last executing test programs: 24.824513265s ago: executing program 4 (id=453): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, 0x0) 23.864866205s ago: executing program 4 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32) 23.796778109s ago: executing program 4 (id=460): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, 0x0, 0x0, 0x0) 23.796600739s ago: executing program 4 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 23.759956001s ago: executing program 4 (id=464): syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x113) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 23.153127263s ago: executing program 2 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32) 22.661363088s ago: executing program 4 (id=471): socket(0xa, 0x801, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000098aadef838f1fb45ff1a860000002000000000000000fe"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x107, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x4, [{0x8c, 0xf}, {0x4, 0x8}, {0x5, 0x5}, {0x400, 0x7fff}, {0x2, 0xffffff78}, {0x2e, 0xfdfd}, {0xffffdffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x0, 0x6}}) 22.595446812s ago: executing program 32 (id=471): socket(0xa, 0x801, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000098aadef838f1fb45ff1a860000002000000000000000fe"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x107, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x4, [{0x8c, 0xf}, {0x4, 0x8}, {0x5, 0x5}, {0x400, 0x7fff}, {0x2, 0xffffff78}, {0x2e, 0xfdfd}, {0xffffdffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x0, 0x6}}) 22.587154532s ago: executing program 2 (id=474): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, 0x0, 0x0, 0x0) 22.520816646s ago: executing program 2 (id=475): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc0000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22.515885016s ago: executing program 2 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 22.43669328s ago: executing program 2 (id=477): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 22.128679607s ago: executing program 2 (id=480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{0x304}, "29161dea03fa5207", "108f14560d777e23a6b25c7f81e211bbc13997c27dc85beecc9ba15e0378e417", 'iXly', "d7d4ab834780f81c"}, 0x38) 22.116206697s ago: executing program 33 (id=480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{0x304}, "29161dea03fa5207", "108f14560d777e23a6b25c7f81e211bbc13997c27dc85beecc9ba15e0378e417", 'iXly', "d7d4ab834780f81c"}, 0x38) 21.794257124s ago: executing program 0 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sched_setattr(0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r4) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) 20.907343011s ago: executing program 0 (id=484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32) 20.871073132s ago: executing program 0 (id=485): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc0000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.869973803s ago: executing program 0 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 20.783809767s ago: executing program 0 (id=488): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000010c0)="88c5", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 20.084852484s ago: executing program 0 (id=489): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 20.041595186s ago: executing program 34 (id=489): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 8.604800737s ago: executing program 1 (id=525): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 5.067093623s ago: executing program 5 (id=539): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1553, &(0x7f0000001900)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x106f) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) 3.865024676s ago: executing program 5 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f0000000540)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@nodiscard}, {@clear_cache}, {@rescan_uuid_tree}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) openat(r0, 0x0, 0x543442, 0xd1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f00000021c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r4, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) ioctl(r5, 0x78ee2a6a, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r8) 3.066882198s ago: executing program 1 (id=547): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x26, 0x34b, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080)=0x3, 0x4) 2.554727655s ago: executing program 3 (id=548): syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x113) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) 2.543487606s ago: executing program 5 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000300)) 2.489778688s ago: executing program 1 (id=550): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$vhost_msg_v2(r5, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000180)=""/123, 0x7b, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r5, &(0x7f0000000200)={0x2, 0x0, {0x0, 0xd, 0x0, 0x0, 0x3}}, 0x48) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x9e) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf0ff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 2.47159934s ago: executing program 3 (id=552): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450d", 0x27}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495", 0x8c}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294", 0x4f}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.427074552s ago: executing program 7 (id=490): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) 1.985830315s ago: executing program 3 (id=553): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x40800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000002c0)=0x4c) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0x4112, 0x0) 1.950448777s ago: executing program 5 (id=554): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.879467891s ago: executing program 5 (id=555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000010c0)="88c5", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)}}], 0x3, 0x0) shutdown(r0, 0x1) 1.787560455s ago: executing program 3 (id=556): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0xc23, 0x46}, 0xc) 1.70153743s ago: executing program 3 (id=557): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, 0x0) 1.536818449s ago: executing program 5 (id=558): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 1.307195101s ago: executing program 1 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sched_setattr(0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r4) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x8002, 0x1, 0x4, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) 646.781276ms ago: executing program 3 (id=561): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002f88a8", 0xe}], 0x1}, 0x20000000) 503.061373ms ago: executing program 6 (id=563): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450d", 0x27}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495", 0x8c}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294", 0x4f}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 419.408957ms ago: executing program 6 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000300)) 375.21047ms ago: executing program 6 (id=565): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 331.697742ms ago: executing program 6 (id=566): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x40800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000002c0)=0x4c) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0x4112, 0x0) 236.715837ms ago: executing program 6 (id=567): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0xc23, 0x46}, 0xc) 189.587169ms ago: executing program 1 (id=568): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000010c0)="88c5", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)}}], 0x3, 0x0) shutdown(r0, 0x1) 155.511501ms ago: executing program 6 (id=569): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000100)={[{@abort}]}, 0xf7, 0x491, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 139.419612ms ago: executing program 7 (id=570): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$vhost_msg_v2(r5, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000180)=""/123, 0x7b, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r5, &(0x7f0000000200)={0x2, 0x0, {0x0, 0xd, 0x0, 0x0, 0x3}}, 0x48) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x9e) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf0ff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 0s ago: executing program 1 (id=571): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, 0x0) kernel console output (not intermixed with test programs): ded to keep mac addresses unique to avoid problems! [ 33.410476][ T4404] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 33.411926][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.415479][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.418075][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.431583][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.433477][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.435081][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.448355][ T1609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.449675][ T1609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.458032][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.459913][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.461596][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.465295][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.466808][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.468617][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.470939][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.475365][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.476970][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.479116][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.495533][ T4329] device veth0_macvtap entered promiscuous mode [ 33.498875][ T4329] device veth1_macvtap entered promiscuous mode [ 33.503459][ T4327] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 33.507660][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.509440][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.511094][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.516101][ T4327] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 33.517223][ T4327] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 33.519310][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.531350][ T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.532955][ T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.535093][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.543505][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.545074][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.546448][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.547890][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.571320][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.576310][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.577892][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.579680][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.581358][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.584049][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.585704][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.587409][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.591880][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.594733][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.596322][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.597932][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.599767][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.601387][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.608805][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.610467][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.612012][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.618840][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.635075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.636955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.638550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.640138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.648005][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.649472][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.650992][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.652622][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.148975][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.149522][ T232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.152786][ T232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.155226][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.158125][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.160123][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.190883][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.191887][ T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.194393][ T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.198298][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.203597][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.205301][ T232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.216445][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.218195][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.219606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.236291][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.237821][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.239295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.252459][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 34.254108][ T4335] Bluetooth: hci3: command 0x041b tx timeout [ 34.255318][ T4322] Bluetooth: hci0: command 0x041b tx timeout [ 34.256359][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 34.257739][ T4322] Bluetooth: hci1: command 0x041b tx timeout [ 34.357179][ T4418] binder: 4416:4418 tried to acquire reference to desc 0, got 1 instead [ 34.361708][ T4418] binder_alloc: 4416: pid 4416 spamming oneway? 2 buffers allocated for a total size of 5120 [ 34.364700][ T4418] binder_alloc: 4416: pid 4416 spamming oneway? 