last executing test programs:

11.352822325s ago: executing program 2 (id=1115):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009b00), 0x7, 0x9864, &(0x7f0000000140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x101042, 0x155)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x20c00)
syz_mount_image$vfat(&(0x7f0000000e40), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x12e1013, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

9.468060367s ago: executing program 2 (id=1135):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x278, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0x0)
syz_usbip_server_init(0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

6.935881594s ago: executing program 2 (id=1158):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000680)=ANY=[@ANYBLOB="757466383d302c757466383d302c757466383d312c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c757466383d312c008c66543f5d9819a000d4e83c546404a071cad2145d3fb8a62515f51f30c9e8ee65d81f17556db1fbd9bba8311ff6c51e26fbc301f624c68ff373cb5fde2e2938a0247b42fa7b274ded"], 0x1, 0x35e, &(0x7f0000000240)="$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")
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)='./file0\x00')
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, 0x0, 0x0, 0x12001, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24004101)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r4, 0x10d, 0x8f, &(0x7f0000000940), &(0x7f0000000080)=0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)

6.068879213s ago: executing program 2 (id=1166):
unshare(0x20000000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r1, &(0x7f00000006c0)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="183ff0c9b70923cb12f8e2de7af23ffd8218c6efceea198f4755271a00008e2757f7cb17188961461bdf43347b9c3cd077123e49a5697c6c26a4a86ad1c7f21e2a73342d6c716a74f9cc766a1e1bccfd08b18bb83363fc71586a0672a5b33ff0ce5391449a4bf72777238c1563a8034fd00d61cf944f4874e46640f302f9abaca0"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x8}, 0x94)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c01000017000100000000000000006698000000000000000000ffff7f000001000004d400000000ac1414bb00683ec2fe9600000000000000ff0200000000000000005d1100000001fe8000000000000000000000000000aa000000000000000602000000000001000006000000000000ddcf833166ce889bac8e3136c05ffb1d7c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000000000000000ffff0a010100000000004e2200000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x16c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020002005000048018000180080001006f7366000c000280080001400000001224000180090001006d6574610000000014000280080002400000000c0800034000000015100001800b00010064796e73657400000900010073797a30000000000900020073797a3200"], 0xa4}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

4.742296614s ago: executing program 2 (id=1173):
syz_usb_connect$uac1(0x2, 0xb8, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101, 0x0)
io_setup(0x81, &(0x7f0000001440)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000e00)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2(0x0, 0x800)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9b2, 0xf)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

4.292008833s ago: executing program 1 (id=1177):
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c0002800800"], 0x44}}, 0x4000050)

4.291868544s ago: executing program 1 (id=1178):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11)

4.277855954s ago: executing program 1 (id=1179):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)

4.255046245s ago: executing program 1 (id=1180):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
ptrace$getregset(0x4204, r1, 0x6, &(0x7f0000000240)={&(0x7f0000000140)=""/210, 0xd2})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3})
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000004e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00'], 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18)
r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r8, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)

3.168080599s ago: executing program 0 (id=1184):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a)

3.167794099s ago: executing program 4 (id=1186):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x7416, @local, 0xe}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)

3.154634929s ago: executing program 4 (id=1187):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x6, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r3, 0x5)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)

3.073303221s ago: executing program 1 (id=1188):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240))
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0x11, 0x148, 0x340, 0x0, 0x4a8, 0x2a8, 0x2a8, 0x4a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'erspan0\x00', {0xff}, 0x4, 0x1e}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0)
fallocate(0xffffffffffffffff, 0x0, 0x5, 0x8ffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x101042, 0x155)
pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x20c00)

2.451467095s ago: executing program 3 (id=1191):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]})

2.148033322s ago: executing program 0 (id=1192):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00000000c0)={0x40000000})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
r4 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x1e3)
sendfile(r4, r4, 0x0, 0x800000020)

2.147802322s ago: executing program 4 (id=1193):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES16=r4, @ANYBLOB="5b5e08007000ffdbdf250100dbc96024c70ac9cff854d1084713"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4)

