last executing test programs: 3m38.004738369s ago: executing program 0 (id=34): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046304, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 3m37.94551227s ago: executing program 0 (id=35): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 3m37.863191071s ago: executing program 0 (id=36): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m37.861613291s ago: executing program 0 (id=37): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000040)={@default, @default}) 3m37.824372961s ago: executing program 0 (id=38): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x80) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x100, 0x1}]}}}}}}}, 0x0) 3m37.734140333s ago: executing program 0 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 3m22.057537833s ago: executing program 32 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 3.232321331s ago: executing program 1 (id=2812): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0x3, 0x2, 0x9, 0x9, "f30885afecffff0ac5c5e52d1d319a00001000", 0x2, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 3.226349521s ago: executing program 1 (id=2813): socket(0x28, 0x4, 0x6) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[], 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, 0x0, 0x0) 3.130674533s ago: executing program 1 (id=2814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000440)="9c74dfbf77572856c809ff86bb64", 0xe}], 0x1) 2.996525795s ago: executing program 1 (id=2816): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) 2.957515645s ago: executing program 1 (id=2818): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f3, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x880) 2.847612127s ago: executing program 1 (id=2822): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20782) read(r1, &(0x7f0000000240)=""/195, 0xc3) 2.734858859s ago: executing program 2 (id=2825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 2.427933983s ago: executing program 5 (id=2828): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004e00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980bd709", 0x13}, {&(0x7f00000005c0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af613", 0x19}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000001b80)="35c83950bc9e38d8cc53933cb1e0dd536040c694a98cbb29f725ba8a912a13ec0cf59e149e0716485ebc6bd5484dffb8ec604509d19b4f09fa601bc2594eb4053f2af36a0511d9f65cf424c54aea43208402806299d327d7c20df9282afdf5b0032d7d088619703e1a040d02c43d73cf4c506a1fd5e16425b00452eda86a2ec2ef98f83367a25ff06cb4690f637dfc516feec2410bd1c443f53f2bb522e1147f1150a77b6aab66fc533859caa1c92495096dcdfe44d0f7ff38570397d8ef514f70c098dd6d7dc0f4a592de543153f18f042c87d402c65d7c9310a9102fc0000c7ec0db85f42e074a4b2aeaae", 0xec}, {&(0x7f0000001c80)="b1fc15d376ee5cc82479b4691518306f0f15f9a1b6b70bb374727b501002f1161230daf5f6328456564144240bbd7594636fa69e66e46fb03f", 0x39}, {&(0x7f0000001cc0)="6917bf1356a88a4953af75a98a4820627b68713df280b3bc54717754ed9650152e6a23933a89eb103b6f146ef73248fd407d6e7ce10e221897fc2c6f0598c3365db556c88ae24296b95069b1753bf861649fd6d2ca3ccda9bebc135ffb3b560c8f5bfc794554406ef1916e1a9d8f940cbd95129117e5019ebeedfae329d6331ddf7260d4b919678ca55da973d1efb9d4d0a640eeca28ac038fbc4a33dc45a1247fb0ae6f0e29", 0xa6}, {&(0x7f0000001d80)="0d368de043df2731cfbca1a3231bc82e227087a31758e42be3ed84e882870c1d9fe1d67cae33792452dd92e936fbd6b95817f9c888ab9592cb429bdeb0e1ceb913facc7b9f7878a6ffa56fbf6f5b3e4dbb88ff57acf876b9e377918228eabdc5a36bf03009bb6e731f8bb215d5329726fa08e550eb102bd6e4a7dc8cf01ed1d3f3fdb74e6ace8bf04b8b0fc802c33bccd9a8ec3b4bc585af205ac2dc21d5b6c124b755672a524dc787c842d57f815734c067b20f31a6cda9b29f8ebf2a82d77a5a0b1c595c561866de1002b87047ab74026a6477", 0xd4}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000001e80)="b9dc401f15eb5cf7fe4d81b07499773e0c790dd0fdf75cfb861c9488870fbd16da8b0008fed248db0d25ea2e766cadb39ee47fe3b9f2a42a88829d2ee5d71693236f8b4793f08f66707dc8767311b87fae81480480b60e401fa01c83026f6f5934496301ec395cb5e70c0010358d636f00eea1bc576c3f316520dc1976874009aaab9993c87abcf594e5a1380e", 0x8d}, {&(0x7f0000003680)="687950303d289ceff6d7a8567d3265a85163d4a238d92fba5f97e1263649b11c7e31853fb5daea9dc54749b4a4f70252597e39efae88ec7ceefa293d3eaab6d2afae94f5cc10ab4d2e2215ce3638f4454bfce51c7488a3046c4ba08410147ce5be4a04c72b0cedb2945ec20597aa47adb8bc20b91f2312907b148350b768d141a3748f38fb878957b37b1961b267de18c056a657e10201bec11a1d42dd722829c9418f1e54e74bd7e2a823d4a701989ad16a816e072858626116f68de2a591ee1ef95d6482df5f35099836c66a6f79b5a9a8c24c12083d23d4d734bf0f557ffacc846d3246a70a541e022aa9fc121c7c1e99c4c8173810afce2766e6e6cae3fb885407ab07d600327b13d764aa455b018ad4cd0fe634c33a236c62412a8fd209de614cc21175039335e3c8f39712c18ad735485ff56006b79eba79f6ff6527b16b5158a32da2dbfe219c84b37c22252104e3def9f90d46b023d94cbdeeed17901b63df7aa34c1b9a0d04700a1a320ee1fb44242b013ec937abeccebd6c0a8e8f56a81d75afbd05aab34c20892c0955a7645790950c2180dbe328a371f3ebcfdec6f146aefe0f03fa20d0968537347f103b71cc38d830276becce041bd3f483480f6ae1c07a8036285f5973f114fe391a752eb7733e0ddf6834dce011d48f5aa82b155675ebf68820dcc77c5e4791f3addfa39a0156b63352e80e92911a7ada93ef2f5144779980142f8436a60687e766fdf8c460e0503a011fb4708c4cb6456b3717383d10d5d67f9190ab94a74a6beb7f66a2556dbd0e975baf9fbe877cb3fa99a9e21747c76a782c87e511b757d63b70bd9147fb5c5c75bee5aec19dfe328d9b55131c2195fc3d88cb30c9ef539568f4f0051753d2077b31ee2aa653cb4f8d128183da06ebdc8f7ef4a172b46e5ce80d8f97cbfd9b3af4a4dc8a5f33e3db0456f84d5ca5b86eaffef9f6d9a9e8301adbab0eba36a2146f45c154a69ab3193d5b4039f845c6e2bcc9afd39cc51ba13c05302400e48d10b13de3a92b5ae53fdd8e0466b2fac86592e44e3d9378b2a81afed26d3878ecb5493bf90a59d16fbabcee6fc2efe8a18d15fa0be33993b215acfd719d586dd0fbe22b2612184b977506605a5c464040864399557adafcc56cef14f9634a454df8ab57c64fbbe927453870ed99e9fd77112c9a86599cd0a4f9d2935e72f9505876389f926ecbdc9b535e907769991efb8fd789954a5806f800bc626865f951e5d020a9ea0d5b58c25d73ca41b3178c57653c5efae2c2b8155626c25ae0793a0ca37a4af8eaa0d8dc20c73a6533c56ed99a5b91299007825904dfe735f24669ec6992894ab7e5c7c1794c7dba25b207523c2174b6cc6fd9a8951582806b3a360ffd8ea9976c3fa654aaf8e422a5d4beea37c4fe5e6cd535af8da4351e9a73d47ba348bb87bf317e48916e0c44806b477ce6d61ad17f418e5180f62ebba79b1f100d7ae3ff27b72e17fb2417df3118d9a3f85b3b9f18261685b1eb3418ce9b541fa9bb207a674e6a566d98046a6f4e41ce6ed472d324964cddd424db0befef9f30caf93b2c177416ab37e801e4a2e993d16da6bdd5397453c301505754d84aea58fdae8cf922960f4b6437d39aa575ce276561b0557fb4a5c4aeddd96c9620d49aefc1ecfdb9693f6c0ff0cfa5722841a485cf022f0aa2f8ae189185cbad2e22ca4e58413fea2d06b4e6a035fa5114dc6629f15db913a6385c296e3d83d179840ecd6e0f9f5c203b2835a896065a7126139e7c824a0a20ae033db8887ceea370f8dedca189bea0b910b4e39d827a3f2c422aa142b2616919af626c1a1bffb70d5beb2c976f781af5a78fdb3667b3ed6102ccd629b69cecd2cf5300553ce016a5e955363ee5cb720c56633ff09bcbc863b9b28d095d0de00112716c6b71a3e73bf617aace7d2df6060799c3949efad8902d45c5051f66ab262b57355a9f3c0fba8eb398cccfed850cc8ca62abb39b198a709c970406d31e5c7c3a783137e5ebc3c6d2bc28001068dceafc1ecb72559398e6c7894745998a0e383fa24e429ec380b7dd246270fbe63d4b0da809ee64cb2ab1a2d7ee8b98f126077149089af4a2f9ac86d3db6a146c6895d0f4aff09a5dd1ea4a2b69f1611535924ef8037680947ec98de9746deae2fccecb771ebb415c7c0a537005319040f9bdf09b198fc8e42c95d5b3ecf997282a93fbe02640cd060a4a7d60e263df51c28bbc115ba1a2eafc5e90756e95f643417dc83823fa109e00ddae5495abbb00219afb985e8a0e9f4406026e15c98f8c2893817eb0ecddea6421cc327b4ebebb4786fdc77f3c3a1ae89da729c42cd694c222506f158cb815b3b2eaef38e4f5040bbdb3fe7a7a4ff038332bbc126b553e74ca143fe3a18626b9329a45904d965d46b00fd829ba61f5c462df03b65ebab03646214087f12c3194ed5d9af99be54eaa3f9c64fde2384e2427602ed01022a83c8b3f44e4ae0fc2ca5e0e36295b1fba311673a96046116ff8c0ab3629225ba08245821e9d769ec13903988f197f10e29114605143cbea6427ca6394b0f05f97f4e05e25966aa4a44a5686326d00a0d08454013964f7ba5214d7b98cff3f831a79f8335318b612c8fd9bda13bf78b6a5477e3551b4119d8097deb94fdd534c7410d57d981ad8c93ae26fa844207633a93b8bff9b99b0a3ea46504d64a2f468b463d762332f32299b1cb574d0e06119a9641623a6abf5a25dff09e929d40357025b6efda39a4543b2a9ebc1351a1f4b5750e6367fb18689c11cd1dc69c2be439d64df74a3772393f2220a27e5221d0ae1dc8d7b7be0c400e6c048862a69e721f21774a2481899fbc3bfc0be6435a42f7e247703707cc99ad3889d1b36363ac4fba52e353e1cb6daa955c04af37cc3ad6ad8c1e8d1603c391f781627fa0015654e2e9ebd693fa8971415c9a1512049e1859e652a66bf8a0d9d51d129629d826c09665448b12aff558c3d5f03227e6155b9adc7f136c9984b90918b844f81aa5bb27413f5530cf66e1a8beb4fbe806e93463201719628e2bdf6cfb723943eb89e5e3c376b26dc67b6ad35c3b030c782452b3f20e8bed4d21d25faad2be366d7a55a262d4e46a0bb94a23aad5d7fd59003789c56065b2da8e587b9ac59d6feaaac73ead264e76b8e71ede2e90458b7817a8b2362a7f3e0b13d7c90c933ec12f8b2cc032dfd910798d9b499ab37be0e5feb2cafcb731dc2678933f7eb7dd0cf8ae2a44839b7e71202f0530523e2ac83cd970aacb4065ef87eac9e0b35c301513674e3b0f9026fc28d6ecd0cd6b12196e564108eca02bb4b78f6bc3b75f7726242f11e10ddaa0e14cf4dd8fc600852bdbd3d9e20d9fea9f73b6e4e4de9952c45da01d7ff2fe58fad685984932a1a9ece928cecc7d464391ff65a95e4ee80ffafdf05882790260801cc87084c56ea9195de8823b23e70cf1e97b9cb85ee50af6f4b9cbe2473730074e79b1bc0d5c1ea5c1c7cedd95b7e03583e3c2c81f4fd3ad32104144e1aee2034f7e3c7f761f17a4c3253e7feea6efd970f79b83d304da74c1f35de638695d7260a4d5a31059a134e2ba116e326d3a886aaf6d9bd83d40cc26662469aad6e0d630519331fb82097f01ae2338a7fb8686e9bc40c25e28ca46bc76bfce920587d828c71cea8331be51e5c1750712b75e234c3732f1592011b08b8d77b8530131b54463bb67cfada2c1791c01695144e26d8afa3d57517963f8d81b8e2cc55171b60d1e4c40e97dc12f0f344da99e70046cbe688d29bbb251ab334e0bb8a853ea4e1b70a705e863fa0489065a3ee51f6e6930f6ad9d975b8871301e7ee78fbef9ace7323f62a8911cf10c5054a8615aa3d99bf772ca645254294b7cff000cfaf8bfac658c717d0b27ea867683616c0b11703f2edb37f1af62f32eb90901e6a104a644ebdaf7bed611429914a75fe4b446aa9442f47075ce801eaf386c743326c74641b4c31871a02a99cc5defe9da1089cb6488dd3df788f1f419c8ecd05ee6624f7df88a7f5293a4425e5538e5e9114392fbf080298db1f2dddd0281b7e6ebd7c7b0d770dda4d51107af4e58746f94dd582dd7a33a1f9cba9b7f935094f4cfc6029c802a9f957c41a0d248b6597d2b3109a0d6ff0fad1992e4964d6f4d49b57c2d33ab394a94ddcbc0017456e858d408a1dd87346e656f9a2e239ae7681985f0bb5e0e76639e2c87644519f07c777a5e6d63dc270e0c0b557a9129c04796ba457a6f2440b57c1e3f4d521a496c46508cf82555b3db697cf615dadef8fc63cc9b3e4", 0xbe1}], 0x7}}], 0x2, 0x8008801) 2.260240406s ago: executing program 5 (id=2830): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="9c7229b3b13ab2edd8ae742153edbde2f2b8580a32318f0e1c0ba0e4830ecd079784690876773e01b68af1b951109b96bc4828e91b62b25578a41a42d456d0ea18599c96460b0e49923f4cf4d70098f8cb469ca8f0e4ecaed1c9047ff044a5f836ad8e1ca353b7444b2cd6283680720472d70610a8d34f7be697a2998b3cfcfbc7200c7a2730c500fb967d434022701b2ef32e4842ffcad78da81fb58dc80e000d2912ce8767e673873193e8b3eee5adc0bc16bf5508a6d1944330a840695932d346300cc4aa91406c021a6c3e428642f2ef1fe24e4563bb788d602fb107d994db1586f4df75811468731cbca31878d1e08641be1317a36e0bacd07a885baee68a78bbe7b980967de4662af4fbc3dda307ec10d5c54a704db53c934883caa2e839ecf0dbc92ad09cb09324879200e68ab8a39f2c3742bf294a6c0f485b1e1f5da8d5459525da76782467bfa74a070f3cbad2961bcdbf1234fa2abfa94eae333f9ec62287832cd5fd71af91a96f4224f5bf7fae5048d5f9b112e756a833e75330487ed5c645cb0e334688abbea680e9d04ba96d73c004fba018c676c92a4dedf581848c2cd130de468b76f0b357d312246e0daa073ae9b477bab55da376a2b383c740b78041e564c954d9c61c4a8c85d3979cc12d8289276d75f902c5bbe4df0e0be90880b4d05f70f07c3027d9227b5d7cdb9780e0cf91a853ff9d8793b1b02323b4336e64f725cb5414edc4a3b849f875ff69de1d67f28cbd036c7804760a6039894b777561c0455a7eff99d9cc462ededae8e34ef61c48b24efcf15f607982ec7b7c30cf9875a10bf05f103e88a77cc3f328b10756966a324621bbe3df7aacaee486475680aceae36e4b12970b9025f7f7d155b8133bf108119414b83d49bb7a288725c886d6af3c03a1a8b8cf7e10797067f129f82186d760ca7f14776a0229e840b47fce4d8ddf65bb4dc9c245b83c1d2d7c10bddfb00f8ff5e1f8fdcc48d1fd2a4e5bf22dffa491de9423e8a6265bce515f5490614a61f672525847884df3a317e85d478a2204f33d43e72b000d0139324b7f7fa8ed181031beefe72289878fa91ee7c74318dae7e85176785f71df3a7388760bc8ba0f84bd2e2dfdea1c3ea60c2d88afa85e8ed86faabb8bb9fc50596b99bdd91d39d2baaeb0a0b360224465cfc759cf0a85bcce0ba009d8325a082e398f477206804ddb6ae76ced6f32f47fdbe2319dd37ad05d3b1d7fc1828198bfba4c92c7cd612776b6cfdd39f4ca12e8d29a8089afeb852d9927159ec7025f1a55be6787b0211c4b4cfcc7d82c26e5bf068dcca07045ee9708158724b325d5c0040d73910347b89f0e09fcfd02e37f5fa5b1a9e6bb5060a13964241cf38bc8804e722454a33fe7fb3a117b7719eea43194972b62c3a7d30cb419d24218d3f76117d7ec58e8a2e87bbc6890d42181918d66037c5ec5336309c48991020c91963296e4089c3ffece388a5ff32afb26b197bbb46edbd41c94d5a007bab3d082b9ffd38eb6af1d1d58909d2b8e9a99c4e658d91f6a1c490db503e287d31b11dcfddbe5b097ea775d855a569e51b9fc560e3b9c9e876d3e5a953b9f0e9fb5e5e5325d5df94a2429917d3cd53f938922bc0ae43630ae520d28df260f909b2368d2a5fbcc20919dd1613a811ef9878f21b47ddb4a2457dc28bb117b5c8a856e54f01a0d700de3620aa38c0f52ebf402d0620a5b075b8d1f7ce7b504b2a6158d23fadb50b55dc4e4d8c461f5b6f1a16dd86db44fa516f8fa04df4388a3f3e0fa87925f0b22be8f4ce89b089e8cc9903d4541bc371596a63ae6c808a4c8862bd58d5e9ebf0977c15b0fd4c258ebbc865e4bde8ec081f1d6359ce38facccae479a5057f403f70f45d02636120727f94f4300c425d0e830d640d2211195d485578ea79bfe18a4589e1209621ee6c2d26ff5a4986ba7facd77db0352456eabcc16b02bdb9081c413a94f284dde5269cc0b8ad2248b3e8ae5a8f282b769ede690ca4c867216757ef309cb8bdfe28ed7b044fc45ac3775c225ef9b228e30452228d1bae92ae2b76b91975d5d76967c62c878f5a1496ff5f0a2abb7dddb00c72dd2ad77836922c4a899225b81a45d6cd48fe0095735e2adea35e673d05df1fb1ccb9069703787090e0d9da91c212b8f856acb0d216c516598ee5fff92d63210b314ed44631a02c0458828aa819e6716adc5842db90cbe4370b25e7dab6f76fcbd0fd87aea135edc33a5467a7483dfcabd48256189f488899a23710878f942c720fa3c6717f8253ca8d489bee3bb9dcefd645978103928641c20b764466c6ce26f54d47b873bcb028c026ab7d9d28acfcd9ff612d7dc734b3633ee7e6bbc237f5a2480dc0c8c235ecd4195c610da480718752b64116ccbef95e91053d840e3c515aacb55d943881d255a1067f9a8e886e374e2cd10f7667f55f2ffd5b7f2b1368a027e5edad4a6cdee3ac6d4485a17d606c15ccf348e4e58f456ec2f8361ca6dfd70b248dcfd30aece7cd3b8d50adf10f4a45ab21dee13d12d66e9c6642d9c871a0bd920fd3b7ac2737c5169a21fe685fca816bea76d760a1bd3a8a49137a219bdc252a727955c73a1349736410d652ced5f7db1e79e6303f22ca04b5ab80c82bd9d42acf3e800aa47296f5aa48098cf90b13782a9d3303bd34e0f6f86eb5f6654283ae7d7aef932dcdd7bc63908c5579ff6b2205915fc4cf46337069b697e577d153a4669cbe06a5a7b0414b47ec34b79aa6781a1315c0b8ea38168e821701c8c6f04d3ff0f846f4834fb19b5f727a59785a070ee45ea82ea9d3514ba3e169453fa240da9a0792b92ff42272296451a03968c5182661331b3972d498cb248fe67d10de2414a04cc4cfe21780f66efa21d416cf8f51472f3d4be17f64606500138c55e44dcffa57f63c4c3473cfbaaff5093007b696d316a651e332e44a3e61458a91f9a27c9321fa43d2f2949efa477a89dcca9dc094247a988a86794320881f87ec8eee86fa7721090d5bc6c854792ec89ab6318454e9899a6290231d7914ce37df59a9cab9375c3fbf8910ded020d2bd856f4f395f26ae53a5a2736af04826778709c33b7f230f13bddac8a7a333c9fa276c33af1547a8dcc847c0ef745e345b6127e79c76e04e01862652485ef6e81e6e7140d2874a08fff98418621da96f96c0027acb948768454540fe7440de333490cfbea1cecb05e817daee34616a03e837399dda6c4e072495d3d24d5b9607492351f4f0d3999b55d51fab9f22c054ce996463b7d31984ee525109e2f8d34751b936e3b427efa72629a7a3aee313501cff1db4f103a1fa52cf37b895c79edd5b578532875222775906db38b135ca1e75be5a8a60db811c37c417e727343fd265330e5dcfc41d5d8fa563aea090d629dc5aaa89f9207c115ea10cc21185c8df4f93b9d0813b5af496ca089c9b006bfcf7d807d894f08939f7c719c359bdcf2e1e429583b97bbe55c9187376497fcf1dae24e69ab3b9c9ca4fd2729fca6c6d6947d38bb51a9024153ef87e85084eb4496bccdbfc3065a517e0bc5d14a4b79798dac8d5a3da9063cd9bc5bf078659b8bf86e9076c7ca87472c6296322ca7918f4aa60414cb3ab25384f4b1465e95f246cf7865342fd47c81cdb17607f1e098c38aed5a858b25ff1c3584f9df4fb4c3e02e9a283c0fb56d11fab489bc10800934cc8e2074416242eeb7d275802ed15ae0bfe398ba9d2c426f2596097c1a7ab67ae25353dbbc19018ccfda728785c2757cc284970de5817ba49a9b42933594095df59e411316d0fd6cdf4818556f082cb536139463663a325aec7896e9786d27af5c9b265d87cc96b11c47e405cf3e1dd471a9d311c7e309cc75324ef3bdac29e97a854567aff9d33643ce0058008df2aa538a17d567e51fc63d4b8095d65391161decb0c054b570408bd933fb814fcee0f1fd49c01130d9f778b668e66aaca13b2d6e31cb681b451414b0dfa429728ad6465c247edb393e926be659d6cb4d03732db78d735ca3740c8166f3fd29cb7792308a14073fd49c84718a93e0245c98f7293b961259fc65cc9277626d03262048b83f28fe1a0643b437150f9a55e731ce72f402e7c7d7c6f8cc7791c36f467f0364799a8f58edb14f71f5eb10b712f6eb9756f3d34f637cee0634167c8267c90a2de779902451f0a299d3c3a1b1e8f5016aaf66bcd98861a7ea5a2b21fdd50e0e0a4244cd6a3fde592e5dc65679123b4328a28faf0e09b8e2c6cc6c38fdca0fc7af252de5f9b6bbe820539a21715c1be7a48f271fe81d946832ddd54945dc1261939d6a3a105c490fbdfc7569975d42b0c51a558458cd153689ffeecd7d679e7b1d7cd8dd0605b8e9123bd9dc4bf0481f537e187628de7b9282f2cfaa5ab7919a2ffb765079b7f5f31847383d49a245043ebde452b145117541cc7a0c46c0e79165b9b25ddce143912f29a98f1494b66beebd54f338cc5ac8a9e95b6e2f472e0047d82931bb445994a9437e83a3070a09f0bffe25b4580ae7d36bd53ac57af22586bf930288bd7476a390f126fc8b9c95994e5bbbf3663fa7740e53f1720bc8b4e4026904e91bf7863ef4d6459bb350f1625d1d00e66cccad34a0e54b18ee8efec8bfaf743089ad537e0860a2cc06280565f03843b5f6239b3139a9092a9d1151fa38f38e591b7781e1c9c74eb76d8b6ffcbafaf107a60e6557a10145a8b432b35a982c1d6762998b69d7f3ab79a651190062e387d7da3bfbb71294d96a3e9a9caa6b53805b48a4b8de0388a5fdebcdae87e0bcca06eaf780cd4c43ba8d17833602887ef6828b3c892ca9b2e5b9e8fb150096851b7922f657420ecdd3019f6bfcc8133b302c775fc5ae03bf26bb33bb5cb8d44b86d53051dafa9c40a74e1b9a3a9405c73efa51dc7b71674cf9975e711c611cd2edffee8907ed06fdf44d1dd354d5c14c76c2371b76bc84a9a9d9a4da3ba9e7e931dbaf14c4fed0b7458c1bb6b46bfcec76ee98bc3da220b19c5d0fda2655bb93fed8ac78b4879485e20a961155ecdf815d95a698bc6ef4db5af21f9f7b0061f5cc16bbc262db0deac523c67c95b241886531e5003cc31ef77b57e3f75a55e9483a2620446058d50ff175896d003e2e48dd3e92c35c4f5234053685253f2bd28b3c9defb0d795b34dcd81104c614bf11acc2750fab57d43b5da18cfc84951580cd7c498c1c6891a77304d57641891d9748b20310b08931cea19c34abebf7ae089640ea809e2b87dad19dd4dcdeb572e25c53eca23692133da8a4a9420d9f8795778830bc61d48ec7392ba7ff0d6d5137aaece427fb830979511880388c21129b585431cffc45f17f2d9f108a42113d218a4763443bd077c535b4d9624a7746922a1cef87f90a9775b7716503560e5e8be1bbb4d231b4479ba826ea62caba4489a74c3d44d0dcbc2e64d66bad4837d6a65dee80e410156b153867873b7def3d0416fd1fd9235dda869106ae6e2bf1a045e78c4d473c269b878dcf79e8ed3f17772fed3622df495f85b5ea348d620771e60e457157092a05d01043b0d7f491b45e3227335b551567f885d8e4a8322e27e7574395d242a9d7cc6f1d69e70647b75604b655b2dc31a28f655585ee6692ace60e5acb360e8e54022aa05abfb55cb13f92caf364bf1b564ed67a2cdca2261776fda03c094f3c7fbd22c7bb595f06d5a2ef3d1c49ac1c7fe6a97b0f4ff50d54d5ae2fda2e2aec81f3eae0dad645cf65f59eed5c70e3e5a4824a176e8d0b9ac3ba81cf2ab