3 buffers allocated for a total size of 5128 [ 34.377504][ T4418] Zero length message leads to an empty skb [ 34.378978][ T4418] binder: 4416:4418 ioctl c0186e86 20000140 returned -22 [ 34.381072][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 34.383410][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 34.384537][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 34.448986][ T24] binder: undelivered transaction 6, process died. [ 34.450214][ T24] binder: undelivered transaction 7, process died. [ 34.451391][ T24] binder: undelivered transaction 5, process died. [ 34.481448][ T4425] loop4: detected capacity change from 0 to 256 [ 34.547960][ T4428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.549579][ T4428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.151555][ T3897] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.243765][ T4425] exfat: Deprecated parameter 'utf8' [ 35.247363][ T4425] exFAT-fs (loop4): bogus number of FAT structure [ 35.252807][ T4425] exFAT-fs (loop4): failed to read boot sector [ 35.272879][ T4425] exFAT-fs (loop4): failed to recognize exfat type [ 35.300846][ T4310] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.824502][ T3897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.838758][ T3897] usb 1-1: config 208 has an invalid interface number: 119 but max is 0 [ 35.843543][ T3897] usb 1-1: config 208 has no interface number 0 [ 35.847210][ T3897] usb 1-1: config 208 interface 119 has no altsetting 0 [ 35.854347][ T3897] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 35.857060][ T3897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.860563][ T3897] usb 1-1: Product: syz [ 35.861248][ T3897] usb 1-1: Manufacturer: syz [ 35.863139][ T3897] usb 1-1: SerialNumber: syz [ 35.970715][ T4441] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 36.104200][ T3897] ums-alauda 1-1:208.119: USB Mass Storage device detected [ 36.170844][ T3897] usb 1-1: USB disconnect, device number 2 [ 36.332664][ T4326] Bluetooth: hci4: command 0x040f tx timeout [ 36.332696][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 36.332777][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 36.336596][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 36.338277][ T4335] Bluetooth: hci2: command 0x040f tx timeout [ 36.641646][ T4450] loop2: detected capacity change from 0 to 7 [ 36.645433][ T4450] Dev loop2: unable to read RDB block 7 [ 36.646562][ T4450] loop2: AHDI p1 p2 p3 [ 36.647310][ T4450] loop2: partition table partially beyond EOD, truncated [ 36.648999][ T4450] loop2: p1 start 1601398130 is beyond EOD, truncated [ 36.650213][ T4450] loop2: p2 start 1702059890 is beyond EOD, truncated [ 36.659159][ T3935] Dev loop2: unable to read RDB block 7 [ 36.660173][ T3935] loop2: AHDI p1 p2 p3 [ 36.660930][ T3935] loop2: partition table partially beyond EOD, truncated [ 36.663437][ T3935] loop2: p1 start 1601398130 is beyond EOD, truncated [ 36.664656][ T3935] loop2: p2 start 1702059890 is beyond EOD, truncated [ 37.572867][ T4465] loop2: detected capacity change from 0 to 128 [ 37.795193][ T4464] loop1: detected capacity change from 0 to 512 [ 37.836865][ T4470] loop1: detected capacity change from 0 to 64 [ 38.286978][ T4433] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.412921][ T4338] Bluetooth: hci1: command 0x0419 tx timeout [ 38.414522][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 38.415575][ T4328] Bluetooth: hci3: command 0x0419 tx timeout [ 38.415594][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 38.416451][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 38.749985][ T4433] usb 1-1: Using ep0 maxpacket: 16 [ 38.761351][ T4433] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 38.763173][ T4433] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.764824][ T4433] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.767929][ T27] audit: type=1326 audit(38.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff893771a8 code=0x7ffc0000 [ 38.771513][ T27] audit: type=1326 audit(38.750:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=36 compat=0 ip=0xffff893771a8 code=0x7ffc0000 [ 38.775856][ T27] audit: type=1326 audit(38.750:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff893771a8 code=0x7ffc0000 [ 38.780123][ T4433] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.781683][ T4433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.784576][ T4433] usb 1-1: Product: syz [ 38.785288][ T4433] usb 1-1: Manufacturer: syz [ 38.788832][ T4433] usb 1-1: SerialNumber: syz [ 38.799888][ T4483] netlink: 'syz.1.24': attribute type 4 has an invalid length. [ 38.824880][ T4483] netlink: 'syz.1.24': attribute type 4 has an invalid length. [ 38.999443][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 39.001217][ T4433] usb 1-1: 0:2 : does not exist [ 39.005260][ T4433] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 39.016918][ T4433] usb 1-1: USB disconnect, device number 3 [ 39.224213][ T4314] udevd[4314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 39.285624][ T4487] loop2: detected capacity change from 0 to 32768 [ 39.337481][ T4487] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 39.337481][ T4487] [ 39.339378][ T4487] ERROR: (device loop2): remounting filesystem as read-only [ 39.340742][ T4487] jfs_create: dtInsert returned -EIO [ 39.341680][ T4487] ERROR: (device loop2): txAbort: [ 39.341680][ T4487] [ 39.823997][ T4328] block nbd4: Receive control failed (result -107) [ 39.830695][ T4497] block nbd4: shutting down sockets [ 40.506378][ T4510] binder: 4509:4510 tried to acquire reference to desc 0, got 1 instead [ 40.508869][ T4510] binder_alloc: 4509: pid 4509 spamming oneway? 2 buffers allocated for a total size of 5120 [ 40.529090][ T4510] binder_alloc: 4509: pid 4509 spamming oneway? 3 buffers allocated for a total size of 5128 [ 40.540092][ T4512] binder: BINDER_SET_CONTEXT_MGR already set [ 40.546901][ T4370] binder: undelivered TRANSACTION_COMPLETE [ 40.548071][ T4370] binder: undelivered TRANSACTION_COMPLETE [ 40.548965][ T4370] binder: undelivered TRANSACTION_COMPLETE [ 40.550076][ T4512] binder: 4511:4512 ioctl 4018620d 20004a80 returned -16 [ 40.557562][ T4512] binder: tried to use weak ref as strong ref [ 40.558703][ T4512] binder: 4511:4512 Acquire 1 refcount change on invalid ref 0 ret -22 [ 40.568434][ T4512] binder: 4511:4512 got transaction to invalid handle, 1 [ 40.569760][ T4512] binder: 4512:4511 cannot find target node [ 40.570721][ T4512] binder: 4511:4512 transaction call to 0:0 failed 17/29201/-22, size 72-24 line 3045 [ 40.571730][ T4370] binder: undelivered transaction 13, process died. [ 40.577544][ T4370] binder: undelivered transaction 16, process died. [ 40.578949][ T4370] binder: undelivered transaction 12, process died. [ 40.599459][ T4512] binder: 4511:4512 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.611216][ T4512] binder: 4512 RLIMIT_NICE not set [ 40.641337][ T4516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.643041][ T4516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.650883][ T4517] binder: 4511:4517 got transaction to invalid handle, 3 [ 40.652225][ T4517] binder: 4517:4511 cannot find target node [ 40.653273][ T4517] binder: 4511:4517 transaction call to 0:0 failed 18/29201/-22, size 0-0 line 3045 [ 40.656575][ T4517] binder: 4511:4517 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.658535][ T4517] binder: 4517 RLIMIT_NICE not set [ 40.659758][ T4517] binder: 4511:4517 got reply transaction with no transaction stack [ 40.874701][ T4525] device syzkaller0 entered promiscuous mode [ 41.329034][ T4536] netlink: 'syz.1.41': attribute type 10 has an invalid length. [ 41.330449][ T4536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.41'. [ 41.332284][ T4536] device team0 entered promiscuous mode [ 41.333256][ T4536] device team_slave_0 entered promiscuous mode [ 41.335208][ T4536] device team_slave_1 entered promiscuous mode [ 41.338591][ T4536] bridge0: port 3(team0) entered blocking state [ 41.339756][ T4536] bridge0: port 3(team0) entered disabled state [ 41.345735][ T4536] bridge0: port 3(team0) entered blocking state [ 41.346938][ T4536] bridge0: port 3(team0) entered forwarding state [ 42.113817][ T4528] syz.4.40 (4528): drop_caches: 2 [ 42.172401][ T4546] loop0: detected capacity change from 0 to 128 [ 42.173884][ T4546] ======================================================= [ 42.173884][ T4546] WARNING: The mand mount option has been deprecated and [ 42.173884][ T4546] and is ignored by this kernel. Remove the mand [ 42.173884][ T4546] option from the mount to silence this warning. [ 42.173884][ T4546] ======================================================= [ 42.182050][ T4546] EXT4-fs: inline encryption not supported [ 42.189929][ T4546] EXT4-fs (loop0): Test dummy encryption mode enabled [ 42.211028][ T4546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.440453][ T4553] Bluetooth: MGMT ver 1.22 [ 42.576460][ T4555] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 43.264045][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 43.298478][ T4562] loop2: detected capacity change from 0 to 256 [ 43.337888][ T4562] FAT-fs (loop2): Directory bread(block 64) failed [ 43.339202][ T4562] FAT-fs (loop2): Directory bread(block 65) failed [ 43.377529][ T4562] FAT-fs (loop2): Directory bread(block 66) failed [ 43.378753][ T4562] FAT-fs (loop2): Directory bread(block 67) failed [ 43.379902][ T4562] FAT-fs (loop2): Directory bread(block 68) failed [ 43.381043][ T4562] FAT-fs (loop2): Directory bread(block 69) failed [ 43.391071][ T4562] FAT-fs (loop2): Directory bread(block 70) failed [ 43.698747][ T4562] FAT-fs (loop2): Directory bread(block 71) failed [ 43.736146][ T4562] FAT-fs (loop2): Directory bread(block 72) failed [ 43.738841][ T4562] FAT-fs (loop2): Directory bread(block 73) failed [ 43.867426][ T4564] loop1: detected capacity change from 0 to 32768 [ 43.887948][ T4564] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.50 (4564) [ 43.910131][ T4572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.51'. [ 43.914859][ T78] block nbd4: Attempted send on invalid socket [ 43.916223][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 43.918106][ T4572] SQUASHFS error: Failed to read block 0x0: -5 [ 43.919290][ T4572] unable to read squashfs_super_block [ 44.138046][ T4328] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 44.140040][ T4328] Bluetooth: hci2: Injecting HCI hardware error event [ 44.143034][ T4335] Bluetooth: hci2: hardware error 0x00 [ 44.363557][ T4564] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 44.369966][ T4564] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 44.549978][ T4564] BTRFS info (device loop1): setting nodatacow, compression disabled [ 44.857585][ T4564] BTRFS info (device loop1): force clearing of disk cache [ 44.859082][ T4564] BTRFS info (device loop1): turning off barriers [ 44.860169][ T4564] BTRFS info (device loop1): use no compression [ 44.861220][ T4564] BTRFS info (device loop1): disabling free space tree [ 44.882700][ T4564] BTRFS info (device loop1): enabling ssd optimizations [ 44.884088][ T4564] BTRFS info (device loop1): using spread ssd allocation scheme [ 44.897253][ T4564] BTRFS info (device loop1): not using ssd optimizations [ 44.898529][ T4564] BTRFS info (device loop1): not using spread ssd allocation scheme [ 45.049666][ T4564] BTRFS info (device loop1): rebuilding free space tree [ 45.430702][ T4564] BTRFS info (device loop1): disabling free space tree [ 45.438445][ T4564] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 45.442400][ T4564] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 45.449278][ T4564] BTRFS info (device loop1): checking UUID tree [ 45.461901][ T4615] loop3: detected capacity change from 0 to 64 [ 45.500983][ T4615] overlayfs: failed to resolve './bus': -2 [ 47.068375][ T4638] binder: 4637:4638 tried to acquire reference to desc 0, got 1 instead [ 47.071385][ T4321] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 47.091434][ T4638] binder: 4637:4638 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.096732][ T4638] binder: 4638 RLIMIT_NICE not set [ 47.097690][ T4638] binder: 4638 RLIMIT_NICE not set [ 47.107362][ T4638] binder_debug: 4 callbacks suppressed [ 47.107371][ T4638] binder: release 4637:4638 transaction 31 out, still active [ 47.109720][ T4638] binder: release 4637:4638 transaction 24 in, still active [ 47.109820][ T4335] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 47.122257][ T4638] binder: undelivered TRANSACTION_COMPLETE [ 47.156271][ T4638] binder: 4638 RLIMIT_NICE not set [ 47.157685][ T4638] binder: 4638 RLIMIT_NICE not set [ 47.158547][ T4638] binder: 4638:4637 reply target not found [ 47.159486][ T4638] binder: 4637:4638 transaction reply to 0:0 failed 32/29189/0, size 0-0 line 2975 [ 47.161058][ T4638] binder: send failed reply for transaction 31, target dead [ 47.162219][ T4638] binder: send failed reply for transaction 24 to 4637:4638 [ 47.173219][ T4371] binder: undelivered TRANSACTION_ERROR: 29190 [ 47.174250][ T4371] binder: undelivered TRANSACTION_ERROR: 29189 [ 47.301255][ T27] audit: type=1326 audit(47.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff911771a8 code=0x7ffc0000 [ 47.334681][ T27] audit: type=1326 audit(47.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=36 compat=0 ip=0xffff911771a8 code=0x7ffc0000 [ 47.348410][ T27] audit: type=1326 audit(47.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff911771a8 code=0x7ffc0000 [ 47.360514][ T27] audit: type=1326 audit(47.340:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4651 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff911771a8 code=0x7ffc0000 [ 47.406032][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.432648][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.468601][ T4658] binder: 4656:4658 tried to acquire reference to desc 0, got 1 instead [ 47.486237][ T4658] binder_alloc: 4656: pid 4656 spamming oneway? 2 buffers allocated for a total size of 5120 [ 47.498376][ T4658] binder_alloc: 4656: pid 4656 spamming oneway? 