2.135925712s ago: executing program 3 (id=1194):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, {0x20000010304, @multicast}, 0x12, {0x2, 0x4e22, @rand_addr=0x64010102}})

1.026990937s ago: executing program 1 (id=1195):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x30}, 0xa, 0x0, 0x1, 0x6, 0xbc, 0x5}, 0x20)
ioctl(0xffffffffffffffff, 0x8b32, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = socket$kcm(0x23, 0x5, 0x0)
listen(r1, 0x800)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x80000)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0)
sendmsg$inet_sctp(r0, 0x0, 0x4000890)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)

1.026816717s ago: executing program 4 (id=1196):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000043c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4000}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8}]}], {0x14}}, 0x7c}}, 0x0)

972.054199ms ago: executing program 3 (id=1197):
socket$inet6(0xa, 0x3, 0x1)
socket$unix(0x1, 0x1, 0x0)
add_key$user(&(0x7f0000002100), 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe)
add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe)
shutdown(r0, 0x1)
recvmmsg(r0, 0x0, 0x0, 0x406, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @private0, 0x6}, {0xa, 0x4e20, 0x6, @private0, 0x9}, 0xffffffffffffffff, 0x2}}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x90012, 0xffffffffffffffff, 0xbb62c000)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
add_key$keyring(&(0x7f0000000180), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8)
recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0)

880.61684ms ago: executing program 4 (id=1198):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBTYPE(r3, 0x4b48, &(0x7f0000000040))

848.080441ms ago: executing program 0 (id=1199):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