74f1f7f571f3d6886c967cb7d5bd0945551121416d079f41fa016cf0be5dacdf4b0a92756bc0f240f57e6b679b418dfcd33fd10ef7dfa12f2822dbe04630078d3b35568f45c71f440c377bad0337253c88fb56ef9b827309f37ab272d407a46c1f9ce970524d7e42c4d7826ceb77a01a774b9f8a2225cab7a3318aa4ab1407747279704efadf4186a5d80c2ab89c947ebe7c00ad6d3c7a449eae93c3529fde28b77c164f2e2cda7e9d123bb50afed45d8af69b320ea4ba520c4746e6df207ca9ebc8346b3e05376a161c7a6e4e3373c5861d0e3e2b1f83dfce27c9e2e64f25dccc2eddb2182de16fb37a315fb1688a07849a2c75391cfbda98bb8b1c2497b9f931307134d26e3696c1c93203b42b27b9c9bcde6b882b73c65e42aaf766a30089fe85a8b652f60b27040c2b22760179aba4ab22844f5dc996620951840c1175d0b9dabc24694575c6d69d8cfe821529871ee4adb1065c1855a4f22039c9bf844957cc74117109299fb497c24de798dbf27aeb5ed0beb90853c64241e84ad386e11ccefdf3119b9882969701cc137c129aaa5021da5e64c62346bfdd6aa27c7007412735798a65da08178f2505c126010c1c4d7471add175b19e15319c9a621445ef2a539d374ab23a9c288d2a08535632fb4147bcc8cd50ba8cf89af0e2889197f0249ad43002bdf444499c2a2e4bab52a0e756d307708cc8d8dd4992445d1ceaef6adb4f203fc8f72f64cf8448d4cd04eae7945f9c743c00b92240a2deb8ebbcad91b7b09703e108b7cc9dd9ea37689a4ac584134e03ea0b77d959850473a45b5a6cca61335c0a2df35968aa72e1d9840e1422e0c6df2d468082d8341a75c19d7815da1fa5dde484eb21aaf5f7d205d95a780ee219104b24a0218881aa937726fc0c61ca90b0f9fed131a9dd29d8d05921eddcf4d2b2cac1a4727748fd1a0a4dcf00df67a27ea8d35bc26de1a2c8b9f9029816d1fcfd6fce83ca02fa0d669321a805bec7bf2b14398820821c143a7c8c918fb575c20101556c27cc383e10c7c8ab6c8f419b0a54f5939823538c76064f14f1d10811aa465ca2d70defc90c7362ceb6368400e2ee29da1493549019baa6e08a9ceaf3db91d53f764aaea4c47eb8cc1e52d365d4de521d34908fd6517d71dabbd0e3d01be2af2f80ae8328101435c828789c4130729d86a8390aee8e7b29f686e2037e2f37a3e97f758c422bda0ab48048f44ffc76ee0fb2868d60422f8a5a5680624b18a343c696181199f75b035f032f61d825374f30cb43ff83233f1cd11e91b02759475c0723b5b6ee9fa88a34de12453a4879a15e3170f95e26a128327db2e5c3bad34cc57bfc36a1261110c577a987db259c23664617e992e9580e0c06d57d80c87eda7bca09ccf09a1c985b8e82c6115b8398ed6ef4dfb550aa7118cd46eda5622e9bb57103c5d0fd7e47774a6b5c6eebb25eecc8ddcf16cb188fb04328e45675938d3f0cb12eb6a55ea9d03427d334a6152efdcca05302fbf679f913da1ba1b58e6a4bb724731768e96e95749000e58d0f26f8ccabdcced362b51c1ffc7f0ccdf84b7bcf3a7d670a786a93d2d5024346266607b803be610f2fc4f149dfe5688bfd3011505565454bfedc1c120718662c205a0f646f03490192a6c9e3167d64c330af2989504773287f99889c80c50c32873bb570ce2897c824b79e56bed925678ef92437668b6f1fc41a3e0c9c57c3a73ebf6e7071f309a6006b89d459c39826493c45efc7c27d0a10541b6ed0662d7ac6500c25a732a5c0f33e8637835478dc1c280b64b6f1fabf9e7a72f834e86c4e35895d2353a68e89f680e08e1c6759ddb93528eec2ea35a9edc0956e0ae80f6aaf1baec128c5683331f03886aaead536fc8255c905df63c9c4a2e589547625f5ab22036e0ab1e91eb7fe60677da1aa2ceab2fe06bb75e94236316c53a4fc62fbf7d35f0f23cb9622b059f430bcc9ddd41b65dd5267a882dfc8fbe2431c45b947de1b64a2e02bb7c3bdd897ecf5d73449db50dbbee797135d365bcf418057add761b65862943ed6ee5175206aa0fef443d570bb2bfd105372d2d938e74b0ed69c569eacabc4c6cd9ea91e71bf6fe87066ea055586810beb65aa606eb83531e8cf767a0889ee4be5bc26e273ac1ef8c075d6ce73c1db96d24e4a271c997dbe9cf27d7a597b5e14179ce8d0f824ddf7a23f9bfa055a5af4cc9f9abcf78916f78df601207b3fd854d48db7fac76beb8bb18e452be6b78e195f85cc8c7fba4cbb4558cfe9f049a9ba300e3bdc6f2c77fad8539161930734daaf67652f49cbc4eb8c5d8ad67adbd5d24001d2e7759537fa72f58836df113dd971f5cb818e1c04f16ff30318327ea569a37959c20fbd5fbdfa48b22ad28816f793a132534d27ecdb654370d41c879bb66b7613537acbc18d24a622dd8593e0fc494f58e548f56de3441aaadc28bee95e208337c32218ccb499d4cd68ef01100911cb7ac63178d7d61491c1fa6ac489ca0c7d0b7344853699f5197ea00458d161736556ae7ef3722b2a47b18c3e41e9735ef605e87eda73a3252beba2b2bf06cd33dbb726dc947ca19fe1fe096a764d639bcd0b2390504dae1dd732460f4302555ee4e1d26898d1190577de51508de933d953c353c4020fc5976181da4ea73aa47ace88add4a314e3480dddef85e6adc264a6e845bd65321dc84693b2c53cc60a7b2ec267557f7e4764211136f707d6a50da3e504073806d9276c7658e2385d0933671b3f4b643384b3a66ab699dd3aff154b9f92bbcac897074ff56fdbd8fc84f9a2a780a71ec823881b7982eca95e761ef9a84d1605bf4bb86080882e90676c3de87f1a073f5d86fb78ef310bcf2dc7cdcfa411b227500b1ff0e19db9525c9c2843d8dab5c4dce47056cfd7039897a750c5db76191ff1666f00b86cb73b523de530cf3ed0cae94a407cc9974d7686d36cddfa28e64c7dec078ae7538fec8139c8452d79dcc682367d94513bd0fe8ee81285c6557f8690928fdb4552132c23bb81247bdfed42c1acb715dcdb55acbb5241639e80d1b29bb623e308e249dfdb7a61fe62e0cfd35cc013ca670ff29d919a98332889d3410a2fd6aa4cf7ed8521362ad93064bf54f44c32f75566a28cf28e176e448b6bc25e0cd84507febdcdb8e9677b7be95d7fb655f49125704ab0aa3c86cb891c15df193b19105158932983d06ce97b376a1af62f3ebb79b306d4f90be696aa8ed767fd57ceada2c2ba21c7c168ff22f1399f02b54f90c5fe245508c7123c9753a67751008a9334556ae394e0f6a8ab236c860236811adce12ba09972c01cf4f2569c7e821e0de5b9995d80979fe6a32ba0bd22917dc984511818b78eb6d3b971fe1360784ffc345593a15f024d69334548f1b2bbda41688494fc9f82b1870dfaba60e6e6d7a3b78e9b5c7aef2df88a7b154e533a9822ec7359974276486d22f3311d817a9746117652f4f3f07e7a069022a45b10a6b4fb9d85d7b9fb89ee2df467ce1a8cadb4d1a30ddc316d5ca01c192e7fa6a719b5348ce56b901d8f50c1384e909d7e9c8744eaad11bb266b4933df9c94267e5d2a46496069cf907351ee837071f41e9bb5145ceb64dd2d7301d5f6f20aecb1fe39633c9ff421dd0d0891ddbc0236090445ffa0d720d9016ababc3e716f9bd91c041520fec85ab2da9ff6c1282bd1bb9602a20b71920cd75a3f36fc31b32379fb0d3ff088c6254d6644f85652f0c942815f663ea374b5dfd28fae6f36dbf7d0cf1fd338ed2b48b0c728e04d643a5821bb92ad1fbfe63a84b381c5ddc4a3aa2763a13a0404212fe6cd282070c7923a5bc47f757c5fdbd00abc75e6ffb9b453ff0ee882e174e1dc067545cf8617b236ebecec070ec9a8923a1f04cd1a37287ad1a18a8f2650c92e72d0fb21eeccc936c98b22987e6bc0e6f21bf230910caa50b049049637883eac535a93d30621a7c3fd28aa2134ce819ffa6aa3b6add864bd2615f01bb6e8def2f59bb78d41b95116c4f60637210a58de885988f1ee5c72582a9b2ab54a50825d60cdf3d7d21e8aaab4e96e5ca8498199c69c55d660db1f5a10760fb5a9df6b9df26d05ce0e642f0bf2279ed0f91250878e4c893531f555a618d2465e8a93ac3cc81c69e255e687dc826403753d1b820b3f58724c4cd46670d93c9874d9c05958faa1a7731b7a4226c935485ad36285b8cfcc7153c12de924b82449d08e95176a87de75e7e512192ca3fc433d1582d4e32a6fa98a1878c96e102c54709b0b692b44c12dfe877a1e0f527559182a83cab95c6b5a76373c2004ceeb7895f215ae372e5f3ee561ae8e25e7f75a7ae92c7b2e2bcd6023f5ab7cb76ab22347a70b877c29e897981e7cf2f06adbe69329921a4c4e96b8d1bbc05ff9307a2b921c8d9a756ed81ac03f7ef9f1f5b2e015625b0ca8c8a901d27466450807df30b7bd1218120c188ad946d2d03df5c58a6ba10dbd9810f443fbc11850e00a2b8bda70ee332d9596de66f2342c5eaa5dd1e735aa6daea683d8a854c48161f886792374067535e6de4f337478a52107dbdea3e56ccc30b33ad8a4a5cf9dbc21d77439e39a87d21f13c4c7a6b1f62ba6178a8874024af63c168de41dc10aeafbc3d07b2b40cb84aa524ff6ee52d0eb2aa3da73308245eedec6870ac32a254573f3af5d1d4bb2b186848bca3eca767cc94d61f4f5cde5b8f3a4463e9f16028e33cf793befcb0982a4709ce63ba8e268a457b932114f9ec29c2eb5b1d047f7c392f56a0de3f2c18c1c4ab7a69e85f729845213a9fedd738d916009abcdeaceaa3af949179ea1075f035b7d07f31b2a4231b20164863fb2137cafcf38b1ab8ff753e6e1405480ffb334c88184b4132f14d71063ace4c8cdbc871d88cdc3658c56fad5121b38b707ce7b9a5aabc6df6f364b66e3226df69f3cd13cb4b00f94d3b698169188835109bf9eb808e608d4db90e4bfa76e4b3322151fa849f6bdfb570efeed75141b203f1313a6f8e2cba59d8d4eff390e97ad4c0add1d9f9cca55c3aa28c217b43389da408f8539a3850550ef7bbc4d83c0a204827df8d84df827ee2ea0131eef890c376c97698b2c50b942a68a770d8fbec3ae33f14dfab45f0416f394f8c8553d7a7ae384c92d3c2cee574938eb0d9490aeab1ef777c0efe2bf8ac515fde805beac15a1ecd0466b5a5b0fb6a2947333431ad0332c637f72b370d394f454faa86f0dbcdcfb1348eeb4a39cfad23a7a0ad36ecc4e49ec9a3d45130c608f02a37f397f3e3b95a1dec84bbc568109daeb75774460cf787c6ccf110be877157b1ea1358608ac545c15fb82e0d1c97b2282329540ea1ab4e1b4caff58b5e5bb6f9a175d7f61b7acfe0f3b2ae95a026ccfd4abbf89cee696eb4f4ca74d079614c822ad140ce332e82d5014147076ca850666fd2000b98e7a672adf7223c272c6eff5311e4875249542bf7ffeef5394462b9b92f2d4037483244ea9ed5ba33e6a5af339d0894859864143e9072ff041966f6cf8d7826859a90bd4f0675234ca3ce8492be0435f32a38342feb9583b531376f1ded3a4650945330ee5815ce943861cd063fe4c9c74a3c94aba1b95d877ebae860bf70ed0580ab0c51835ab672eef3c485efc95fbe998019238c33c3d91b3a2aba15dad0cd09b9e4dabb21a67917a52f289167fa3632bf58460ea3b4e192916e0a4e0e799845c2395c7a612d725af5c63d7b295f31ee3366668dd2f6d8cf51e1c7fe02a3be8d434cbd2a1b74055d87feb0c63c6574a80f197162c168352fdf7ea90a3b449b46f9ddd60a8e7260fe1178fea4f2ac05747834e33b4", 0x2000, &(0x7f0000001000)={&(0x7f0000000240)={0x50, 0x0, 0xffffffff, {0x7, 0x2b, 0x9, 0x60540ca1, 0x4, 0x4, 0x9, 0x5, 0x0, 0x0, 0x10, 0x10}}, &(0x7f00000002c0)={0x18, 0xfffffffffffffff5, 0x1, {0x4}}, &(0x7f0000000300)={0x18, 0x0, 0x4, {0xd42}}, &(0x7f0000000340)={0x18, 0x0, 0xaba3, {0x5}}, 0x0, &(0x7f00000003c0)={0x28, 0xffffffffffffffda, 0x9, {{0xd122, 0x1, 0x2}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0xffffffffffffffda, 0x6c, {0x9b0, 0x80000001, 0x0, {0x1, 0x10001, 0x2, 0x8, 0x2, 0x8, 0x9, 0xfffffff9, 0x10c220f6, 0x1000, 0x7, r1, r2, 0x7, 0xffffff01}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x0, 0xffffffffffffff86, {0x7fffffff, 0x4, 0x2, 0x800}}, &(0x7f0000000ec0)={0x130, 0xffffffffffffffda, 0x4, {0x4, 0x9, 0x0, '\x00', {0x8, 0x3, 0x7, 0x3ff, r1, r2, 0x4000, '\x00', 0x8000000000000000, 0x879, 0x80, 0x4, {0x400}, {0x6, 0x8}, {0x7, 0xf38}, {0x9, 0x8}, 0x5, 0x9, 0x6, 0xfffffffe}}}}) close(r0) 1.763372164s ago: executing program 2 (id=2842): r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x80000) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={0x0, 0x0, 0x7}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x100000000) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x9}) 1.570074807s ago: executing program 3 (id=2844): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) write$UHID_INPUT(r0, &(0x7f0000000440)={0x8, {"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", 0xfffffdfc}}, 0xe37) 1.470639868s ago: executing program 3 (id=2845): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280), 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x84}, 0x10) 1.296390711s ago: executing program 3 (id=2849): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b40)={0x14, 0x0, 0x0}, &(0x7f0000000e00)={0x44, &(0x7f0000000b80)={0x0, 0xc, 0xd, "7a8c47bfb33fbd54b6b025f1b1"}, 0x0, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)={0x0, 0x30, 0x2, "cc18"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0) 1.296054911s ago: executing program 5 (id=2850): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.181912993s ago: executing program 5 (id=2851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 803.522468ms ago: executing program 2 (id=2854): openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@privport}, {@aname={'aname', 0x3d, './binderfs/binder0\x00'}}]}}) 761.577869ms ago: executing program 4 (id=2855): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x20, {0x2, 0x4e21, @empty}, 'veth1_to_batadv\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) 753.796999ms ago: executing program 3 (id=2856): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000040)={0xa}) 608.351601ms ago: executing program 2 (id=2857): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xa, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x8, "f8e482fb"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 608.147441ms ago: executing program 3 (id=2858): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) 607.938921ms ago: executing program 4 (id=2859): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'gretap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x24048895, &(0x7f0000000240)={0xc9, 0x86dd, r2, 0x1, 0x7, 0x6, @local}, 0x14) 562.230312ms ago: executing program 3 (id=2860): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001000)={&(0x7f0000000240)={0x50, 0x0, 0xffffffff, {0x7, 0x2b, 0x9, 0x60540ca1, 0x4, 0x4, 0x9, 0x5, 0x0, 0x0, 0x10, 0x10}}, &(0x7f00000002c0)={0x18, 0xfffffffffffffff5, 0x1, {0x4}}, &(0x7f0000000300)={0x18, 0x0, 0x4, {0xd42}}, &(0x7f0000000340)={0x18, 0x0, 0xaba3, {0x5}}, 0x0, &(0x7f00000003c0)={0x28, 0xffffffffffffffda, 0x9, {{0xd122, 0x1, 0x2}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0xffffffffffffffda, 0x6c, {0x9b0, 0x80000001, 0x0, {0x1, 0x10001, 0x2, 0x8, 0x2, 0x8, 0x9, 0xfffffff9, 0x10c220f6, 0x1000, 0x7, r1, r2, 0x7, 0xffffff01}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x0, 0xffffffffffffff86, {0x7fffffff, 0x4, 0x2, 0x800}}, &(0x7f0000000ec0)={0x130, 0xffffffffffffffda, 0x4, {0x4, 0x9, 0x0, '\x00', {0x8, 0x3, 0x7, 0x3ff, r1, r2, 0x4000, '\x00', 0x8000000000000000, 0x879, 0x80, 0x4, {0x400}, {0x6, 0x8}, {0x7, 0xf38}, {0x9, 0x8}, 0x5, 0x9, 0x6, 0xfffffffe}}}}) close(r0) 529.004922ms ago: executing program 4 (id=2861): socket(0x28, 0x4, 0x6) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[], 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) 344.803145ms ago: executing program 4 (id=2862): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xfffffffe}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)=0x10, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) 212.315107ms ago: executing program 4 (id=2863): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4c810}, 0x0) 196.311588ms ago: executing program 5 (id=2864): r0 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x40101288, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x2, 0x5a26b6d1, 0x0, 0x1, 0x20, 0x10, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f905000000000000000000000000010300", [0x8a5, 0x1]}}) 174.650018ms ago: executing program 4 (id=2865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @dev={0xfe, 0x80, '\x00', 0x38}}, 0xfffffffe, 0x0, 0x0, &(0x7f0000002300)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}, @hopopts={{0x18, 0x29, 0x3b, {0x85}}}], 0x30}, 0x810) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9e65) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 96.407099ms ago: executing program 5 (id=2866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x94, 0x0, &(0x7f0000000800)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000740)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/45, 0x2d, 0x2, 0x1b}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000006c0)=""/1, 0x1, 0x0, 0x19}}, 0x0}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x3, 0x2, 0x1c}, @fda={0x66646185, 0x6, 0x1, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/141, 0x8d, 0x1, 0x2f}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @enter_looper], 0x0, 0x0, 0x0}) 50.8147ms ago: executing program 2 (id=2867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 0s ago: executing program 2 (id=2868): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 1448][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'. [ 140.605217][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1109'. [ 140.639411][ T7909] fuse: Bad value for 'fd' [ 140.738524][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1108'. [ 140.904865][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1117'. [ 141.279981][ T7930] loop3: detected capacity change from 0 to 32768 [ 141.283426][ T7930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1118 (7930) [ 141.289055][ T7930] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.292012][ T7930] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 141.294617][ T7930] BTRFS info (device loop3): using free space tree [ 141.314846][ T7930] BTRFS info (device loop3): enabling ssd optimizations [ 141.350002][ T11] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 141.468860][ T4319] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.613639][ T7950] binder: 7949:7950 got transaction to invalid handle, 1 [ 141.618658][ T7950] binder_debug: 17 callbacks suppressed [ 141.618669][ T7950] binder: 7950:7949 cannot find target node [ 141.622329][ T7950] binder: 7949:7950 transaction call to 0:0 failed 299/29201/-22, size 112-24 line 3054 [ 141.626379][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.745134][ T7955] binder: BINDER_SET_CONTEXT_MGR already set [ 141.749191][ T7955] binder: 7954:7955 ioctl 4018620d 20000040 returned -16 [ 141.752998][ T7955] binder: 7954:7955 got transaction to invalid handle, 1 [ 141.755015][ T7955] binder: 7955:7954 cannot find target node [ 141.757125][ T7955] binder: 7954:7955 transaction async to 0:0 failed 301/29201/-22, size 112-24 line 3054 [ 141.760525][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.804514][ T7958] fuse: Bad value for 'fd' [ 142.113940][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 142.392574][ T7975] netlink: 'syz.1.1130': attribute type 10 has an invalid length. [ 142.395145][ T7975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1130'. [ 143.098032][ T7873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.225165][ T7981] binder: BINDER_SET_CONTEXT_MGR already set [ 143.252753][ T7981] binder: 7979:7981 ioctl 4018620d 20000040 returned -16 [ 143.273105][ T7985] fuse: Bad value for 'fd' [ 143.283408][ T7981] binder: 7979:7981 got transaction to invalid handle, 1 [ 143.285479][ T7981] binder: 7981:7979 cannot find target node [ 143.287659][ T7981] binder: 7979:7981 transaction async to 0:0 failed 303/29201/-22, size 112-24 line 3054 [ 143.300914][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.445064][ T7996] binder: 7994:7996 got transaction to invalid handle, 1 [ 143.458744][ T7996] binder: 7996:7994 cannot find target node [ 143.548929][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1138'. [ 143.569111][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1138'. [ 143.892753][ T8017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.203974][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.206978][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.491747][ T8022] netlink: 'syz.5.1145': attribute type 10 has an invalid length. [ 144.601893][ T8033] binder: BINDER_SET_CONTEXT_MGR already set [ 144.603589][ T8033] binder: 8032:8033 ioctl 4018620d 20000040 returned -16 [ 144.621675][ T8033] binder: 8032:8033 got transaction to invalid handle, 1 [ 144.836208][ T8052] __nla_validate_parse: 2 callbacks suppressed [ 144.836222][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 144.842057][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 145.182020][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1159'. [ 145.308275][ T8076] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 145.321769][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1160'. [ 145.496353][ T8080] binder: 8079:8080 ioctl c0306201 0 returned -14 [ 145.504747][ T8080] binder: 8079:8080 got transaction to invalid handle, 1 [ 145.687893][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1168'. [ 