3 buffers allocated for a total size of 5128 [ 47.509582][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 47.610979][ T4660] loop0: detected capacity change from 0 to 32768 [ 47.625008][ T4660] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.71 (4660) [ 47.631733][ T4660] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 47.633402][ T4660] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 47.634889][ T4660] BTRFS info (device loop0): setting nodatacow, compression disabled [ 47.636151][ T4660] BTRFS info (device loop0): force clearing of disk cache [ 47.637219][ T4660] BTRFS info (device loop0): turning off barriers [ 47.638251][ T4660] BTRFS info (device loop0): use no compression [ 47.639215][ T4660] BTRFS info (device loop0): disabling free space tree [ 47.640318][ T4660] BTRFS info (device loop0): enabling ssd optimizations [ 47.641393][ T4660] BTRFS info (device loop0): using spread ssd allocation scheme [ 47.642839][ T4660] BTRFS info (device loop0): not using ssd optimizations [ 47.644042][ T4660] BTRFS info (device loop0): not using spread ssd allocation scheme [ 47.910790][ T4660] BTRFS info (device loop0): rebuilding free space tree [ 47.915680][ T4660] BTRFS info (device loop0): disabling free space tree [ 47.917019][ T4660] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 47.918654][ T4660] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 47.921974][ T4660] BTRFS info (device loop0): checking UUID tree [ 48.064533][ T4685] loop4: detected capacity change from 0 to 128 [ 48.066196][ T4685] EXT4-fs: inline encryption not supported [ 48.071482][ T4685] EXT4-fs (loop4): Test dummy encryption mode enabled [ 48.468178][ T4688] loop1: detected capacity change from 0 to 128 [ 48.487171][ T4685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.595634][ T4688] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 48.597680][ T4688] hpfs: filesystem error: improperly stopped [ 48.598759][ T4688] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 48.926016][ T4688] hpfs: You really don't want any checks? You are crazy... [ 48.927400][ T4688] hpfs: Code page index out of array [ 48.928340][ T4688] hpfs: code page support is disabled [ 48.946429][ T4325] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 48.954946][ T4688] hpfs: hpfs_map_4sectors(): unaligned read [ 48.960444][ T4688] hpfs: hpfs_map_4sectors(): unaligned read [ 48.976481][ T4688] hpfs: filesystem error: unable to find root dir [ 49.173360][ T4700] loop0: detected capacity change from 0 to 2048 [ 49.279597][ T4703] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 49.754977][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 49.766770][ T4700] loop0: p1 p2 p3 [ 49.766770][ T4700] p1: [ 49.779567][ T4700] loop0: p2 size 458752 extends beyond EOD, truncated [ 49.782349][ T4700] loop0: p3 start 65280 is beyond EOD, truncated [ 49.804057][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 49.807029][ T4310] udevd[4310]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 49.817501][ T4712] binder: 4711:4712 tried to acquire reference to desc 0, got 1 instead [ 49.837279][ T4714] loop2: detected capacity change from 0 to 512 [ 49.837351][ T4712] binder: 4711:4712 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 49.840529][ T4712] binder: 4712 RLIMIT_NICE not set [ 50.148607][ T4733] loop4: detected capacity change from 0 to 128 [ 50.412045][ T4730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.421009][ T4730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.445212][ T4746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.90'. [ 52.048329][ T51] block nbd3: Attempted send on invalid socket [ 52.049532][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 52.051445][ T4746] SQUASHFS error: Failed to read block 0x0: -5 [ 52.053658][ T4746] unable to read squashfs_super_block [ 52.689917][ T4761] loop1: detected capacity change from 0 to 128 [ 52.717281][ T4761] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 52.719294][ T4761] hpfs: filesystem error: improperly stopped [ 52.720387][ T4761] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 52.724339][ T4761] hpfs: You really don't want any checks? You are crazy... [ 52.725529][ T4761] hpfs: Code page index out of array [ 52.726398][ T4761] hpfs: code page support is disabled [ 53.891264][ T4765] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 53.892577][ T4765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.95'. [ 53.893983][ T4765] device team0 entered promiscuous mode [ 53.894869][ T4765] device team_slave_0 entered promiscuous mode [ 53.895964][ T4765] device team_slave_1 entered promiscuous mode [ 53.898019][ T4765] bridge0: port 3(team0) entered blocking state [ 53.899030][ T4765] bridge0: port 3(team0) entered disabled state [ 53.900814][ T4765] bridge0: port 3(team0) entered blocking state [ 53.901798][ T4765] bridge0: port 3(team0) entered forwarding state [ 53.935875][ T4761] hpfs: hpfs_map_4sectors(): unaligned read [ 53.936986][ T4761] hpfs: hpfs_map_4sectors(): unaligned read [ 53.937916][ T4761] hpfs: filesystem error: unable to find root dir [ 54.077577][ T4770] device syzkaller0 entered promiscuous mode [ 54.117608][ T4763] loop3: detected capacity change from 0 to 32768 [ 54.498336][ T4763] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 54.498336][ T4763] [ 54.504286][ T4763] ERROR: (device loop3): remounting filesystem as read-only [ 54.505664][ T4763] jfs_create: dtInsert returned -EIO [ 54.506432][ T4763] ERROR: (device loop3): txAbort: [ 54.506432][ T4763] [ 55.741586][ T4796] loop4: detected capacity change from 0 to 2048 [ 56.544193][ T4796] loop4: p1 p2 p3 [ 56.544193][ T4796] p1: [ 56.576733][ T4796] loop4: p2 size 458752 extends beyond EOD, truncated [ 56.580781][ T4796] loop4: p3 start 65280 is beyond EOD, truncated [ 56.581701][ T4804] binder_user_error: 3 callbacks suppressed [ 56.581709][ T4804] binder: 4803:4804 tried to acquire reference to desc 0, got 1 instead [ 56.588798][ T4333] binder_debug: 14 callbacks suppressed [ 56.588810][ T4333] binder: undelivered TRANSACTION_COMPLETE [ 56.591561][ T3935] loop4: p1 p2 p3 [ 56.591561][ T3935] p1: [ 56.624412][ T3935] loop4: p2 size 458752 extends beyond EOD, truncated [ 56.626130][ T3935] loop4: p3 start 65280 is beyond EOD, truncated [ 56.630888][ T4333] binder: undelivered transaction 57, process died. [ 56.656611][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 56.743653][ T4310] udevd[4310]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 57.379913][ T4820] Cannot find set identified by id 0 to match [ 58.139263][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.142553][ T4310] udevd[4310]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 58.190670][ T4831] loop4: detected capacity change from 0 to 512 [ 58.216445][ T4829] device syzkaller0 entered promiscuous mode [ 58.626603][ T4837] binder: 4834:4837 tried to acquire reference to desc 0, got 1 instead [ 58.642394][ T4333] binder: undelivered TRANSACTION_COMPLETE [ 58.650871][ T4333] binder: undelivered transaction 62, process died. [ 59.624201][ T4843] loop3: detected capacity change from 0 to 512 [ 59.747566][ T4861] loop0: detected capacity change from 0 to 256 [ 59.761867][ T4861] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 60.036623][ T4868] loop2: detected capacity change from 0 to 64 [ 61.055721][ T4883] Cannot find set identified by id 0 to match [ 61.529318][ T4895] netlink: 'syz.2.136': attribute type 10 has an invalid length. [ 61.530750][ T4895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.136'. [ 61.533147][ T4895] device team0 entered promiscuous mode [ 61.534134][ T4895] device team_slave_0 entered promiscuous mode [ 61.535918][ T4895] device team_slave_1 entered promiscuous mode [ 61.540464][ T4895] bridge0: port 3(team0) entered blocking state [ 61.541730][ T4895] bridge0: port 3(team0) entered disabled state [ 61.549930][ T4895] bridge0: port 3(team0) entered blocking state [ 61.550986][ T4895] bridge0: port 3(team0) entered forwarding state [ 61.763677][ T4901] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.024587][ T4897] loop4: detected capacity change from 0 to 512 [ 62.030380][ T4899] device syzkaller0 entered promiscuous mode [ 62.044651][ T4881] loop0: detected capacity change from 0 to 32768 [ 62.168737][ T4911] loop4: detected capacity change from 0 to 64 [ 62.170523][ T4912] loop0: detected capacity change from 0 to 256 [ 62.189200][ T4912] FAT-fs (loop0): Directory bread(block 64) failed [ 62.190436][ T4912] FAT-fs (loop0): Directory bread(block 65) failed [ 62.191624][ T4912] FAT-fs (loop0): Directory bread(block 66) failed [ 62.194079][ T4912] FAT-fs (loop0): Directory bread(block 67) failed [ 62.195305][ T4912] FAT-fs (loop0): Directory bread(block 68) failed [ 62.196596][ T4912] FAT-fs (loop0): Directory bread(block 69) failed [ 62.198290][ T4912] FAT-fs (loop0): Directory bread(block 70) failed [ 62.199804][ T4912] FAT-fs (loop0): Directory bread(block 71) failed [ 62.201279][ T4912] FAT-fs (loop0): Directory bread(block 72) failed [ 62.221406][ T4912] FAT-fs (loop0): Directory bread(block 73) failed [ 62.269750][ T4918] binder: 4917:4918 got transaction to invalid handle, 1 [ 62.270916][ T4918] binder: 4918:4917 cannot find target node [ 62.278100][ T4918] binder: 4917:4918 transaction async to 0:0 failed 66/29201/-22, size 0-0 line 3045 [ 62.280544][ T3897] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.999061][ T4931] binder: 4930:4931 tried to acquire reference to desc 0, got 1 instead [ 63.098420][ T4934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.150'. [ 63.145655][ T4934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.150'. [ 63.407359][ T4937] binder_alloc: 4930: pid 4930 spamming oneway? 2 buffers allocated for a total size of 5120 [ 63.422124][ T4931] binder_alloc: 4930: pid 4930 spamming oneway? 3 buffers allocated for a total size of 5128 [ 63.439700][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 63.440798][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 63.441755][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 63.458132][ T4696] binder: undelivered transaction 72, process died. [ 63.459429][ T4696] binder: undelivered transaction 73, process died. [ 63.460818][ T4696] binder: undelivered transaction 71, process died. [ 63.550051][ T4945] loop4: detected capacity change from 0 to 512 [ 64.112327][ T7] cfg80211: failed to load regulatory.db [ 64.223602][ T4967] loop4: detected capacity change from 0 to 256 [ 64.230502][ T4967] FAT-fs (loop4): Directory bread(block 64) failed [ 64.231715][ T4967] FAT-fs (loop4): Directory bread(block 65) failed [ 64.236200][ T4967] FAT-fs (loop4): Directory bread(block 66) failed [ 64.237332][ T4967] FAT-fs (loop4): Directory bread(block 67) failed [ 64.238495][ T4967] FAT-fs (loop4): Directory bread(block 68) failed [ 64.239931][ T4967] FAT-fs (loop4): Directory bread(block 69) failed [ 64.241330][ T4967] FAT-fs (loop4): Directory bread(block 70) failed [ 64.243016][ T4967] FAT-fs (loop4): Directory bread(block 71) failed [ 64.244241][ T4967] FAT-fs (loop4): Directory bread(block 72) failed [ 64.245473][ T4967] FAT-fs (loop4): Directory bread(block 73) failed [ 64.573690][ T4971] loop1: detected capacity change from 0 to 256 [ 64.578886][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.580169][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.619762][ T4971] FAT-fs (loop1): Directory bread(block 64) failed [ 64.621071][ T4971] FAT-fs (loop1): Directory bread(block 65) failed [ 64.622865][ T4971] FAT-fs (loop1): Directory bread(block 66) failed [ 64.624095][ T4971] FAT-fs (loop1): Directory bread(block 67) failed [ 64.625508][ T4971] FAT-fs (loop1): Directory bread(block 68) failed [ 64.627339][ T4971] FAT-fs (loop1): Directory bread(block 69) failed [ 64.628604][ T4971] FAT-fs (loop1): Directory bread(block 70) failed [ 64.629822][ T4971] FAT-fs (loop1): Directory bread(block 71) failed [ 64.631042][ T4971] FAT-fs (loop1): Directory bread(block 72) failed [ 64.650678][ T4971] FAT-fs (loop1): Directory bread(block 73) failed [ 64.838534][ T4975] binder: 4974:4975 tried to acquire reference to desc 0, got 1 instead [ 64.848821][ T4975] binder_alloc: 4974: pid 4974 spamming oneway? 2 buffers allocated for a total size of 5120 [ 65.285367][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 65.417902][ T4986] loop4: detected capacity change from 0 to 512 [ 65.898602][ T5000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.175'. [ 65.960027][ T5000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.175'. [ 65.988306][ T5000] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 65.990022][ T5000] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 66.787001][ T5014] loop2: detected capacity change from 0 to 256 [ 67.096189][ T5019] loop1: detected capacity change from 0 to 512 [ 67.118890][ T5014] FAT-fs (loop2): Directory bread(block 64) failed [ 67.119990][ T5014] FAT-fs (loop2): Directory bread(block 65) failed [ 67.121195][ T5014] FAT-fs (loop2): Directory bread(block 66) failed [ 67.124815][ T5014] FAT-fs (loop2): Directory bread(block 67) failed [ 67.126023][ T5014] FAT-fs (loop2): Directory bread(block 68) failed [ 67.127061][ T5014] FAT-fs (loop2): Directory bread(block 69) failed [ 67.128197][ T5014] FAT-fs (loop2): Directory bread(block 70) failed [ 67.129302][ T5014] FAT-fs (loop2): Directory bread(block 71) failed [ 67.130490][ T5014] FAT-fs (loop2): Directory bread(block 72) failed [ 67.131709][ T5014] FAT-fs (loop2): Directory bread(block 73) failed [ 68.088848][ T5034] loop1: detected capacity change from 0 to 512 [ 68.317265][ T5038] loop0: detected capacity change from 0 to 32768 [ 68.689257][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 68.911887][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 69.488257][ T5071] netlink: 'syz.4.198': attribute type 10 has an invalid length. [ 69.489650][ T5071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.198'. [ 69.491333][ T5071] device team0 entered promiscuous mode [ 69.492369][ T5071] device team_slave_0 entered promiscuous mode [ 69.493886][ T5071] device team_slave_1 entered promiscuous mode [ 69.496890][ T5071] bridge0: port 3(team0) entered blocking state [ 69.497983][ T5071] bridge0: port 3(team0) entered disabled state [ 69.505061][ T5071] bridge0: port 3(team0) entered blocking state [ 69.506061][ T5071] bridge0: port 3(team0) entered forwarding state [ 70.078009][ T5076] loop1: detected capacity change from 0 to 256 [ 70.096661][ T5076] FAT-fs (loop1): Directory bread(block 64) failed [ 70.106018][ T5076] FAT-fs (loop1): Directory bread(block 65) failed [ 70.112749][ T5076] FAT-fs (loop1): Directory bread(block 66) failed [ 70.119959][ T5076] FAT-fs (loop1): Directory bread(block 67) failed [ 70.140000][ T5076] FAT-fs (loop1): Directory bread(block 68) failed [ 70.148560][ T5076] FAT-fs (loop1): Directory bread(block 69) failed [ 70.158099][ T5076] FAT-fs (loop1): Directory bread(block 70) failed [ 70.167567][ T5076] FAT-fs (loop1): Directory bread(block 71) failed [ 70.189861][ T5076] FAT-fs (loop1): Directory bread(block 72) failed [ 70.215250][ T5076] FAT-fs (loop1): Directory bread(block 73) failed [ 70.605028][ T5087] binder: 5086:5087 tried to acquire reference to desc 0, got 1 instead [ 70.606978][ T5087] binder_alloc: 5086: pid 5086 spamming oneway? 