last executing test programs: 4.952931055s ago: executing program 2 (id=1971): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) openat$vcs(0xffffffffffffff9c, 0x0, 0x210440, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.563553705s ago: executing program 4 (id=1977): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) truncate(&(0x7f0000000100)='./file0\x00', 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) shmctl$IPC_RMID(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) 4.044161258s ago: executing program 2 (id=1987): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="e8000000130000012bbd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00000400500000004800128708000100677470003c00028008000400020000000800010015b9701a8b86455869117b2b5cf247ed4f06c25fe6c065ed8d80fb9170489cab62d6c48f65229c216866bf460493bc57454921674ae1b38c2a8e3d20ff2e6d152b2d60889c2d35b28bf19a1f31c0e4c374d94491c712cbb6", @ANYRES32, @ANYBLOB="0500050001000000050005000100", @ANYBLOB="08000300955e"], 0xe8}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 4.037703278s ago: executing program 0 (id=1988): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv4_newroute={0x34, 0x18, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x4, 0xfd, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x6, 0x8, 0x1, 0x9, 0x140}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c814) 3.94718695s ago: executing program 0 (id=1990): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000a00)={0x0, r5, r6, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x200003}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0x93d5, 0x58565559, 0x7, 0x10001, 0x9, 0x9, 0x900, 0x0, 0x4, 0x0, 0x2}}) 3.94701593s ago: executing program 2 (id=1991): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.738372455s ago: executing program 2 (id=1992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1100, &(0x7f0000001dc0)={0xd, 0x8, 0x100000}, 0x20) 3.726556876s ago: executing program 0 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000300)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x3ffff, 0x2, {0xd, @vbi={0x4, 0x4, 0x10000, 0x43353039, [0x80000000, 0x7fff], [0x9, 0x6], 0x13a}}, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x27) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 3.676101747s ago: executing program 4 (id=1994): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1f3) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) 3.631386589s ago: executing program 4 (id=1996): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400448dd, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 3.58496698s ago: executing program 4 (id=1997): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2.937367536s ago: executing program 3 (id=2002): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.936826436s ago: executing program 3 (id=2003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) getrandom(0x0, 0x0, 0x0) 2.828133209s ago: executing program 2 (id=2004): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000a00)={0x0, r5, r6, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x200003}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0x93d5, 0x58565559, 0x7, 0x10001, 0x9, 0x9, 0x900, 0x0, 0x4, 0x0, 0x2}}) 2.810165889s ago: executing program 0 (id=2005): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x400}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) 2.427591829s ago: executing program 0 (id=2006): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e22, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94, 0x1}, 0x9c) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e22, @rand_addr=0x64010182}]}, &(0x7f0000000100)=0x10) 2.427213359s ago: executing program 2 (id=2007): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1f3) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) 2.426913509s ago: executing program 0 (id=2008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x3, 0x815, 0xa, 0x15e, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40001) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) 1.836614483s ago: executing program 3 (id=2011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.759640576s ago: executing program 3 (id=2012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 1.729906396s ago: executing program 3 (id=2013): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x3}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.543539221s ago: executing program 3 (id=2014): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf"], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x1, 0x207, 0x6d, 0x7fff, 0xbb, 0x3, 0x8001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="61023300503001000802110000010802110000005050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.374713006s ago: executing program 1 (id=2015): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') r4 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r4, r4, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) 240.710944ms ago: executing program 4 (id=2016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}}, 0x0) write$tun(r0, &(0x7f0000001200)={@void, @void, @ipv4=@dccp={{0x10, 0x4, 0x2, 0x3d, 0xf4, 0x65, 0x0, 0x7f, 0x21, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0x44, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast2, 0x5}, {@private=0xa010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x2}, {@remote, 0x8000}]}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x2, "d22dbf", 0xe, "3638a6"}, "67dc033df3d7897b0a78b23065d7333708da95e17f9ccc2b3a4c59bee607c3b151c0e91d5322305a8bd1ae3c9540f29e03ed59aa560802afbb9a811dac95273568eb00241b03d836b65bc1096cb6b39387c9b61404846676b752733db47f54e02913587eca56088f785cc0eca47ba1e99016789907748c5fa62ff0f37262ef5fa955e8dcc817146651f02db3404ee42766d8b11e4ff8f224db1a5c29ee0747c25d1081fb"}}}, 0xf4) 190.207235ms ago: executing program 1 (id=2017): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 130.447537ms ago: executing program 1 (id=2018): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)="010000000705810240000007", 0x12) 130.146247ms ago: executing program 1 (id=2019): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 113.328207ms ago: executing program 1 (id=2020): syz_mount_image$fuse(0x0, 0x0, 0x20008, &(0x7f0000000140)=ANY=[], 0x3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffffff, 0x0, 0x1, 0x0) symlinkat(&(0x7f0000001000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00') 96.690678ms ago: executing program 1 (id=2021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x78, 0x2c, 0xf2f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x200, 0x4, 0x78f}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 0s ago: executing program 4 (id=2022): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) kernel console output (not intermixed with test programs): ready [ 33.024001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.025652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.027943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.029492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.031571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.033643][ T4329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.035194][ T4329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.037171][ T4329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.038808][ T4329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.047717][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.049553][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.051294][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.053052][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.054674][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.057231][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.059542][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.061765][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.063176][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.064589][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.065993][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.072978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.074738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.079680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.081437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.094408][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.097592][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.101560][ T4331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.103212][ T4331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.104881][ T4331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.107509][ T4331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.111289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.142138][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.143541][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.144386][ T4340] device veth0_vlan entered promiscuous mode [ 33.161399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.163028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.164711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.166939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.168840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.174618][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.175971][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.193338][ T4340] device veth1_vlan entered promiscuous mode [ 33.194772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.196596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.203564][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.204994][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.206496][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.207715][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.209018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.211489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.219461][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.220784][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.222226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.231332][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.232835][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.235069][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.237307][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.262192][ T4340] device veth0_macvtap entered promiscuous mode [ 33.265979][ T4340] device veth1_macvtap entered promiscuous mode [ 33.274256][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.275933][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.279347][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.283362][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.368812][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.370620][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.371725][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.373757][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.373799][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.379630][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.381484][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.383437][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.385223][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.387873][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.391194][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.400267][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.401827][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.404597][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.546224][ T4346] Bluetooth: hci0: command 0x041b tx timeout [ 34.571815][ T4346] Bluetooth: hci3: command 0x041b tx timeout [ 34.596340][ T4346] Bluetooth: hci1: command 0x041b tx timeout [ 34.616580][ T4346] Bluetooth: hci4: command 0x041b tx timeout [ 34.642221][ T4346] Bluetooth: hci2: command 0x041b tx timeout [ 34.941059][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.942981][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.944642][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.952908][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.955357][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.963667][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.965546][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.970474][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.972815][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.991165][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.992904][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.066580][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.068128][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.069808][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.072097][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.273585][ T4430] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 35.664218][ T4438] loop1: detected capacity change from 0 to 128 [ 35.666134][ T4438] ======================================================= [ 35.666134][ T4438] WARNING: The mand mount option has been deprecated and [ 35.666134][ T4438] and is ignored by this kernel. Remove the mand [ 35.666134][ T4438] option from the mount to silence this warning. [ 35.666134][ T4438] ======================================================= [ 36.013539][ T4321] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.049502][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.051358][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.053174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.068937][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.070586][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.072165][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.190717][ T4450] loop1: detected capacity change from 0 to 512 [ 36.192540][ T4450] EXT4-fs: Ignoring removed orlov option [ 36.506535][ T4450] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 36.508224][ T4450] EXT4-fs (loop1): mount failed [ 36.850504][ T4467] overlayfs: failed to set xattr on upper [ 36.851576][ T4467] overlayfs: ...falling back to index=off,metacopy=off. [ 36.852735][ T4467] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 36.886249][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 36.887505][ T4346] Bluetooth: hci4: command 0x040f tx timeout [ 36.888747][ T4344] Bluetooth: hci1: command 0x040f tx timeout [ 36.890046][ T4338] Bluetooth: hci3: command 0x040f tx timeout [ 36.890134][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 36.984407][ T151] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 38.236048][ C0] sched: RT throttling activated [ 38.392542][ T4489] Zero length message leads to an empty skb [ 38.958134][ T4332] Bluetooth: hci0: command 0x0419 tx timeout [ 38.959291][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 38.960341][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 38.961440][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 38.962478][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 39.420293][ T4522] loop3: detected capacity change from 0 to 512 [ 39.432316][ T4522] EXT4-fs: Ignoring removed orlov option [ 39.469800][ T4522] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 39.471462][ T4522] EXT4-fs (loop3): mount failed [ 39.719691][ T4547] overlayfs: failed to set xattr on upper [ 39.720919][ T4547] overlayfs: ...falling back to index=off,metacopy=off. [ 39.722286][ T4547] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 40.197650][ T4577] ubi0: attaching mtd0 [ 40.199372][ T4577] ubi0: scanning is finished [ 40.200283][ T4577] ubi0: empty MTD device detected [ 40.567762][ T4582] loop8: detected capacity change from 0 to 7 [ 40.775612][ T4582] Dev loop8: unable to read RDB block 7 [ 40.776859][ T4582] loop8: unable to read partition table [ 40.777890][ T4582] loop8: partition table beyond EOD, truncated [ 40.778878][ T4582] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 40.824019][ T4587] loop3: detected capacity change from 0 to 128 [ 40.829568][ T4587] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 40.850023][ T4321] udevd[4321]: incorrect ext4 checksum on /dev/loop3 [ 40.904473][ T4577] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 40.906804][ T4577] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 40.908307][ T4577] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 40.910161][ T4577] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 40.911709][ T4577] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 40.917952][ T4577] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 40.919620][ T4577] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4268516029 [ 40.923654][ T4577] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 40.925883][ T4593] ubi0: background thread "ubi_bgt0d" started, PID 4593 [ 41.036409][ T4341] Bluetooth: hci0: command 0x0409 tx timeout [ 41.132802][ T4610] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 41.403925][ T4654] loop4: detected capacity change from 0 to 512 [ 41.422261][ T4654] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.423132][ T4661] loop2: detected capacity change from 0 to 512 [ 41.443879][ T4663] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 41.460375][ T4661] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.470228][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 41.483834][ T4661] EXT4-fs (loop2): 1 orphan inode deleted [ 41.484915][ T4661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.546646][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 41.548671][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1 [ 41.552464][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 41.564739][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 41.634946][ T4685] loop0: detected capacity change from 0 to 512 [ 41.647154][ T4685] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.96: missing EA_INODE flag [ 41.650297][ T4685] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.96: error while reading EA inode 2 err=-117 [ 41.653346][ T4685] EXT4-fs (loop0): 1 orphan inode deleted [ 41.655210][ T4685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.702651][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 41.818375][ T4701] overlayfs: failed to get inode (-116) [ 41.819779][ T4701] overlayfs: failed to get inode (-116) [ 41.845804][ T4703] loop0: detected capacity change from 0 to 512 [ 41.880339][ T4703] EXT4-fs (loop0): 1 orphan inode deleted [ 41.881649][ T4703] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.898796][ T4520] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 41.900751][ T4520] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1 [ 41.908418][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 42.020203][ T4719] loop1: detected capacity change from 0 to 512 [ 42.028300][ T4719] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.108: missing EA_INODE flag [ 42.030447][ T4719] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.108: error while reading EA inode 2 err=-117 [ 42.038026][ T4719] EXT4-fs (loop1): 1 orphan inode deleted [ 42.039116][ T4719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.068406][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 42.158226][ T4736] loop0: detected capacity change from 0 to 512 [ 42.172852][ T4736] EXT4-fs (loop0): 1 orphan inode deleted [ 42.173939][ T4736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.188675][ T4377] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 42.190610][ T4377] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 42.201296][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 42.268243][ T4748] 9pnet_fd: Insufficient options for proto=fd [ 42.314921][ T4757] loop1: detected capacity change from 0 to 512 [ 42.330700][ T4757] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.121: missing EA_INODE flag [ 42.334552][ T4757] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.121: error while reading EA inode 2 err=-117 [ 42.340479][ T4757] EXT4-fs (loop1): 1 orphan inode deleted [ 42.350582][ T4757] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.449269][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 42.479601][ T4774] binder: 4774:4773 cannot find target node [ 42.480723][ T4774] binder: 4773:4774 transaction async to 0:0 failed 1/29189/-22, size 0-0 line 3062 [ 42.509316][ T4776] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 42.569276][ T4785] 9pnet_fd: Insufficient options for proto=fd [ 42.789148][ T4818] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 42.837331][ T4822] loop1: detected capacity change from 0 to 512 [ 42.856773][ T4822] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.013957][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 43.195583][ T4847] loop0: detected capacity change from 0 to 512 [ 43.205174][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 43.211629][ T4847] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.157: missing EA_INODE flag [ 43.214006][ T4847] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.157: error while reading EA inode 2 err=-117 [ 43.220877][ T4847] EXT4-fs (loop0): 1 orphan inode deleted [ 43.224660][ T4847] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.259014][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 43.530536][ T4867] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 43.782557][ T4903] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 45.672617][ T4942] process 'syz.2.191' launched './file0' with NULL argv: empty string added [ 46.822790][ T4975] netlink: 92 bytes leftover after parsing attributes in process `syz.1.204'. [ 48.275465][ T5007] loop3: detected capacity change from 0 to 512 [ 48.317649][ T5007] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.217: missing EA_INODE flag [ 48.319989][ T5007] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.217: error while reading EA inode 2 err=-117 [ 48.331223][ T5007] EXT4-fs (loop3): 1 orphan inode deleted [ 48.353157][ T5007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.225441][ T5023] loop0: detected capacity change from 0 to 1024 [ 49.237601][ T5023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.244234][ T5023] EXT4-fs: inline encryption not supported [ 49.245323][ T5023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.258097][ T5023] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.792174][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 50.492350][ T5050] fuse: Bad value for 'fd' [ 50.534838][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 51.470544][ T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.526975][ T22] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.745391][ T5083] loop4: detected capacity change from 0 to 512 [ 51.800312][ T5083] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.241: inode has both inline data and extents flags [ 51.803358][ T5083] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.241: couldn't read orphan inode 15 (err -117) [ 51.805790][ T5083] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.898890][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 51.939186][ T5088] fuse: Bad value for 'fd' [ 52.656883][ T5100] loop3: detected capacity change from 0 to 512 [ 52.664211][ T5100] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 52.789259][ T5100] EXT4-fs (loop3): 1 truncate cleaned up [ 52.790274][ T5100] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 53.542980][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 54.953432][ T3902] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.986506][ T3902] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.016287][ T5169] loop1: detected capacity change from 0 to 128 [ 55.108701][ T5169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.910283][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 56.201019][ T5201] tipc: Started in network mode [ 56.201911][ T5201] tipc: Node identity e0000002, cluster identity 4711 [ 56.203260][ T5201] tipc: Enabling of bearer rejected, failed to enable media [ 56.237963][ T1664] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 56.358728][ T5219] loop3: detected capacity change from 0 to 8 [ 57.564466][ T5238] loop4: detected capacity change from 0 to 4096 [ 57.617487][ T5238] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.631570][ T5238] EXT4-fs (loop4): shut down requested (2) [ 57.681740][ T5234] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 57.703773][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 57.941569][ T5273] loop3: detected capacity change from 0 to 512 [ 58.004712][ T5276] loop0: detected capacity change from 0 to 8 [ 58.922964][ T5273] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.955888][ T5273] netlink: 'syz.3.308': attribute type 10 has an invalid length. [ 58.963572][ T5273] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.964983][ T5273] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.052350][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.053844][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.055456][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.056785][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.061580][ T5273] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 59.581965][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 59.625478][ T5299] loop3: detected capacity change from 0 to 512 [ 59.640382][ T5299] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.314: missing EA_INODE flag [ 59.642835][ T5299] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.314: error while reading EA inode 2 err=-117 [ 59.645290][ T5299] EXT4-fs (loop3): 1 orphan inode deleted [ 59.649587][ T5299] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.704579][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 59.765789][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'. [ 59.861899][ T5323] fuse: Bad value for 'fd' [ 59.885296][ T5326] loop1: detected capacity change from 0 to 8 [ 59.933344][ T5328] 9pnet_fd: Insufficient options for proto=fd [ 60.036578][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 60.913232][ T5350] loop0: detected capacity change from 0 to 128 [ 61.001385][ T5350] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.436184][ T5350] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.334'. [ 61.451535][ T5358] fuse: Bad value for 'fd' [ 61.477552][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 61.496629][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 61.504693][ T5361] loop4: detected capacity change from 0 to 512 [ 61.510235][ T5365] 9pnet_fd: Insufficient options for proto=fd [ 61.583794][ T5361] EXT4-fs (loop4): Test dummy encryption mode enabled [ 61.585183][ T5361] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 61.604775][ T5377] loop0: detected capacity change from 0 to 512 [ 61.623074][ T5377] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.342: missing EA_INODE flag [ 61.625134][ T5377] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.342: error while reading EA inode 2 err=-117 [ 61.635797][ T5377] EXT4-fs (loop0): 1 orphan inode deleted [ 61.650402][ T5377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.675927][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 61.893677][ T5407] loop1: detected capacity change from 0 to 8 [ 61.941356][ T5413] loop1: detected capacity change from 0 to 512 [ 61.972367][ T5413] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.357: missing EA_INODE flag [ 61.974605][ T5413] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.357: error while reading EA inode 2 err=-117 [ 61.983727][ T5413] EXT4-fs (loop1): 1 orphan inode deleted [ 61.985547][ T5413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.019535][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 62.040340][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 62.155132][ T5430] loop3: detected capacity change from 0 to 2048 [ 62.433133][ T5430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 62.450839][ T5430] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.494766][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 62.539245][ T5449] loop3: detected capacity change from 0 to 8 [ 62.603542][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 62.609822][ T5458] loop3: detected capacity change from 0 to 512 [ 62.625903][ T5458] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.371: missing EA_INODE flag [ 62.629493][ T5458] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.371: error while reading EA inode 2 err=-117 [ 62.633804][ T5458] EXT4-fs (loop3): 1 orphan inode deleted [ 62.634934][ T5458] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.684524][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 62.723647][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 62.801522][ T5478] loop3: detected capacity change from 0 to 8 [ 62.894184][ T5488] loop0: detected capacity change from 0 to 512 [ 62.948782][ T5492] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.387: missing EA_INODE flag [ 62.951251][ T5492] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.387: error while reading EA inode 2 err=-117 [ 62.955556][ T5492] EXT4-fs (loop3): 1 orphan inode deleted [ 62.960109][ T5492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.965856][ T5488] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.011698][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 63.014320][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 63.162253][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 63.276862][ T5532] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.555580][ T5534] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.402: missing EA_INODE flag [ 63.562449][ T5534] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.402: error while reading EA inode 2 err=-117 [ 63.572230][ T5534] EXT4-fs (loop0): 1 orphan inode deleted [ 63.573492][ T5534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.610063][ T5540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.668604][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 63.679376][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 63.899895][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 64.056003][ T4380] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 64.065434][ T4380] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.326656][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 64.486655][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489158][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.995726][ T5673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 65.042434][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 65.222282][ T3902] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 65.224269][ T3902] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.858661][ T5742] binder: 5741:5742 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 65.862463][ T5742] binder: 5741:5742 got transaction to invalid handle, 1 [ 65.863858][ T5742] binder: 5742:5741 cannot find target node [ 65.864829][ T5742] binder: 5741:5742 transaction call to 0:0 failed 4/29201/-22, size 88-24 line 3062 [ 65.867438][ T5742] binder: 5741:5742 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 65.869729][ T5742] binder: 5742 RLIMIT_NICE not set [ 66.551135][ T5782] set_capacity_and_notify: 13 callbacks suppressed [ 66.551146][ T5782] loop3: detected capacity change from 0 to 512 [ 66.555761][ T5782] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.491: missing EA_INODE flag [ 66.558214][ T5782] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.491: error while reading EA inode 2 err=-117 [ 66.560696][ T5782] EXT4-fs (loop3): 1 orphan inode deleted [ 66.561961][ T5782] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.571038][ T5782] overlayfs: failed