145.695057][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1168'. [ 145.975840][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.157212][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 146.234863][ T8117] binder: 8116:8117 ioctl c0306201 0 returned -14 [ 146.245855][ T8115] netlink: 'syz.3.1175': attribute type 10 has an invalid length. [ 146.248104][ T8115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1175'. [ 146.254849][ T8117] binder: 8116:8117 got transaction to invalid handle, 1 [ 146.272909][ T8087] loop2: detected capacity change from 0 to 32768 [ 146.302625][ T8087] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1166 (8087) [ 146.319802][ T8087] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.322707][ T8087] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 146.353474][ T8087] BTRFS info (device loop2): using free space tree [ 146.424898][ T8130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.447066][ T8130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.476303][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 146.491597][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 146.572251][ T8087] BTRFS info (device loop2): enabling ssd optimizations [ 146.709819][ T4397] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 146.739595][ T8159] binder: BINDER_SET_CONTEXT_MGR already set [ 146.741300][ T8159] binder: 8158:8159 ioctl 4018620d 200002c0 returned -16 [ 146.804942][ T8161] binder: 8160:8161 ioctl c0306201 0 returned -14 [ 146.814590][ T4312] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.827958][ T8161] binder: 8160:8161 got transaction to invalid handle, 1 [ 146.829872][ T8161] binder_debug: 11 callbacks suppressed [ 146.829880][ T8161] binder: 8161:8160 cannot find target node [ 146.832841][ T8161] binder: 8160:8161 transaction async to 0:0 failed 322/29201/-22, size 112-24 line 3054 [ 146.849807][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.942506][ T5094] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop2 scanned by udevd (5094) [ 146.943023][ T8166] netlink: 'syz.1.1189': attribute type 10 has an invalid length. [ 147.149570][ T8183] binder: tried to use weak ref as strong ref [ 147.151329][ T8183] binder: 8181:8183 Acquire 1 refcount change on invalid ref 0 ret -22 [ 147.153690][ T8183] binder: 8181:8183 ioctl c0306201 200003c0 returned -14 [ 147.179306][ T8183] binder: 8181:8183 got transaction to invalid handle, 1 [ 147.181274][ T8183] binder: 8183:8181 cannot find target node [ 147.196058][ T8183] binder: 8181:8183 transaction call to 0:0 failed 325/29201/-22, size 112-24 line 3054 [ 147.206256][ T8168] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.339467][ T8197] binder: BINDER_SET_CONTEXT_MGR already set [ 147.365852][ T8197] binder: 8193:8197 ioctl 4018620d 200002c0 returned -16 [ 147.440183][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.442888][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.473753][ T8203] binder: 8202:8203 got transaction to invalid handle, 1 [ 147.495656][ T8203] binder: 8203:8202 cannot find target node [ 147.497339][ T8203] binder: 8202:8203 transaction async to 0:0 failed 330/29201/-22, size 112-24 line 3054 [ 147.500559][ T6147] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.614628][ T8215] netlink: 'syz.4.1206': attribute type 10 has an invalid length. [ 147.717824][ T8219] binder: tried to use weak ref as strong ref [ 147.719561][ T8219] binder: 8218:8219 Acquire 1 refcount change on invalid ref 0 ret -22 [ 147.721870][ T8219] binder: 8218:8219 ioctl c0306201 200003c0 returned -14 [ 147.751778][ T8219] binder: 8218:8219 got transaction to invalid handle, 1 [ 147.753688][ T8219] binder: 8219:8218 cannot find target node [ 148.198676][ T8242] binder: 8238:8242 ioctl c0306201 0 returned -14 [ 148.199535][ T8205] loop5: detected capacity change from 0 to 32768 [ 148.228661][ T8205] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 148.275734][ T5094] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.452256][ T8255] binder: 8251:8255 ioctl c0306201 200003c0 returned -14 [ 148.482773][ T8255] binder_alloc: 8251: binder_alloc_buf, no vma [ 148.484445][ T8253] netlink: 'syz.3.1220': attribute type 10 has an invalid length. [ 148.625247][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.641278][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.659863][ T8266] fuse: Bad value for 'fd' [ 148.793713][ T8282] binder: 8280:8282 ioctl c0306201 0 returned -14 [ 149.174237][ T8302] fuse: Bad value for 'fd' [ 149.192054][ T8301] binder: 8299:8301 ioctl c0306201 200003c0 returned -14 [ 149.194632][ T8301] binder_alloc: 8299: binder_alloc_buf, no vma [ 149.217599][ T8303] netlink: 'syz.4.1238': attribute type 10 has an invalid length. [ 149.287368][ T8307] binder: 8306:8307 ioctl c0306201 0 returned -14 [ 149.676003][ T8331] fuse: Bad value for 'fd' [ 149.821625][ T8337] binder: 8336:8337 ioctl c0306201 200003c0 returned -14 [ 149.824846][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.829997][ T8337] binder_alloc: 8336: binder_alloc_buf, no vma [ 149.836085][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.058250][ T8357] netlink: 'syz.2.1259': attribute type 10 has an invalid length. [ 150.060398][ T8357] __nla_validate_parse: 14 callbacks suppressed [ 150.060407][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1259'. [ 150.256886][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 150.370313][ T8377] binder: 8376:8377 ioctl c0306201 200003c0 returned -14 [ 150.739212][ T8392] netlink: 'syz.2.1274': attribute type 10 has an invalid length. [ 150.741368][ T8392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1274'. [ 151.020733][ T8403] binder: 8401:8403 ioctl c0306201 200003c0 returned -14 [ 151.023273][ T8403] binder_user_error: 13 callbacks suppressed [ 151.023284][ T8403] binder: 8401:8403 got transaction to invalid handle, 1 [ 151.058953][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 151.126790][ T8412] binder: 8410:8412 got transaction to invalid handle, 1 [ 151.129314][ T8379] loop1: detected capacity change from 0 to 32768 [ 151.212037][ T8379] XFS (loop1): Mounting V5 Filesystem [ 151.316465][ T8379] XFS (loop1): Ending clean mount [ 151.414495][ T4307] XFS (loop1): Unmounting Filesystem [ 151.534234][ T8406] loop5: detected capacity change from 0 to 32768 [ 151.549830][ T8406] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 151.593234][ T8436] netlink: 'syz.4.1290': attribute type 10 has an invalid length. [ 151.600311][ T8436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1290'. [ 151.773201][ T5094] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 151.788815][ T8442] binder: tried to use weak ref as strong ref [ 151.794120][ T8442] binder: 8441:8442 Acquire 1 refcount change on invalid ref 0 ret -22 [ 151.804718][ T8442] binder: 8441:8442 ioctl c0306201 200003c0 returned -14 [ 151.810822][ T8442] binder: 8441:8442 got transaction to invalid handle, 1 [ 151.870962][ T8446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.873531][ T8446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.946062][ T8451] binder: 8450:8451 got transaction to invalid handle, 1 [ 151.949070][ T8451] binder_debug: 44 callbacks suppressed [ 151.949081][ T8451] binder: 8451:8450 cannot find target node [ 151.952346][ T8451] binder: 8450:8451 transaction call to 0:0 failed 393/29201/-22, size 0-0 line 3054 [ 151.957004][ T5514] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.035957][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1296'. [ 152.272411][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1308'. [ 152.645285][ T8486] netlink: 'syz.3.1303': attribute type 10 has an invalid length. [ 152.675628][ T8486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1303'. [ 152.810651][ T8492] binder: 8490:8492 got transaction to invalid handle, 1 [ 152.812786][ T8492] binder: 8492:8490 cannot find target node [ 152.826296][ T8492] binder: 8490:8492 transaction call to 0:0 failed 397/29201/-22, size 0-0 line 3054 [ 152.829845][ T8493] binder: 8491:8493 got transaction to invalid handle, 1 [ 152.831780][ T8493] binder: 8493:8491 cannot find target node [ 152.833384][ T8493] binder: 8491:8493 transaction async to 0:0 failed 401/29201/-22, size 112-24 line 3054 [ 152.845034][ T8168] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.860183][ T8168] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.909064][ T8463] loop2: detected capacity change from 0 to 32768 [ 153.009867][ T8478] loop4: detected capacity change from 0 to 32768 [ 153.023530][ T8463] XFS (loop2): Mounting V5 Filesystem [ 153.023549][ T8478] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 153.090720][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.133920][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.148581][ T8463] XFS (loop2): Ending clean mount [ 153.281481][ T4312] XFS (loop2): Unmounting Filesystem [ 153.337189][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'. [ 153.628780][ T8538] binder: 8537:8538 got transaction to invalid handle, 1 [ 153.630790][ T8538] binder: 8538:8537 cannot find target node [ 153.649731][ T8536] netlink: 'syz.3.1320': attribute type 10 has an invalid length. [ 153.652059][ T8536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1320'. [ 154.520958][ T8556] loop5: detected capacity change from 0 to 32768 [ 154.556513][ T8556] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 154.605469][ T8555] loop2: detected capacity change from 0 to 32768 [ 154.726366][ T8555] XFS (loop2): Mounting V5 Filesystem [ 154.741488][ T5094] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 154.827232][ T8555] XFS (loop2): Ending clean mount [ 154.837668][ T8591] binder: tried to use weak ref as strong ref [ 154.898819][ T8597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.911249][ T8597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.940429][ T4312] XFS (loop2): Unmounting Filesystem [ 154.983237][ T8602] netlink: 'syz.1.1337': attribute type 10 has an invalid length. [ 155.671691][ T8632] __nla_validate_parse: 2 callbacks suppressed [ 155.671704][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 155.890195][ T8618] loop1: detected capacity change from 0 to 32768 [ 155.911549][ T8618] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 156.129359][ T8651] netlink: 'syz.5.1355': attribute type 10 has an invalid length. [ 156.131562][ T8651] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1355'. [ 156.225413][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.233762][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.260444][ T8659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.345732][ T5094] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 156.357957][ T8664] device syzkaller0 entered promiscuous mode [ 156.459715][ T8637] loop3: detected capacity change from 0 to 32768 [ 156.466967][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1363'. [ 156.535130][ T8637] XFS (loop3): Mounting V5 Filesystem [ 156.581997][ T8637] XFS (loop3): Ending clean mount [ 156.649290][ T4319] XFS (loop3): Unmounting Filesystem [ 156.803509][ T8690] binder_user_error: 5 callbacks suppressed [ 156.803522][ T8690] binder: 8689:8690 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 156.828159][ T8690] binder: 8689:8690 unknown command 0 [ 156.831846][ T8690] binder: 8689:8690 ioctl c0306201 20000180 returned -22 [ 156.892421][ T8693] binder: tried to use weak ref as strong ref [ 156.894264][ T8693] binder: 8692:8693 Acquire 1 refcount change on invalid ref 0 ret -22 [ 156.912779][ T8693] binder: 8692:8693 got transaction to invalid handle, 1 [ 157.273763][ T8716] netlink: 'syz.4.1374': attribute type 10 has an invalid length. [ 157.285804][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1374'. [ 157.396091][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1376'. [ 157.436515][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.439071][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.480277][ T8727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.570481][ T8697] loop1: detected capacity change from 0 to 32768 [ 157.583759][ T8697] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 157.746067][ T8734] binder: tried to use weak ref as strong ref [ 157.747759][ T8734] binder: 8733:8734 Acquire 1 refcount change on invalid ref 0 ret -22 [ 157.751155][ T8734] binder: 8733:8734 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 157.753381][ T8734] binder: 8733:8734 unknown command 0 [ 157.765184][ T8734] binder: 8733:8734 ioctl c0306201 20000180 returned -22 [ 157.844149][ T8737] binder: 8735:8737 ioctl 4018620d 0 returned -22 [ 157.849422][ T8737] binder: tried to use weak ref as strong ref [ 157.852090][ T8737] binder: 8735:8737 Acquire 1 refcount change on invalid ref 0 ret -22 [ 157.861776][ T8737] binder: 8735:8737 got transaction to invalid handle, 1 [ 157.863711][ T8737] binder_debug: 11 callbacks suppressed [ 157.863719][ T8737] binder: 8737:8735 cannot find target node [ 157.881289][ T8737] binder: 8735:8737 transaction call to 0:0 failed 422/29201/-22, size 0-0 line 3054 [ 157.886481][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.896497][ T6221] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 158.028977][ T8744] binder: BINDER_SET_CONTEXT_MGR already set [ 158.030585][ T8744] binder: 8742:8744 ioctl 4018620d 20000040 returned -16 [ 158.056291][ T8744] binder: 8744:8742 cannot find target node [ 158.058051][ T8744] binder: 8742:8744 transaction call to 0:0 failed 425/29201/-22, size 112-24 line 3054 [ 158.063884][ T4420] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.115883][ T8752] device syzkaller0 entered promiscuous mode [ 158.225996][ T8759] netlink: 'syz.2.1388': attribute type 10 has an invalid length. [ 158.228253][ T8759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1388'. [ 158.282964][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1389'. [ 158.530208][ T8768] binder: 8767:8768 unknown command 0 [ 158.531905][ T8768] binder: 8767:8768 ioctl c0306201 20000180 returned -22 [ 158.569761][ T8770] binder: 8769:8770 ioctl 4018620d 0 returned -22 [ 158.572281][ T8770] binder: 8770:8769 cannot find target node [ 158.573957][ T8770] binder: 8769:8770 transaction call to 0:0 failed 430/29201/-22, size 0-0 line 3054 [ 158.630022][ T4420] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.651913][ T8750] loop4: detected capacity change from 0 to 32768 [ 158.662589][ T8750] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 158.735958][ T4311] Bluetooth: hci1: command 0x0406 tx timeout [ 158.737759][ T4311] Bluetooth: hci2: command 0x0406 tx timeout [ 158.739520][ T4311] Bluetooth: hci3: command 0x0406 tx timeout [ 158.741195][ T4311] Bluetooth: hci4: command 0x0406 tx timeout [ 158.790954][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.793512][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.924024][ T5094] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 158.955461][ T8787] device syzkaller0 left promiscuous mode [ 159.067137][ T8792] binder: 8791:8792 unknown command 0 [ 159.068687][ T8792] binder: 8791:8792 ioctl c0306201 20000180 returned -22 [ 159.139930][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'. [ 159.313441][ T8806] netlink: 'syz.2.1406': attribute type 10 has an invalid length. [ 159.316308][ T8806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1406'. [ 159.702604][ T8793] loop1: detected capacity change from 0 to 32768 [ 159.810128][ T8793] XFS (loop1): Mounting V5 Filesystem [ 159.882025][ T8810] loop4: detected capacity change from 0 to 32768 [ 159.895124][ T8810] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 159.919445][ T8793] XFS (loop1): Ending clean mount [ 159.982397][ T4307] XFS (loop1): Unmounting Filesystem [ 160.092923][ T8832] binder: 8831:8832 ioctl 4018620d 0 returned -22 [ 160.112067][ T8834] binder: 8833:8834 ioctl c0306201 200003c0 returned -14 [ 160.114505][ T8832] binder: 8831:8832 unknown command 0 [ 160.117181][ T8832] binder: 8831:8832 ioctl c0306201 20000180 returned -22 [ 160.119930][ T8834] binder: 8834:8833 cannot find target node [ 160.232714][ T8836] binder: 8835:8836 ioctl 4018620d 0 returned -22 [ 160.233038][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.242847][ T8838] fuse: Bad value for 'group_id' [ 160.257414][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.354239][ T4870] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 160.369357][ T8850] fuse: Bad value for 'group_id' [ 160.475021][ T8854] device syzkaller0 entered promiscuous mode [ 160.614530][ T8863] device syzkaller0 left promiscuous mode [ 160.950681][ T8869] binder: 8868:8869 ioctl 4018620d 0 returned -22 [ 160.953486][ T8869] binder: 8868:8869 unknown command 0 [ 160.955113][ T8869] binder: 8868:8869 ioctl c0306201 20000180 returned -22 [ 161.064161][ T8871] binder: 8870:8871 ioctl c0306201 200003c0 returned -14 [ 161.081035][ T8860] loop2: detected capacity change from 0 to 32768 [ 161.155356][ T8860] XFS (loop2): Mounting V5 Filesystem [ 161.177460][ T8867] loop1: detected capacity change from 0 to 32768 [ 161.186135][ T8867] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 161.234954][ T8860] XFS (loop2): Ending clean mount [ 161.264479][ T8881] binder: 8880:8881 ioctl 4018620d 0 returned -22 [ 161.322215][ T4312] XFS (loop2): Unmounting Filesystem [ 161.389408][ T8883] fuse: Bad value for 'group_id' [ 161.521529][ T8893] device syzkaller0 entered promiscuous mode [ 161.523493][ T8896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.533977][ T8896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.563711][ T8892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.600848][ T4870] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 161.635409][ T8901] binder: 8900:8901 ioctl 4018620d 0 returned -22 [ 161.638389][ T8901] binder: 8900:8901 unknown command 0 [ 161.639874][ T8901] binder: 8900:8901 ioctl c0306201 20000180 returned -22 [ 161.695435][ T8903] binder: BINDER_SET_CONTEXT_MGR already set [ 161.698519][ T8903] binder: 8902:8903 ioctl 4018620d 20000040 returned -16 [ 161.743809][ T8905] binder: 8904:8905 ioctl 4018620d 0 returned -22 [ 162.049540][ T8907] loop3: detected capacity change from 0 to 32768 [ 162.074412][ T8907] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 162.255492][ T5094] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 162.331660][ T8925] device syzkaller0 