2 buffers allocated for a total size of 5120 [ 70.609478][ T4696] binder_debug: 3 callbacks suppressed [ 70.609483][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 70.611456][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 70.619631][ T4696] binder: undelivered transaction 85, process died. [ 70.620906][ T4696] binder: undelivered transaction 84, process died. [ 70.660543][ T5091] loop4: detected capacity change from 0 to 512 [ 70.688561][ T5093] device syzkaller0 entered promiscuous mode [ 71.085608][ T5105] loop0: detected capacity change from 0 to 64 [ 71.507212][ T5107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.210'. [ 71.511883][ T5108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.210'. [ 71.652133][ T5128] loop3: detected capacity change from 0 to 128 [ 71.653190][ T5122] binder: 5121:5122 tried to acquire reference to desc 0, got 1 instead [ 71.654132][ T5128] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.657408][ T4647] binder: undelivered TRANSACTION_COMPLETE [ 71.658433][ T4647] binder: undelivered TRANSACTION_COMPLETE [ 71.671480][ T5128] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.678778][ T4647] binder: undelivered transaction 91, process died. [ 71.679884][ T4647] binder: undelivered transaction 90, process died. [ 72.240455][ T5140] loop2: detected capacity change from 0 to 512 [ 72.342007][ T5143] loop2: detected capacity change from 0 to 256 [ 72.360358][ T5143] FAT-fs (loop2): Directory bread(block 64) failed [ 72.362410][ T5143] FAT-fs (loop2): Directory bread(block 65) failed [ 72.365797][ T5143] FAT-fs (loop2): Directory bread(block 66) failed [ 72.368115][ T5143] FAT-fs (loop2): Directory bread(block 67) failed [ 72.371438][ T5143] FAT-fs (loop2): Directory bread(block 68) failed [ 72.374815][ T5143] FAT-fs (loop2): Directory bread(block 69) failed [ 72.378235][ T5143] FAT-fs (loop2): Directory bread(block 70) failed [ 72.381679][ T5143] FAT-fs (loop2): Directory bread(block 71) failed [ 72.384152][ T5143] FAT-fs (loop2): Directory bread(block 72) failed [ 72.387440][ T5143] FAT-fs (loop2): Directory bread(block 73) failed [ 73.557547][ T5159] loop1: detected capacity change from 0 to 256 [ 73.598660][ T5159] FAT-fs (loop1): Directory bread(block 64) failed [ 73.608359][ T5159] FAT-fs (loop1): Directory bread(block 65) failed [ 73.609712][ T5159] FAT-fs (loop1): Directory bread(block 66) failed [ 73.612506][ T5159] FAT-fs (loop1): Directory bread(block 67) failed [ 73.613797][ T5159] FAT-fs (loop1): Directory bread(block 68) failed [ 73.614962][ T5159] FAT-fs (loop1): Directory bread(block 69) failed [ 73.616102][ T5159] FAT-fs (loop1): Directory bread(block 70) failed [ 73.617268][ T5159] FAT-fs (loop1): Directory bread(block 71) failed [ 73.618344][ T5159] FAT-fs (loop1): Directory bread(block 72) failed [ 73.619403][ T5159] FAT-fs (loop1): Directory bread(block 73) failed [ 74.210791][ T5166] loop2: detected capacity change from 0 to 32768 [ 74.213130][ T5166] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.227 (5166) [ 74.221659][ T5166] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.223645][ T5166] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 74.225115][ T5166] BTRFS info (device loop2): enabling auto defrag [ 74.229118][ T5166] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 74.230787][ T5166] BTRFS info (device loop2): use zstd compression, level 3 [ 74.232315][ T5166] BTRFS info (device loop2): allowing degraded mounts [ 74.233497][ T5166] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 74.237781][ T5166] BTRFS info (device loop2): trying to use backup root at mount time [ 74.293314][ T5177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.230'. [ 74.297931][ T5177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.230'. [ 74.387057][ T5166] BTRFS info (device loop2): enabling ssd optimizations [ 74.395923][ T5166] BTRFS info (device loop2): using spread ssd allocation scheme [ 74.397909][ T5166] BTRFS info (device loop2): force zlib compression, level 3 [ 74.399738][ T5166] BTRFS info (device loop2): using free space tree [ 74.617692][ T4876] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 74.620254][ T5166] BTRFS error (device loop2): failed to load root extent [ 74.621520][ T5166] BTRFS warning (device loop2): try to load backup roots slot 1 [ 74.623373][ T4576] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 74.625686][ T5166] BTRFS warning (device loop2): couldn't read tree root [ 74.626847][ T5166] BTRFS warning (device loop2): try to load backup roots slot 2 [ 74.628611][ T5166] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 74.631706][ T5166] BTRFS warning (device loop2): couldn't read tree root [ 74.636250][ T5166] BTRFS warning (device loop2): try to load backup roots slot 3 [ 74.648883][ T5166] BTRFS info (device loop2): rebuilding free space tree [ 74.657163][ T5166] BTRFS info (device loop2): checking UUID tree [ 74.768164][ T4320] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.803728][ T5204] loop1: detected capacity change from 0 to 64 [ 74.886337][ T4314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4314) [ 75.286995][ T5220] binder: 5219:5220 tried to acquire reference to desc 0, got 1 instead [ 75.298278][ T5211] binder: undelivered TRANSACTION_COMPLETE [ 75.299301][ T5211] binder: undelivered TRANSACTION_COMPLETE [ 75.409439][ T5230] loop2: detected capacity change from 0 to 256 [ 75.427212][ T5230] FAT-fs (loop2): Directory bread(block 64) failed [ 75.429993][ T5230] FAT-fs (loop2): Directory bread(block 65) failed [ 75.432879][ T5230] FAT-fs (loop2): Directory bread(block 66) failed [ 75.434122][ T5230] FAT-fs (loop2): Directory bread(block 67) failed [ 75.435491][ T5230] FAT-fs (loop2): Directory bread(block 68) failed [ 75.499902][ T5231] netlink: 'syz.1.239': attribute type 10 has an invalid length. [ 75.501325][ T5231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.239'. [ 75.729789][ T5230] FAT-fs (loop2): Directory bread(block 69) failed [ 75.731087][ T5230] FAT-fs (loop2): Directory bread(block 70) failed [ 75.732539][ T5230] FAT-fs (loop2): Directory bread(block 71) failed [ 75.733819][ T5230] FAT-fs (loop2): Directory bread(block 72) failed [ 75.735200][ T5230] FAT-fs (loop2): Directory bread(block 73) failed [ 76.756144][ T4706] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.851169][ T5245] loop4: detected capacity change from 0 to 512 [ 78.704793][ T4322] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 78.706355][ T4322] Bluetooth: hci0: Injecting HCI hardware error event [ 78.708323][ T4335] Bluetooth: hci0: hardware error 0x00 [ 78.755266][ T5268] loop3: detected capacity change from 0 to 256 [ 78.765238][ T5268] exfat: Deprecated parameter 'utf8' [ 78.773088][ T5270] process 'syz.2.253' launched './file1' with NULL argv: empty string added [ 78.774747][ T5268] exFAT-fs (loop3): bogus number of FAT structure [ 78.775810][ T5268] exFAT-fs (loop3): failed to read boot sector [ 78.776818][ T5268] exFAT-fs (loop3): failed to recognize exfat type [ 78.791472][ T5272] loop0: detected capacity change from 0 to 256 [ 78.803107][ T5272] FAT-fs (loop0): Directory bread(block 64) failed [ 78.804250][ T5272] FAT-fs (loop0): Directory bread(block 65) failed [ 78.805364][ T5272] FAT-fs (loop0): Directory bread(block 66) failed [ 78.806445][ T5272] FAT-fs (loop0): Directory bread(block 67) failed [ 78.807516][ T5272] FAT-fs (loop0): Directory bread(block 68) failed [ 78.808624][ T5272] FAT-fs (loop0): Directory bread(block 69) failed [ 78.809680][ T5272] FAT-fs (loop0): Directory bread(block 70) failed [ 78.810715][ T5272] FAT-fs (loop0): Directory bread(block 71) failed [ 78.811768][ T5272] FAT-fs (loop0): Directory bread(block 72) failed [ 78.813430][ T5272] FAT-fs (loop0): Directory bread(block 73) failed [ 78.949227][ T5274] binder: 5273:5274 tried to acquire reference to desc 0, got 1 instead [ 78.955880][ T4368] binder_debug: 2 callbacks suppressed [ 78.955889][ T4368] binder: undelivered TRANSACTION_COMPLETE [ 78.957856][ T4368] binder: undelivered TRANSACTION_COMPLETE [ 79.753313][ T5282] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 80.137014][ T5288] loop3: detected capacity change from 0 to 512 [ 80.137070][ T5211] binder: undelivered transaction 103, process died. [ 80.139159][ T5211] binder: undelivered transaction 102, process died. [ 80.972367][ T4335] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 82.612609][ T5318] netlink: 'syz.2.267': attribute type 10 has an invalid length. [ 82.613972][ T5318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.267'. [ 82.817574][ T5329] loop0: detected capacity change from 0 to 512 [ 82.883875][ T5336] loop4: detected capacity change from 0 to 512 [ 82.917931][ T5341] loop2: detected capacity change from 0 to 256 [ 82.937230][ T5336] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.275: inode has both inline data and extents flags [ 82.940689][ T5336] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.275: couldn't read orphan inode 15 (err -117) [ 82.943041][ T5336] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.946198][ T5341] FAT-fs (loop2): Directory bread(block 64) failed [ 82.947258][ T5341] FAT-fs (loop2): Directory bread(block 65) failed [ 82.984956][ T5341] FAT-fs (loop2): Directory bread(block 66) failed [ 82.986165][ T5341] FAT-fs (loop2): Directory bread(block 67) failed [ 82.987441][ T5341] FAT-fs (loop2): Directory bread(block 68) failed [ 82.988531][ T5341] FAT-fs (loop2): Directory bread(block 69) failed [ 82.989575][ T5341] FAT-fs (loop2): Directory bread(block 70) failed [ 82.990658][ T5341] FAT-fs (loop2): Directory bread(block 71) failed [ 82.991829][ T5341] FAT-fs (loop2): Directory bread(block 72) failed [ 82.992991][ T5341] FAT-fs (loop2): Directory bread(block 73) failed [ 84.030575][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 84.549819][ T5374] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 84.619205][ T5378] loop2: detected capacity change from 0 to 512 [ 84.624824][ T5385] binder: 5384:5385 tried to acquire reference to desc 0, got 1 instead [ 84.628027][ T4697] binder: undelivered TRANSACTION_COMPLETE [ 84.629092][ T4697] binder: undelivered TRANSACTION_COMPLETE [ 84.640292][ T4697] binder: undelivered transaction 109, process died. [ 84.642578][ T4697] binder: undelivered transaction 108, process died. [ 84.732281][ T4335] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 84.733716][ T4335] Bluetooth: hci1: Injecting HCI hardware error event [ 84.735592][ T4335] Bluetooth: hci1: hardware error 0x00 [ 84.739137][ T5392] loop2: detected capacity change from 0 to 512 [ 84.750652][ T5392] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.294: inode has both inline data and extents flags [ 84.753604][ T5392] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.294: couldn't read orphan inode 15 (err -117) [ 84.757256][ T5392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.848197][ T4320] EXT4-fs (loop2): unmounting filesystem. [ 86.148037][ T5424] loop3: detected capacity change from 0 to 512 [ 87.132310][ T4335] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 87.357932][ T5451] loop1: detected capacity change from 0 to 512 [ 87.394566][ T5451] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.313: inode has both inline data and extents flags [ 87.397336][ T5451] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.313: couldn't read orphan inode 15 (err -117) [ 87.399598][ T5451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.750722][ T5461] loop2: detected capacity change from 0 to 512 [ 87.821979][ T5463] binder: 5462:5463 got transaction to invalid handle, 1 [ 87.825896][ T5463] binder: 5463:5462 cannot find target node [ 87.827073][ T5463] binder: 5462:5463 transaction async to 0:0 failed 113/29201/-22, size 0-0 line 3045 [ 87.830030][ T5211] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.383304][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 89.373001][ T4335] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 89.374623][ T4335] Bluetooth: hci3: Injecting HCI hardware error event [ 89.377066][ T4328] Bluetooth: hci3: hardware error 0x00 [ 89.683090][ T5496] binder: 5495:5496 got transaction to invalid handle, 1 [ 89.684454][ T5496] binder: 5496:5495 cannot find target node [ 89.685360][ T5496] binder: 5495:5496 transaction async to 0:0 failed 117/29201/-22, size 0-0 line 3045 [ 89.685846][ T5499] loop3: detected capacity change from 0 to 512 [ 89.687822][ T5211] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.698668][ T5501] loop2: detected capacity change from 0 to 256 [ 89.739379][ T5501] FAT-fs (loop2): Directory bread(block 64) failed [ 89.741834][ T5501] FAT-fs (loop2): Directory bread(block 65) failed [ 89.752363][ T5501] FAT-fs (loop2): Directory bread(block 66) failed [ 89.753593][ T5501] FAT-fs (loop2): Directory bread(block 67) failed [ 89.754700][ T5501] FAT-fs (loop2): Directory bread(block 68) failed [ 89.765999][ T5501] FAT-fs (loop2): Directory bread(block 69) failed [ 89.767139][ T5501] FAT-fs (loop2): Directory bread(block 70) failed [ 89.768200][ T5501] FAT-fs (loop2): Directory bread(block 71) failed [ 89.769279][ T5501] FAT-fs (loop2): Directory bread(block 72) failed [ 89.774926][ T5501] FAT-fs (loop2): Directory bread(block 73) failed [ 89.863201][ T5511] loop0: detected capacity change from 0 to 256 [ 89.869664][ T5511] FAT-fs (loop0): Directory bread(block 64) failed [ 89.870688][ T5511] FAT-fs (loop0): Directory bread(block 65) failed [ 89.871672][ T5511] FAT-fs (loop0): Directory bread(block 66) failed [ 89.875487][ T5511] FAT-fs (loop0): Directory bread(block 67) failed [ 89.876683][ T5511] FAT-fs (loop0): Directory bread(block 68) failed [ 89.877839][ T5511] FAT-fs (loop0): Directory bread(block 69) failed [ 89.879073][ T5511] FAT-fs (loop0): Directory bread(block 70) failed [ 89.880137][ T5511] FAT-fs (loop0): Directory bread(block 71) failed [ 89.884838][ T5511] FAT-fs (loop0): Directory bread(block 72) failed [ 89.885918][ T5511] FAT-fs (loop0): Directory bread(block 73) failed [ 90.949759][ T5523] binder: BINDER_SET_CONTEXT_MGR already set [ 90.950810][ T5523] binder: 5522:5523 ioctl 4018620d 20000040 returned -16 [ 90.963100][ T5523] binder: 5522:5523 got transaction to invalid handle, 1 [ 90.964360][ T5523] binder: 5523:5522 cannot find target node [ 90.969375][ T5523] binder: 5522:5523 transaction async to 0:0 failed 119/29201/-22, size 0-0 line 3045 [ 91.753480][ T5533] binder: 5522:5533 got transaction to invalid handle, 1 [ 91.754604][ T5533] binder: 5533:5522 cannot find target node [ 91.772511][ T4328] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 91.777179][ T5533] binder: 5522:5533 transaction async to 0:0 failed 120/29201/-22, size 0-0 line 3045 [ 91.779414][ T5210] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.780419][ T5210] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.837413][ T5535] binder: tried to use weak ref as strong ref [ 91.838472][ T5535] binder: 5534:5535 Acquire 1 refcount change on invalid ref 0 ret -22 [ 91.847016][ T5535] binder: 5534:5535 got transaction to invalid handle, 1 [ 91.848254][ T5535] binder: 5535:5534 cannot find target node [ 92.265632][ T5550] loop4: detected capacity change from 0 to 512 [ 92.270680][ T5551] loop3: detected capacity change from 0 to 256 [ 92.297080][ T5551] FAT-fs (loop3): Directory bread(block 64) failed [ 92.298369][ T5550] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.347: inode has both inline data and extents flags [ 92.298453][ T5551] FAT-fs (loop3): Directory bread(block 65) failed [ 92.301641][ T5550] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.347: couldn't read orphan inode 15 (err -117) [ 92.304834][ T5550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.315134][ T5551] FAT-fs (loop3): Directory bread(block 66) failed [ 92.316300][ T5551] FAT-fs (loop3): Directory bread(block 67) failed [ 92.317390][ T5551] FAT-fs (loop3): Directory bread(block 68) failed [ 92.318478][ T5551] FAT-fs (loop3): Directory bread(block 69) failed [ 92.337454][ T5551] FAT-fs (loop3): Directory bread(block 70) failed [ 92.346605][ T5551] FAT-fs (loop3): Directory bread(block 71) failed [ 92.353582][ T5551] FAT-fs (loop3): Directory bread(block 72) failed [ 92.358262][ T5551] FAT-fs (loop3): Directory bread(block 73) failed [ 92.368145][ T5556] loop0: detected capacity change from 0 to 256 [ 92.386585][ T5556] FAT-fs (loop0): Directory bread(block 64) failed [ 92.387887][ T5556] FAT-fs (loop0): Directory bread(block 65) failed [ 92.389221][ T5556] FAT-fs (loop0): Directory bread(block 66) failed [ 92.398123][ T5556] FAT-fs (loop0): Directory bread(block 67) failed [ 92.409817][ T5556] FAT-fs (loop0): Directory bread(block 68) failed [ 92.415377][ T5556] FAT-fs (loop0): Directory bread(block 69) failed [ 92.427441][ T5556] FAT-fs (loop0): Directory bread(block 70) failed [ 92.428677][ T5556] FAT-fs (loop0): Directory bread(block 71) failed [ 92.429791][ T5556] FAT-fs (loop0): Directory bread(block 72) failed [ 92.430920][ T5556] FAT-fs (loop0): Directory bread(block 73) failed [ 93.062686][ T5573] binder: BINDER_SET_CONTEXT_MGR already set [ 93.064387][ T5573] binder: 5572:5573 ioctl 4018620d 20000040 returned -16 [ 93.066237][ T5573] binder: 5572:5573 got transaction to invalid handle, 1 [ 93.131590][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 93.607693][ T5579] binder: tried to use weak ref as strong ref [ 93.608833][ T5579] binder: 5578:5579 Acquire 1 refcount change on invalid ref 0 ret -22 [ 93.610511][ T5579] binder: 5578:5579 got transaction to invalid handle, 1 [ 93.671448][ T5589] loop2: detected capacity change from 0 to 256 [ 93.693554][ T5589] FAT-fs (loop2): Directory bread(block 64) failed [ 93.770548][ T5590] Cannot find set identified by id 0 to match [ 94.032035][ T5589] FAT-fs (loop2): Directory bread(block 65) failed [ 94.033341][ T5589] FAT-fs (loop2): Directory bread(block 66) failed [ 94.034405][ T5589] FAT-fs (loop2): Directory bread(block 67) failed [ 94.035520][ T5589] FAT-fs (loop2): Directory bread(block 68) failed [ 94.036592][ T5589] FAT-fs (loop2): Directory bread(block 69) failed [ 94.037725][ T5589] FAT-fs (loop2): Directory bread(block 70) failed [ 94.038793][ T5589] FAT-fs (loop2): Directory bread(block 71) failed [ 94.039912][ T5589] FAT-fs (loop2): Directory bread(block 72) failed [ 94.041020][ T5589] FAT-fs (loop2): Directory bread(block 73) failed [ 94.254020][ T5601] loop1: detected capacity change from 0 to 128 [ 94.258918][ T5601] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.267633][ T5601] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.044427][ T5604] binder: BINDER_SET_CONTEXT_MGR already set [ 95.045508][ T5604] binder: 5603:5604 ioctl 4018620d 20000040 returned -16 [ 95.062527][ T5604] binder: 5603:5604 got transaction to invalid handle, 1 [ 95.068045][ T5604] binder_debug: 8 callbacks suppressed [ 95.068060][ T5604] binder: 5604:5603 cannot find target node [ 95.074164][ T5604] binder: 5603:5604 transaction async to 0:0 failed 130/29201/-22, size 0-0 line 3045 [ 95.079600][ T4696] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.255366][ T5609] loop2: detected capacity change from 0 to 256 [ 95.320075][ T4876] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.341489][ T5613] loop1: detected capacity change from 0 to 512 [ 95.348386][ T5609] FAT-fs (loop2): Directory bread(block 64) failed [ 95.349515][ T5609] FAT-fs (loop2): Directory bread(block 65) failed [ 95.352542][ T5609] FAT-fs (loop2): Directory bread(block 66) failed [ 95.353640][ T5609] FAT-fs (loop2): Directory bread(block 67) failed [ 95.354713][ T5609] FAT-fs (loop2): Directory bread(block 68) failed [ 95.355782][ T5609] FAT-fs (loop2): Directory bread(block 69) failed [ 95.356895][ T5609] FAT-fs (loop2): Directory bread(block 70) failed [ 95.357942][ T5609] FAT-fs (loop2): Directory bread(block 71) failed [ 95.359016][ T5609] FAT-fs (loop2): Directory bread(block 72) failed [ 95.375651][ T5613] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.370: inode has both inline data and extents flags [ 95.672786][ T5609] FAT-fs (loop2): Directory bread(block 73) failed [ 95.677989][ T5613] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.370: couldn't read orphan inode 15 (err -117) [ 95.687714][ T5613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.141120][ T5626] loop2: detected capacity change from 0 to 512 [ 96.374887][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 96.794491][ T5636] Cannot find set identified by id 0 to match [ 97.079614][ T5643] binder: 5640:5643 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 97.085487][ T5639] binder: 5638:5639 tried to acquire reference to desc 0, got 1 instead [ 97.088756][ T5643] binder: 5640:5643 got transaction to invalid handle, 1 [ 97.090478][ T5639] binder_alloc: 5638: binder_alloc_buf, no vma [ 97.091593][ T5643] binder: 5643:5640 cannot find target node [ 97.092742][ T5639] binder: cannot allocate buffer: vma cleared, target dead or dying [ 97.092783][ T5639] binder: 5638:5639 transaction async to 5638:0 failed 138/29189/-3, size 0-0 line 3230 [ 97.093380][ T5643] binder: 5640:5643 transaction async to 0:0 failed 137/29201/-22, size 0-0 line 3045 [ 97.094326][ T5645] binder: BINDER_SET_CONTEXT_MGR already set [ 97.096619][ T4696] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.097237][ T5645] binder: 5644:5645 ioctl 4018620d 20000040 returned -16 [ 97.105115][ T5645] binder: 5644:5645 got transaction to invalid handle, 1 [ 97.106250][ T5645] binder: 5645:5644 cannot find target node [ 97.107691][ T5645] binder: 5644:5645 transaction async to 0:0 failed 140/29201/-22, size 0-0 line 3045 [ 97.186837][ T5654] loop2: detected capacity change from 0 to 256 [ 97.210648][ T5654] FAT-fs (loop2): Directory bread(block 64) failed [ 97.211800][ T5654] FAT-fs (loop2): Directory bread(block 65) failed [ 97.213694][ T5654] FAT-fs (loop2): Directory bread(block 66) failed [ 97.214782][ T5654] FAT-fs (loop2): Directory bread(block 67) failed [ 97.216019][ T5654] FAT-fs (loop2): Directory bread(block 68) failed [ 97.217026][ T5654] FAT-fs (loop2): Directory bread(block 69) failed [ 97.218074][ T5654] FAT-fs (loop2): Directory bread(block 70) failed [ 97.219179][ T5654] FAT-fs (loop2): Directory bread(block 71) failed [ 97.240814][ T5654] FAT-fs (loop2): Directory bread(block 72) failed [ 97.241936][ T5654] FAT-fs (loop2): Directory bread(block 73) failed [ 98.069649][ T5671] loop1: detected capacity change from 0 to 512 [ 98.187251][ T5675] atomic_op 0000000092f38d72 conn xmit_atomic 0000000000000000 [ 98.428263][ T5677] Cannot find set identified by id 0 to match [ 98.751200][ T5680] binder: 5679:5680 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 98.754577][ T5680] binder: 5679:5680 got transaction to invalid handle, 1 [ 98.793939][ T5684] binder: BINDER_SET_CONTEXT_MGR already set [ 98.795011][ T5684] binder: 5681:5684 ioctl 4018620d 20000040 returned -16 [ 98.797184][ T5684] binder: 5681:5684 got transaction to invalid handle, 1 [ 98.835038][ T5688] binder: 5687:5688 tried to acquire reference to desc 0, got 1 instead [ 98.883379][ T5688] binder_alloc: 5687: binder_alloc_buf, no vma [ 98.959925][ T5700] loop2: detected capacity change from 0 to 256 [ 98.969238][ T5700] FAT-fs (loop2): Directory bread(block 64) failed [ 98.970383][ T5700] FAT-fs (loop2): Directory bread(block 65) failed [ 98.971981][ T5700] FAT-fs (loop2): Directory bread(block 66) failed [ 98.973835][ T5700] FAT-fs (loop2): Directory bread(block 67) failed [ 98.976467][ T5700] FAT-fs (loop2): Directory bread(block 68) failed [ 98.977779][ T5700] FAT-fs (loop2): Directory bread(block 69) failed [ 98.978908][ T5700] FAT-fs (loop2): Directory bread(block 70) failed [ 98.979968][ T5700] FAT-fs (loop2): Directory bread(block 71) failed [ 98.981000][ T5700] FAT-fs (loop2): Directory bread(block 72) failed [ 98.987269][ T5700] FAT-fs (loop2): Directory bread(block 73) failed [ 99.449993][ T5706] loop2: detected capacity change from 0 to 32768 [ 99.454544][ T5706] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 99.456031][ T5706] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 99.471190][ T5706] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 99.474724][ T5212] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 99.475835][ T5212] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 99.500369][ T5212] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 24ms [ 99.514597][ T5212] gfs2: fsid=syz:syz.0: jid=0: Done [ 99.548716][ T5706] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 99.590125][ T5706] gfs2: fsid=syz:syz.0: found 1 quota changes [ 99.600881][ T5711] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 99.600881][ T5711] inode = 11 2339 [ 99.600881][ T5711] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 99.604861][ T5711] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 99.629268][ T5711] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5711 [gfs2_quotad] gfs2_quota_sync+0x2cc/0x500 [ 99.641791][ T5711] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 99.650936][ T5711] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 99.668748][ T5711] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 99.670402][ T5711] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 99.673908][ T5711] gfs2: fsid=syz:syz.0: File system withdrawn [ 99.674995][ T5711] CPU: 0 PID: 5711 Comm: gfs2_quotad Not tainted syzkaller #0 [ 99.676200][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 99.677955][ T5711] Call trace: [ 99.678507][ T5711] dump_backtrace+0x1c0/0x1ec [ 99.679321][ T5711] show_stack+0x2c/0x3c [ 99.680009][ T5711] __dump_stack+0x30/0x40 [ 99.680756][ T5711] dump_stack_lvl+0xf4/0x15c [ 99.681528][ T5711] dump_stack+0x1c/0x5c [ 99.682172][ T5711] gfs2_withdraw+0x9ec/0x127c [ 99.682955][ T5711] gfs2_consist_inode_i+0xf0/0x10c [ 99.683836][ T5711] gfs2_inode_refresh+0x918/0xd64 [ 99.684708][ T5711] inode_go_instantiate+0x4c/0x68 [ 99.685557][ T5711] gfs2_instantiate+0x178/0x2b4 [ 99.686433][ T5711] gfs2_glock_wait+0x1b4/0x298 [ 99.687260][ T5711] gfs2_glock_nq+0x8bc/0x11c4 [ 99.688092][ T5711] do_sync+0x41c/0xaec [ 99.688822][ T5711] gfs2_quota_sync+0x2cc/0x500 [ 99.689666][ T5711] gfs2_quotad+0x2d8/0x500 [ 99.690455][ T5711] kthread+0x250/0x2d8 [ 99.691171][ T5711] ret_from_fork+0x10/0x20 [ 100.161999][ T5719] binder: 5718:5719 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 100.171982][ T5719] binder: 5718:5719 got transaction to invalid handle, 1 [ 100.173577][ T5719] binder_debug: 11 callbacks suppressed [ 100.173586][ T5719] binder: 5719:5718 cannot find target node [ 100.175450][ T5719] binder: 5718:5719 transaction async to 0:0 failed 153/29201/-22, size 0-0 line 3045 [ 100.187419][ T5721] binder: 5720:5721 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 100.195327][ T5721] binder: 5720:5721 got transaction to invalid handle, 1 [ 100.196561][ T5721] binder: 5721:5720 cannot find target node [ 100.197527][ T5721] binder: 5720:5721 transaction async to 0:0 failed 156/29201/-22, size 0-0 line 3045 [ 100.209055][ T4696] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.212828][ T4320] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 100.215177][ T4320] CPU: 0 PID: 4320 Comm: syz-executor Not tainted syzkaller #0 [ 100.216436][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.218080][ T4320] Call trace: [ 100.218635][ T4320] dump_backtrace+0x1c0/0x1ec [ 100.219401][ T4320] show_stack+0x2c/0x3c [ 100.220095][ T4320] __dump_stack+0x30/0x40 [ 100.220825][ T4320] dump_stack_lvl+0xf4/0x15c [ 100.221574][ T4320] dump_stack+0x1c/0x5c [ 100.222245][ T4320] gfs2_assert_warn_i+0x16c/0x26c [ 100.223102][ T4320] gfs2_quota_cleanup+0x464/0x668 [ 100.223993][ T4320] gfs2_put_super+0x1f0/0x760 [ 100.224767][ T4320] generic_shutdown_super+0x130/0x324 [ 100.225688][ T4320] kill_block_super+0x70/0xdc [ 100.226500][ T4320] gfs2_kill_sb+0xc0/0xd4 [ 100.227259][ T4320] deactivate_locked_super+0xac/0x120 [ 100.228205][ T4320] deactivate_super+0xe4/0x104 [ 100.229056][ T4320] cleanup_mnt+0x390/0x418 [ 100.229857][ T4320] __cleanup_mnt+0x20/0x30 [ 100.230620][ T4320] task_work_run+0x1ec/0x278 [ 100.231418][ T4320] do_notify_resume+0x1fa0/0x2aa4 [ 100.232362][ T4320] el0_svc+0x98/0x128 [ 100.233023][ T4320] el0t_64_sync_handler+0x84/0xf0 [ 100.233903][ T4320] el0t_64_sync+0x18c/0x190 [ 100.243413][ T5212] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.415130][ T5732] binder: 5731:5732 tried to acquire reference to desc 0, got 1 instead [ 100.427434][ T5732] binder_alloc: 5731: binder_alloc_buf, no vma [ 100.429190][ T5732] binder: cannot allocate buffer: vma cleared, target dead or dying [ 100.429221][ T5732] binder: 5731:5732 transaction async to 5731:0 failed 161/29189/-3, size 0-0 line 3230 [ 100.541153][ T5737] Cannot find set identified by id 0 to match [ 100.784819][ T5205] binder: undelivered TRANSACTION_ERROR: 29189 [ 100.866887][ T5750] binder: 5749:5750 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 101.174198][ T5750] binder: 5749:5750 got transaction to invalid handle, 1 [ 101.175508][ T5750] binder: 5750:5749 cannot find target node [ 101.207047][ T5756] binder: 5755:5756 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 101.314154][ T5764] loop3: detected capacity change from 0 to 4096 [ 101.380980][ T5764] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 101.396181][ T5764] ntfs3: loop3: Failed to load $Extend. [ 101.487413][ T5768] Cannot find set identified by id 0 to match [ 101.799981][ T5772] binder: tried to use weak ref as strong ref [ 101.800996][ T5772] binder: 5770:5772 Acquire 1 refcount change on invalid ref 0 ret -22 [ 101.955939][ T5782] loop1: detected capacity change from 0 to 512 [ 102.201686][ T5780] atomic_op 00000000a18b239b conn xmit_atomic 0000000000000000 [ 102.903293][ T5803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.435'. [ 103.071935][ T5803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.435'. [ 103.398547][ T5816] Cannot find set identified by id 0 to match [ 103.699303][ T5822] loop3: detected capacity change from 0 to 512 [ 103.854975][ T5814] loop1: detected capacity change from 0 to 32768 [ 103.867347][ T5814] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 104.846298][ T4310] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 105.399189][ T5850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.453'. [ 105.402302][ T5850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.453'. [ 105.417643][ T5853] binder_user_error: 12 callbacks suppressed [ 105.417653][ T5853] binder: 5852:5853 tried to acquire reference to desc 0, got 1 instead [ 105.420361][ T5853] binder_alloc: 5852: pid 5852 spamming oneway? 2 buffers allocated for a total size of 5120 [ 105.422764][ T4696] binder_debug: 14 callbacks suppressed [ 105.422771][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 105.424705][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 105.432557][ T4696] binder: undelivered transaction 186, process died. [ 105.433834][ T4696] binder: undelivered transaction 185, process died. [ 105.518796][ T5856] Cannot find set identified by id 0 to match [ 105.824412][ T5860] binder: 5859:5860 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 105.968105][ T5874] binder: 5873:5874 tried to acquire reference to desc 0, got 1 instead [ 105.969967][ T5874] binder_alloc: 5873: pid 5873 spamming oneway? 