] loop8: detected capacity change from 0 to 128 [ 498.444590][T10630] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 498.474930][ T9159] EXT4-fs (loop8): unmounting filesystem. [ 498.909723][T10638] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 498.911034][T10638] netlink: 16118 bytes leftover after parsing attributes in process `syz.2.1277'. [ 499.062873][T10651] loop5: detected capacity change from 0 to 512 [ 499.096682][T10652] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1280'. [ 499.357848][T10651] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 499.360319][T10651] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 499.362337][T10647] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1280'. [ 499.393094][T10651] EXT4-fs (loop5): 1 truncate cleaned up [ 499.394194][T10651] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 499.425682][ T5350] EXT4-fs (loop5): unmounting filesystem. [ 499.487976][ T7997] I/O error, dev loop5, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 499.710584][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.711722][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.714175][T10685] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1294'. [ 500.154146][T10695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.165572][T10695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.292097][T10701] loop2: detected capacity change from 0 to 2048 [ 500.314851][T10701] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 500.329448][T10701] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 500.344272][T10701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.849251][T10703] loop7: detected capacity change from 0 to 64 [ 502.189541][T10720] __nla_validate_parse: 1 callbacks suppressed [ 502.189556][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1309'. [ 503.149188][T10741] loop5: detected capacity change from 0 to 256 [ 503.150732][T10741] exfat: Deprecated parameter 'namecase' [ 503.151751][T10741] exfat: Deprecated parameter 'namecase' [ 503.152777][T10741] exfat: Unknown parameter 'zero_size_dir' [ 503.220706][T10746] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1320'. [ 503.222885][T10743] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1320'. [ 503.483314][T10749] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1319'. [ 503.989587][ T8725] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 504.128091][T10759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1323'. [ 504.575733][T10778] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1330'. [ 504.676596][T10778] loop7: detected capacity change from 0 to 40427 [ 504.839315][T10778] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 504.840929][T10778] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 504.844558][T10778] F2FS-fs (loop7): invalid crc value [ 504.919980][T10778] F2FS-fs (loop7): Found nat_bits in checkpoint [ 504.929922][T10785] loop2: detected capacity change from 0 to 8192 [ 504.932043][T10778] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 504.933199][T10778] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 504.985628][T10790] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1332'. [ 504.987581][T10789] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1332'. [ 505.444323][T10797] loop5: detected capacity change from 0 to 512 [ 505.456249][T10797] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 505.480369][T10797] EXT4-fs (loop5): 1 truncate cleaned up [ 505.481325][T10797] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 505.808420][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1336'. [ 505.842452][ T5350] EXT4-fs (loop5): unmounting filesystem. [ 505.898635][T10817] loop3: detected capacity change from 0 to 1764 [ 506.473730][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'. [ 506.700441][ T7997] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 506.944433][T10858] netlink: 'syz.5.1357': attribute type 1 has an invalid length. [ 506.945791][T10858] netlink: 'syz.5.1357': attribute type 4 has an invalid length. [ 507.894197][T10875] loop8: detected capacity change from 0 to 8 [ 508.045153][T10888] loop5: detected capacity change from 0 to 8 [ 509.844987][T10907] SQUASHFS error: Failed to read block 0x2d7: -5 [ 509.846047][T10907] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 510.168918][T10925] loop7: detected capacity change from 0 to 512 [ 510.237546][T10926] __nla_validate_parse: 5 callbacks suppressed [ 510.237574][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1373'. [ 510.239981][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1373'. [ 510.537485][ T4333] Bluetooth: hci0: command 0x0411 tx timeout [ 510.576407][T10925] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1376: missing EA_INODE flag [ 510.584649][T10925] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1376: error while reading EA inode 12 err=-117 [ 510.595575][T10925] EXT4-fs (loop7): 1 orphan inode deleted [ 510.597170][T10925] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 510.611677][T10934] netlink: 'syz.2.1379': attribute type 21 has an invalid length. [ 510.612964][T10934] IPv6: NLM_F_CREATE should be specified when creating new route [ 511.180430][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1383'. [ 511.220964][ T7911] EXT4-fs (loop7): unmounting filesystem. [ 511.956072][T10963] loop5: detected capacity change from 0 to 4096 [ 511.983510][T10966] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1387'. [ 511.985218][T10961] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1387'. [ 512.852113][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1396'. [ 513.232015][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 