entered promiscuous mode [ 162.341213][ T8926] binder: 8924:8926 ioctl c0306201 0 returned -14 [ 162.348256][ T8926] binder_user_error: 31 callbacks suppressed [ 162.348268][ T8926] binder: 8924:8926 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 162.354569][ T8926] binder: 8924:8926 unknown command 0 [ 162.375802][ T8926] binder: 8924:8926 ioctl c0306201 20000180 returned -22 [ 162.460928][ T8930] binder: 8927:8930 ioctl c0306201 0 returned -14 [ 162.467476][ T8931] binder: BINDER_SET_CONTEXT_MGR already set [ 162.471536][ T8931] binder: 8928:8931 ioctl 4018620d 20000040 returned -16 [ 162.474492][ T8931] binder: 8928:8931 got transaction to invalid handle, 1 [ 162.476583][ T8930] binder: 8927:8930 got transaction to invalid handle, 1 [ 162.575467][ T8913] loop2: detected capacity change from 0 to 32768 [ 162.589223][ T8936] binder: 8935:8936 ioctl c0306201 0 returned -14 [ 162.594275][ T8936] binder: 8935:8936 got transaction to invalid handle, 1 [ 162.609281][ T8939] device syzkaller0 left promiscuous mode [ 162.628802][ T8934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.634638][ T8945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.650348][ T8913] XFS (loop2): Mounting V5 Filesystem [ 162.651705][ T8945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.711749][ T8913] XFS (loop2): Ending clean mount [ 162.786845][ T4312] XFS (loop2): Unmounting Filesystem [ 163.071889][ T8954] netlink: 'syz.5.1465': attribute type 10 has an invalid length. [ 163.074079][ T8954] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1465'. [ 163.119399][ T8956] device syzkaller0 entered promiscuous mode [ 163.208517][ T8960] binder: BINDER_SET_CONTEXT_MGR already set [ 163.227258][ T8960] binder: 8959:8960 ioctl 4018620d 20000040 returned -16 [ 163.229974][ T8960] binder: 8959:8960 got transaction to invalid handle, 1 [ 163.236224][ T8960] binder_debug: 26 callbacks suppressed [ 163.236236][ T8960] binder: 8960:8959 cannot find target node [ 163.243705][ T8960] binder: 8959:8960 transaction call to 0:0 failed 473/29201/-22, size 112-24 line 3054 [ 163.247251][ T8962] binder: 8961:8962 ioctl c0306201 0 returned -14 [ 163.249614][ T8962] binder: 8961:8962 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 163.252018][ T8962] binder: 8961:8962 unknown command 0 [ 163.253520][ T8962] binder: 8961:8962 ioctl c0306201 20000180 returned -22 [ 163.266283][ T5514] binder: undelivered TRANSACTION_ERROR: 29201 [ 163.369287][ T8968] binder: 8967:8968 ioctl c0306201 0 returned -14 [ 163.371588][ T8968] binder: 8967:8968 got transaction to invalid handle, 1 [ 163.373624][ T8968] binder: 8968:8967 cannot find target node [ 163.375234][ T8968] binder: 8967:8968 transaction call to 0:0 failed 479/29201/-22, size 0-0 line 3054 [ 163.396948][ T5514] binder: undelivered TRANSACTION_ERROR: 29201 [ 163.593087][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.598918][ T8980] netlink: 'syz.3.1476': attribute type 10 has an invalid length. [ 163.601110][ T8980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1476'. [ 163.613744][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.620884][ T8982] device syzkaller0 left promiscuous mode [ 163.644009][ T8981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.744336][ T8992] binder: 8990:8992 ioctl c0306201 0 returned -14 [ 163.754183][ T8992] binder: 8990:8992 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 163.760927][ T8992] binder: 8990:8992 unknown command 0 [ 163.766069][ T8992] binder: 8990:8992 ioctl c0306201 20000180 returned -22 [ 163.844425][ T8998] binder: 8997:8998 got transaction to invalid handle, 1 [ 163.846884][ T8998] binder: 8998:8997 cannot find target node [ 163.848501][ T8998] binder: 8997:8998 transaction call to 0:0 failed 486/29201/-22, size 0-0 line 3054 [ 163.852731][ T4390] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.237120][ T8994] loop1: detected capacity change from 0 to 32768 [ 164.245301][ T9014] device syzkaller0 entered promiscuous mode [ 164.251548][ T8994] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 164.311973][ T9015] netlink: 'syz.3.1491': attribute type 10 has an invalid length. [ 164.314211][ T9015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1491'. [ 164.454058][ T9023] binder: 9022:9023 got transaction to invalid handle, 1 [ 164.475634][ T9023] binder: 9023:9022 cannot find target node [ 164.608229][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.614482][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.673310][ T9034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.674673][ T5094] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 164.693462][ T9037] device syzkaller0 entered promiscuous mode [ 165.056656][ T9049] netlink: 'syz.5.1509': attribute type 10 has an invalid length. [ 165.058812][ T9049] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1509'. [ 165.231247][ T9044] loop1: detected capacity change from 0 to 32768 [ 165.280891][ T9044] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 165.319408][ T9056] binder: BINDER_SET_CONTEXT_MGR already set [ 165.321096][ T9056] binder: 9054:9056 ioctl 4018620d 200002c0 returned -16 [ 165.739989][ T5094] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 165.766632][ T9079] netlink: 'syz.1.1521': attribute type 10 has an invalid length. [ 165.768864][ T9079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1521'. [ 165.792516][ T9051] loop4: detected capacity change from 0 to 32768 [ 165.877137][ T9051] XFS (loop4): Mounting V5 Filesystem [ 165.925029][ T9062] loop3: detected capacity change from 0 to 32768 [ 165.933910][ T9051] XFS (loop4): Ending clean mount [ 165.935060][ T9062] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 165.999059][ T4313] XFS (loop4): Unmounting Filesystem [ 166.102754][ T9094] device syzkaller0 left promiscuous mode [ 166.123900][ T9091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.438437][ T9110] binder: 9108:9110 ioctl c0306201 200003c0 returned -14 [ 166.691165][ T9123] netlink: 'syz.5.1534': attribute type 10 has an invalid length. [ 166.693713][ T9123] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1534'. [ 167.113262][ T9121] loop4: detected capacity change from 0 to 32768 [ 167.185314][ T9121] XFS (loop4): Mounting V5 Filesystem [ 167.247993][ T9151] device syzkaller0 entered promiscuous mode [ 167.276267][ T9121] XFS (loop4): Ending clean mount [ 167.316777][ T9129] loop1: detected capacity change from 0 to 32768 [ 167.327799][ T9129] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 167.410976][ T4313] XFS (loop4): Unmounting Filesystem [ 167.556245][ T5094] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 167.657411][ T9168] binder_user_error: 8 callbacks suppressed [ 167.657424][ T9168] binder: 9167:9168 got transaction to invalid handle, 1 [ 167.703233][ T9170] netlink: 'syz.1.1553': attribute type 10 has an invalid length. [ 167.705434][ T9170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1553'. [ 167.802461][ T9173] device syzkaller0 left promiscuous mode [ 167.846952][ T9176] binder: 9175:9176 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 167.984101][ T9183] device syzkaller0 left promiscuous mode [ 167.988427][ T9179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.426795][ T9201] binder: 9200:9201 tried to acquire reference to desc 0, got 1 instead [ 168.429402][ T9187] loop3: detected capacity change from 0 to 32768 [ 168.436182][ T9201] binder: 9200:9201 ioctl c0306201 0 returned -14 [ 168.449229][ T6142] binder_debug: 23 callbacks suppressed [ 168.449241][ T6142] binder: undelivered TRANSACTION_COMPLETE [ 168.473036][ T8168] binder: undelivered transaction 523, process died. [ 168.504899][ T9187] XFS (loop3): Mounting V5 Filesystem [ 168.512370][ T9189] loop5: detected capacity change from 0 to 32768 [ 168.533005][ T9189] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 168.584364][ T6221] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.590909][ T9187] XFS (loop3): Ending clean mount [ 168.682856][ T4319] XFS (loop3): Unmounting Filesystem [ 168.728692][ T9214] netlink: 'syz.2.1566': attribute type 10 has an invalid length. [ 168.730865][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1566'. [ 168.875036][ T9222] binder: 9221:9222 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 169.039104][ T9228] Illegal XDP return value 4294967274 on prog (id 84) dev N/A, expect packet loss! [ 169.132476][ T9233] binder: 9232:9233 tried to acquire reference to desc 0, got 1 instead [ 169.135337][ T9233] binder: 9232:9233 ioctl c0306201 0 returned -14 [ 169.139836][ T9235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.153005][ T8168] binder: undelivered TRANSACTION_COMPLETE [ 169.161123][ T9235] device syzkaller0 left promiscuous mode [ 169.172728][ T8168] binder: undelivered transaction 529, process died. [ 169.430914][ T9242] loop4: detected capacity change from 0 to 32768 [ 169.448144][ T9242] XFS (loop4): Mounting V5 Filesystem [ 169.487013][ T9242] XFS (loop4): Ending clean mount [ 169.528404][ T4313] XFS (loop4): Unmounting Filesystem [ 169.991533][ T9262] binder: 9261:9262 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 170.001292][ T9260] netlink: 'syz.5.1582': attribute type 10 has an invalid length. [ 170.023030][ T9260] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1582'. [ 170.055326][ C1] vcan0: j1939_tp_rxtimer: 0x0000000034c498c3: rx timeout, send abort [ 170.058146][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000013f50be1: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 170.104119][ T9253] loop3: detected capacity change from 0 to 32768 [ 170.111776][ T9253] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 170.279839][ T9272] binder: 9271:9272 tried to acquire reference to desc 0, got 1 instead [ 170.288741][ T9272] binder: 9271:9272 ioctl c0306201 0 returned -14 [ 170.293490][ T6142] binder: undelivered TRANSACTION_COMPLETE [ 170.314079][ T6142] binder: undelivered transaction 535, process died. [ 170.365183][ T5094] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 170.370390][ T9276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.557929][ C1] vcan0: j1939_tp_rxtimer: 0x0000000034c498c3: abort rx timeout. Force session deactivation [ 170.573917][ T9274] loop3: detected capacity change from 0 to 32768 [ 170.631135][ T9274] XFS (loop3): Mounting V5 Filesystem [ 170.678671][ T9274] XFS (loop3): Ending clean mount [ 170.709240][ T4319] XFS (loop3): Unmounting Filesystem [ 170.915096][ T9299] binder: 9298:9299 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 171.027924][ T9303] device syzkaller0 entered promiscuous mode [ 171.046886][ T9304] netlink: 'syz.4.1598': attribute type 10 has an invalid length. [ 171.049060][ T9304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1598'. [ 171.177974][ T9312] binder: 9311:9312 tried to acquire reference to desc 0, got 1 instead [ 171.182404][ T3886] binder: undelivered TRANSACTION_COMPLETE [ 171.198869][ T3886] binder: undelivered transaction 541, process died. [ 171.537266][ T9324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.619558][ T9309] loop5: detected capacity change from 0 to 32768 [ 171.635072][ T9319] loop1: detected capacity change from 0 to 32768 [ 171.635221][ T9309] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 171.662811][ T9319] XFS (loop1): Mounting V5 Filesystem [ 171.696380][ T9319] XFS (loop1): Ending clean mount [ 171.735348][ T4307] XFS (loop1): Unmounting Filesystem [ 171.751261][ T5094] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 172.012428][ T9340] binder: 9339:9340 tried to acquire reference to desc 0, got 1 instead [ 172.024179][ T8168] binder: undelivered TRANSACTION_COMPLETE [ 172.055531][ T8168] binder: undelivered transaction 546, process died. [ 172.094659][ T9341] netlink: 'syz.5.1612': attribute type 10 has an invalid length. [ 172.107632][ T9341] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1612'. [ 172.279641][ T9352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.282132][ T9352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.560045][ T9359] loop5: detected capacity change from 0 to 32768 [ 172.585909][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b6a8dc29: rx timeout, send abort [ 172.589139][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000f1a9b81e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.609629][ T9359] XFS (loop5): Mounting V5 Filesystem [ 172.655310][ T9359] XFS (loop5): Ending clean mount [ 172.662692][ T9361] loop1: detected capacity change from 0 to 32768 [ 172.673424][ T9361] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 172.720431][ T4557] XFS (loop5): Unmounting Filesystem [ 172.791413][ T4870] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 173.088242][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b6a8dc29: abort rx timeout. Force session deactivation [ 173.120629][ T9378] binder_user_error: 1 callbacks suppressed [ 173.120641][ T9378] binder: 9377:9378 tried to acquire reference to desc 0, got 1 instead [ 173.195412][ T9380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.438758][ T9391] binder: 9390:9391 ioctl 4018620d 0 returned -22 [ 173.441624][ T9391] binder: 9390:9391 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 173.446858][ T9391] binder: 9390:9391 ioctl c0306201 200003c0 returned -14 [ 173.449006][ T9391] binder: 9390:9391 got transaction to invalid handle, 1 [ 173.526534][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1630'. [ 173.535523][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.538389][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.592734][ T9394] device bridge_slave_1 left promiscuous mode [ 173.595880][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.659914][ T9394] device bridge_slave_0 left promiscuous mode [ 173.662382][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.676833][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.681233][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.816737][ T9402] fuse: Unknown parameter 'group_i00000000000000000000' [ 173.929647][ T9405] binder: 9403:9405 tried to acquire reference to desc 0, got 1 instead [ 173.933681][ T111] binder_debug: 5 callbacks suppressed [ 173.933691][ T111] binder: undelivered TRANSACTION_COMPLETE [ 173.965984][ T9398] loop2: detected capacity change from 0 to 32768 [ 173.990557][ T111] binder: undelivered transaction 560, process died. [ 174.000585][ T9398] XFS (loop2): Mounting V5 Filesystem [ 174.061457][ T9398] XFS (loop2): Ending clean mount [ 174.130642][ T4312] XFS (loop2): Unmounting Filesystem [ 174.199568][ T9423] binder: 9422:9423 ioctl 4018620d 0 returned -22 [ 174.202546][ T9423] binder: 9422:9423 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 174.208080][ T9423] binder: 9422:9423 ioctl c0306201 200003c0 returned -14 [ 174.210468][ T9423] binder: 9422:9423 got transaction to invalid handle, 1 [ 174.212714][ T9423] binder: 9423:9422 cannot find target node [ 174.214454][ T9423] binder: 9422:9423 transaction call to 0:0 failed 563/29201/-22, size 112-24 line 3054 [ 174.218557][ T6142] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.258883][ T9427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.293312][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1643'. [ 174.361265][ T9431] fuse: Unknown parameter 'group_i00000000000000000000' [ 174.563939][ T9441] binder: 9440:9441 got transaction to invalid handle, 1 [ 174.568207][ T9441] binder: 9441:9440 cannot find target node [ 174.569955][ T9441] binder: 9440:9441 transaction async to 0:0 failed 567/29201/-22, size 112-24 line 3054 [ 174.573396][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.665235][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.670515][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.773917][ T9452] binder: 9451:9452 ioctl 4018620d 0 returned -22 [ 174.776904][ T9452] binder: 9451:9452 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 174.782511][ T9452] binder: 9451:9452 ioctl c0306201 200003c0 returned -14 [ 174.784636][ T9452] binder: 9451:9452 got transaction to invalid handle, 1 [ 174.786810][ T9452] binder: 9452:9451 cannot find target node [ 174.788409][ T9452] binder: 9451:9452 transaction call to 0:0 failed 570/29201/-22, size 112-24 line 3054 [ 174.848619][ T9455] fuse: Unknown parameter 'group_i00000000000000000000' [ 174.862060][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1655'. [ 174.900642][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.903008][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.975343][ T9458] device bridge_slave_1 left promiscuous mode [ 174.977401][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.016837][ T9458] device bridge_slave_0 left promiscuous mode [ 175.019104][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.176027][ C1] vcan0: j1939_tp_rxtimer: 0x0000000033fa7fd9: rx timeout, send abort [ 175.178665][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000d8fae619: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.241072][ T9472] binder: 9471:9472 tried to acquire reference to desc 0, got 1 instead [ 175.244203][ T9472] binder: 9471:9472 ioctl c0306201 0 returned -14 [ 175.521732][ T9484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.547349][ T9486] fuse: Unknown parameter 'group_id00000000000000000000' [ 175.582148][ T9488] binder: BINDER_SET_CONTEXT_MGR already set [ 175.583963][ T9488] binder: 9487:9488 ioctl 4018620d 20000040 returned -16 [ 175.657737][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 175.673489][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.677760][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.678585][ C1] vcan0: j1939_tp_rxtimer: 0x0000000033fa7fd9: abort rx timeout. Force session deactivation [ 175.739778][ T9496] binder: 9495:9496 ioctl c0306201 0 returned -14 [ 175.992593][ T9512] fuse: Unknown parameter 'group_id00000000000000000000' [ 176.138318][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1683'. [ 176.174118][ T9521] binder: 9520:9521 ioctl c0306201 0 returned -14 [ 176.388987][ T9535] fuse: Unknown parameter 'group_id00000000000000000000' [ 176.484628][ T9540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.518941][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 176.532371][ T9540] device syzkaller0 left promiscuous mode [ 176.650637][ T9550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.653316][ T9550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.953422][ T9571] fuse: Bad value for 'user_id' [ 177.000488][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1706'. [ 177.297377][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.299564][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.323830][ T9587] device bridge_slave_1 left promiscuous mode [ 177.325607][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.345988][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f73dc74e: rx timeout, send abort [ 177.348684][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000f144c518: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.367289][ T9587] device bridge_slave_0 left promiscuous mode [ 177.369076][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.419156][ T9594] fuse: Bad value for 'user_id' [ 177.465997][ T9597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.517617][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 177.742272][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.767219][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.795045][ T9620] netlink: 'syz.5.1725': attribute type 10 has an invalid length. [ 177.805956][ T9618] binder: BINDER_SET_CONTEXT_MGR already set [ 177.808017][ T9618] binder: 9616:9618 ioctl 4018620d 20000040 returned -16 [ 177.820917][ T9620] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1725'. [ 177.848543][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f73dc74e: abort rx timeout. Force session deactivation [ 177.941632][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1730'. [ 178.173225][ T9639] tap0: tun_chr_ioctl cmd 1074025672 [ 178.174907][ T9639] tap0: ignored: set checksum enabled [ 178.232094][ T9645] binder: 9644:9645 ioctl c0306201 0 returned -14 [ 178.237225][ T9645] binder: 9644:9645 ioctl c0306201 200003c0 returned -14 [ 178.239409][ T9645] binder_user_error: 6 callbacks suppressed [ 178.239419][ T9645] binder: 9644:9645 got transaction to invalid handle, 1 [ 178.253043][ T9643] device syzkaller0 entered promiscuous mode [ 178.357775][ T9649] netlink: 'syz.1.1739': attribute type 10 has an invalid length. [ 178.359994][ T9649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1739'. [ 178.479210][ T9657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.493546][ T9657] device syzkaller0 left promiscuous mode [ 178.688344][ T9670] binder: 9669:9670 ioctl c0306201 0 returned -14 [ 178.692968][ T9670] binder: 9669:9670 ioctl c0306201 200003c0 returned -14 [ 178.695255][ T9670] binder: 9669:9670 got transaction to invalid handle, 1 [ 178.768531][ T9674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.782394][ T9674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.893584][ T9681] netlink: 'syz.3.1752': attribute type 10 has an invalid length. [ 179.316243][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.318454][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.440848][ T9702] binder: 9701:9702 ioctl c0306201 0 returned -14 [ 179.462277][ T9702] binder: 9701:9702 ioctl c0306201 200003c0 returned -14 [ 179.464693][ T9702] binder: 9701:9702 got transaction to invalid handle, 1 [ 179.473258][ T9702] binder_debug: 13 callbacks suppressed [ 179.473271][ T9702] binder: 9702:9701 cannot find target node [ 179.478451][ T9702] binder: 9701:9702 transaction call to 0:0 failed 606/29201/-22, size 112-24 line 3054 [ 179.486219][ T1963] binder: undelivered TRANSACTION_ERROR: 29201 [ 179.524439][ T9706] netlink: 'syz.4.1764': attribute type 10 has an invalid length. [ 179.536822][ T9706] __nla_validate_parse: 1 callbacks suppressed [ 179.536834][ T9706] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1764'. [ 179.538709][ C0] vcan0: j1939_tp_rxtimer: 0x00000000160f17ee: rx timeout, send abort [ 179.538827][ C0] vcan0: j1939_tp_rxtimer: 0x000000007ac54e9b: rx timeout, send abort [ 179.538908][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000007ac54e9b: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 179.539009][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000160f17ee: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 179.611755][ T9711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.658744][ T9711] device syzkaller0 left promiscuous mode [ 179.833734][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.843294][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.847710][ T9723] device bridge_slave_1 left promiscuous mode [ 179.849581][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.890236][ T9723] device bridge_slave_0 left promiscuous mode [ 179.892017][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.898784][ T9732] binder: 9731:9732 ioctl c0306201 200003c0 returned -14 [ 179.901569][ T9732] binder: 9731:9732 got transaction to invalid handle, 1 [ 179.904536][ T9732] binder: 9732:9731 cannot find target node [ 179.906919][ T9732] binder: 9731:9732 transaction call to 0:0 failed 610/29201/-22, size 112-24 line 3054 [ 179.910247][ T4420] binder: undelivered TRANSACTION_ERROR: 29201 [ 180.073011][ T9737] device syzkaller0 entered promiscuous mode [ 180.310858][ T9748] netlink: 'syz.1.1780': attribute type 10 has an invalid length. [ 180.313096][ T9748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1780'. [ 180.511001][ T9758] binder: 9757:9758 ioctl c0306201 200003c0 returned -14 [ 180.513589][ T9758] binder: 9757:9758 got transaction to invalid handle, 1 [ 180.516503][ T9758] binder: 9758:9757 cannot find target node [ 180.518089][ T9758] binder: 9757:9758 transaction call to 0:0 failed 614/29201/-22, size 112-24 line 3054 [ 180.521369][ T6142] binder: undelivered TRANSACTION_ERROR: 29201 [ 180.563312][ T9764] device syzkaller0 entered promiscuous mode [ 180.654134][ T9768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.664396][ T9768] device syzkaller0 left promiscuous mode [ 180.878067][ T9781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1794'. [ 181.015115][ T9785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.018042][ T9785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.231091][ T9792] binder: 9791:9792 tried to acquire reference to desc 0, got 1 instead [ 181.240107][ T9790] netlink: 'syz.3.1797': attribute type 10 has an invalid length. [ 181.242346][ T9790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1797'. [ 181.334260][ T9796] binder: 9795:9796 ioctl c0306201 200003c0 returned -14 [ 181.342917][ T9796] binder: 9795:9796 got transaction to invalid handle, 1 [ 181.344924][ T9796] binder: 9796:9795 cannot find target node [ 181.449175][ T9800] device syzkaller0 entered promiscuous mode [ 181.456719][ T9802] tap0: tun_chr_ioctl cmd 1074025672 [ 181.458367][ T9802] tap0: ignored: set checksum enabled [ 181.502281][ C1] vcan0: j1939_tp_rxtimer: 0x00000000de26365f: rx timeout, send abort [ 181.504765][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000005d80678f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 181.674692][ T9810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1807'. [ 181.764717][ T9815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.777064][ T9815] device syzkaller0 left promiscuous mode [ 181.800297][ T9818] binder: 9817:9818 tried to acquire reference to desc 0, got 1 instead [ 181.848975][ T9820] netlink: 'syz.1.1810': attribute type 10 has an invalid length. [ 181.851225][ T9820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1810'. [ 181.922523][ T9825] binder: 9823:9825 ioctl c0306201 200003c0 returned -14 [ 181.925089][ T9825] binder: 9823:9825 got transaction to invalid handle, 1 [ 182.004688][ C1] vcan0: j1939_tp_rxtimer: 0x00000000de26365f: abort rx timeout. Force session deactivation [ 182.079820][ T9831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.083608][ T9831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.254396][ T9841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1820'. [ 182.375149][ T9845] binder: 9843:9845 tried to acquire reference to desc 0, got 1 instead [ 182.464124][ T9851] binder: 9850:9851 ioctl c0306201 200003c0 returned -14 [ 182.564282][ T9856] device syzkaller0 entered promiscuous mode [ 182.760698][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1831'. [ 182.832851][ T9868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.009144][ T9878] binder: 9875:9878 ioctl c0306201 200003c0 returned -14 [ 183.103718][ T9885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.108524][ T9885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.301228][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 183.325360][ T9899] binder_user_error: 4 callbacks suppressed [ 183.325374][ T9899] binder: 9898:9899 tried to acquire reference to desc 0, got 1 instead [ 183.330174][ T9899] binder: 9898:9899 got transaction with invalid data ptr [ 183.438569][ T9905] fuse: Bad value for 'fd' [ 183.444175][ T9907] binder: tried to use weak ref as strong ref [ 183.455793][ T9907] binder: 9906:9907 Acquire 1 refcount change on invalid ref 0 ret -22 [ 183.458467][ T9907] binder: 9906:9907 ioctl c0306201 200003c0 returned -14 [ 183.465038][ T9907] binder: 9906:9907 got transaction to invalid handle, 1 [ 183.628851][ T9914] device syzkaller0 entered promiscuous mode [ 183.777275][ T9927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.788774][ T9926] binder: 9924:9926 tried to acquire reference to desc 0, got 1 instead [ 183.804701][ T9926] binder: 9924:9926 got transaction with invalid data ptr [ 183.823247][ T9927] device syzkaller0 left promiscuous mode [ 183.862276][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1861'. [ 183.923041][ T9933] fuse: Bad value for 'fd' [ 183.971806][ T9937] binder: tried to use weak ref as strong ref [ 183.973480][ T9937] binder: 9936:9937 Acquire 1 refcount change on invalid ref 0 ret -22 [ 183.976949][ T9937] binder: 9936:9937 ioctl c0306201 200003c0 returned -14 [ 183.979502][ T9937] binder: 9936:9937 got transaction to invalid handle, 1 [ 184.107203][ T9945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.109670][ T9945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.414108][ T9958] fuse: Bad value for 'fd' [ 184.476253][ T5514] binder_debug: 24 callbacks suppressed [ 184.476267][ T5514] binder: undelivered TRANSACTION_ERROR: 29201 [ 184.504663][ T9963] binder: 9962:9963 ioctl c0306201 200003c0 returned -14 [ 184.507156][ T9963] binder: 9963:9962 cannot find target node [ 184.515476][ T9963] binder: 9962:9963 transaction call to 0:0 failed 672/29201/-22, size 112-24 line 3054 [ 184.518961][ T5514] binder: undelivered TRANSACTION_ERROR: 29201 [ 184.724909][ T9974] device syzkaller0 entered promiscuous mode [ 184.869634][ T9984] __nla_validate_parse: 1 callbacks suppressed [ 184.869649][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'. [ 184.885402][ T9985] binder: 9981:9985 transaction async to 9981:0 failed 677/29201/-22, size 112-24 line 3448 [ 184.889317][ T9988] fuse: Bad value for 'fd' [ 184.896455][ T5514] binder: undelivered TRANSACTION_ERROR: 29201 [ 184.912018][ T9982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.927659][ T9982] device syzkaller0 left promiscuous mode [ 185.004633][ T9995] binder: 9992:9995 ioctl 4018620d 0 returned -22 [ 185.008077][ T9995] binder: 9992:9995 ioctl c0306201 200003c0 returned -14 [ 185.010300][ T9995] binder: 9995:9992 cannot find target node [ 185.011921][ T9995] binder: 9992:9995 transaction call to 0:0 failed 681/29201/-22, size 112-24 line 3054 [ 185.015104][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 185.087987][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.093606][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.381802][T10018] binder: 10017:10018 transaction async to 10017:0 failed 686/29201/-22, size 112-24 line 3448 [ 185.420496][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1902'. [ 185.491005][T10022] fuse: Invalid rootmode [ 185.556651][T10028] binder: 10027:10028 ioctl 4018620d 0 returned -22 [ 185.559059][T10028] binder: 10027:10028 ioctl c0306201 200003c0 returned -14 [ 185.804235][T10043] device syzkaller0 entered promiscuous mode [ 185.892652][T10049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.894920][T10048] fuse: Invalid rootmode [ 185.928452][T10049] device syzkaller0 left promiscuous mode [ 185.945008][T10051] binder: 10050:10051 ioctl 4018620d 0 returned -22 [ 185.948033][T10051] binder: 10050:10051 ioctl c0306201 200003c0 returned -14 [ 186.081886][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.090689][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.523446][ C0] vcan0: j1939_tp_rxtimer: 0x000000008eb8b867: rx timeout, send abort [ 186.526142][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000d3cd9504: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 186.639900][T10079] fuse: Invalid rootmode [ 186.743174][T10081] device syzkaller0 entered promiscuous mode [ 186.750040][T10087] binder: 10085:10087 ioctl c0306201 0 returned -14 [ 186.882106][T10094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.899518][T10094] device syzkaller0 left promiscuous mode [ 187.025838][ C0] vcan0: j1939_tp_rxtimer: 0x000000008eb8b867: abort rx timeout. Force session deactivation [ 187.074564][T10106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.081622][T10106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.094470][T10108] fuse: Bad value for 'rootmode' [ 187.188936][T10115] binder: 10114:10115 ioctl c0306201 0 returned -14 [ 187.377410][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.379144][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.526980][T10136] fuse: Bad value for 'rootmode' [ 187.569708][T10139] binder: BINDER_SET_CONTEXT_MGR already set [ 187.571379][T10139] binder: 10138:10139 ioctl 4018620d 20000040 returned -16 [ 187.584548][T10139] binder: 10138:10139 ioctl c0306201 0 returned -14 [ 187.822746][T10157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.917469][T10163] fuse: Bad value for 'rootmode' [ 187.927244][T10165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.929743][T10165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.238371][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.248002][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.624715][T10193] fuse: Unknown parameter 'use00000000000000000000' [ 188.669624][T10197] binder_user_error: 23 callbacks suppressed [ 188.669638][T10197] binder: 10196:10197 got transaction to invalid handle, 1 [ 188.766659][ C0] vcan0: j1939_tp_rxtimer: 0x000000008541600c: rx timeout, send abort [ 188.768991][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000581f3905: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 188.781245][T10203] binder: 10202:10203 tried to acquire reference to desc 0, got 1 instead [ 188.784873][T10204] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1984'. [ 188.787485][T10204] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1984'. [ 188.790336][T10201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1984'. [ 188.904333][T10211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.193891][T10219] fuse: Unknown parameter 'use00000000000000000000' [ 189.268913][ C0] vcan0: j1939_tp_rxtimer: 0x000000008541600c: abort rx timeout. Force session deactivation [ 189.324947][T10226] binder: 10225:10226 got transaction to invalid handle, 1 [ 189.383539][T10228] binder: 10227:10228 tried to acquire reference to desc 0, got 1 instead [ 189.456117][ T4311] Bluetooth: hci5: command 0x0406 tx timeout [ 189.513845][T10237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1997'. [ 189.516445][T10237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1997'. [ 189.522598][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1997'. [ 189.549748][T10241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.553927][T10241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.691802][T10252] binder: 10251:10252 got transaction to invalid handle, 1 [ 189.694047][T10252] binder_debug: 31 callbacks suppressed [ 189.694064][T10252] binder: 10252:10251 cannot find target node [ 189.698441][T10252] binder: 10251:10252 transaction call to 0:0 failed 743/29201/-22, size 112-24 line 3054 [ 189.701740][ T6142] binder: undelivered TRANSACTION_ERROR: 29201 [ 189.858075][T10261] binder: 10260:10261 tried to acquire reference to desc 0, got 1 instead [ 189.869579][T10265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.893845][T10265] device syzkaller0 left promiscuous mode [ 190.122517][T10279] binder: 10278:10279 got transaction to invalid handle, 1 [ 190.124824][T10279] binder: 10279:10278 cannot find target node [ 190.127287][T10279] binder: 10278:10279 transaction call to 0:0 failed 751/29201/-22, size 112-24 line 3054 [ 190.130560][ T6142] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.471860][T10292] binder: 10291:10292 tried to acquire reference to desc 0, got 1 instead [ 190.544187][T10290] loop4: detected capacity change from 0 to 32768 [ 190.551425][T10290] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 190.579633][ T5094] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.768829][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.771489][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.836361][T10311] binder: 10310:10311 got transaction to invalid handle, 1 [ 190.839240][T10311] binder: 10311:10310 cannot find target node [ 190.842453][T10311] binder: 10310:10311 transaction call to 0:0 failed 759/29201/-22, size 112-24 line 3054 [ 190.853321][ T1963] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.913138][T10316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.927793][ C0] vcan0: j1939_tp_rxtimer: 0x00000000be9cf12b: rx timeout, send abort [ 190.930268][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000009621af26: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 191.430199][ C0] vcan0: j1939_tp_rxtimer: 0x00000000be9cf12b: abort rx timeout. Force session deactivation [ 191.502166][T10340] binder: 10339:10340 tried to acquire reference to desc 0, got 1 instead [ 191.504781][T10340] binder: 10339:10340 ioctl c0306201 200003c0 returned -14 [ 191.520652][T10340] binder: 10339:10340 ioctl c0306201 0 returned -14 [ 191.747079][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.749598][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.893982][T10338] loop2: detected capacity change from 0 to 32768 [ 191.911817][T10338] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.915119][T10338] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 191.918283][T10338] BTRFS info (device loop2): using