2 buffers allocated for a total size of 5120 [ 105.971970][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 105.973548][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 105.982695][ T4696] binder: undelivered transaction 193, process died. [ 105.983911][ T4696] binder: undelivered transaction 192, process died. [ 106.007937][ T5876] loop0: detected capacity change from 0 to 256 [ 106.008578][ T5862] loop2: detected capacity change from 0 to 32768 [ 106.009443][ T5876] exfat: Deprecated parameter 'utf8' [ 106.011325][ T5876] exFAT-fs (loop0): bogus number of FAT structure [ 106.012510][ T5876] exFAT-fs (loop0): failed to read boot sector [ 106.013438][ T5876] exFAT-fs (loop0): failed to recognize exfat type [ 106.024852][ T5862] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.026683][ T5862] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 106.088639][ T5862] BTRFS info (device loop2): turning on sync discard [ 106.089854][ T5862] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 106.091499][ T5862] BTRFS info (device loop2): use zstd compression, level 3 [ 106.092949][ T5862] BTRFS info (device loop2): turning on async discard [ 106.094115][ T5862] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 106.095826][ T5862] BTRFS info (device loop2): trying to use backup root at mount time [ 106.097034][ T5862] BTRFS info (device loop2): enabling auto defrag [ 106.098106][ T5862] BTRFS info (device loop2): using free space tree [ 106.134740][ T4373] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 106.137297][ T5862] BTRFS error (device loop2): failed to load root extent [ 106.138341][ T5862] BTRFS warning (device loop2): try to load backup roots slot 1 [ 106.140246][ T9] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 106.142743][ T5862] BTRFS warning (device loop2): couldn't read tree root [ 106.143974][ T5862] BTRFS warning (device loop2): try to load backup roots slot 2 [ 106.145607][ T5862] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 106.147424][ T5862] BTRFS warning (device loop2): couldn't read tree root [ 106.148691][ T5862] BTRFS warning (device loop2): try to load backup roots slot 3 [ 106.277197][ T5894] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 106.457751][ T5862] BTRFS info (device loop2): enabling ssd optimizations [ 106.459202][ T5862] BTRFS info (device loop2): rebuilding free space tree [ 106.466075][ T5862] BTRFS info (device loop2): checking UUID tree [ 106.517718][ T4320] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.161759][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.166371][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.168146][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.169884][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.171290][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 107.176168][ T5905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'. [ 107.180775][ T5906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'. [ 107.182642][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.274911][ T4560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.406613][ T4560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.453669][ T5919] chnl_net:caif_netlink_parms(): no params data found [ 107.494941][ T4560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.507046][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.508399][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.509950][ T5919] device bridge_slave_0 entered promiscuous mode [ 107.512024][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.513411][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.515039][ T5919] device bridge_slave_1 entered promiscuous mode [ 107.523386][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.526164][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.535558][ T5919] team0: Port device team_slave_0 added [ 107.586336][ T4560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.589698][ T5919] team0: Port device team_slave_1 added [ 107.595839][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.597115][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.602765][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.605379][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.606868][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.607058][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.611295][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.616110][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.617788][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.619399][ T4335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.620868][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.624393][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.664174][ T5919] device hsr_slave_0 entered promiscuous mode [ 107.692568][ T5919] device hsr_slave_1 entered promiscuous mode [ 107.732220][ T5919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.733514][ T5919] Cannot create hsr debugfs directory [ 107.822857][ T5919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.853404][ T5919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.896583][ T5919] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.983718][ T5919] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.987320][ T5961] loop1: detected capacity change from 0 to 256 [ 107.988701][ T5961] exfat: Deprecated parameter 'utf8' [ 107.995132][ T5961] exFAT-fs (loop1): bogus number of FAT structure [ 107.996294][ T5961] exFAT-fs (loop1): failed to read boot sector [ 107.997364][ T5961] exFAT-fs (loop1): failed to recognize exfat type [ 108.083415][ T5963] atomic_op 00000000630b3508 conn xmit_atomic 0000000000000000 [ 108.320495][ T5965] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 108.807298][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 109.243061][ T4335] Bluetooth: hci4: command 0x0409 tx timeout [ 109.415670][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.417121][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.418894][ T5937] device bridge_slave_0 entered promiscuous mode [ 109.422130][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.423481][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.425187][ T5937] device bridge_slave_1 entered promiscuous mode [ 109.445094][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.448078][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.451269][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.501105][ T5937] team0: Port device team_slave_0 added [ 109.505288][ T5937] team0: Port device team_slave_1 added [ 109.511723][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.513505][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.518040][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.521066][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.522665][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.527300][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.538242][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.541427][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.547604][ T5919] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.561671][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.563651][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.566048][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.567171][ T5358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.569169][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.677655][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.680363][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.690233][ T5937] device hsr_slave_0 entered promiscuous mode [ 109.691871][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.693267][ T4322] Bluetooth: hci1: command 0x0409 tx timeout [ 109.716018][ T4322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.718271][ T4322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.719533][ T4322] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.732604][ T5937] device hsr_slave_1 entered promiscuous mode [ 109.752441][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.753608][ T5937] Cannot create hsr debugfs directory [ 109.825584][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.827533][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.829098][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.830417][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.831907][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.837696][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.839449][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.845078][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.857462][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.859186][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.860870][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.866642][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.868502][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.915822][ T5919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.918042][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.920040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.921856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.069723][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.071060][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.090173][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.099698][ T6009] chnl_net:caif_netlink_parms(): no params data found [ 110.150199][ T5937] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 110.186426][ T5937] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 110.224174][ T5937] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 110.253433][ T5937] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 110.268360][ T6059] atomic_op 00000000e4e013a7 conn xmit_atomic 0000000000000000 [ 110.576674][ T6070] loop1: detected capacity change from 0 to 128 [ 110.835089][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.836402][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.838148][ T6009] device bridge_slave_0 entered promiscuous mode [ 110.840250][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.841349][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.847083][ T6009] device bridge_slave_1 entered promiscuous mode [ 110.851172][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.853400][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.895364][ T6009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.897864][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.899707][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.905028][ T5919] device veth0_vlan entered promiscuous mode [ 110.907427][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.909042][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.919552][ T5919] device veth1_vlan entered promiscuous mode [ 110.923247][ T6009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.246025][ T6009] team0: Port device team_slave_0 added [ 111.249119][ T6009] team0: Port device team_slave_1 added [ 111.292334][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 111.303170][ T5919] device veth0_macvtap entered promiscuous mode [ 111.305572][ T5919] device veth1_macvtap entered promiscuous mode [ 111.310406][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.312678][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.314386][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.316327][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.318148][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.319948][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.321843][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.326033][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.327623][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.329422][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.332330][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.335029][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.336171][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.340811][ T6009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.345929][ T6009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.347119][ T6009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.351827][ T6009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.357729][ T4560] device hsr_slave_0 left promiscuous mode [ 111.788926][ T4322] Bluetooth: hci1: command 0x041b tx timeout [ 111.788948][ T4328] Bluetooth: hci2: command 0x0409 tx timeout [ 111.792841][ T4560] device hsr_slave_1 left promiscuous mode [ 111.892314][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.893739][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.895505][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.896878][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.899581][ T4560] bridge0: port 3(team0) entered disabled state [ 111.934450][ T4560] device bridge_slave_1 left promiscuous mode [ 111.936171][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.972913][ T4560] device bridge_slave_0 left promiscuous mode [ 111.974088][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.093360][ T4560] device veth1_macvtap left promiscuous mode [ 112.094449][ T4560] device veth0_macvtap left promiscuous mode [ 112.095536][ T4560] device veth1_vlan left promiscuous mode [ 112.096642][ T4560] device veth0_vlan left promiscuous mode [ 112.225645][ T6099] loop1: detected capacity change from 0 to 256 [ 112.233319][ T6099] exfat: Deprecated parameter 'utf8' [ 112.250977][ T6099] exFAT-fs (loop1): bogus number of FAT structure [ 112.256883][ T6099] exFAT-fs (loop1): failed to read boot sector [ 112.257914][ T6099] exFAT-fs (loop1): failed to recognize exfat type [ 112.355276][ T6101] atomic_op 00000000e8d3e4d1 conn xmit_atomic 0000000000000000 [ 112.795034][ T6103] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 113.206575][ T6107] loop3: detected capacity change from 0 to 32768 [ 113.212764][ T6107] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.502 (6107) [ 113.218700][ T6107] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.220510][ T6107] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 113.221945][ T6107] BTRFS info (device loop3): setting nodatacow, compression disabled [ 113.223447][ T6107] BTRFS info (device loop3): force clearing of disk cache [ 113.224682][ T6107] BTRFS info (device loop3): turning off barriers [ 113.225870][ T6107] BTRFS info (device loop3): use no compression [ 113.227013][ T6107] BTRFS info (device loop3): disabling free space tree [ 113.228162][ T6107] BTRFS info (device loop3): enabling ssd optimizations [ 113.229387][ T6107] BTRFS info (device loop3): using spread ssd allocation scheme [ 113.230758][ T6107] BTRFS info (device loop3): not using ssd optimizations [ 113.232011][ T6107] BTRFS info (device loop3): not using spread ssd allocation scheme [ 113.314427][ T6107] BTRFS info (device loop3): rebuilding free space tree [ 113.320797][ T6107] BTRFS info (device loop3): disabling free space tree [ 113.321871][ T6107] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.323633][ T6107] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.330355][ T6107] BTRFS info (device loop3): checking UUID tree [ 113.415783][ T4338] Bluetooth: hci4: command 0x040f tx timeout [ 113.852451][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 113.853068][ T4338] Bluetooth: hci1: command 0x040f tx timeout [ 114.212512][ T4327] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.452226][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 115.472493][ T4560] device team_slave_1 left promiscuous mode [ 115.475811][ T4560] team0 (unregistering): Port device team_slave_1 removed [ 115.633482][ T4560] device team_slave_0 left promiscuous mode [ 115.635800][ T4560] team0 (unregistering): Port device team_slave_0 removed [ 115.796399][ T4560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.006657][ T4560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.022235][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 116.092245][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 117.433289][ T4560] bond0 (unregistering): Released all slaves [ 