to resolve './bus': -2 [ 66.584274][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 66.690682][ T4383] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.108246][ T4929] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 67.108371][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 67.134190][ T5814] loop1: detected capacity change from 0 to 128 [ 67.137331][ T5814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=e803c018, mo2=0102] [ 67.138714][ T5814] System zones: 1-3, 19-19, 35-36 [ 67.146016][ T5814] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 67.248813][ T5820] loop3: detected capacity change from 0 to 512 [ 67.268769][ T5820] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.504: missing EA_INODE flag [ 67.274600][ T5820] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.504: error while reading EA inode 2 err=-117 [ 67.277562][ T5820] EXT4-fs (loop3): 1 orphan inode deleted [ 67.278632][ T5820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.825438][ T5820] overlayfs: failed to resolve './bus': -2 [ 67.847953][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 67.911568][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 67.955808][ T151] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 68.005121][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 68.064303][ T5852] loop2: detected capacity change from 0 to 512 [ 68.087864][ T5852] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.517: missing EA_INODE flag [ 68.092312][ T5854] loop0: detected capacity change from 0 to 512 [ 68.093773][ T5852] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.517: error while reading EA inode 2 err=-117 [ 68.099400][ T5852] EXT4-fs (loop2): 1 orphan inode deleted [ 68.100456][ T5852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.107949][ T5852] overlayfs: failed to resolve './bus': -2 [ 68.120887][ T5854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.128312][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 68.150788][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 68.300758][ T151] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 68.341470][ T5888] loop0: detected capacity change from 0 to 512 [ 68.350711][ T5888] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.529: missing EA_INODE flag [ 68.354893][ T5888] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.529: error while reading EA inode 2 err=-117 [ 68.365190][ T5888] EXT4-fs (loop0): 1 orphan inode deleted [ 68.403127][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 68.440250][ T5896] binder: 5895:5896 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 68.443844][ T5896] binder: 5895:5896 got transaction to invalid handle, 1 [ 68.445096][ T5896] binder: 5896:5895 cannot find target node [ 68.448000][ T5896] binder: 5895:5896 transaction call to 0:0 failed 7/29201/-22, size 88-24 line 3062 [ 68.449971][ T5896] binder: 5895:5896 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.452495][ T5896] binder: 5896 RLIMIT_NICE not set [ 68.584890][ T5915] loop4: detected capacity change from 0 to 512 [ 68.591539][ T5915] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.540: missing EA_INODE flag [ 68.594082][ T5915] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.540: error while reading EA inode 2 err=-117 [ 68.597476][ T5915] EXT4-fs (loop4): 1 orphan inode deleted [ 68.680800][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 68.692055][ T4929] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 68.821304][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 69.060153][ T5948] loop0: detected capacity change from 0 to 512 [ 69.063727][ T5948] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.551: missing EA_INODE flag [ 69.066741][ T5948] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.551: error while reading EA inode 2 err=-117 [ 69.069437][ T5948] EXT4-fs (loop0): 1 orphan inode deleted [ 69.248908][ T5279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 69.266992][ T1517] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.301202][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 69.437237][ T5979] loop3: detected capacity change from 0 to 512 [ 69.456140][ T5979] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.563: missing EA_INODE flag [ 69.458318][ T5979] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.563: error while reading EA inode 2 err=-117 [ 69.464603][ T5983] loop0: detected capacity change from 0 to 512 [ 69.466019][ T5979] EXT4-fs (loop3): 1 orphan inode deleted [ 69.496453][ T5988] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 69.504355][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 69.628829][ T7] cfg80211: failed to load regulatory.db [ 69.670938][ T5279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 70.880181][ T6015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=e803c018, mo2=0102] [ 70.893733][ T6015] System zones: 1-3, 19-19, 35-36 [ 71.015095][ T6020] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.577: missing EA_INODE flag [ 71.018042][ T6020] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.577: error while reading EA inode 2 err=-117 [ 71.024437][ T6020] EXT4-fs (loop3): 1 orphan inode deleted [ 71.429724][ T6035] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 71.476509][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 71.595991][ T1702] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 71.874980][ T4340] EXT4-fs unmount: 13 callbacks suppressed [ 71.874994][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 72.573686][ T6076] 9pnet_fd: Insufficient options for proto=fd [ 72.966656][ T6089] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 72.997457][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 73.050861][ T6093] set_capacity_and_notify: 2 callbacks suppressed [ 73.050868][ T6093] loop0: detected capacity change from 0 to 128 [ 73.081964][ T6093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=e803c018, mo2=0102] [ 73.083490][ T6093] System zones: 1-3, 19-19, 35-36 [ 73.084844][ T6093] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 73.731756][ T6114] loop3: detected capacity change from 0 to 256 [ 74.146445][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 74.210658][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 75.353856][ T6159] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 75.665727][ T6170] binder: 6169:6170 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 75.669322][ T6170] binder: 6169:6170 got transaction to invalid handle, 1 [ 75.670788][ T6170] binder: 6170:6169 cannot find target node [ 75.672014][ T6170] binder: 6169:6170 transaction async to 0:0 failed 9/29201/-22, size 72-24 line 3062 [ 75.674289][ T6170] binder: 6169:6170 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 75.682201][ T6170] binder: 6170 RLIMIT_NICE not set [ 76.285078][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 76.348660][ T6189] tipc: Enabling of bearer rejected, failed to enable media [ 76.505243][ T1517] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.513077][ T6200] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 76.531970][ T6204] loop2: detected capacity change from 0 to 512 [ 77.014232][ T6204] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.797508][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 77.905893][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 78.297915][ T6239] fuse: Unknown parameter 'group_i00000000000000000000' [ 79.323024][ T6253] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 79.466772][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 79.541554][ T6270] loop2: detected capacity change from 0 to 256 [ 80.240713][ T6287] loop4: detected capacity change from 0 to 512 [ 80.257768][ T6287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.332300][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 80.539568][ T6313] binder: 6312:6313 ioctl 4018620d 0 returned -22 [ 80.541186][ T6313] binder: 6312:6313 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 80.547542][ T6313] binder: 6312:6313 got transaction to invalid handle, 1 [ 80.548756][ T6313] binder: 6313:6312 cannot find target node [ 80.550351][ T6313] binder: 6312:6313 transaction call to 0:0 failed 12/29201/-22, size 88-24 line 3062 [ 80.552291][ T6313] binder: 6312:6313 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 80.556375][ T6313] binder: 6313 RLIMIT_NICE not set [ 80.599364][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 80.669055][ T6323] loop0: detected capacity change from 0 to 512 [ 80.707613][ T6323] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 80.744753][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 80.772827][ T6330] loop0: detected capacity change from 0 to 256 [ 80.782787][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'. [ 81.576907][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.992723][ T6355] loop4: detected capacity change from 0 to 512 [ 82.009319][ T6355] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.101362][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 82.181323][ T6380] binder: 6379:6380 ioctl 4018620d 0 returned -22 [ 82.187303][ T6380] binder: 6379:6380 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 82.192866][ T6380] binder: 6379:6380 got transaction to invalid handle, 1 [ 82.194605][ T6380] binder: 6380:6379 cannot find target node [ 82.195811][ T6380] binder: 6379:6380 transaction call to 0:0 failed 15/29201/-22, size 88-24 line 3062 [ 82.198811][ T6380] binder: 6379:6380 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 82.201234][ T6380] binder: 6380 RLIMIT_NICE not set [ 82.488754][ T6385] loop1: detected capacity change from 0 to 256 [ 82.603698][ T6390] loop3: detected capacity change from 0 to 256 [ 83.013356][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.110474][ T6401] loop2: detected capacity change from 0 to 512 [ 83.120382][ T6401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.514351][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 84.492489][ T6427] binder: 6426:6427 ioctl 4018620d 0 returned -22 [ 84.505268][ T6427] binder: 6426:6427 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 84.515157][ T6427] binder: 6426:6427 got transaction to invalid handle, 1 [ 84.521358][ T6427] binder: 6427:6426 cannot find target node [ 84.524881][ T6427] binder: 6426:6427 transaction call to 0:0 failed 18/29201/-22, size 88-24 line 3062 [ 84.528242][ T6427] binder: 6426:6427 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.530979][ T6427] binder: 6427 RLIMIT_NICE not set [ 85.083256][ T6440] loop2: detected capacity change from 0 to 256 [ 85.389623][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.422242][ T6446] loop3: detected capacity change from 0 to 256 [ 86.412861][ T6460] loop2: detected capacity change from 0 to 512 [ 86.498864][ T6460] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.719: missing EA_INODE flag [ 86.501084][ T6460] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.719: error while reading EA inode 2 err=-117 [ 86.503729][ T6460] EXT4-fs (loop2): 1 orphan inode deleted [ 86.504744][ T6460] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.519919][ T6460] overlayfs: missing 'lowerdir' [ 86.735525][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 86.821514][ T6471] loop2: detected capacity change from 0 to 512 [ 86.871619][ T6471] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.904866][ T6482] binder: BINDER_SET_CONTEXT_MGR already set [ 86.906213][ T6482] binder: 6481:6482 ioctl 4018620d 20001000 returned -16 [ 86.907798][ T6482] binder: 6481:6482 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 86.910005][ T6482] binder: 6482 RLIMIT_NICE not set [ 87.662732][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 87.781990][ T6489] loop1: detected capacity change from 0 to 512 [ 87.796866][ T6493] loop0: detected capacity change from 0 to 8 [ 87.809576][ T6493] SQUASHFS error: zlib decompression failed, data probably corrupt [ 87.811271][ T6492] loop3: detected capacity change from 0 to 256 [ 87.814792][ T6493] SQUASHFS error: Failed to read block 0x9b: -5 [ 87.819650][ T6493] SQUASHFS error: Unable to read metadata cache entry [99] [ 87.824446][ T6493] SQUASHFS error: Unable to read inode 0x127 [ 87.894745][ T6489] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.728: missing EA_INODE flag [ 87.897183][ T6489] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.728: error while reading EA inode 2 err=-117 [ 87.899685][ T6489] EXT4-fs (loop1): 1 orphan inode deleted [ 87.900761][ T6489] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.334226][ T6498] infiniband syz2: set down [ 88.335192][ T6498] infiniband syz2: added ipvlan0 [ 88.797709][ T6498] infiniband syz2: Couldn't open port 1 [ 88.859302][ T6498] RDS/IB: syz2: added [ 88.860102][ T6498] smc: adding ib device syz2 with port count 1 [ 88.861189][ T6498] smc: ib device syz2 port 1 has pnetid [ 89.102698][ T6510] loop4: detected capacity change from 0 to 1024 [ 89.115973][ T6510] EXT4-fs: Ignoring removed bh option [ 89.128799][ T6510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.325844][ T6516] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.559198][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 89.561105][ T6518] loop3: detected capacity change from 0 to 512 [ 89.597356][ T6518] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.731: missing EA_INODE flag [ 89.599652][ T6518] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.731: error while reading EA inode 2 err=-117 [ 89.602684][ T6518] EXT4-fs (loop3): 1 orphan inode deleted [ 89.603142][ T6522] loop1: detected capacity change from 0 to 1024 [ 89.603701][ T6518] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.607705][ T6522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.610137][ T6522] EXT4-fs: inline encryption not supported [ 89.613397][ T6522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.619623][ T6518] overlayfs: missing 'lowerdir' [ 89.625575][ T6522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.713924][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 90.466454][ T1702] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 90.470121][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 90.474167][ T6529] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 90.548635][ T6537] set_capacity_and_notify: 1 callbacks suppressed [ 90.548642][ T6537] loop4: detected capacity change from 0 to 256 [ 91.037529][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 91.056192][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 91.094156][ T6552] fuse: Bad value for 'fd' [ 91.113288][ T6558] loop2: detected capacity change from 0 to 512 [ 91.132707][ T6558] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.750: missing EA_INODE flag [ 91.143787][ T6558] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.750: error while reading EA inode 2 err=-117 [ 91.148607][ T6558] EXT4-fs (loop2): 1 orphan inode deleted [ 91.149656][ T6558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.159336][ T6558] overlayfs: missing 'workdir' [ 91.193341][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 91.272146][ T6575] loop0: detected capacity change from 0 to 1024 [ 91.275237][ T6575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.277416][ T6575] EXT4-fs: inline encryption not supported [ 91.278652][ T6575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.291052][ T39] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 91.301045][ T6575] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.389301][ T6582] netlink: 160 bytes leftover after parsing attributes in process `syz.2.759'. [ 91.390954][ T6582] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 91.392420][ T6582] netlink: 'syz.2.759': attribute type 2 has an invalid length. [ 91.393691][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.759'. [ 92.159730][ T6588] loop2: detected capacity change from 