free space tree [ 191.961845][T10338] BTRFS info (device loop2): enabling ssd optimizations [ 192.019907][ T4397] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 192.091950][ T4312] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.369019][T10384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.611218][T10392] binder: 10391:10392 ioctl c0306201 200003c0 returned -14 [ 192.614010][T10392] binder: 10391:10392 ioctl c0306201 0 returned -14 [ 192.924040][T10408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.929583][T10408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.132364][T10419] binder: 10418:10419 ioctl c0306201 0 returned -14 [ 193.143801][T10419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.147984][T10419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.312454][T10423] binder: 10422:10423 ioctl c0306201 200003c0 returned -14 [ 193.315144][T10423] binder: 10422:10423 ioctl c0306201 0 returned -14 [ 193.432012][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2071'. [ 193.503757][T10430] netlink: 'syz.1.2071': attribute type 10 has an invalid length. [ 193.520933][T10430] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2071'. [ 193.638925][ C1] vcan0: j1939_tp_rxtimer: 0x000000005f6c53bf: rx timeout, send abort [ 193.641412][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000850baba0: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.705334][T10438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.740182][T10438] device syzkaller0 left promiscuous mode [ 193.755301][T10436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.764773][T10436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.809928][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 193.888357][T10447] binder_user_error: 2 callbacks suppressed [ 193.888369][T10447] binder: 10446:10447 tried to acquire reference to desc 0, got 1 instead [ 193.892239][T10447] binder: 10446:10447 ioctl c0306201 200003c0 returned -14 [ 194.074779][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.078830][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.141342][ C1] vcan0: j1939_tp_rxtimer: 0x000000005f6c53bf: abort rx timeout. Force session deactivation [ 194.192487][T10458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2084'. [ 194.231750][T10458] netlink: 'syz.2.2084': attribute type 10 has an invalid length. [ 194.234158][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2084'. [ 194.286764][T10460] fuse: Unknown parameter 'user_i00000000000000000000' [ 194.469189][ T111] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 194.496418][ T111] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.543511][T10473] binder: 10472:10473 tried to acquire reference to desc 0, got 1 instead [ 194.550107][T10473] binder: 10472:10473 ioctl c0306201 200003c0 returned -14 [ 194.697461][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 194.705158][T10483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.773740][T10484] netlink: 'syz.2.2095': attribute type 10 has an invalid length. [ 194.786651][T10484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2095'. [ 195.078453][T10477] loop1: detected capacity change from 0 to 32768 [ 195.083661][T10492] fuse: Unknown parameter 'user_id00000000000000000000' [ 195.098988][T10477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2093 (10477) [ 195.116363][T10477] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.124845][T10477] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 195.127422][T10477] BTRFS info (device loop1): using free space tree [ 195.204888][T10477] BTRFS info (device loop1): enabling ssd optimizations [ 195.278723][ T9] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 195.362097][T10518] binder: 10517:10518 tried to acquire reference to desc 0, got 1 instead [ 195.364772][T10518] binder: 10517:10518 ioctl c0306201 200003c0 returned -14 [ 195.393830][ T4307] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.642786][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2107'. [ 195.703522][T10528] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 195.711226][T10528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2107'. [ 195.780111][T10534] fuse: Unknown parameter 'user_id00000000000000000000' [ 195.854578][T10539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.894016][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2112'. [ 195.936928][ C0] vcan0: j1939_tp_rxtimer: 0x000000000f08f040: rx timeout, send abort [ 195.939351][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000bc1d7511: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.040213][T10550] binder: 10549:10550 tried to acquire reference to desc 0, got 1 instead [ 196.042841][T10550] binder: 10549:10550 ioctl c0306201 200003c0 returned -14 [ 196.323029][T10566] fuse: Unknown parameter 'user_id00000000000000000000' [ 196.373627][T10568] netlink: 'syz.5.2122': attribute type 10 has an invalid length. [ 196.439287][ C0] vcan0: j1939_tp_rxtimer: 0x000000000f08f040: abort rx timeout. Force session deactivation [ 196.558637][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.623013][T10585] binder: 10584:10585 tried to acquire reference to desc 0, got 1 instead [ 196.645834][T10585] binder: 10584:10585 ioctl c0306201 200003c0 returned -14 [ 196.898593][T10603] fuse: Bad value for 'fd' [ 196.972669][T10607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.078487][T10611] netlink: 'syz.2.2140': attribute type 10 has an invalid length. [ 197.178880][T10618] binder: 10617:10618 tried to acquire reference to desc 0, got 1 instead [ 197.181398][T10618] binder: 10617:10618 ioctl c0306201 200003c0 returned -14 [ 197.420776][T10633] fuse: Bad value for 'fd' [ 197.643126][T10643] netlink: 'syz.4.2152': attribute type 10 has an invalid length. [ 197.693748][T10647] binder: 10646:10647 tried to acquire reference to desc 0, got 1 instead [ 197.697357][T10647] binder: 10646:10647 ioctl c0306201 200003c0 returned -14 [ 197.700281][T10647] binder: 10646:10647 got transaction with invalid data ptr [ 197.702406][T10647] binder: 10646:10647 transaction call to 10646:0 failed 801/29201/-14, size 0-24 line 3342 [ 197.706103][ T4420] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.041122][T10663] fuse: Bad value for 'fd' [ 198.180524][T10667] device syzkaller0 entered promiscuous mode [ 198.211943][T10671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.254100][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e85a64e2: rx timeout, send abort [ 198.256868][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000c78649d9: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 198.344100][T10675] netlink: 'syz.1.2164': attribute type 10 has an invalid length. [ 198.400578][T10677] binder: 10676:10677 tried to acquire reference to desc 0, got 1 instead [ 198.403215][T10677] binder: 10676:10677 ioctl c0306201 200003c0 returned -14 [ 198.406219][T10677] binder: 10676:10677 got transaction with invalid data ptr [ 198.408204][T10677] binder: 10676:10677 transaction call to 10676:0 failed 806/29201/-14, size 0-24 line 3342 [ 198.411676][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.579776][ T4311] Bluetooth: hci0: command 0x1003 tx timeout [ 198.582857][ T4317] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.627177][T10687] __nla_validate_parse: 11 callbacks suppressed [ 198.627193][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'. [ 198.683837][T10691] fuse: Unknown parameter '0x0000000000000003' [ 198.740098][T10695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.756453][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e85a64e2: abort rx timeout. Force session deactivation [ 198.757271][T10695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.922684][T10704] netlink: 'syz.4.2175': attribute type 20 has an invalid length. [ 198.994908][T10707] netlink: 'syz.4.2175': attribute type 10 has an invalid length. [ 199.005791][T10707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2175'. [ 199.011294][T10709] binder: 10708:10709 tried to acquire reference to desc 0, got 1 instead [ 199.013888][T10709] binder: 10708:10709 ioctl c0306201 200003c0 returned -14 [ 199.016991][T10709] binder: 10708:10709 got transaction with invalid data ptr [ 199.019240][T10709] binder: 10708:10709 transaction call to 10708:0 failed 811/29201/-14, size 0-24 line 3342 [ 199.022767][ T6147] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.229005][T10721] fuse: Unknown parameter '0x0000000000000003' [ 199.282683][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.353691][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.363852][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.468995][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2186'. [ 199.849813][T10740] binder: 10739:10740 tried to acquire reference to desc 0, got 1 instead [ 199.854145][ T6148] binder: release 10739:10740 transaction 816 out, still active [ 199.857122][ T6148] binder: undelivered TRANSACTION_COMPLETE [ 199.858779][ T6148] binder: undelivered TRANSACTION_COMPLETE [ 199.876789][ T6148] binder: send failed reply for transaction 816, target dead [ 199.911567][T10742] binder: 10741:10742 tried to acquire reference to desc 0, got 1 instead [ 199.914172][T10742] binder: 10741:10742 ioctl c0306201 200003c0 returned -14 [ 200.054583][T10747] netlink: 'syz.2.2189': attribute type 10 has an invalid length. [ 200.057474][T10747] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2189'. [ 200.319620][T10756] fuse: Unknown parameter '0x0000000000000003' [ 200.501843][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d9341ab4: rx timeout, send abort [ 200.504525][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000fabafc0c: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 201.004236][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d9341ab4: abort rx timeout. Force session deactivation [ 202.356708][T10727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.518809][T10771] binder: 10770:10771 tried to acquire reference to desc 0, got 1 instead [ 202.529990][T10771] binder: 10770:10771 ioctl c0306201 200003c0 returned -14 [ 202.664357][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 202.697310][T10784] fuse: Unknown parameter '0x0000000000000003' [ 202.783276][T10788] netlink: 'syz.1.2207': attribute type 16 has an invalid length. [ 202.791843][T10788] netlink: 'syz.1.2207': attribute type 3 has an invalid length. [ 202.794012][T10788] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.2207'. [ 202.800204][T10790] netlink: 'syz.2.2208': attribute type 20 has an invalid length. [ 202.869201][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2209'. [ 202.882003][T10797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.892652][T10797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.894938][T10795] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 202.903229][T10795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2208'. [ 203.028311][T10808] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2212'. [ 203.072718][T10810] binder: 10809:10810 tried to acquire reference to desc 0, got 1 instead [ 203.075326][T10810] binder: 10809:10810 ioctl c0306201 200003c0 returned -14 [ 203.084946][ T8168] binder_debug: 7 callbacks suppressed [ 203.084958][ T8168] binder: release 10809:10810 transaction 832 out, still active [ 203.088925][ T8168] binder: undelivered TRANSACTION_COMPLETE [ 203.114895][ T6148] binder: send failed reply for transaction 832, target dead [ 203.202199][T10818] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2217'. [ 203.341189][T10826] fuse: Unknown parameter '0x0000000000000003' [ 203.559653][T10835] netlink: 'syz.2.2222': attribute type 10 has an invalid length. [ 204.041945][ C1] vcan0: j1939_tp_rxtimer: 0x000000003b636918: rx timeout, send abort [ 204.044503][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000059dd0830: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 204.544403][ C1] vcan0: j1939_tp_rxtimer: 0x000000003b636918: abort rx timeout. Force session deactivation [ 204.591492][T10841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.594089][T10841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.342809][T10851] cgroup: Invalid name [ 205.432300][T10855] device syzkaller0 entered promiscuous mode [ 205.481775][T10857] fuse: Unknown parameter '0x0000000000000003' [ 205.876147][T10797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.074321][T10867] sock: sock_set_timeout: `syz.4.2237' (pid 10867) tries to set negative timeout [ 206.125709][ T8168] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 206.132190][ T8168] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.141295][T10879] Invalid ELF header magic: != ELF [ 206.211877][T10883] fuse: Unknown parameter 'fd0x0000000000000003' [ 206.217049][T10885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.227229][T10885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.324745][T10881] fido_id[10881]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.334872][T10890] netlink: 'syz.3.2245': attribute type 10 has an invalid length. [ 206.342524][T10890] __nla_validate_parse: 3 callbacks suppressed [ 206.342536][T10890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2245'. [ 206.410102][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2246'. [ 206.424187][T10898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.517782][T10901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.520353][T10901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.869755][ C1] vcan0: j1939_tp_rxtimer: 0x0000000036435d3f: rx timeout, send abort [ 206.872247][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000001c971253: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 206.918362][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.921426][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.031219][T10919] binder: 10918:10919 got transaction to context manager from process owning it [ 207.033954][T10919] binder: 10918:10919 transaction async to 10918:0 failed 834/29201/-22, size -26-0 line 3043 [ 207.038632][ T8168] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.130885][T10923] fuse: Unknown parameter 'fd0x0000000000000003' [ 207.314842][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 207.372129][ C1] vcan0: j1939_tp_rxtimer: 0x0000000036435d3f: abort rx timeout. Force session deactivation [ 207.519968][T10945] device syzkaller0 left promiscuous mode [ 207.555763][T10949] binder: 10948:10949 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 207.559619][T10949] binder: 10949 RLIMIT_NICE not set [ 207.603041][T10949] binder: 10948:10949 BC_FREE_BUFFER u0000000000000000 no match [ 207.605315][T10949] binder: 10949 RLIMIT_NICE not set [ 207.783334][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.790037][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.338517][T10961] fuse: Unknown parameter 'fd0x0000000000000003' [ 208.555524][T10970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.558537][T10970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.562152][T10970] binder: 10969:10970 ioctl 5000940e 200011c0 returned -22 [ 209.520567][T10901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.886435][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.889472][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.046355][T11010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.354340][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e9342d6d: rx timeout, send abort [ 210.357082][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000a06347ad: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 210.537080][T11018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.539704][T11018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.839474][T11037] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2292'. [ 210.856909][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e9342d6d: abort rx timeout. Force session deactivation [ 210.890745][T11039] tipc: Can't bind to reserved service type 0 [ 211.015375][T11048] binder: 11046:11048 got transaction to context manager from process owning it [ 211.019704][T11048] binder: 11046:11048 transaction async to 11046:0 failed 837/29201/-22, size 80-24 line 3043 [ 211.041878][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.220108][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.222777][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.329656][T11066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2304'. [ 211.398983][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.401969][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.784493][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.788773][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.956324][T11077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.960347][T11077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.626126][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e1ef4978: rx timeout, send abort [ 212.628588][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000452e5d69: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 213.128493][ C1] vcan0: j1939_tp_rxtimer: 0x00000000e1ef4978: abort rx timeout. Force session deactivation [ 213.522309][T11018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.647351][T11120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.650049][T11120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.856089][T11120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.858551][T11120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.027187][T11141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.675757][T11153] netlink: 600 bytes leftover after parsing attributes in process `syz.1.2334'. [ 214.937956][T11143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.940352][T11143] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 214.942574][T11143] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 214.950546][T11143] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.953666][T11143] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 214.955472][T11143] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 214.959802][T11143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.962004][T11143] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.963863][T11143] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 