117.748455][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.750137][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.753299][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.754942][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.756491][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.758038][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.759622][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.761409][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.770842][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.773243][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.774865][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.776591][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.778189][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.779994][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.781598][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.784280][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.787165][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.800257][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.802085][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.805334][ T5919] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.806913][ T5919] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.808508][ T5919] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.810070][ T5919] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.845179][ T6009] device hsr_slave_0 entered promiscuous mode [ 117.893411][ T6009] device hsr_slave_1 entered promiscuous mode [ 117.942418][ T6009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.943606][ T6009] Cannot create hsr debugfs directory [ 117.948030][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.980992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.982778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.057244][ T6168] atomic_op 0000000013dde50a conn xmit_atomic 0000000000000000 [ 118.291227][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 118.309433][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.362417][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.365725][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.367416][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.368669][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.370831][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.376081][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.377776][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.378869][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.398103][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.399888][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.401831][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.410204][ T5678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.411629][ T5678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.411994][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.415699][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.419787][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.421475][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.438669][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.440091][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.447171][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.448923][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.450924][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.487641][ T5937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.490644][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.502120][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.513383][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.518174][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.519881][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.523072][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.531966][ T6009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 118.543355][ T6183] binder: 6182:6183 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 118.590909][ T6009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 118.628101][ T6009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 118.755485][ T6198] loop5: detected capacity change from 0 to 32768 [ 118.760126][ T6198] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.514 (6198) [ 118.763558][ T6009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 118.769997][ T6198] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.771688][ T6198] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 118.773324][ T6198] BTRFS info (device loop5): setting nodatacow, compression disabled [ 118.774610][ T6198] BTRFS info (device loop5): force clearing of disk cache [ 118.775925][ T6198] BTRFS info (device loop5): turning off barriers [ 118.777067][ T6198] BTRFS info (device loop5): use no compression [ 118.778190][ T6198] BTRFS info (device loop5): disabling free space tree [ 118.779503][ T6198] BTRFS info (device loop5): enabling ssd optimizations [ 118.780762][ T6198] BTRFS info (device loop5): using spread ssd allocation scheme [ 118.782130][ T6198] BTRFS info (device loop5): not using ssd optimizations [ 118.783484][ T6198] BTRFS info (device loop5): not using spread ssd allocation scheme [ 118.826771][ T6198] BTRFS info (device loop5): rebuilding free space tree [ 118.831135][ T6198] BTRFS info (device loop5): disabling free space tree [ 118.832354][ T6198] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.834054][ T6198] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.837407][ T6198] BTRFS info (device loop5): checking UUID tree [ 119.159145][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.515'. [ 119.179136][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.180465][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.240480][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.307365][ T6009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.710460][ T5919] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.803223][ T6245] loop5: detected capacity change from 0 to 256 [ 119.815925][ T6245] FAT-fs (loop5): Directory bread(block 64) failed [ 119.817068][ T6245] FAT-fs (loop5): Directory bread(block 65) failed [ 119.818306][ T6245] FAT-fs (loop5): Directory bread(block 66) failed [ 119.819501][ T6245] FAT-fs (loop5): Directory bread(block 67) failed [ 119.820989][ T6245] FAT-fs (loop5): Directory bread(block 68) failed [ 119.822612][ T6245] FAT-fs (loop5): Directory bread(block 69) failed [ 119.823802][ T6245] FAT-fs (loop5): Directory bread(block 70) failed [ 119.824978][ T6245] FAT-fs (loop5): Directory bread(block 71) failed [ 119.826226][ T6245] FAT-fs (loop5): Directory bread(block 72) failed [ 119.827254][ T6245] FAT-fs (loop5): Directory bread(block 73) failed [ 119.961105][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.962958][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.973652][ T6009] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.999558][ T6258] binder: 6256:6258 tried to acquire reference to desc 0, got 1 instead [ 120.001414][ T6258] binder_alloc: 6256: pid 6256 spamming oneway? 2 buffers allocated for a total size of 5120 [ 120.004882][ T6258] binder_alloc: 6256: pid 6256 spamming oneway? 3 buffers allocated for a total size of 5128 [ 120.007311][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 120.008346][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 120.009347][ T4696] binder: undelivered TRANSACTION_COMPLETE [ 120.030052][ T4696] binder: undelivered transaction 200, process died. [ 120.031152][ T4696] binder: undelivered transaction 201, process died. [ 120.032725][ T4696] binder: undelivered transaction 199, process died. [ 120.054680][ T5151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.061257][ T6253] device syzkaller0 entered promiscuous mode [ 120.063255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.064979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.066481][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.067748][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.069291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.071022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.082587][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.083757][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.162863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.164617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.166402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.168154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.171988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.216140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.217894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.219571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.221030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.225008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.226727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.242334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.355998][ T6277] atomic_op 0000000056741585 conn xmit_atomic 0000000000000000 [ 120.614288][ T5151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.658658][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 120.913967][ T5151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.919465][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.932687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.934452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.939206][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.941223][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.945955][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.950915][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.986467][ T5151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.989990][ T5937] device veth0_vlan entered promiscuous mode [ 121.003090][ T5937] device veth1_vlan entered promiscuous mode [ 121.034676][ T5937] device veth0_macvtap entered promiscuous mode [ 121.039258][ T5937] device veth1_macvtap entered promiscuous mode [ 121.078969][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.079230][ T6290] loop5: detected capacity change from 0 to 256 [ 121.080883][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.083916][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.087806][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.117992][ T6290] FAT-fs (loop5): Directory bread(block 64) failed [ 121.119203][ T6290] FAT-fs (loop5): Directory bread(block 65) failed [ 121.120387][ T6290] FAT-fs (loop5): Directory bread(block 66) failed [ 121.121532][ T6290] FAT-fs (loop5): Directory bread(block 67) failed [ 121.123392][ T6290] FAT-fs (loop5): Directory bread(block 68) failed [ 121.124442][ T6290] FAT-fs (loop5): Directory bread(block 69) failed [ 121.125612][ T6290] FAT-fs (loop5): Directory bread(block 70) failed [ 121.126794][ T6290] FAT-fs (loop5): Directory bread(block 71) failed [ 121.127973][ T6290] FAT-fs (loop5): Directory bread(block 72) failed [ 121.129181][ T6290] FAT-fs (loop5): Directory bread(block 73) failed [ 121.149015][ T6009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.153333][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.154635][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.163801][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.165555][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.167282][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.169047][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.170761][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.172897][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.174572][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.176378][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.178112][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.179842][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.184962][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.186487][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.188295][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.220907][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.222718][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.224591][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.226318][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.228697][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.230376][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.232016][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.234269][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.236118][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.237897][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.240603][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.262701][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.264576][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.306197][ T5937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.307711][ T5937] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.309214][ T5937] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.310692][ T5937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.344494][ T6301] loop5: detected capacity change from 0 to 512 [ 121.376159][ T6301] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.527: inode has both inline data and extents flags [ 121.381606][ T6301] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.527: couldn't read orphan inode 15 (err -117) [ 121.386056][ T6301] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 121.485410][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.487963][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.516276][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.042687][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.044214][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.065862][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.171054][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.173651][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.194850][ T6328] binder: BINDER_SET_CONTEXT_MGR already set [ 122.195903][ T6328] binder: 6327:6328 ioctl 4018620d 20000040 returned -16 [ 122.197500][ T6328] binder: 6327:6328 got transaction to invalid handle, 1 [ 122.198615][ T6328] binder: 6328:6327 cannot find target node [ 122.199567][ T6328] binder: 6327:6328 transaction async to 0:0 failed 204/29201/-22, size 0-0 line 3045 [ 122.202745][ T4370] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.208539][ T5919] EXT4-fs (loop5): unmounting filesystem. [ 122.247822][ T6331] binder: 6330:6331 tried to acquire reference to desc 0, got 1 instead [ 122.257217][ T6331] binder_alloc: 6330: pid 6330 spamming oneway? 2 buffers allocated for a total size of 5120 [ 122.260890][ T6331] binder_alloc: 6330: pid 6330 spamming oneway? 