823.575312ms ago: executing program 0 (id=1200):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00aa62c1b531c028d67d4ce8ea67d768cfa8ee6d3896c2f7f42fb530a1c79482edc04a197af635102c0aa46bde8762fd2dd4c59fb12bf6fabf5f73adfe6383c8c76094cc92f77a66b400fe1ba7985626672d8018e97744a76d2f3505e24b5c09ade067e871f09ee34b6d47237320883fcd2b9309e09af0943130d9930df4b561"], 0x1, 0xeb0, &(0x7f0000000f80)="$eJzs3UFsHNUZAOA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAoJo0aeiAKxPSAqIQoUsSp4kDFhVIpRWolUKUq6qntqVVvPaFeqFSlUlAvjZS4ivOevfvs6a7H9my8+33S77dv3uz8/+xazsxk9m0AhlZj+efhw7NFCO9/fvHZ118qfntz2UMra+xb/lnEXiuE0Awh3FhautC+PPkiLrh+9fyx9doiHFz+mfrhuSsrz50MISyGfeFyaIVP5he++viDZ/Z/+tbEPe+eO/XG9r0CIay3HwAAMIgu/Xnh74/9809PzFy7tPdoGF9Zno7PW7E/GY/7D8QD5XS83Aid/aIt2o1l643EaGTrjWTrjWZ5RkvyNbPtNEvWG+uSb6Rt2Xr7CQAAADtROq9thaIx19FvNObmbp333/TF9Fgxd/rkwomzfSoUAAAAqOw/F5ZvuhVCCCGEEEIIIcQAx9J0v69AAAAAAMMmny9sjcWtnalrZWut3vJfebqx/vNhC9T9+y//zsr/0Zv+4gAAUN2gHk2m/UrH0Wkeg3wewZHseRs9/m9k2xndYJ1l8wrulPkGy+rMX9fbVVn9G30f+6Ws/nw+zNtVWf35PJ23q7L6x2uuo6qy+idqrqOqsvp31VxHVWX17665jqrK6p+suY6qyuqfqrmOqsrqv6PmOqoqq39PzXVUVVb/Trmttqz+Vs11VFVW/0zNdVRVVv+dNddRVVn9d9VcR1Vl9d9dcx398mBs0+uwNxtvP3/Oz+l2yjkeAAAADLv/mv9PCCGEEEIIIYQY+LjQ7wsQAAAAQN+lzwWkT70vRWl8pMv4aJfxZpfxsS7j413GAQAAgBB+9/aJ+94rVj/nv9n58NK8UWn+pY3OY5TPR7jR/Jud92yz+XfKvGUAAAAMl+J7l288/uyHr85cu7T3aNvZ7414vpvmAR2N1wY+i/10X8BU1i/SOfTRzjyNkvXy6wN3lG3v+U3uKAAAAAyxdP7eCkVjru28uxUajbm51fPx2dAsTpxcOH4g9tP3s/xxujl+c/lTNdcNAAAA9G71fH/98//0Pb6zYayYO31y4cTZW/2pleXNRvt1genV5UX7dYFWtvxgyfJDsZ++v/MH07uWl88d++HCS1u98wAAADAkzr527tSLCwvHf+SBBx54sPKg33+ZAACArfbllxebPz409ftbn/9fnf8uff5/X+y34tx+f4krpPsE0ucA1nxe/4XOPNNl653pXK+VrTcSYzyre6JtO6FtvsH0vJmyfK3O7YyV5JvM8k1l+fJ5Ckaz9VO+PdnyfH7CtN50tjyfh3E0y1Fk+R8OAAAAUG7+1VfOzJ997dyTJ1958eXjLx8/fejgke8eOXLgqe88Nb98X/98+939AAAAwE60etNvvysBAAAAAAAAAAAAAAAAAACA4VXH14n1ex8BAABg2P37QghhUQghhBBCCCGEEIMcS0v5N80DAAAAbK/rV88fa2/XWCy2NN/K1lq3mhsxb2qnnvzbzM1Iq115uvN6ye4trYZhV/fvv/w7K/9Hb25t/on0oOe/f43ODRytlvfR+V/Otue/f7TH/Pn+P18t//4s/6Oht/xLH2b5X6iW/7Es/+4e86/Z/zPV8j8e88/G/v5Hes3f+f6Pxzbtx64e83872/+XQq/5s/1v9Zgw80TMDwDDqNHvArZJOkpIx9GTsZ/2Nx5uhvzuh40e/zey7YxuuvLO7abjoHtjPx0vTWV5k43WP5lt746KdeZ2yl0lZfVv1fu43crqb9ZcR1Vl9Y/VXEdVZfWP11xHVWX1T9RcR1Vl9fd6HtpvZfXvlOvKZfVP1lxHVWX1T9VcR1Vl9W/03/F+Kat/T811VFVW/3TNdVRVVn/Fy2q1K6t/puY6qiqr/86a66iqrP67aq6jqrL67665jn55ILZl58Pp/HM6jqV+K+uPr/NaDuq1BQAAANhp/mX+PyGEEEIIIYQQYuBjaanfVyDop+39NDMAtyt//4eb93+4ef+Hm/ef/yfdw19k/WSky/hol/Fml/GxbDz/fR3vMn5Xtt2lKI3f3WX8a13G93QZv7fL+GyX8fu6jN/fZfyBLuMAAAAMh3ti6/wQAAAABtfrv/rsnd88+sLVmWuX9h4NY2vmnT8Q+0WMt2M/n/c+acb/8/9J7P8itn+I7T+y9d1/AgAAANsvfU+M//8HAACAwZW+p9T5PwAAAAyumdg6/wcAAIDBdWdsnf8DAADAACsm1l8c23Rd4OHY9jqvHwBw+/t6bB+M7d7YPhTbb8Q2HQc8Ettv1lQfALB1fv79nx55r1id7/9QNn49Lk/tGou3rhQUjc6Z/HfFdndsv9VjPfn3AfSaP9nTY57tyj+9yfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOBoLP88fHi2COH9zy8++7Oxd/56c9lDK2vsW/5ZxF4rhNBceV4aXe3/Oq54/er5Y+3tjdgW4WAoQrGyPDx3ZSXTZAhhMewLl0MrfDK/8NXHHzyz/9O3Ju5599ypN7bxJejYPwAAABhE/wsAAP//c3kinQ==")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], 0x0, 0x0)

748.151144ms ago: executing program 3 (id=1201):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb7028000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x74}}, 0x2044890)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)

490.972579ms ago: executing program 2 (id=1202):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000001380)={'#! ', './bus'}, 0x9)
ptrace(0x10, 0x1)
clock_nanosleep(0x8, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x40084146, &(0x7f0000000080))
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)