0 to 512 [ 92.234383][ T6588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.240719][ T6593] fuse: Bad value for 'fd' [ 92.245612][ T6595] loop3: detected capacity change from 0 to 512 [ 92.270121][ T6595] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.764: missing EA_INODE flag [ 92.283798][ T6595] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.764: error while reading EA inode 2 err=-117 [ 92.298021][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 92.303846][ T6595] EXT4-fs (loop3): 1 orphan inode deleted [ 92.304875][ T6595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.333546][ T6595] overlayfs: missing 'workdir' [ 92.381007][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 92.449774][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 92.492336][ T6617] loop0: detected capacity change from 0 to 256 [ 92.497339][ T4583] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 92.938493][ T6627] loop1: detected capacity change from 0 to 512 [ 92.962967][ T6629] loop2: detected capacity change from 0 to 512 [ 92.971229][ T6629] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.778: missing EA_INODE flag [ 92.974706][ T6629] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.778: error while reading EA inode 2 err=-117 [ 92.979864][ T6627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.989247][ T6629] EXT4-fs (loop2): 1 orphan inode deleted [ 92.991251][ T6629] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.998384][ T6629] overlayfs: missing 'workdir' [ 93.010248][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 93.030680][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 93.038493][ T6634] loop2: detected capacity change from 0 to 512 [ 93.043067][ T6634] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.779: missing EA_INODE flag [ 93.047694][ T6634] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.779: error while reading EA inode 2 err=-117 [ 93.052379][ T6634] EXT4-fs (loop2): 1 orphan inode deleted [ 93.053875][ T6634] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.575964][ T6641] rdma_rxe: rxe_register_device failed with error -23 [ 93.578269][ T6641] rdma_rxe: failed to add ipvlan0 [ 94.091185][ T6644] loop1: detected capacity change from 0 to 1024 [ 94.118252][ T6644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.119587][ T6644] EXT4-fs: inline encryption not supported [ 94.120692][ T6644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.184115][ T6644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.775467][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 94.982348][ T6665] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 94.989200][ T6665] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.789: corrupted inode contents [ 94.993404][ T6668] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.790: missing EA_INODE flag [ 94.995612][ T6668] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.790: error while reading EA inode 2 err=-117 [ 95.086654][ T6665] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #11: comm syz.3.789: mark_inode_dirty error [ 95.099284][ T6665] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.789: invalid indirect mapped block 1 (level 1) [ 95.101926][ T6668] EXT4-fs (loop4): 1 orphan inode deleted [ 95.102960][ T6668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.106824][ T6665] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.789: corrupted inode contents [ 95.476718][ T6665] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 95.486878][ T6665] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.789: corrupted inode contents [ 95.493598][ T6665] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.789: mark_inode_dirty error [ 95.502291][ T6665] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 95.512525][ T6665] EXT4-fs (loop3): 1 truncate cleaned up [ 95.513645][ T6665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.543067][ T6665] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.789: path /158/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 95.560253][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 95.587645][ T6679] set_capacity_and_notify: 2 callbacks suppressed [ 95.587653][ T6679] loop0: detected capacity change from 0 to 256 [ 95.690442][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 95.704158][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 95.984485][ T6685] fuse: Invalid rootmode [ 96.039152][ T6691] loop2: detected capacity change from 0 to 256 [ 96.524693][ T6707] loop0: detected capacity change from 0 to 512 [ 96.533710][ T6707] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.802: missing EA_INODE flag [ 96.537125][ T6707] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.802: error while reading EA inode 2 err=-117 [ 96.556323][ T6707] EXT4-fs (loop0): 1 orphan inode deleted [ 96.557752][ T6707] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.583656][ T6713] binder: 6712:6713 tried to acquire reference to desc 0, got 1 instead [ 96.596512][ T6713] binder: 6712:6713 ioctl c0306201 20000680 returned -14 [ 96.612546][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 96.614750][ T4376] binder: undelivered transaction 24, process died. [ 96.715481][ T6722] fuse: Invalid rootmode [ 97.394447][ T6753] binder: 6752:6753 tried to acquire reference to desc 0, got 1 instead [ 97.398813][ T6753] binder_alloc: 6752: pid 6752 spamming oneway? 2 buffers allocated for a total size of 5120 [ 97.401319][ T6753] binder_alloc: 6752: pid 6752 spamming oneway? 3 buffers allocated for a total size of 5128 [ 97.404126][ T22] binder: undelivered TRANSACTION_COMPLETE [ 97.405186][ T22] binder: undelivered TRANSACTION_COMPLETE [ 97.407202][ T22] binder: undelivered TRANSACTION_COMPLETE [ 97.412627][ T22] binder: undelivered transaction 30, process died. [ 97.413874][ T22] binder: undelivered transaction 31, process died. [ 97.415099][ T22] binder: undelivered transaction 29, process died. [ 97.426971][ T6755] fuse: Invalid rootmode [ 97.494639][ T6761] loop1: detected capacity change from 0 to 256 [ 98.221449][ T6789] fuse: Bad value for 'rootmode' [ 98.470531][ T6799] binder: 6798:6799 got transaction to invalid handle, 1 [ 98.472029][ T6799] binder: 6799:6798 cannot find target node [ 98.472314][ T6800] loop4: detected capacity change from 0 to 1024 [ 98.473005][ T6799] binder: 6798:6799 transaction call to 0:0 failed 35/29201/-22, size 88-24 line 3062 [ 98.474501][ T6800] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.477242][ T6799] binder: 6798:6799 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 98.480030][ T6799] binder: 6799 RLIMIT_NICE not set [ 98.481649][ T6800] EXT4-fs: inline encryption not supported [ 98.483388][ T6800] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.490671][ T6800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.301560][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.329573][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 99.383486][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.843'. [ 99.512166][ T6838] loop1: detected capacity change from 0 to 256 [ 99.604331][ T6843] binder: 6842:6843 got transaction to invalid handle, 1 [ 99.606805][ T6843] binder: 6842:6843 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 99.608911][ T6843] binder: 6843 RLIMIT_NICE not set [ 99.788985][ T6848] loop3: detected capacity change from 0 to 1024 [ 99.790502][ T6848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.791678][ T6848] EXT4-fs: inline encryption not supported [ 99.792722][ T6848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.809682][ T6848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.714180][ T6862] loop0: detected capacity change from 0 to 2048 [ 100.984633][ T6709] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 100.990581][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 101.019294][ T6862] loop0: p2 < > p3 < p5 > p4 [ 101.020498][ T6862] loop0: partition table partially beyond EOD, truncated [ 101.023971][ T6862] loop0: p2 start 4278190080 is beyond EOD, truncated [ 101.047702][ T6881] loop3: detected capacity change from 0 to 256 [ 101.048683][ T6862] loop0: p4 size 8192 extends beyond EOD, truncated [ 101.056600][ T6862] loop0: p5 size 8192 extends beyond EOD, truncated [ 101.094005][ T6885] fuse: Unknown parameter 'use00000000000000000000' [ 101.120522][ T6888] vivid-000: disconnect [ 101.143977][ T6887] vivid-000: reconnect [ 101.171017][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 101.175191][ T4319] udevd[4319]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 101.218885][ T6897] binder: 6896:6897 got transaction to invalid handle, 1 [ 101.220636][ T6897] binder: 6896:6897 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 101.245706][ T6899] loop0: detected capacity change from 0 to 256 [ 101.264328][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 101.939640][ T6909] loop3: detected capacity change from 0 to 1024 [ 101.942888][ T6909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.944538][ T6909] EXT4-fs: inline encryption not supported [ 101.945823][ T6909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.961989][ T6909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.049636][ T22] binder_debug: 5 callbacks suppressed [ 102.049644][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.189618][ T6921] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.872: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.814989][ T6921] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 102.817432][ T6921] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.817432][ T6921] [ 102.871818][ T6928] loop4: detected capacity change from 0 to 256 [ 102.979397][ T6935] loop1: detected capacity change from 0 to 512 [ 102.997654][ T6935] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.999852][ T6935] EXT4-fs (loop1): 1 orphan inode deleted [ 103.001085][ T6935] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.115613][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 103.431442][ T6943] loop4: detected capacity change from 0 to 256 [ 103.872845][ T6948] kernel profiling enabled (shift: 63) [ 103.874446][ T6948] profiling shift: 63 too large [ 103.885859][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 104.805272][ T6999] loop1: detected capacity change from 0 to 256 [ 104.885375][ T7009] loop1: detected capacity change from 0 to 256 [ 105.483626][ T7023] loop2: detected capacity change from 0 to 1024 [ 105.505004][ T7023] EXT4-fs: Ignoring removed bh option [ 105.557334][ T7023] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.638941][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 105.664774][ T7029] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 107.058086][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 107.084086][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 107.180410][ T7056] loop2: detected capacity change from 0 to 512 [ 107.237851][ T7056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.245030][ T4919] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 107.250668][ T7068] loop0: detected capacity change from 0 to 256 [ 107.335310][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 107.892678][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 108.024333][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 108.094318][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 108.395556][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 108.679544][ T7138] loop4: detected capacity change from 0 to 512 [ 108.683910][ T5179] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 108.725561][ T7138] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.790436][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 108.894621][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.956'. [ 108.965185][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 109.073580][ T5179] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 109.301667][ T7186] loop0: detected capacity change from 0 to 512 [ 109.322164][ T7186] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.355354][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 109.570472][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 109.712436][ T5279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 109.799114][ T7219] loop0: detected capacity change from 0 to 512 [ 109.810877][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 109.817941][ T7219] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.869485][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 110.130114][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 110.220922][ T7258] loop1: detected capacity change from 0 to 512 [ 110.234656][ T5279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 110.252474][ T7258] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.308556][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 110.628402][ T4918] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 110.649032][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 110.698522][ T7314] loop2: detected capacity change from 0 to 512 [ 110.714316][ T7314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.729498][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 110.746473][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 111.081139][ T4918] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 111.207626][ T7371] loop1: detected capacity change from 0 to 512 [ 111.252450][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 111.255610][ T7371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.433722][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 111.567386][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 111.633410][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 112.042278][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 112.239460][ T7426] loop4: detected capacity change from 0 to 256 [ 112.358803][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 112.582277][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 112.604410][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 112.705867][ T6642] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 112.759841][ T7469] loop0: detected capacity change from 0 to 256 [ 113.203435][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 113.229580][ T5135] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 113.257075][ T7502] loop0: detected capacity change from 0 to 256 [ 113.538398][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 113.541812][ T7520] loop2: detected capacity change from 0 to 256 [ 113.599013][ T7525] loop1: detected capacity change from 0 to 512 [ 113.698660][ T7525] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.712139][ T5135] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 113.724564][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 113.743034][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 113.763885][ T7544] loop4: detected capacity change from 0 to 256 [ 114.173628][ T7563] loop0: detected capacity change from 0 to 256 [ 114.308251][ T5135] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 114.368766][ T7574] loop1: detected capacity change from 0 to 512 [ 114.395379][ T7574] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.451097][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 115.807567][ T7615] loop3: detected capacity change from 0 to 512 [ 115.823349][ T7618] loop2: detected capacity change from 0 to 256 [ 115.836815][ T5179] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 115.973251][ T7626] fuse: Unknown parameter 'user_i00000000000000000000' [ 116.007508][ T7615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.140230][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 116.472801][ T7638] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 116.476950][ T7638] EXT4-fs (loop0): Remounting filesystem read-only [ 116.478326][ T7638] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1114: invalid indirect mapped block 4278190080 (level 0) [ 116.480909][ T7638] EXT4-fs (loop0): Remounting filesystem read-only [ 116.481942][ T7638] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1114: invalid indirect mapped block 1 (level 1) [ 116.484618][ T7638] EXT4-fs (loop0): Remounting filesystem read-only [ 116.485910][ T7638] EXT4-fs (loop0): 1 truncate cleaned up [ 116.487045][ T7638] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 116.508247][ T7641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.510651][ T7641] EXT4-fs: inline encryption not supported [ 116.512862][ T7641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.532818][ T7641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 116.715645][ T7645] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.1115: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.759134][ T7645] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 116.761604][ T7645] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.761604][ T7645] [ 117.738575][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 117.769036][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 117.813553][ T7665] fuse: Unknown parameter 'user_id00000000000000000000' [ 117.821415][ T7664] binder_user_error: 1 callbacks suppressed [ 117.821423][ T7664] binder: 7663:7664 got transaction to invalid handle, 1 [ 117.823694][ T7664] binder: 7664:7663 cannot find target node [ 117.824661][ T7664] binder: 7663:7664 transaction call to 0:0 failed 47/29201/-22, size 88-24 line 3062 [ 117.851093][ T7664] binder: 7663:7664 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 117.853660][ T7664] binder: 7664 RLIMIT_NICE not set [ 117.875823][ T5179] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 118.442002][ T7698] fuse: Unknown parameter 'user_id00000000000000000000' [ 118.639492][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 118.676165][ T5179] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 119.429511][ T7728] __nla_validate_parse: 1 callbacks suppressed [ 119.429521][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'. [ 119.451475][ T7737] fuse: Unknown parameter 'user_id00000000000000000000' [ 119.495555][ T7741] binder: 7740:7741 got transaction to invalid handle, 1 [ 119.497254][ T7741] binder: 7741:7740 cannot find target node [ 119.498402][ T7741] binder: 7740:7741 transaction call to 0:0 failed 51/29201/-22, size 88-24 line 3062 [ 119.500610][ T7741] binder: 7740:7741 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 119.503168][ T7741] binder: 7741 RLIMIT_NICE not set [ 119.921451][ T5179] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 120.455018][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.564031][ T7769] fuse: Bad value for 'fd' [ 120.694161][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 121.017566][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 121.113794][ T5179] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 121.558371][ T7807] binder: tried to use weak ref as strong ref [ 121.561302][ T7807] binder: 7806:7807 Acquire 1 refcount change on invalid ref 0 ret -22 [ 121.562649][ T7807] binder: 7806:7807 got transaction to invalid handle, 1 [ 121.563842][ T7807] binder: 7807:7806 cannot find target node [ 121.565023][ T7807] binder: 7806:7807 transaction call to 0:0 failed 54/29201/-22, size 88-24 line 3062 [ 121.567701][ T1517] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.624988][ T7811] fuse: Bad value for 'fd' [ 122.566654][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 122.569576][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 122.622807][ T7840] binder: tried to use weak ref as strong ref [ 122.631706][ T7844] fuse: Bad value for 'fd' [ 122.642695][ T7846] set_capacity_and_notify: 3 callbacks suppressed [ 122.642702][ T7846] loop0: detected capacity change from 0 to 1024 [ 122.645239][ T7846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.646916][ T7840] binder: 7840:7839 cannot find target node [ 122.655670][ T7846] EXT4-fs: inline encryption not supported [ 122.660163][ T7846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.660289][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1187'. [ 123.052476][ T7846] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.070858][ T7861] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1193'. [ 123.862957][ T7867] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.1189: lblock 0 mapped to illegal pblock 0 (length 1) [ 124.156467][ T7867] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 124.158611][ T7867] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.158611][ T7867] [ 124.350285][ T6642] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 124.595008][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 124.615797][ T7888] fuse: Unknown parameter '0x0000000000000003' [ 124.648167][ T7890] binder_user_error: 2 callbacks suppressed [ 124.648174][ T7890] binder: tried to use weak ref as strong ref [ 124.650399][ T7890] binder: 7889:7890 Acquire 1 refcount change on invalid ref 0 ret -22 [ 124.651934][ T7890] binder: 7889:7890 got transaction to invalid handle, 1 [ 124.653221][ T7890] binder_debug: 2 callbacks suppressed [ 124.653231][ T7890] binder: 7890:7889 cannot find target node [ 124.655267][ T7890] binder: 7889:7890 transaction call to 0:0 failed 60/29201/-22, size 88-24 line 3062 [ 124.657520][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.675710][ T7892] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1204'. [ 124.785761][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 125.255281][ T7925] fuse: Unknown parameter '0x0000000000000003' [ 125.417088][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 125.435299][ T7939] binder: 7938:7939 ioctl 4018620d 0 returned -22 [ 125.440301][ T7939] binder: tried to use weak ref as strong ref [ 125.441670][ T7939] binder: 7938:7939 Acquire 1 refcount change on invalid ref 0 ret -22 [ 125.443692][ T7939] binder: 7938:7939 got transaction to invalid handle, 1 [ 125.451015][ T7939] binder: 7939:7938 cannot find target node [ 125.452341][ T7939] binder: 7938:7939 transaction call to 0:0 failed 63/29201/-22, size 88-24 line 3062 [ 125.454476][ T7939] binder: 7938:7939 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 125.457212][ T7939] binder: 7939 RLIMIT_NICE not set [ 125.602611][ T4919] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 125.689288][ T7947] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1217'. [ 125.916629][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.917907][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.115344][ T7964] fuse: Unknown parameter '0x0000000000000003' [ 126.153048][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 126.249250][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 126.257861][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.382877][ T4930] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 127.039476][ T7998] loop3: detected capacity change from 0 to 512 [ 127.069376][ T7998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.190706][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 127.574821][ T8008] binder: 8007:8008 ioctl 4018620d 0 returned -22 [ 127.578981][ T8008] binder: tried to use weak ref as strong ref [ 127.580271][ T8008] binder: 8007:8008 Acquire 1 refcount change on invalid ref 0 ret -22 [ 127.582026][ T8008] binder: 8008:8007 cannot find target node [ 127.583297][ T8008] binder: 8007:8008 transaction call to 0:0 failed 66/29201/-22, size 88-24 line 3062 [ 128.645826][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.794401][ T8057] loop3: detected capacity change from 0 to 256 [ 130.269914][ T8063] binder: 8062:8063 ioctl 4018620d 0 returned -22 [ 130.275735][ T8063] binder_user_error: 3 callbacks suppressed [ 130.275741][ T8063] binder: tried to use weak ref as strong ref [ 130.277668][ T39] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 130.280096][ T8063] binder: 8062:8063 Acquire 1 refcount change on invalid ref 0 ret -22 [ 130.286101][ T8063] binder: 8062:8063 got transaction to invalid handle, 1 [ 130.289546][ T8063] binder: 8063:8062 cannot find target node [ 130.292712][ T8063] binder: 8062:8063 transaction call to 0:0 failed 69/29201/-22, size 88-24 line 3062 [ 130.298704][ T8063] binder: 8062:8063 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 130.301209][ T8063] binder: 8063 RLIMIT_NICE not set [ 131.291560][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 132.161449][ T39] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 132.300122][ T8102] fuse: Unknown parameter 'fd0x0000000000000003' [ 132.672919][ T8114] binder: 8113:8114 ioctl c0306201 0 returned -14 [ 132.674472][ T8114] binder: 8113:8114 got transaction to invalid handle, 1 [ 132.675869][ T8114] binder: 8114:8113 cannot find target node [ 132.684413][ T8114] binder: 8113:8114 transaction async to 0:0 failed 73/29201/-22, size 72-24 line 3062 [ 132.689060][ T8114] binder: 8113:8114 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 132.695528][ T8114] binder: 8114 RLIMIT_NICE not set [ 132.731338][ T8121] loop3: detected capacity change from 0 to 256 [ 133.444804][ T4583] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 133.503332][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.549244][ T8141] fuse: Unknown parameter 'fd0x0000000000000003' [ 133.911779][ T8163] loop2: detected capacity change from 0 to 256 [ 134.832040][ T8177] binder: 8176:8177 ioctl c0306201 0 returned -14 [ 134.833405][ T39] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 134.834485][ T8177] binder: 8176:8177 got transaction to invalid handle, 1 [ 134.844078][ T8177] binder: 8177:8176 cannot find target node [ 134.849306][ T8177] binder: 8176:8177 transaction async to 0:0 failed 77/29201/-22, size 72-24 line 3062 [ 134.861365][ T8177] binder: 8176:8177 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 134.881727][ T8179] loop4: detected capacity change from 0 to 256 [ 134.949458][ T8181] fuse: Unknown parameter 'fd0x0000000000000003' [ 135.273560][ T8198] loop1: detected capacity change from 0 to 256 [ 135.646439][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.706710][ T6642] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 137.092446][ T8236] loop3: detected capacity change from 0 to 256 [ 137.134042][ T8239] binder: 8238:8239 ioctl c0306201 0 returned -14 [ 137.145275][ T8239] binder_user_error: 1 callbacks suppressed [ 137.145283][ T8239] binder: 8238:8239 got transaction to invalid handle, 1 [ 137.153046][ T8239] binder: 8239:8238 cannot find target node [ 137.154367][ T8239] binder: 8238:8239 transaction async to 0:0 failed 81/29201/-22, size 72-24 line 3062 [ 137.160310][ T8239] binder: 8238:8239 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 137.178597][ T8239] binder: 8239 RLIMIT_NICE not set [ 137.193505][ T8241] loop3: detected capacity change from 0 to 512 [ 137.223151][ T8241] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.299471][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 137.327215][ T8246] loop1: detected capacity change from 0 to 256 [ 137.408630][ T6642] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 137.960149][ T1517] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.074136][ T8281] loop4: detected capacity change from 0 to 512 [ 139.130341][ T8281] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.154455][ T8286] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1334'. [ 139.197979][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 139.336922][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'. [ 139.391279][ T8308] binder: 8307:8308 got transaction to invalid handle, 1 [ 139.396981][ T8308] binder: 8308:8307 cannot find target node [ 139.398019][ T8308] binder: 8307:8308 transaction async to 0:0 failed 85/29201/-22, size 72-24 line 3062 [ 139.412869][ T8308] binder: 8307:8308 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 139.425475][ T8308] binder: 8308 RLIMIT_NICE not set [ 139.446513][ T8313] loop1: detected capacity change from 0 to 256 [ 140.218963][ T1517] binder: undelivered TRANSACTION_ERROR: 29201 [ 140.239308][ T8326] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1345'. [ 141.216800][ T4918] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 141.491429][ T8353] binder: 8352:8353 got transaction to invalid handle, 1 [ 141.494972][ T8353] binder: 8353:8352 cannot find target node [ 141.497026][ T8353] binder: 8352:8353 transaction async to 0:0 failed 89/29201/-22, size 72-24 line 3062 [ 141.501093][ T8353] binder: 8352:8353 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 141.503232][ T8353] binder: 8353 RLIMIT_NICE not set [ 141.530245][ T8355] loop2: detected capacity change from 0 to 256 [ 141.639357][ T8360] loop2: detected capacity change from 0 to 256 [ 142.322393][ T4383] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.930417][ T8383] loop4: detected capacity change from 0 to 256 [ 142.981405][ T5279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 143.237255][ T8397] binder: 8396:8397 got transaction to invalid handle, 1 [ 143.240650][ T8397] binder: 8397:8396 cannot find target node [ 143.241712][ T8397] binder: 8396:8397 transaction async to 0:0 failed 93/29201/-22, size 72-24 line 3062 [ 143.244272][ T8397] binder: 8396:8397 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 143.247455][ T8397] binder: 8397 RLIMIT_NICE not set [ 143.837143][ T8413] loop4: detected capacity change from 0 to 256 [ 143.937040][ T4520] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 144.068360][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.264158][ T8448] netlink: 'syz.1.1387': attribute type 72 has an invalid length. [ 145.284535][ T8452] loop0: detected capacity change from 0 to 256 [ 147.148895][ T8491] netlink: 'syz.2.1400': attribute type 72 has an invalid length. [ 147.338804][ T8503] binder: 8501:8503 tried to acquire reference to desc 0, got 1 instead [ 147.346686][ T8503] binder: 8501:8503 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 147.348840][ T8503] binder: 8503 RLIMIT_NICE not set [ 147.349752][ T8503] binder: undelivered transaction 98, fd fixups failed [ 147.350951][ T8503] binder: 8501:8503 async transaction 98 fd fixups failed 29201/-12, line 4684 [ 147.362177][ T8505] loop1: detected capacity change from 0 to 512 [ 147.365448][ T4380] binder: undelivered TRANSACTION_COMPLETE [ 147.439632][ T8517] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1411'. [ 147.443906][ T8505] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.494187][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 148.348904][ T8545] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1419'. [ 148.386481][ T8547] loop0: detected capacity change from 0 to 256 [ 148.462097][ T8551] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1422'. [ 148.877537][ T8558] loop2: detected capacity change from 0 to 512 [ 148.928208][ T8558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 149.005718][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 149.388348][ T8584] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1434'. [ 150.635865][ T8614] loop2: detected capacity change from 0 to 256 [ 151.600806][ T8634] loop0: detected capacity change from 0 to 512 [ 151.622829][ T8634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.665991][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 151.694549][ T8640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1452'. [ 152.454813][ T8672] loop2: detected capacity change from 0 to 256 [ 152.595749][ T8677] loop4: detected capacity change from 0 to 256 [ 152.730434][ T8680] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1465'. [ 153.107234][ T8712] loop3: detected capacity change from 0 to 256 [ 153.443763][ T8718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1477'. [ 154.509478][ T8752] loop3: detected capacity change from 0 to 256 [ 155.836635][ T8777] loop2: detected