3 buffers allocated for a total size of 5128 [ 122.285668][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.287818][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.290239][ T4370] binder: undelivered TRANSACTION_COMPLETE [ 122.292095][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.301573][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.304542][ T6009] device veth0_vlan entered promiscuous mode [ 122.307927][ T6009] device veth1_vlan entered promiscuous mode [ 122.359691][ T6009] device veth0_macvtap entered promiscuous mode [ 122.367938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.369574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.371075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.373903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.541033][ T6009] device veth1_macvtap entered promiscuous mode [ 122.543045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.544975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.555182][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.557099][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.558944][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.560870][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.662428][ T6358] loop5: detected capacity change from 0 to 128 [ 122.822726][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.838001][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.845310][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.862399][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.866027][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.867925][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.869480][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.871198][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.875374][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.883708][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.534'. [ 123.890182][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.892049][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.973315][ T6371] loop5: detected capacity change from 0 to 256 [ 123.975443][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.977139][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.978952][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.980936][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.983202][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.984901][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.001272][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.010184][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.011837][ T6009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.024706][ T6371] FAT-fs (loop5): Directory bread(block 64) failed [ 124.025824][ T6371] FAT-fs (loop5): Directory bread(block 65) failed [ 124.027041][ T6371] FAT-fs (loop5): Directory bread(block 66) failed [ 124.028265][ T6009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.038190][ T6009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.379069][ T6371] FAT-fs (loop5): Directory bread(block 67) failed [ 124.380178][ T6371] FAT-fs (loop5): Directory bread(block 68) failed [ 124.381404][ T6371] FAT-fs (loop5): Directory bread(block 69) failed [ 124.391600][ T6371] FAT-fs (loop5): Directory bread(block 70) failed [ 124.401820][ T6371] FAT-fs (loop5): Directory bread(block 71) failed [ 124.403433][ T6371] FAT-fs (loop5): Directory bread(block 72) failed [ 124.411948][ T6371] FAT-fs (loop5): Directory bread(block 73) failed [ 124.445597][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.447451][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.449095][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.451399][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.461543][ T6377] netlink: 'syz.3.536': attribute type 10 has an invalid length. [ 124.462984][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.536'. [ 124.464591][ T6377] device team0 entered promiscuous mode [ 124.465490][ T6377] device team_slave_0 entered promiscuous mode [ 124.466632][ T6377] device team_slave_1 entered promiscuous mode [ 124.468186][ T6377] bridge0: port 3(team0) entered blocking state [ 124.469247][ T6377] bridge0: port 3(team0) entered disabled state [ 124.470913][ T6377] bridge0: port 3(team0) entered blocking state [ 124.471932][ T6377] bridge0: port 3(team0) entered forwarding state [ 124.487617][ T6009] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.489060][ T6009] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.490475][ T6009] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.491819][ T6009] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.527593][ T6381] binder: BINDER_SET_CONTEXT_MGR already set [ 124.528775][ T6381] binder: 6380:6381 ioctl 4018620d 20000040 returned -16 [ 124.536662][ T6381] binder: 6380:6381 got transaction to invalid handle, 1 [ 124.557755][ T6386] loop6: detected capacity change from 0 to 512 [ 124.579613][ T6386] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.537: inode has both inline data and extents flags [ 124.582036][ T6386] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.537: couldn't read orphan inode 15 (err -117) [ 124.618627][ T6386] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 124.682299][ T6390] loop5: detected capacity change from 0 to 256 [ 124.686200][ T6390] exfat: Deprecated parameter 'utf8' [ 124.716963][ T6390] exFAT-fs (loop5): bogus number of FAT structure [ 124.718174][ T6390] exFAT-fs (loop5): failed to read boot sector [ 124.727378][ T6390] exFAT-fs (loop5): failed to recognize exfat type [ 125.682868][ T5937] EXT4-fs (loop6): unmounting filesystem. [ 125.766685][ T6361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.768063][ T6361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.911543][ T6410] loop5: detected capacity change from 0 to 32768 [ 125.915205][ T6410] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.544 (6410) [ 125.918456][ T6410] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.920349][ T6410] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 125.921905][ T6410] BTRFS info (device loop5): setting nodatacow, compression disabled [ 125.923384][ T6410] BTRFS info (device loop5): force clearing of disk cache [ 125.924581][ T6410] BTRFS info (device loop5): turning off barriers [ 125.925612][ T6410] BTRFS info (device loop5): use no compression [ 125.926715][ T6410] BTRFS info (device loop5): disabling free space tree [ 125.928003][ T6410] BTRFS info (device loop5): enabling ssd optimizations [ 125.929086][ T6410] BTRFS info (device loop5): using spread ssd allocation scheme [ 125.930443][ T6410] BTRFS info (device loop5): not using ssd optimizations [ 125.931694][ T6410] BTRFS info (device loop5): not using spread ssd allocation scheme [ 125.934950][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.936016][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.952354][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.961626][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.966219][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.967589][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.046804][ T6424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 126.051512][ T6424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 126.460281][ T6410] BTRFS info (device loop5): rebuilding free space tree [ 126.469362][ T6410] BTRFS info (device loop5): disabling free space tree [ 126.470642][ T6410] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.472362][ T6410] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.480777][ T6410] BTRFS info (device loop5): checking UUID tree [ 126.616677][ T6456] loop1: detected capacity change from 0 to 256 [ 126.625319][ T6456] FAT-fs (loop1): Directory bread(block 64) failed [ 126.626506][ T6456] FAT-fs (loop1): Directory bread(block 65) failed [ 126.627925][ T6456] FAT-fs (loop1): Directory bread(block 66) failed [ 126.629207][ T6456] FAT-fs (loop1): Directory bread(block 67) failed [ 126.630981][ T6456] FAT-fs (loop1): Directory bread(block 68) failed [ 127.110623][ T6456] FAT-fs (loop1): Directory bread(block 69) failed [ 127.112119][ T6456] FAT-fs (loop1): Directory bread(block 70) failed [ 127.118570][ T6456] FAT-fs (loop1): Directory bread(block 71) failed [ 127.120566][ T6456] FAT-fs (loop1): Directory bread(block 72) failed [ 127.126100][ T6456] FAT-fs (loop1): Directory bread(block 73) failed [ 127.139622][ T6460] binder: 6459:6460 got transaction to invalid handle, 1 [ 127.140919][ T6460] binder_debug: 8 callbacks suppressed [ 127.140931][ T6460] binder: 6460:6459 cannot find target node [ 127.143122][ T6460] binder: 6459:6460 transaction async to 0:0 failed 218/29201/-22, size 0-0 line 3045 [ 127.147289][ T4370] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.165220][ T5919] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.340412][ T6475] loop6: detected capacity change from 0 to 512 [ 127.440777][ T6486] netlink: 'syz.1.550': attribute type 10 has an invalid length. [ 127.442234][ T6486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.550'. [ 127.681228][ T6475] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.551: inode has both inline data and extents flags [ 127.689010][ T6475] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.551: couldn't read orphan inode 15 (err -117) [ 127.695610][ T6475] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 128.193257][ T5937] EXT4-fs (loop6): unmounting filesystem. [ 128.550279][ T6518] loop6: detected capacity change from 0 to 256 [ 128.691107][ T6518] FAT-fs (loop6): Directory bread(block 64) failed [ 128.692500][ T6518] FAT-fs (loop6): Directory bread(block 65) failed [ 128.693814][ T6518] FAT-fs (loop6): Directory bread(block 66) failed [ 128.694925][ T6518] FAT-fs (loop6): Directory bread(block 67) failed [ 128.696260][ T6518] FAT-fs (loop6): Directory bread(block 68) failed [ 128.697499][ T6518] FAT-fs (loop6): Directory bread(block 69) failed [ 128.702592][ T6518] FAT-fs (loop6): Directory bread(block 70) failed [ 128.703758][ T6518] FAT-fs (loop6): Directory bread(block 71) failed [ 128.760498][ T6525] atomic_op 0000000018e0fcbd conn xmit_atomic 0000000000000000 [ 128.989683][ T6518] FAT-fs (loop6): Directory bread(block 72) failed [ 128.990894][ T6518] FAT-fs (loop6): Directory bread(block 73) failed [ 128.998828][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.557'. [ 129.000512][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.557'. [ 129.097167][ T5151] device hsr_slave_0 left promiscuous mode [ 129.116230][ T6532] binder: 6530:6532 got transaction to invalid handle, 1 [ 129.117361][ T6532] binder: 6532:6530 cannot find target node [ 129.118239][ T6532] binder: 6530:6532 transaction async to 0:0 failed 222/29201/-22, size 0-0 line 3045 [ 129.140243][ T4433] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.142988][ T5151] device hsr_slave_1 left promiscuous mode [ 129.193369][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.194755][ T5151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.196424][ T5151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.197788][ T5151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.199433][ T5151] bridge0: port 3(team0) entered disabled state [ 129.265154][ T5151] device bridge_slave_1 left promiscuous mode [ 129.266242][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.303296][ T5151] device bridge_slave_0 left promiscuous mode [ 129.304351][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.476101][ T5151] device veth1_macvtap left promiscuous mode [ 129.483696][ T5151] device veth0_macvtap left promiscuous mode [ 129.484833][ T5151] device veth1_vlan left promiscuous mode [ 129.485795][ T5151] device veth0_vlan left promiscuous mode [ 129.544411][ T6560] loop6: detected capacity change from 0 to 512 [ 129.556607][ T6560] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.569: inode has both inline data and extents flags [ 129.559151][ T6560] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.569: couldn't read orphan inode 15 (err -117) [ 129.561113][ T6560] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 130.147263][ T5711] INFO: trying to register non-static key. [ 130.148188][ T5711] The code is fine but needs lockdep annotation, or maybe [ 130.149419][ T5711] you didn't initialize this object before use? [ 130.150483][ T5711] turning off the locking correctness validator. [ 130.151563][ T5711] CPU: 1 PID: 5711 Comm: gfs2_quotad Not tainted syzkaller #0 [ 130.152829][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 130.154580][ T5711] Call trace: [ 130.155123][ T5711] dump_backtrace+0x1c0/0x1ec [ 130.155921][ T5711] show_stack+0x2c/0x3c [ 130.156652][ T5711] __dump_stack+0x30/0x40 [ 130.157392][ T5711] dump_stack_lvl+0xf4/0x15c [ 130.158130][ T5711] dump_stack+0x1c/0x5c [ 130.158834][ T5711] assign_lock_key+0x230/0x264 [ 130.159661][ T5711] register_lock_class+0x1ac/0x694 [ 130.160574][ T5711] __lock_acquire+0x164/0x6800 [ 130.161355][ T5711] lock_acquire+0x20c/0x63c [ 130.162192][ T5711] _raw_spin_lock_irqsave+0x6c/0xb0 [ 130.163174][ T5711] finish_wait+0xc8/0x1ac [ 130.163935][ T5711] gfs2_quotad+0x390/0x500 [ 130.164705][ T5711] kthread+0x250/0x2d8 [ 130.165432][ T5711] ret_from_fork+0x10/0x20 [ 130.166190][ T5711] list_del corruption. prev->next should be ffff800021777d98, but was 0000000000000000. (prev=ffff0000d1444bd8) [ 130.168322][ T5711] ------------[ cut here ]------------ [ 130.169130][ T5711] kernel BUG at lib/list_debug.c:61! [ 130.169919][ T5711] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 130.171031][ T5711] Modules linked in: [ 130.171618][ T5711] CPU: 1 PID: 5711 Comm: gfs2_quotad Not tainted syzkaller #0 [ 130.172757][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 130.174354][ T5711] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 130.175543][ T5711] pc : __list_del_entry_valid+0x13c/0x158 [ 130.176594][ T5711] lr : __list_del_entry_valid+0x13c/0x158 [ 130.177580][ T5711] sp : ffff800021777c70 [ 130.178263][ T5711] x29: ffff800021777c70 x28: 0000000000000000 x27: 0000000000000bb8 [ 130.179650][ T5711] x26: 0000000000001770 x25: dfff800000000000 x24: dfff800000000000 [ 130.181059][ T5711] x23: ffff0000d14447c0 x22: dfff800000000000 x21: ffff0000d1444bd8 [ 130.182427][ T5711] x20: ffff0000d1444bd8 x19: ffff800021777d98 x18: ffff800011b9bf60 [ 130.183799][ T5711] x17: 20747562202c3839 x16: ffff8000082eef80 x15: 0000000000000000 [ 130.185085][ T5711] x14: 0000000000000001 x13: 1fffe00033eaa5a3 x12: 0000000000ff0100 [ 130.186549][ T5711] x11: ff00800008311668 x10: 0000000000000000 x9 : fb343b9c0f7ab100 [ 130.187937][ T5711] x8 : fb343b9c0f7ab100 x7 : 0000000000000001 x6 : 0000000000000001 [ 130.189269][ T5711] x5 : ffff800021777738 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 130.190666][ T5711] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 000000000000006d [ 130.192027][ T5711] Call trace: [ 130.192563][ T5711] __list_del_entry_valid+0x13c/0x158 [ 130.193499][ T5711] finish_wait+0xd4/0x1ac [ 130.194236][ T5711] gfs2_quotad+0x390/0x500 [ 130.194946][ T5711] kthread+0x250/0x2d8 [ 130.195621][ T5711] ret_from_fork+0x10/0x20 [ 130.196356][ T5711] Code: 91040000 aa1303e1 aa1503e3 95c1f895 (d4210000) [ 130.197475][ T5711] ---[ end trace 0000000000000000 ]--- [ 130.515962][ T5711] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 130.517173][ T5711] SMP: stopping secondary CPUs [ 130.518086][ T5711] Kernel Offset: disabled [ 130.518793][ T5711] CPU features: 0x080000,000f0097,a65bfea7 [ 130.519759][ T5711] Memory Limit: none [ 130.825951][ T5711] Rebooting in 86400 seconds..