214.971121][T11143] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.973144][T11143] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 214.974995][T11143] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 214.977658][T11143] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 214.979469][T11143] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 214.981222][T11143] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 214.984271][T11148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.990014][T11148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.015129][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e527bb78: rx timeout, send abort [ 215.017745][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000ce4d0608: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 215.517588][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e527bb78: abort rx timeout. Force session deactivation [ 215.893668][T11190] binder: 11189:11190 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 215.898295][T11190] binder: 11189:11190 ioctl c0306201 20000480 returned -14 [ 215.901294][ T24] binder: undelivered death notification, 0000000000000000 [ 216.019367][T11194] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.2348' sets config #32767 [ 216.175888][ T4317] Bluetooth: hci1: command 0x0c1a tx timeout [ 216.217767][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.220040][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.236082][T11204] device bridge_slave_1 left promiscuous mode [ 216.238051][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.264366][T11198] process 'syz.4.2350' launched './file0' with NULL argv: empty string added [ 216.276876][T11204] device bridge_slave_0 left promiscuous mode [ 216.278878][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.975843][ T4317] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.977690][ T4317] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.979699][ T4317] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.056519][ T4321] Bluetooth: hci5: command 0x0c1a tx timeout [ 217.402353][T11148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.446899][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2364'. [ 217.547189][T11246] input: syz0 as /devices/virtual/input/input3 [ 217.662704][T11252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.669938][T11252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.787386][ C1] vcan0: j1939_tp_rxtimer: 0x0000000025d2093b: rx timeout, send abort [ 217.790035][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006cbe85da: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 218.025206][T11266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.255670][ T4317] Bluetooth: hci1: command 0x0406 tx timeout [ 218.289883][ C1] vcan0: j1939_tp_rxtimer: 0x0000000025d2093b: abort rx timeout. Force session deactivation [ 219.035343][T11268] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 219.037080][T11268] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 219.039688][T11268] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 219.041839][T11268] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 219.043486][T11268] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 219.045219][T11268] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 219.047447][T11268] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 219.049492][T11268] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 219.051214][T11268] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 219.053217][T11268] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 219.054832][T11268] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 219.063634][T11268] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 219.065884][T11268] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 219.067808][T11268] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 219.070248][T11268] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 219.072905][T11270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.077383][T11270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.083178][T11273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.096396][T11273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.669314][T11335] binder: 11334:11335 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 219.675187][T11335] binder: 11334:11335 unknown command 1074553620 [ 219.685066][T11335] binder: 11334:11335 ioctl c0306201 20000780 returned -22 [ 220.335715][ T4321] Bluetooth: hci1: command 0x0c1a tx timeout [ 220.405382][ C0] vcan0: j1939_tp_rxtimer: 0x000000001e32d57d: rx timeout, send abort [ 220.407917][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000e23d888f: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 220.907792][ C0] vcan0: j1939_tp_rxtimer: 0x000000001e32d57d: abort rx timeout. Force session deactivation [ 221.055816][ T4321] Bluetooth: hci4: command 0x0c1a tx timeout [ 221.055901][ T4317] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.057577][ T4321] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.136361][ T4321] Bluetooth: hci5: command 0x0c1a tx timeout [ 221.191528][T11352] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.193853][T11352] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 221.195491][T11352] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 221.197698][T11352] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.199297][T11352] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 221.201884][T11352] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 221.203775][T11352] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.205343][T11352] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 221.207139][T11352] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 221.209300][T11352] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 221.210899][T11352] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 221.212490][T11352] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 221.214392][T11352] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 221.216096][T11352] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 221.217656][T11352] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 221.321350][T11273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.442166][T11372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.457680][T11372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.662451][T11388] binder: 11387:11388 ioctl 400c620e 20000040 returned -22 [ 221.863673][T11397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.012287][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.016036][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.492390][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.494843][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.496065][ T4311] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.763795][ C1] vcan0: j1939_tp_rxtimer: 0x0000000030d299b2: rx timeout, send abort [ 222.767735][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000d6a3c74d: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 223.044333][T11414] binder: 11413:11414 ioctl c00c620f 200001c0 returned -22 [ 223.054988][T11414] binder: 11413:11414 ioctl c0306201 0 returned -14 [ 223.217092][ T4321] Bluetooth: hci5: command 0x0c1a tx timeout [ 223.218310][ T4311] Bluetooth: hci4: command 0x0c1a tx timeout [ 223.218902][ T4321] Bluetooth: hci3: command 0x0c1a tx timeout [ 223.220618][ T4311] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.266249][ C1] vcan0: j1939_tp_rxtimer: 0x0000000030d299b2: abort rx timeout. Force session deactivation [ 223.434087][T11438] netlink: 'syz.4.2445': attribute type 10 has an invalid length. [ 223.443862][T11438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2445'. [ 223.572957][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2449'. [ 224.585675][ T4311] Bluetooth: hci1: command 0x0406 tx timeout [ 225.007009][T11399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.201420][T11453] loop5: detected capacity change from 0 to 32768 [ 225.214074][T11453] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2451 (11453) [ 225.226320][T11453] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.234835][T11453] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 225.241238][T11453] BTRFS info (device loop5): using free space tree [ 225.281841][T11453] BTRFS info (device loop5): enabling ssd optimizations [ 225.295879][ T4321] Bluetooth: hci3: command 0x0406 tx timeout [ 225.297558][ T4321] Bluetooth: hci4: command 0x0406 tx timeout [ 225.299226][ T4321] Bluetooth: hci5: command 0x0406 tx timeout [ 225.300905][ T4321] Bluetooth: hci2: command 0x0406 tx timeout [ 225.421358][ T4557] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.520455][ T5094] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop5 scanned by udevd (5094) [ 225.872402][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2465'. [ 226.019096][T11512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.021752][T11512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.079707][T11511] netlink: 'syz.4.2467': attribute type 10 has an invalid length. [ 226.081969][T11511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2467'. [ 226.331987][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2476'. [ 226.444211][ C1] vcan0: j1939_tp_rxtimer: 0x0000000007c70384: rx timeout, send abort [ 226.446717][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000c61cb995: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 226.946653][ C1] vcan0: j1939_tp_rxtimer: 0x0000000007c70384: abort rx timeout. Force session deactivation [ 226.982435][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.985072][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.283209][T11549] netlink: 'syz.4.2480': attribute type 10 has an invalid length. [ 227.285392][T11549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2480'. [ 229.005866][T11512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.415297][ C1] vcan0: j1939_tp_rxtimer: 0x0000000026914725: rx timeout, send abort [ 229.417898][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000072878158: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 229.525969][T11602] netlink: 'syz.4.2502': attribute type 10 has an invalid length. [ 229.528330][T11602] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2502'. [ 229.581076][T11607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.583690][T11607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.917687][ C1] vcan0: j1939_tp_rxtimer: 0x0000000026914725: abort rx timeout. Force session deactivation [ 230.340286][T11641] netlink: 'syz.3.2514': attribute type 10 has an invalid length. [ 230.342678][T11641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2514'. [ 230.511013][T11643] binder: 11642:11643 BC_INCREFS_DONE u0000000000000002 no match [ 230.513484][T11643] binder: 11642:11643 BC_INCREFS_DONE u0000000000000003 no match [ 231.844336][ C1] vcan0: j1939_tp_rxtimer: 0x00000000caffcc17: rx timeout, send abort [ 231.846752][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000caffcc17: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 232.574237][T11607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.108008][ T4852] Bluetooth: hci6: Frame reassembly failed (-84) [ 233.748432][T11710] netlink: 'syz.4.2545': attribute type 10 has an invalid length. [ 233.750669][T11710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2545'. [ 233.788928][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.792270][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.945693][ T4317] Bluetooth: hci0: command 0x1003 tx timeout [ 233.945905][ T4311] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 234.048546][ C1] vcan0: j1939_tp_rxtimer: 0x000000006c524e04: rx timeout, send abort [ 234.050876][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006c524e04: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 235.055480][T11741] netlink: 'syz.1.2556': attribute type 10 has an invalid length. [ 235.057997][T11741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2556'. [ 235.135746][ T4311] Bluetooth: hci6: command 0x1003 tx timeout [ 235.139086][ T4321] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 235.582374][T11747] binder: 11746:11747 IncRefs 0 refcount change on invalid ref -1 ret -22 [ 235.584915][T11747] binder: 11746:11747 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 235.594534][T11747] binder: 11747 RLIMIT_NICE not set [ 236.092739][T11768] binder: 11766 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 236.092764][T11768] binder: 11766:11768 ioctl c018620c 200000c0 returned -22 [ 236.435151][ C0] vcan0: j1939_tp_rxtimer: 0x0000000076e039b5: rx timeout, send abort [ 236.437631][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000076e039b5: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 236.783018][T11712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.297521][T11825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.301683][T11825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.302883][T11824] netlink: 'syz.1.2589': attribute type 10 has an invalid length. [ 237.308482][T11824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2589'. [ 238.172942][T11856] netlink: 'syz.2.2602': attribute type 10 has an invalid length. [ 238.175203][T11856] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2602'. [ 238.303763][ C1] vcan0: j1939_tp_rxtimer: 0x0000000081985622: rx timeout, send abort [ 238.306388][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000081985622: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.487842][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.490654][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.288732][T11825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.539354][T11904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.555178][T11904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.944185][T11919] netlink: 'syz.3.2627': attribute type 10 has an invalid length. [ 240.946521][T11919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2627'. [ 240.984781][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.987507][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.196839][ C0] vcan0: j1939_tp_rxtimer: 0x00000000fef6af38: rx timeout, send abort [ 241.199331][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000fef6af38: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.254034][T11934] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2633'. [ 241.589149][T11952] netlink: 'syz.1.2638': attribute type 10 has an invalid length. [ 241.591502][T11952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2638'. [ 242.376053][ T4311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.379578][ T4311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.382593][ T4311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.385199][ T4311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.388244][ T4311] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.390541][ T4311] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.496567][T11963] chnl_net:caif_netlink_parms(): no params data found [ 242.532317][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.534471][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.538470][T11963] device bridge_slave_0 entered promiscuous mode [ 242.542745][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.544900][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.547908][T11963] device bridge_slave_1 entered promiscuous mode [ 242.564253][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.568822][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.584766][T11963] team0: Port device team_slave_0 added [ 242.602997][T11963] team0: Port device team_slave_1 added [ 242.672666][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.674672][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.682582][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.688998][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.690997][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.698657][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.768423][T11963] device hsr_slave_0 entered promiscuous mode [ 242.818353][T11963] device hsr_slave_1 entered promiscuous mode [ 242.855760][T11963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.858004][T11963] Cannot create hsr debugfs directory [ 242.973022][ C0] vcan0: j1939_tp_rxtimer: 0x00000000fede8fdd: rx timeout, send abort [ 242.975706][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000fede8fdd: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 243.014302][T11971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.019702][T11963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.024558][T11971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.100619][T11963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.198185][T11963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.319354][T11963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.959025][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2651'. [ 243.983800][T11921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.040845][T11963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.080298][T11963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.179954][T11963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.281900][T11963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 244.415739][ T4311] Bluetooth: hci0: command 0x0409 tx timeout [ 