513.233517][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 514.884202][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1409'. [ 515.237885][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1414'. [ 516.122609][T11060] __nla_validate_parse: 1 callbacks suppressed [ 516.122622][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1423'. [ 517.873208][T11080] loop5: detected capacity change from 0 to 16 [ 517.876814][T11080] erofs: (device loop5): mounted with root inode @ nid 36. [ 517.909410][T11080] syz.5.1429: attempt to access beyond end of device [ 517.909410][T11080] loop5: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 517.911795][T11080] syz.5.1429: attempt to access beyond end of device [ 517.911795][T11080] loop5: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 517.914602][T11080] syz.5.1429: attempt to access beyond end of device [ 517.914602][T11080] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 517.917174][T11080] syz.5.1429: attempt to access beyond end of device [ 517.917174][T11080] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 517.983118][T11080] ================================================================== [ 517.984514][T11080] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x39c/0x494 [ 517.985783][T11080] Read of size 4096 at addr ffff0000d03f4000 by task syz.5.1429/11080 [ 517.986990][T11080] [ 517.987360][T11080] CPU: 0 PID: 11080 Comm: syz.5.1429 Not tainted syzkaller #0 [ 517.988525][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 517.990067][T11080] Call trace: [ 517.990607][T11080] dump_backtrace+0x1c4/0x1f0 [ 517.991307][T11080] show_stack+0x2c/0x3c [ 517.991907][T11080] __dump_stack+0x30/0x40 [ 517.992554][T11080] dump_stack_lvl+0xf4/0x15c [ 517.993250][T11080] print_address_description+0x88/0x218 [ 517.994105][T11080] print_report+0x50/0x68 [ 517.994766][T11080] kasan_report+0xa8/0xfc [ 517.995422][T11080] kasan_check_range+0x258/0x290 [ 517.996136][T11080] memcpy+0x48/0x90 [ 517.996718][T11080] z_erofs_transform_plain+0x39c/0x494 [ 517.997540][T11080] z_erofs_decompress+0x9c/0xd4 [ 517.998351][T11080] z_erofs_decompress_queue+0x103c/0x1bf4 [ 517.999224][T11080] z_erofs_runqueue+0x1540/0x16a8 [ 518.000001][T11080] z_erofs_read_folio+0x2dc/0x5cc [ 518.000814][T11080] filemap_read_folio+0x134/0x384 [ 518.001624][T11080] filemap_fault+0x990/0xe98 [ 518.002325][T11080] __do_fault+0x11c/0x3d8 [ 518.002991][T11080] handle_mm_fault+0x1d04/0x3018 [ 518.003754][T11080] do_page_fault+0x310/0x99c [ 518.004458][T11080] do_translation_fault+0x94/0xc8 [ 518.005225][T11080] do_mem_abort+0x70/0x198 [ 518.005911][T11080] el1_abort+0x3c/0x5c [ 518.006510][T11080] el1h_64_sync_handler+0x50/0xac [ 518.007238][T11080] el1h_64_sync+0x64/0x68 [ 518.007885][T11080] check_zeroed_user+0x1a4/0x3c0 [ 518.008632][T11080] __arm64_sys_landlock_create_ruleset+0x1f4/0x4a4 [ 518.009655][T11080] invoke_syscall+0x98/0x290 [ 518.010361][T11080] el0_svc_common+0x13c/0x258 [ 518.011077][T11080] do_el0_svc+0x5c/0x134 [ 518.011724][T11080] el0_svc+0x58/0x128 [ 518.012361][T11080] el0t_64_sync_handler+0x84/0xf0 [ 518.013135][T11080] el0t_64_sync+0x18c/0x190 [ 518.013819][T11080] [ 518.014155][T11080] Allocated by task 1: [ 518.014776][T11080] kasan_set_track+0x4c/0x80 [ 518.015447][T11080] kasan_save_alloc_info+0x24/0x30 [ 518.016212][T11080] __kasan_kmalloc+0xa0/0xb8 [ 518.016880][T11080] __kmalloc_node_track_caller+0xcc/0x174 [ 518.017765][T11080] kvasprintf+0x12c/0x204 [ 518.018425][T11080] kvasprintf_const+0x154/0x2e4 [ 518.019205][T11080] kobject_set_name_vargs+0xd8/0x1c8 [ 518.020060][T11080] kobject_init_and_add+0xec/0x194 [ 518.020857][T11080] net_rx_queue_update_kobjects+0x184/0x420 [ 518.021840][T11080] netdev_register_kobject+0x1fc/0x2f4 [ 518.022723][T11080] register_netdevice+0xf28/0x1650 [ 518.023540][T11080] bond_create+0xa4/0x104 [ 518.024213][T11080] bonding_init+0xe8c/0x1548 [ 518.024883][T11080] do_one_initcall+0x278/0x9f0 [ 518.025583][T11080] do_initcall_level+0x158/0x214 [ 518.026314][T11080] do_initcalls+0x58/0xac [ 518.026974][T11080] do_basic_setup+0x8c/0xa0 [ 518.027692][T11080] kernel_init_freeable+0x35c/0x4f0 [ 518.028517][T11080] kernel_init+0x24/0x1d8 [ 518.029171][T11080] ret_from_fork+0x10/0x20 [ 518.029837][T11080] [ 518.030180][T11080] The buggy address belongs to the object at ffff0000d03f4000 [ 518.030180][T11080] which belongs to the cache kmalloc-128 of size 128 [ 518.032124][T11080] The buggy address is located 0 bytes inside of [ 518.032124][T11080] 128-byte region [ffff0000d03f4000, ffff0000d03f4080) [ 518.033946][T11080] [ 518.034273][T11080] The buggy address belongs to the physical page: [ 518.035174][T11080] page:00000000e8b7a915 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1103f4 [ 518.036886][T11080] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 518.038005][T11080] raw: 05ffc00000000200 dead000000000100 dead000000000122 ffff0000c0002300 [ 518.039294][T11080] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 518.040577][T11080] page dumped because: kasan: bad access detected [ 518.041517][T11080] [ 518.041866][T11080] Memory state around the buggy address: [ 518.042679][T11080] ffff0000d03f3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.043804][T11080] ffff0000d03f3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 518.045010][T11080] >ffff0000d03f4000: 06 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 518.046194][T11080] ^ [ 518.046810][T11080] ffff0000d03f4080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 518.048001][T11080] ffff0000d03f4100: 06 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 518.049139][T11080] ================================================================== [ 518.050362][T11080] Disabling lock debugging due to kernel taint