capacity change from 0 to 512 [ 156.684779][ T8777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.717846][ T8798] loop1: detected capacity change from 0 to 1024 [ 156.720709][ T8798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.721927][ T8798] EXT4-fs: inline encryption not supported [ 156.725338][ T8798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.729353][ T8799] loop4: detected capacity change from 0 to 256 [ 156.748303][ T8798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 156.834853][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 157.948881][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 158.977375][ T8848] loop4: detected capacity change from 0 to 512 [ 159.012771][ T8854] binder: 8853:8854 tried to acquire reference to desc 0, got 1 instead [ 159.015935][ T8848] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.020515][ T8854] binder: 8853:8854 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 159.023053][ T8854] binder: 8854 RLIMIT_NICE not set [ 159.023972][ T8854] binder: 8854 RLIMIT_NICE not set [ 159.024902][ T8854] binder: send failed reply for transaction 104 to 8853:8854 [ 159.027336][ T8854] binder: 8853:8854 ioctl c0306201 20000680 returned -14 [ 159.880547][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 160.028112][ T8876] loop0: detected capacity change from 0 to 1024 [ 160.036581][ T8876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.037967][ T8876] EXT4-fs: inline encryption not supported [ 160.038888][ T8876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.094200][ T8876] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 161.196507][ T8884] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 161.204262][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 161.222205][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 161.277067][ T8910] binder: 8909:8910 tried to acquire reference to desc 0, got 1 instead [ 161.279205][ T8910] binder: 8909:8910 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 161.281624][ T8910] binder: 8910 RLIMIT_NICE not set [ 161.282519][ T8910] binder: 8910 RLIMIT_NICE not set [ 161.283450][ T8910] binder: send failed reply for transaction 111 to 8909:8910 [ 161.284738][ T8910] binder: 8909:8910 ioctl c0306201 20000680 returned -14 [ 161.504683][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 161.508611][ T8933] binder: 8932:8933 ioctl 4018620d 200000c0 returned -16 [ 161.514377][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 161.519290][ T8933] binder: 8932:8933 ioctl 4018620d 20000040 returned -16 [ 161.521190][ T8933] binder: 8932:8933 got transaction to invalid handle, 1 [ 161.522465][ T8933] binder: 8933:8932 cannot find target node [ 161.523600][ T8933] binder: 8932:8933 transaction async to 0:0 failed 115/29201/-22, size 0-0 line 3062 [ 161.526495][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.544842][ T8936] loop0: detected capacity change from 0 to 256 [ 162.410698][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1545'. [ 162.814122][ T8965] binder: BINDER_SET_CONTEXT_MGR already set [ 162.816171][ T8965] binder: 8964:8965 ioctl 4018620d 200000c0 returned -16 [ 162.833299][ T8965] binder: BINDER_SET_CONTEXT_MGR already set [ 162.834605][ T8965] binder: 8964:8965 ioctl 4018620d 20000040 returned -16 [ 162.838776][ T8965] binder: 8964:8965 got transaction to invalid handle, 1 [ 162.841202][ T8965] binder: 8965:8964 cannot find target node [ 162.846920][ T8965] binder: 8964:8965 transaction async to 0:0 failed 117/29201/-22, size 0-0 line 3062 [ 162.854144][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.252780][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 164.405733][ T9006] binder: 9005:9006 tried to acquire reference to desc 0, got 1 instead [ 164.408903][ T9006] binder_alloc: 9005: pid 9005 spamming oneway? 2 buffers allocated for a total size of 5120 [ 164.412203][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 164.413225][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 164.428503][ T4378] binder: undelivered transaction 123, process died. [ 164.429851][ T4378] binder: undelivered transaction 122, process died. [ 164.510891][ T9014] binder: 9013:9014 got transaction to invalid handle, 1 [ 164.513413][ T9014] binder: 9014:9013 cannot find target node [ 164.516262][ T9014] binder: 9013:9014 transaction call to 0:0 failed 127/29201/-22, size 88-24 line 3062 [ 164.520727][ T9014] binder: 9013:9014 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 164.527611][ T9014] binder: 9014 RLIMIT_NICE not set [ 164.570541][ T4376] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 164.572557][ T4376] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.339061][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 165.902533][ T9045] binder: BINDER_SET_CONTEXT_MGR already set [ 165.903687][ T9045] binder: 9044:9045 ioctl 4018620d 200000c0 returned -16 [ 165.909684][ T9045] binder: BINDER_SET_CONTEXT_MGR already set [ 165.910892][ T9045] binder: 9044:9045 ioctl 4018620d 20000040 returned -16 [ 165.912705][ T9045] binder: 9044:9045 got transaction to invalid handle, 1 [ 165.914115][ T9045] binder: 9045:9044 cannot find target node [ 165.915225][ T9045] binder: 9044:9045 transaction async to 0:0 failed 129/29201/-22, size 0-0 line 3062 [ 165.918281][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.002190][ T9049] loop2: detected capacity change from 0 to 1024 [ 166.004044][ T9049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.005459][ T9049] EXT4-fs: inline encryption not supported [ 166.009477][ T9049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.023185][ T9049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.982793][ T9062] binder: 9061:9062 got transaction to invalid handle, 1 [ 166.991841][ T9062] binder: 9061:9062 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 166.994426][ T9062] binder: 9062 RLIMIT_NICE not set [ 167.165388][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 167.202532][ T4379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 167.205039][ T4379] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.394658][ T9079] binder: 9078:9079 tried to acquire reference to desc 0, got 1 instead [ 168.612280][ T9102] loop2: detected capacity change from 0 to 1024 [ 168.614134][ T9102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.615517][ T9102] EXT4-fs: inline encryption not supported [ 168.622369][ T9102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.641670][ T9102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.732274][ T4520] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 169.823615][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 170.363530][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 170.365508][ T4378] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.885507][ T4929] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 171.362389][ T9158] loop2: detected capacity change from 0 to 1024 [ 171.378358][ T9158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.386503][ T9158] EXT4-fs: inline encryption not supported [ 171.396493][ T9158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.420686][ T9158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 171.506890][ T9167] binder: 9166:9167 tried to acquire reference to desc 0, got 1 instead [ 171.509612][ T4380] binder_debug: 7 callbacks suppressed [ 171.509617][ T4380] binder: undelivered TRANSACTION_COMPLETE [ 171.511857][ T4380] binder: undelivered TRANSACTION_COMPLETE [ 171.520028][ T4380] binder: undelivered transaction 145, process died. [ 171.521348][ T4380] binder: undelivered transaction 144, process died. [ 172.540452][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 172.711654][ T1517] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 172.723184][ T1517] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.000496][ T4930] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 173.014460][ T9186] fido_id[9186]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.223588][ T9201] loop4: detected capacity change from 0 to 512 [ 174.292886][ T9203] binder: BINDER_SET_CONTEXT_MGR already set [ 174.294026][ T9203] binder: 9202:9203 ioctl 4018620d 20000100 returned -16 [ 174.312760][ T9203] binder: BINDER_SET_CONTEXT_MGR already set [ 174.313813][ T9203] binder: 9202:9203 ioctl 4018620d 20001000 returned -16 [ 174.326354][ T9205] loop2: detected capacity change from 0 to 256 [ 174.328270][ T9203] binder: 9202:9203 got transaction to invalid handle, 1 [ 174.338759][ T9203] binder: 9203:9202 cannot find target node [ 174.360418][ T9203] binder: 9202:9203 transaction call to 0:0 failed 147/29201/-22, size 88-24 line 3062 [ 174.401516][ T9203] binder: 9202:9203 ioctl c0306201 0 returned -14 [ 174.402962][ T9203] binder: 9202:9203 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 174.405103][ T9203] binder: 9203 RLIMIT_NICE not set [ 174.410669][ T9201] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.473805][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 174.554981][ T9] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 175.520800][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.542246][ T4380] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 175.544521][ T4380] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.603389][ T9228] loop0: detected capacity change from 0 to 256 [ 175.700951][ T9226] fido_id[9226]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 176.068557][ T9245] loop4: detected capacity change from 0 to 512 [ 176.126409][ T9245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.229885][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 176.271651][ T4919] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 177.021258][ T9258] binder: 9257:9258 tried to acquire reference to desc 0, got 1 instead [ 177.040914][ T9258] binder: 9257:9258 ioctl c0306201 0 returned -14 [ 177.042241][ T9258] binder: 9257:9258 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 177.044469][ T9258] binder: 9258 RLIMIT_NICE not set [ 177.045372][ T9258] binder: 9258 RLIMIT_NICE not set [ 177.058807][ T9258] binder: send failed reply for transaction 152 to 9257:9258 [ 177.060182][ T9258] binder: 9257:9258 transaction 152 fd fixups failed 29201/-12, line 4684 [ 177.062624][ T9260] loop0: detected capacity change from 0 to 256 [ 177.064627][ T7] binder: undelivered TRANSACTION_COMPLETE [ 177.065707][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 178.177019][ T9280] loop2: detected capacity change from 0 to 512 [ 178.281592][ T9280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.318344][ T5279] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 178.800767][ T9295] binder: BINDER_SET_CONTEXT_MGR already set [ 178.804146][ T9295] binder: 9294:9295 ioctl 4018620d 20000100 returned -16 [ 179.074056][ T9295] binder: BINDER_SET_CONTEXT_MGR already set [ 179.075212][ T9295] binder: 9294:9295 ioctl 4018620d 20001000 returned -16 [ 179.077168][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 179.080739][ T9295] binder: 9294:9295 got transaction to invalid handle, 1 [ 179.081913][ T9295] binder: 9295:9294 cannot find target node [ 179.089901][ T9295] binder: 9294:9295 transaction call to 0:0 failed 154/29201/-22, size 88-24 line 3062 [ 179.092092][ T9295] binder: 9294:9295 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 179.094411][ T9295] binder: 9295 RLIMIT_NICE not set [ 179.418023][ T9307] loop4: detected capacity change from 0 to 256 [ 179.438625][ T9309] loop2: detected capacity change from 0 to 256 [ 179.632270][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 179.674020][ T9320] loop0: detected capacity change from 0 to 512 [ 180.773654][ T9320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.485362][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 181.513698][ T39] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 181.615597][ T9341] loop4: detected capacity change from 0 to 512 [ 181.690432][ T9346] loop0: detected capacity change from 0 to 256 [ 181.747605][ T9341] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.749629][ T9341] EXT4-fs (loop4): 1 orphan inode deleted [ 181.750744][ T9341] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.834711][ T9358] loop1: detected capacity change from 0 to 256 [ 182.240734][ T9367] loop0: detected capacity change from 0 to 512 [ 182.272357][ T9367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 182.592269][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 182.614618][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 182.630995][ T5135] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 182.770830][ T4379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 182.774637][ T4379] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.781424][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 183.689763][ T9396] fido_id[9396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.893018][ T9405] binder: BINDER_SET_CONTEXT_MGR already set [ 183.894368][ T9405] binder: 9404:9405 ioctl 4018620d 200000c0 returned -16 [ 183.897661][ T9405] binder: 9404:9405 got transaction to invalid handle, 1 [ 183.899029][ T9405] binder: 9405:9404 cannot find target node [ 183.899989][ T9405] binder: 9404:9405 transaction async to 0:0 failed 156/29201/-22, size 0-0 line 3062 [ 183.902636][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.930280][ T9407] loop1: detected capacity change from 0 to 512 [ 183.949595][ T4919] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 183.955154][ T9412] loop0: detected capacity change from 0 to 512 [ 183.961384][ T9407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 183.973990][ T9412] EXT4-fs (loop0): orphan cleanup on readonly fs [ 183.982257][ T9412] EXT4-fs (loop0): 1 orphan inode deleted [ 183.984573][ T9412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 184.081819][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 185.387431][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 185.841648][ T4379] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 185.850648][ T4379] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 186.271244][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 186.398120][ T9457] loop3: detected capacity change from 0 to 512 [ 186.403455][ T4377] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 186.425940][ T9450] fido_id[9450]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 186.435956][ T9457] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.516530][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 186.703835][ T9467] loop1: detected capacity change from 0 to 1024 [ 186.729945][ T9467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.731182][ T9467] EXT4-fs: inline encryption not supported [ 186.732077][ T9467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.751821][ T9471] loop4: detected capacity change from 0 to 256 [ 186.757180][ T9467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 187.357870][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.360727][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.242655][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 188.371088][ T9491] loop2: detected capacity change from 0 to 512 [ 188.374074][ T9491] EXT4-fs (loop2): orphan cleanup on readonly fs [ 188.375800][ T9491] EXT4-fs (loop2): 1 orphan inode deleted [ 188.376985][ T9491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 188.395347][ T9496] binder: 9493:9496 tried to acquire reference to desc 0, got 1 instead [ 188.399688][ T9496] binder_alloc: 9493: binder_alloc_buf, no vma [ 188.404427][ T9496] binder: cannot allocate buffer: vma cleared, target dead or dying [ 188.404474][ T9496] binder: 9493:9496 transaction async to 9493:0 failed 162/29189/-3, size 0-0 line 3247 [ 188.419598][ T1517] binder: undelivered TRANSACTION_ERROR: 29189 [ 188.453515][ T9497] loop1: detected capacity change from 0 to 1024 [ 188.454978][ T9497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.499428][ T9497] EXT4-fs: inline encryption not supported [ 188.770734][ T9497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.783266][ T9504] loop4: detected capacity change from 0 to 512 [ 188.836953][ T9497] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.876254][ T9504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.396139][ T9509] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 189.484471][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 189.510943][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 189.730427][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 190.088114][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 190.137807][ T9530] binder: BINDER_SET_CONTEXT_MGR already set [ 190.138870][ T9530] binder: 9529:9530 ioctl 4018620d 20000100 returned -16 [ 190.143095][ T9530] binder: BINDER_SET_CONTEXT_MGR already set [ 190.144130][ T9530] binder: 9529:9530 ioctl 4018620d 20001000 returned -16 [ 190.149797][ T9530] binder: 9529:9530 got transaction to invalid handle, 1 [ 190.151047][ T9530] binder: 9530:9529 cannot find target node [ 190.152244][ T9530] binder: 9529:9530 transaction call to 0:0 failed 164/29201/-22, size 88-24 line 3062 [ 190.154209][ T9530] binder: 9529:9530 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 190.159806][ T9530] binder: 9530 RLIMIT_NICE not set [ 190.328599][ T9536] loop4: detected capacity change from 0 to 512 [ 190.550283][ T9539] loop3: detected capacity change from 0 to 256 [ 190.553312][ T9536] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 190.555891][ T9536] EXT4-fs (loop4): Remounting filesystem read-only [ 190.557230][ T9536] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1733: invalid indirect mapped block 4278190080 (level 0) [ 190.560599][ T9536] EXT4-fs (loop4): Remounting filesystem read-only [ 190.561669][ T9536] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1733: invalid indirect mapped block 1 (level 1) [ 190.564608][ T9536] EXT4-fs (loop4): Remounting filesystem read-only [ 190.565996][ T9536] EXT4-fs (loop4): 1 truncate cleaned up [ 190.567004][ T9536] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.968064][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.978878][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 191.018909][ T9550] loop4: detected capacity change from 0 to 512 [ 191.039555][ T9550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.053443][ T4377] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 191.123560][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 191.137939][ T9565] loop1: detected capacity change from 0 to 1024 [ 191.144889][ T9565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.152128][ T9565] EXT4-fs: inline encryption not supported [ 191.155632][ T9565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.203685][ T9565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.240426][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 192.692798][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 192.747925][ T9589] binder: 9588:9589 tried to acquire reference to desc 0, got 1 instead [ 192.749707][ T9589] binder_alloc: 9588: binder_alloc_buf, no vma [ 192.750769][ T9589] binder: cannot allocate buffer: vma cleared, target dead or dying [ 192.750796][ T9589] binder: 9588:9589 transaction async to 9588:0 failed 169/29189/-3, size 0-0 line 3247 [ 192.760470][ T113] binder: undelivered TRANSACTION_ERROR: 29189 [ 192.839843][ T9594] binder: 9593:9594 tried to acquire reference to desc 0, got 1 instead [ 192.841630][ T9594] binder: 9593:9594 got transaction with invalid data ptr [ 192.843011][ T9594] binder: 9593:9594 transaction async to 9593:0 failed 175/29201/-14, size 0-24 line 3350 [ 192.845362][ T9594] binder: 9593:9594 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 193.060075][ T9592] loop1: detected capacity change from 0 to 512 [ 193.096624][ T9594] binder: 9594 RLIMIT_NICE not set [ 193.099001][ T9594] binder: 9594 RLIMIT_NICE not set [ 193.100972][ T9594] binder: send failed reply for transaction 174 to 9593:9594 [ 193.109072][ T9592] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 193.113272][ T9594] binder: 9593:9594 transaction 174 fd fixups failed 29201/-12, line 4684 [ 193.115146][ T9592] EXT4-fs (loop1): Remounting filesystem read-only [ 193.116958][ T9592] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1757: invalid indirect mapped block 4278190080 (level 0) [ 193.120748][ T4380] binder: undelivered TRANSACTION_COMPLETE [ 193.121253][ T9592] EXT4-fs (loop1): Remounting filesystem read-only [ 193.123092][ T9592] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1757: invalid indirect mapped block 1 (level 1) [ 193.137372][ T9592] EXT4-fs (loop1): Remounting filesystem read-only [ 193.138745][ T9592] EXT4-fs (loop1): 1 truncate cleaned up [ 193.139696][ T9592] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 193.205715][ T5068] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 193.254972][ T9608] loop2: detected capacity change from 0 to 512 [ 193.303989][ T9608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.309139][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 193.379605][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 193.522530][ T9623] loop3: detected capacity change from 0 to 256 [ 193.868844][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 194.362586][ T9626] binder: tried to use weak ref as strong ref [ 194.367045][ T9628] loop4: detected capacity change from 0 to 1024 [ 194.378910][ T9628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.380140][ T9628] EXT4-fs: inline encryption not supported [ 194.381240][ T9628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.464489][ T9631] capability: warning: `syz.1.1770' uses deprecated v2 capabilities in a way that may be insecure [ 194.478564][ T9628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 195.237256][ T9638] binder_user_error: 2 callbacks suppressed [ 195.237265][ T9638] binder: 9635:9638 tried to acquire reference to desc 0, got 1 instead [ 195.250686][ T9638] binder: 9635:9638 got transaction with invalid data ptr [ 195.252103][ T9638] binder_debug: 5 callbacks suppressed [ 195.252111][ T9638] binder: 9635:9638 transaction async to 9635:0 failed 184/29201/-14, size 0-24 line 3350 [ 195.275065][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 195.277446][ T9638] binder: 9635:9638 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 195.279950][ T9638] binder: 9638 RLIMIT_NICE not set [ 195.296174][ T9638] binder: 9638 RLIMIT_NICE not set [ 195.297157][ T9638] binder: send failed reply for transaction 183 to 9635:9638 [ 195.298579][ T9638] binder: 9635:9638 transaction 183 fd fixups failed 29201/-12, line 4684 [ 195.336395][ T3902] binder: undelivered TRANSACTION_COMPLETE [ 195.337514][ T3902] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.338640][ T3902] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.577904][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 195.619643][ T9646] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1774'. [ 195.637430][ T4929] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 195.650020][ T9650] loop0: detected capacity change from 0 to 512 [ 195.664708][ T9650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 195.700047][ T9656] loop3: detected capacity change from 0 to 256 [ 195.732969][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 195.758309][ T9660] binder: tried to use weak ref as strong ref [ 195.759383][ T9660] binder: 9659:9660 Acquire 1 refcount change on invalid ref 0 ret -22 [ 195.766546][ T9660] binder: 9659:9660 got transaction to invalid handle, 1 [ 195.767794][ T9660] binder: 9660:9659 cannot find target node [ 195.768927][ T9660] binder: 9659:9660 transaction async to 0:0 failed 187/29201/-22, size 0-0 line 3062 [ 195.775518][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.852095][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 195.854563][ T9671] loop3: detected capacity change from 0 to 256 [ 196.655270][ T9674] loop2: detected capacity change from 0 to 1024 [ 196.690587][ T9674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.691797][ T9674] EXT4-fs: inline encryption not supported [ 196.692832][ T9674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.701137][ T9676] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1787'. [ 196.741259][ T9674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 197.673327][ T1702] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 197.746405][ T9697] loop3: detected capacity change from 0 to 512 [ 197.841892][ T9702] loop4: detected capacity change from 0 to 256 [ 197.900223][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 197.912756][ T9697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 197.924656][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 197.928366][ T9705] binder: tried to use weak ref as strong ref [ 197.929467][ T9705] binder: 9699:9705 Acquire 1 refcount change on invalid ref 0 ret -22 [ 197.955998][ T9705] binder: 9705:9699 cannot find target node [ 197.980488][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 197.999449][ T9712] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1799'. [ 198.009215][ T9710] binder: BINDER_SET_CONTEXT_MGR already set [ 198.010298][ T9710] binder: 9708:9710 ioctl 4018620d 20000100 returned -16 [ 198.013101][ T9710] binder: BINDER_SET_CONTEXT_MGR already set [ 198.014197][ T9710] binder: 9708:9710 ioctl 4018620d 20001000 returned -16 [ 198.110961][ T9718] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1810'. [ 199.217552][ T9731] loop4: detected capacity change from 0 to 256 [ 199.480677][ T9748] loop2: detected capacity change from 0 to 1024 [ 199.565289][ T9748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.568205][ T9750] binder_alloc: 9747: pid 9747 spamming oneway? 2 buffers allocated for a total size of 5120 [ 199.570114][ T9748] EXT4-fs: inline encryption not supported [ 199.571062][ T9748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.572797][ T9750] binder_alloc: 9747: pid 9747 spamming oneway? 3 buffers allocated for a total size of 5128 [ 200.610585][ T4376] binder_debug: 8 callbacks suppressed [ 200.610598][ T4376] binder: undelivered transaction 198, process died. [ 200.612862][ T4376] binder: undelivered transaction 199, process died. [ 200.614184][ T4376] binder: undelivered transaction 197, process died. [ 200.715677][ T9760] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1812'. [ 200.818479][ T9767] binder_user_error: 5 callbacks suppressed [ 200.818487][ T9767] binder: 9766:9767 tried to acquire reference to desc 0, got 1 instead [ 200.821500][ T9767] binder: 9766:9767 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 200.824170][ T9767] binder: 9767 RLIMIT_NICE not set [ 200.825192][ T9767] binder: 9767 RLIMIT_NICE not set [ 200.826150][ T9767] binder: send failed reply for transaction 204 to 9766:9767 [ 200.827850][ T9767] binder: 9766:9767 transaction 204 fd fixups failed 29201/-12, line 4684 [ 200.828884][ T9748] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 200.829531][ T9767] binder: undelivered transaction 205, put_user failed [ 200.832331][ T9767] binder: 9766:9767 ioctl c0306201 20000680 returned -14 [ 200.834947][ T3902] binder: undelivered TRANSACTION_COMPLETE [ 200.836110][ T3902] binder: undelivered TRANSACTION_COMPLETE [ 200.837110][ T3902] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.200737][ T9792] binder: BINDER_SET_CONTEXT_MGR already set [ 202.204498][ T9796] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1825'. [ 202.210479][ T9792] binder: 9791:9792 ioctl 4018620d 20000040 returned -16 [ 202.211944][ T9792] binder: 9791:9792 got transaction to invalid handle, 1 [ 202.220564][ T9792] binder: 9792:9791 cannot find target node [ 202.374964][ T9805] binder: BINDER_SET_CONTEXT_MGR already set [ 202.394429][ T9805] binder: 9804:9805 ioctl 4018620d 20000100 returned -16 [ 202.441921][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 202.501158][ T9805] binder: BINDER_SET_CONTEXT_MGR already set [ 202.506496][ T9805] binder: 9804:9805 ioctl 4018620d 20001000 returned -16 [ 202.508197][ T9805] binder: 9804:9805 got transaction to invalid handle, 1 [ 202.512763][ T9805] binder: 9804:9805 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 202.519345][ T9805] binder: 9805 RLIMIT_NICE not set [ 202.559856][ T9807] loop2: detected capacity change from 0 to 256 [ 202.739202][ T9803] Injecting memory failure for pfn 0x13cb95 at process virtual address 0x20276000 [ 202.742876][ T9803] Memory failure: 0x13cb95: recovery action for dirty LRU page: Recovered [ 202.744807][ T9803] Injecting memory failure for pfn 0x12279a at process virtual address 0x20277000 [ 202.750705][ T9803] Memory failure: 0x12279a: recovery action for dirty LRU page: Recovered [ 203.575361][ T4930] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 203.930096][ T9835] binder: BINDER_SET_CONTEXT_MGR already set [ 203.933113][ T9835] binder: 9834:9835 ioctl 4018620d 200000c0 returned -16 [ 203.955675][ T9835] binder: BINDER_SET_CONTEXT_MGR already set [ 203.970396][ T9835] binder: 9834:9835 ioctl 4018620d 20000040 returned -16 [ 203.971933][ T9835] binder: 9834:9835 got transaction to invalid handle, 1 [ 204.080100][ T9845] loop3: detected capacity change from 0 to 512 [ 204.097529][ T9849] loop0: detected capacity change from 0 to 256 [ 204.101615][ T9847] loop2: detected capacity change from 0 to 256 [ 204.104877][ T9845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.272903][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 204.311745][ T9858] gadgetfs: bound to dummy_udc driver [ 204.679208][ T9880] binder: BINDER_SET_CONTEXT_MGR already set [ 204.680402][ T9880] binder: 9879:9880 ioctl 4018620d 20000040 returned -16 [ 204.681892][ T9880] binder: 9879:9880 got transaction to invalid handle, 1 [ 204.712387][ T9882] loop4: detected capacity change from 0 to 512 [ 204.739938][ T9882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.814304][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 204.858908][ T9891] gadgetfs: bound to dummy_udc driver [ 205.940641][ T9908] binder: BINDER_SET_CONTEXT_MGR already set [ 205.957899][ T9908] binder: 9907:9908 ioctl 4018620d 200000c0 returned -16 [ 205.969244][ T9908] binder: BINDER_SET_CONTEXT_MGR already set [ 205.970286][ T9908] binder: 9907:9908 ioctl 4018620d 20000040 returned -16 [ 205.971687][ T9908] binder: 9907:9908 got transaction to invalid handle, 1 [ 205.984461][ T9908] binder_debug: 11 callbacks suppressed [ 205.984477][ T9908] binder: 9908:9907 cannot find target node [ 206.013651][ T9908] binder: 9907:9908 transaction async to 0:0 failed 216/29201/-22, size 0-0 line 3062 [ 206.027057][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.119425][ T9918] loop4: detected capacity change from 0 to 512 [ 206.147657][ T9918] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 206.233790][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 206.259640][ T9928] loop2: detected capacity change from 0 to 256 [ 206.267730][ T9930] loop1: detected capacity change from 0 to 256 [ 207.148630][ T9945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1879'. [ 207.151574][ T9945] netlink: 364 bytes leftover after parsing attributes in process `syz.2.1879'. [ 207.323369][ T9961] binder: 9956:9961 got transaction to invalid handle, 1 [ 207.324816][ T9961] binder: 9961:9956 cannot find target node [ 207.325857][ T9961] binder: 9956:9961 transaction async to 0:0 failed 220/29201/-22, size 0-0 line 3062 [ 207.330984][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 207.346336][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.499014][ T9982] loop3: detected capacity change from 0 to 256 [ 209.272860][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 210.371468][T10019] loop2: detected capacity change from 0 to 512 [ 210.493654][T10019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 