244.499803][T11963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.506944][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.509596][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.514775][T11963] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.551102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.554081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.556985][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.558956][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.561452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.567194][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.569994][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.572695][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.574701][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.661668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.667166][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.680358][T11963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.683282][T11963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.688722][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.693241][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.701222][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.704109][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.710327][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.713139][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.721153][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.723999][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.730968][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.752305][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.965049][T12032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.968657][T12032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.054685][T12040] netlink: 'syz.4.2662': attribute type 10 has an invalid length. [ 245.063642][T12040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2662'. [ 245.214918][T12049] overlayfs: option "workdir=./file0/file0" is useless in a non-upper mount, ignore [ 245.218470][T12049] overlayfs: missing 'lowerdir' [ 245.337880][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b83f17e1: rx timeout, send abort [ 245.340315][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000b83f17e1: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 245.386875][ T39] bond0: (slave wlan1): Releasing backup interface [ 245.648885][T11963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.658691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.661295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.685006][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.689378][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.699952][T12073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.702721][T12073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.744042][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.747216][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.751497][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.755767][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.040596][T11963] device veth0_vlan entered promiscuous mode [ 246.052135][T11963] device veth1_vlan entered promiscuous mode [ 246.067337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.070324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.073374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.079326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.083320][T11963] device veth0_macvtap entered promiscuous mode [ 246.129921][ T39] device hsr_slave_0 left promiscuous mode [ 246.166120][ T39] device hsr_slave_1 left promiscuous mode [ 246.257021][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.259282][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.262267][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.266277][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.268966][ T39] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 246.271088][ T39] batman_adv: batadv0: Removing interface: virt_wifi0 [ 246.381232][ T39] device veth1_macvtap left promiscuous mode [ 246.382990][ T39] device veth0_macvtap left promiscuous mode [ 246.498594][ T4321] Bluetooth: hci0: command 0x041b tx timeout [ 247.947178][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ab5b604c: rx timeout, send abort [ 247.949812][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000ab5b604c: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 247.964609][T12032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.575633][ T4321] Bluetooth: hci0: command 0x040f tx timeout [ 248.817613][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.819441][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.900489][ T39] team0 (unregistering): Port device team_slave_1 removed [ 249.078331][ T39] team0 (unregistering): Port device team_slave_0 removed [ 249.267184][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.466577][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.665758][ T4321] Bluetooth: hci0: command 0x0419 tx timeout [ 250.920435][ C0] vcan0: j1939_tp_rxtimer: 0x000000000f9e3275: rx timeout, send abort [ 250.922942][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000000f9e3275: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 250.959311][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.961696][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.851162][ T39] bond0 (unregistering): Released all slaves [ 252.006404][T11963] device veth1_macvtap entered promiscuous mode [ 252.013413][T12087] netlink: 'syz.3.2677': attribute type 10 has an invalid length. [ 252.015473][T12087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2677'. [ 252.019143][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.021780][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.105846][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.112301][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.119481][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.123581][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.129507][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.132559][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.135407][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.140953][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.153210][T11963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.157299][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.166268][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.171569][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.174461][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.183460][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.193627][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.197301][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.201629][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.208157][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.214581][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.222765][T11963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.233219][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.236730][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.251662][T11963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.257613][T11963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.263412][T11963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.270375][T11963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.773134][T12174] netlink: 'syz.4.2706': attribute type 10 has an invalid length. [ 253.775402][T12174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2706'. [ 253.954995][T12122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.993185][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e454792c: rx timeout, send abort [ 253.995686][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000e454792c: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 254.014673][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.017475][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.047500][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.111394][ T8072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.113773][ T8072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.127661][ T8072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.617333][T12206] netlink: 'syz.5.2716': attribute type 10 has an invalid length. [ 254.619863][T12206] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2716'. [ 254.662225][T12208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.673796][T12208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.375043][T12241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.380638][T12241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.469369][T12242] netlink: 'syz.1.2729': attribute type 10 has an invalid length. [ 255.471678][T12242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2729'. [ 255.860911][ C1] vcan0: j1939_tp_rxtimer: 0x00000000addc7e77: rx timeout, send abort [ 255.863278][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000addc7e77: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 256.998466][T12270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.002443][T12270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.661987][T12208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.754731][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.773300][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.083709][T12300] device syzkaller0 left promiscuous mode [ 258.101224][T12300] tipc: Started in network mode [ 258.102832][T12300] tipc: Node identity 080211000001, cluster identity 4711 [ 258.104995][T12300] tipc: Enabled bearer , priority 0 [ 258.202610][T12304] binder: 12303:12304 ioctl c0306201 0 returned -14 [ 258.309490][ C0] vcan0: j1939_tp_rxtimer: 0x0000000080c8c3a3: rx timeout, send abort [ 258.311836][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000080c8c3a3: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 258.456109][T12315] netlink: 'syz.5.2754': attribute type 10 has an invalid length. [ 258.458378][T12315] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2754'. [ 258.523767][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 259.043013][T12350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.045368][T12350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.092050][T12347] netlink: 'syz.1.2769': attribute type 10 has an invalid length. [ 259.094278][T12347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2769'. [ 259.144535][T12355] netlink: 'syz.1.2772': attribute type 4 has an invalid length. [ 259.146862][T12355] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2772'. [ 259.201737][ T5514] tipc: Node number set to 134418688 [ 259.585069][T12378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.589177][T12378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.793951][T12384] netlink: 'syz.4.2782': attribute type 10 has an invalid length. [ 259.801417][T12384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2782'. [ 259.973773][T12392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.977792][T12392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.191547][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a55f6b0f: rx timeout, send abort [ 260.193932][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000a55f6b0f: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 260.349863][T12412] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2795'. [ 260.842699][T12445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.852659][T12445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.367052][T12460] tipc: Enabling of bearer rejected, already enabled [ 261.589520][ T4420] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 261.601097][ T4420] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 261.980926][ C0] vcan0: j1939_tp_rxtimer: 0x0000000001b5dd1b: rx timeout, send abort [ 261.983383][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000001b5dd1b: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 262.193894][T12500] binder: 12498:12500 ioctl 4018620d 0 returned -22 [ 262.203028][T12500] binder: 12500:12498 cannot find target node [ 262.209031][T12500] binder: 12498:12500 transaction async to 0:0 failed 840/29189/-22, size 72-24 line 3054 [ 262.416263][T12516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.429895][T12516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.676690][ T4321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.680940][ T4321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.683858][ T4321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.688733][ T4321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.691359][ T4321] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 262.693646][ T4321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.856861][T12523] chnl_net:caif_netlink_parms(): no params data found [ 262.884705][T12536] loop2: detected capacity change from 0 to 7 [ 262.890183][T12536] Dev loop2: unable to read RDB block 7 [ 262.892011][T12536] loop2: AHDI p1 p2 p3 [ 262.893183][T12536] loop2: partition table partially beyond EOD, truncated [ 262.895263][T12536] loop2: p1 start 1601398130 is beyond EOD, truncated [ 262.901481][T12536] loop2: p2 start 1702059890 is beyond EOD, truncated [ 263.064344][T12523] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.071318][T12523] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.086510][T12523] device bridge_slave_0 entered promiscuous mode [ 263.105005][T12523] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.112858][T12523] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.126433][T12523] device bridge_slave_1 entered promiscuous mode [ 263.132302][T12549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.134823][T12549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.170024][T12523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.189570][T12551] af_packet: tpacket_rcv: packet too big, clamped from 59650 to 4. macoff=68 [ 263.204258][T12523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.311195][T12523] team0: Port device team_slave_0 added [ 263.321562][T12523] team0: Port device team_slave_1 added [ 263.352886][T12523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.354909][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.367267][T12523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.371524][T12523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.373615][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.390161][T12523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.457556][T12523] device hsr_slave_0 entered promiscuous mode [ 263.496007][T12523] device hsr_slave_1 entered promiscuous mode [ 263.535644][T12523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.537987][T12523] Cannot create hsr debugfs directory [ 263.718886][T12564] 9pnet_fd: p9_fd_create_tcp (12564): problem connecting socket to 127.0.0.1 [ 263.720685][T12566] netlink: 'syz.4.2855': attribute type 58 has an invalid length. [ 263.830263][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.843457][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.008988][T12523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.117536][T12523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.122187][ T4852] tipc: Disabling bearer [ 264.124303][ T4852] tipc: Left network mode [ 264.214072][T12523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.314694][T12593] binder: 12593 RLIMIT_NICE not set [ 264.337641][T12523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.368638][T12594] binder: 12592:12594 got transaction to context manager from process owning it [ 264.371196][T12594] binder: 12592:12594 transaction call to 12592:0 failed 842/29201/-22, size 0-0 line 3043 [ 264.480804][T12597] page:00000000434f0b0c refcount:4 mapcount:1 mapping:00000000a936491b index:0x0 pfn:0x136b02 [ 264.484160][T12597] memcg:ffff0000f5446000 [ 264.485539][T12597] aops:shmem_aops ino:450 [ 264.486717][T12597] flags: 0x5ffd80000080015(locked|uptodate|lru|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 264.489510][T12597] raw: 05ffd80000080015 ffff0000cc846258 fffffc0003ee2308 ffff0000df0ce868 [ 264.491834][T12597] raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000f5446000 [ 264.494163][T12597] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 264.496213][T12597] ------------[ cut here ]------------ [ 264.497701][T12597] kernel BUG at mm/filemap.c:153! [ 264.499450][T12597] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 264.501610][T12597] Modules linked in: [ 264.502715][T12597] CPU: 1 PID: 12597 Comm: syz.2.2868 Not tainted 6.1.142-syzkaller #0 [ 264.504900][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.507707][T12597] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 264.509762][T12597] pc : filemap_unaccount_folio+0x464/0x50c [ 264.511345][T12597] lr : filemap_unaccount_folio+0x464/0x50c [ 264.512928][T12597] sp : ffff800021f57140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 264.514080][T12597] x29: ffff800021f57150 x28: ffff800021f574c0 x27: dfff800000000000 [ 264.516315][T12597] x26: ffff7000043eae3c x25: 0000000000000001 x24: ffff800021f574c0 [ 264.518471][T12597] x23: ffff800021f57200 x22: ffff0000df0ce868 x21: fffffc0003dac098 [ 264.520710][T12597] x20: ffff0000df0ce868 x19: fffffc0003dac080 x18: 0000000000000000 [ 264.522905][T12597] x17: 0000000000000000 x16: ffff8000082e7c3c x15: 0000000000000000 [ 264.525120][T12597] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 264.527336][T12597] x11: ff008000087ae04c x10: 0000000000000000 x9 : ffff8000087ae04c [ 264.529511][T12597] x8 : ffff0000c386d340 x7 : 0000000000000001 x6 : 0000000000000001 [ 264.531687][T12597] x5 : ffff800021f56b78 x4 : ffff800015194800 x3 : ffff80000852e344 [ 264.533938][T12597] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000039 [ 264.536161][T12597] Call trace: [ 264.537018][T12597] filemap_unaccount_folio+0x464/0x50c [ 264.538424][T12597] __filemap_remove_folio+0xc0/0x4d4 [ 264.539892][T12597] filemap_remove_folio+0xcc/0x1bc [ 264.541329][T12597] truncate_inode_folio+0x6c/0x84 [ 264.542726][T12597] shmem_undo_range+0x400/0x1610 [ 264.544075][T12597] shmem_evict_inode+0x204/0x8a0 [ 264.545416][T12597] evict+0x3c8/0x810 [ 264.546505][T12597] iput+0x764/0x7f4 [ 264.547492][T12597] dentry_unlink_inode+0x360/0x438 [ 264.548947][T12597] __dentry_kill+0x320/0x598 [ 264.550237][T12597] dentry_kill+0xc8/0x248 [ 264.551453][T12597] dput+0x238/0x454 [ 264.552486][T12597] __fput+0x480/0x7c0 [ 264.553613][T12597] ____fput+0x20/0x30 [ 264.554697][T12597] task_work_run+0x1ec/0x270 [ 264.555933][T12597] do_notify_resume+0x1f70/0x2b0c [ 264.557389][T12597] el0_svc+0x98/0x138 [ 264.558486][T12597] el0t_64_sync_handler+0x84/0xf0 [ 264.559850][T12597] el0t_64_sync+0x18c/0x190 [ 264.561158][T12597] Code: f004a2a1 91220021 aa1303e0 94037abd (d4210000) [ 264.563111][T12597] ---[ end trace 0000000000000000 ]--- [ 265.174186][T12597] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 265.176144][T12597] SMP: stopping secondary CPUs [ 265.177443][T12597] Kernel Offset: disabled [ 265.178586][T12597] CPU features: 0x080000,02070084,26017203 [ 265.180119][T12597] Memory Limit: none [ 265.718350][T12597] Rebooting in 86400 seconds..