210.671839][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 210.965253][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 211.073039][T10044] loop4: detected capacity change from 0 to 256 [ 212.384913][T10082] loop3: detected capacity change from 0 to 256 [ 214.594890][T10116] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1945'. [ 214.851441][T10131] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 214.852797][T10131] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 214.854280][T10137] vhci_hcd: xmit failed -107 [ 214.854753][T10131] vhci_hcd vhci_hcd.0: Device attached [ 214.862415][ T151] vhci_hcd: stop threads [ 214.863834][ T151] vhci_hcd: release socket [ 214.865054][ T151] vhci_hcd: disconnect device [ 214.960365][T10152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1961'. [ 214.961975][T10152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1961'. [ 214.973855][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'. [ 215.122957][T10163] loop5: detected capacity change from 0 to 7 [ 215.134397][T10163] Dev loop5: unable to read RDB block 7 [ 215.135405][T10163] loop5: AHDI p1 p2 p3 [ 215.140317][T10163] loop5: partition table partially beyond EOD, truncated [ 215.142102][T10163] loop5: p1 start 1818582900 is beyond EOD, truncated [ 215.143451][T10163] loop5: p3 start 335544320 is beyond EOD, truncated [ 215.248768][T10152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1961'. [ 216.894052][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.931201][T10209] loop3: detected capacity change from 0 to 512 [ 216.980500][T10209] EXT4-fs (loop3): 1 orphan inode deleted [ 216.981826][T10209] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.999560][ T5279] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 217.003613][ T5279] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:18: Failed to release dquot type 1 [ 217.819980][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 218.654343][T10279] nfs4: Unknown parameter 'smackfshat' [ 218.701192][ T4332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.703800][ T4332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.705552][ T4332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.708258][ T4332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.710252][ T4332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.714314][ T4332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.730132][ T4341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.731739][ T4341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.734067][ T4341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.739062][ T4341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.741262][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.742932][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.856892][T10280] chnl_net:caif_netlink_parms(): no params data found [ 218.882075][T10280] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.883567][T10280] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.885301][T10280] device bridge_slave_0 entered promiscuous mode [ 218.890238][T10280] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.891620][T10280] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.186505][T10280] device bridge_slave_1 entered promiscuous mode [ 219.201450][T10280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.204198][T10280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.211856][T10280] team0: Port device team_slave_0 added [ 219.224363][T10280] team0: Port device team_slave_1 added [ 219.230437][T10280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.231789][T10280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.236859][T10280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.239387][T10280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.240707][T10280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.245861][T10280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.275622][T10296] binder: 10295:10296 got transaction to invalid handle, 1 [ 219.277209][T10296] binder: 10296:10295 cannot find target node [ 219.278363][T10296] binder: 10295:10296 transaction async to 0:0 failed 224/29201/-22, size 0-0 line 3062 [ 219.281141][ T1517] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.307085][T10280] device hsr_slave_0 entered promiscuous mode [ 219.326260][T10280] device hsr_slave_1 entered promiscuous mode [ 219.346102][T10280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.347873][T10280] Cannot create hsr debugfs directory [ 219.359044][T10298] device vlan2 entered promiscuous mode [ 219.360054][T10298] device bridge0 entered promiscuous mode [ 219.538010][T10280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.660064][T10280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.520616][T10280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.741936][T10248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.796171][ T4341] Bluetooth: hci0: command 0x0409 tx timeout [ 220.847501][T10280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.036512][ C1] [ 221.036991][ C1] ================================ [ 221.037876][ C1] WARNING: inconsistent lock state [ 221.038718][ C1] syzkaller #0 Not tainted [ 221.039524][ C1] -------------------------------- [ 221.040458][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 221.041709][ C1] ksoftirqd/1/21 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 221.042875][ C1] ffff0000cdff6130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x94/0x138 [ 221.044651][ C1] {SOFTIRQ-ON-W} state was registered at: [ 221.045723][ C1] lock_acquire+0x20c/0x638 [ 221.046545][ C1] lock_sock_nested+0x70/0x130 [ 221.047433][ C1] x25_bind+0x1b4/0x3d4 [ 221.048200][ C1] __sys_bind+0x1f8/0x2a4 [ 221.048993][ C1] __arm64_sys_bind+0x7c/0x94 [ 221.049853][ C1] invoke_syscall+0x98/0x290 [ 221.050690][ C1] el0_svc_common+0x13c/0x258 [ 221.051555][ C1] do_el0_svc+0x5c/0x134 [ 221.052334][ C1] el0_svc+0x58/0x128 [ 221.053057][ C1] el0t_64_sync_handler+0x84/0xf0 [ 221.053961][ C1] el0t_64_sync+0x18c/0x190 [ 221.054837][ C1] irq event stamp: 2071838 [ 221.055629][ C1] hardirqs last enabled at (2071838): [] __local_bh_enable_ip+0x1f8/0x37c [ 221.057455][ C1] hardirqs last disabled at (2071837): [] __local_bh_enable_ip+0x178/0x37c [ 221.059269][ C1] softirqs last enabled at (2071232): [] handle_softirqs+0xb1c/0xc90 [ 221.060993][ C1] softirqs last disabled at (2071239): [] run_ksoftirqd+0x7c/0x2ac [ 221.062612][ C1] [ 221.062612][ C1] other info that might help us debug this: [ 221.063985][ C1] Possible unsafe locking scenario: [ 221.063985][ C1] [ 221.065296][ C1] CPU0 [ 221.065870][ C1] ---- [ 221.066438][ C1] lock(sk_lock-AF_X25); [ 221.067192][ C1] [ 221.067803][ C1] lock(sk_lock-AF_X25); [ 221.068605][ C1] [ 221.068605][ C1] *** DEADLOCK *** [ 221.068605][ C1] [ 221.070057][ C1] 1 lock held by ksoftirqd/1/21: [ 221.070904][ C1] #0: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 221.072534][ C1] [ 221.072534][ C1] stack backtrace: [ 221.073508][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 221.074763][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 221.076516][ C1] Call trace: [ 221.077076][ C1] dump_backtrace+0x1c4/0x1f0 [ 221.077892][ C1] show_stack+0x2c/0x3c [ 221.078601][ C1] __dump_stack+0x30/0x40 [ 221.079360][ C1] dump_stack_lvl+0xf4/0x15c [ 221.080120][ C1] dump_stack+0x1c/0x5c [ 221.080782][ C1] print_usage_bug+0x4c0/0x6dc [ 221.081558][ C1] mark_lock_irq+0x858/0xab8 [ 221.082339][ C1] mark_lock+0x224/0x320 [ 221.083110][ C1] __lock_acquire+0xa88/0x6634 [ 221.083941][ C1] lock_acquire+0x20c/0x638 [ 221.084681][ C1] lock_sock_nested+0x70/0x130 [ 221.085528][ C1] x25_kill_by_neigh+0x94/0x138 [ 221.086331][ C1] x25_link_terminated+0x5c/0x78 [ 221.087198][ C1] x25_lapb_receive_frame+0x140/0xd0c [ 221.088157][ C1] netif_receive_skb_core+0x160/0x244 [ 221.089149][ C1] lapbeth_napi_poll+0x48/0xa0 [ 221.090010][ C1] __napi_poll+0xb8/0x3f4 [ 221.090798][ C1] net_rx_action+0x52c/0xb5c [ 221.091623][ C1] handle_softirqs+0x318/0xc90 [ 221.092488][ C1] run_ksoftirqd+0x7c/0x2ac [ 221.093324][ C1] smpboot_thread_fn+0x4e8/0x960 [ 221.094205][ C1] kthread+0x254/0x2e0 [ 221.094940][ C1] ret_from_fork+0x10/0x20 [ 221.095785][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3507 [ 221.097400][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 21, name: ksoftirqd/1 [ 221.098871][ C1] preempt_count: 100, expected: 0 [ 221.099698][ C1] RCU nest depth: 1, expected: 0 [ 221.100442][ C1] INFO: lockdep is turned off. [ 221.101223][ C1] Preemption disabled at: [ 221.101233][ C1] [] handle_softirqs+0xe8/0xc90 [ 221.102957][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 221.104180][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 221.105916][ C1] Call trace: [ 221.106509][ C1] dump_backtrace+0x1c4/0x1f0 [ 221.107375][ C1] show_stack+0x2c/0x3c [ 221.108125][ C1] __dump_stack+0x30/0x40 [ 221.108849][ C1] dump_stack_lvl+0xf4/0x15c [ 221.109692][ C1] dump_stack+0x1c/0x5c [ 221.110414][ C1] __might_resched+0x354/0x4e0 [ 221.111248][ C1] __might_sleep+0x94/0x110 [ 221.112040][ C1] lock_sock_nested+0x80/0x130 [ 221.112882][ C1] x25_kill_by_neigh+0x94/0x138 [ 221.113744][ C1] x25_link_terminated+0x5c/0x78 [ 221.114638][ C1] x25_lapb_receive_frame+0x140/0xd0c [ 221.115569][ C1] netif_receive_skb_core+0x160/0x244 [ 221.116479][ C1] lapbeth_napi_poll+0x48/0xa0 [ 221.117295][ C1] __napi_poll+0xb8/0x3f4 [ 221.118040][ C1] net_rx_action+0x52c/0xb5c [ 221.118830][ C1] handle_softirqs+0x318/0xc90 [ 221.119647][ C1] run_ksoftirqd+0x7c/0x2ac [ 221.120430][ C1] smpboot_thread_fn+0x4e8/0x960 [ 221.121291][ C1] kthread+0x254/0x2e0 [ 221.122011][ C1] ret_from_fork+0x10/0x20 [ 221.130398][T10323] binder: BINDER_SET_CONTEXT_MGR already set [ 221.131604][T10323] binder: 10322:10323 ioctl 4018620d 200000c0 returned -16 [ 221.133806][T10323] binder: BINDER_SET_CONTEXT_MGR already set [ 221.134968][T10323] binder: 10322:10323 ioctl 4018620d 20000040 returned -16 [ 221.137061][T10323] binder: 10322:10323 got transaction to invalid handle, 1 [ 221.138460][T10323] binder: 10323:10322 cannot find target node [ 221.139586][T10323] binder: 10322:10323 transaction async to 0:0 failed 225/29201/-22, size 0-0 line 3062 [ 221.141964][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 221.155974][T10280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.197393][T10280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.247431][T10280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.286883][T10280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.352374][T10280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.355550][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.357745][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.360116][T10280] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.362377][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.364324][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.365817][ T4918] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.367079][ T4918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.368686][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.371247][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.373079][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.375039][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.376312][ T4918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.378873][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.381547][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.384053][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.385725][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.387759][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.390281][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.391940][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.394365][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.397082][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.399490][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.401187][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.403470][T10280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.437207][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.438815][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.441848][T10280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.446686][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.448415][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.453625][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.455236][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.458847][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.460274][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.462328][T10280] device veth0_vlan entered promiscuous mode [ 221.465021][T10280] device veth1_vlan entered promiscuous mode [ 221.471625][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.473212][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.474726][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.476730][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.479076][T10280] device veth0_macvtap entered promiscuous mode [ 221.481137][T10280] device veth1_macvtap entered promiscuous mode [ 221.484797][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.487027][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.488765][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.490501][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.492172][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.493922][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.495528][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.497484][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.499064][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.500670][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.502727][T10280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.504696][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.507139][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.508803][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.510452][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.512139][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.514133][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.516108][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.518047][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.519767][T10280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.521613][T10280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.523605][T10280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.524973][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.526759][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.528092][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.529639][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.531246][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.532831][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.535204][T10280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.536822][T10280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.538275][T10280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.539703][T10280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.548151][T10280] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 221.554184][ T6661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.554567][T10280] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 221.558045][ T6661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.559762][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.563833][ T4918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.565254][ T4918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.567413][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.876453][ T4332] Bluetooth: hci0: command 0x041b tx timeout [ 224.956075][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 227.046336][ T4332] Bluetooth: hci0: command 0x0419 tx timeout