490.048579ms ago: executing program 3 (id=1203):
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0)
syz_emit_ethernet(0xe, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@generic={0x11}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = gettid()
timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r2, 0x1)

445.69878ms ago: executing program 3 (id=1204):
socket$inet6(0xa, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r3, 0xffffffffffffffff, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, &(0x7f0000000080)='\x00')
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff8000/0x1000)=nil)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r4, 0x0, 0x0, 0xc040)
r5 = syz_io_uring_setup(0x490d, &(0x7f00000002c0)={0x0, 0xc419, 0x0, 0x3, 0x400010d, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), 0x0)
io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8)

348.467113ms ago: executing program 0 (id=1205):
open_tree(0xffffffffffffffff, 0x0, 0x89100)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000740)="38eef39a9470e520a675d696d62d357d2dff6aa91ce585589f5a86b334887eccd0cf6d8e735499c5da5a4d563ad1b35f80fa0b64a2aff75617b3b1c35b8d3141773af29a42fdf17084264e7834faf8d112fffc49"})

143.53µs ago: executing program 0 (id=1206):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)

0s ago: executing program 4 (id=1207):
syz_mount_image$fuse(0x0, 0x0, 0x84406d, 0x0, 0x0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4c084, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
syz_emit_ethernet(0x92, &(0x7f0000000200)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @gre={{0x10, 0x4, 0x0, 0x3, 0x84, 0x64, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, {[@lsrr={0x83, 0xf, 0xaf, [@private=0xa010101, @private=0xa010101, @multicast2]}, @lsrr={0x83, 0xb, 0x7c, [@multicast1, @multicast2]}, @cipso={0x86, 0xf, 0x1, [{0x7, 0x9, "b367babddbe6f9"}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0xb, 0x1, 0x9, 0x2, 0x0, 0x0, 0x1, 0x4a}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x9, 0x1, 0x1, 0x3, 0x1}, 0x2, {0x1, 0x2, 0x3, 0x5}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

[ T1588] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.932797][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.935586][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   31.941814][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.948212][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   31.950131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   31.951549][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   31.953744][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   31.955143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   31.958371][ T4333] 8021q: adding VLAN 0 to HW filter on device team0
[   31.964464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   31.966466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   31.967941][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.969099][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.970351][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   31.971844][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   31.978759][ T4327] 8021q: adding VLAN 0 to HW filter on device team0
[   31.980311][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   31.982569][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   31.984040][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.985210][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.986889][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   31.988972][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   31.990598][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   31.993023][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.001637][ T4338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.004868][ T4338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.007673][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.009368][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.010784][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.013679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.015407][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.016848][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.027838][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.029581][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.030995][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.032221][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.035886][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.038179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.040121][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.041863][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.050805][ T4333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.053580][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.060632][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.062530][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.064123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.066074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.067773][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.069334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.070885][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.076446][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.078046][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.079778][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.081472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.084912][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.086533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.088141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.089730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.091257][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.092448][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.100416][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.103349][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.106787][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.108678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.110284][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.112580][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.114114][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.115986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.123543][ T4328] 8021q: adding VLAN 0 to HW filter on device team0
[   32.127372][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   32.128871][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.130204][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.131627][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.133462][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.134527][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.139951][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   32.141657][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.149179][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.150464][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.151862][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.155364][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   32.168433][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   32.170132][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.171837][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.173172][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.177610][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.178953][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.180212][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   32.183006][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.189255][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.191862][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.193812][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.198998][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   32.200630][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.205037][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.216470][ T4333] device veth0_vlan entered promiscuous mode
[   32.220337][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.225001][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.226861][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.228394][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.229795][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.231263][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   32.233561][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   32.237193][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.244973][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.246539][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.252592][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   32.254201][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.255850][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.257426][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.259656][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.270837][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.274155][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.276978][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.278735][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.280166][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.281617][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.283249][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   32.284819][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   32.286388][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   32.287841][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.289819][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   32.291302][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.296076][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.299555][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   32.307868][ T4333] device veth1_vlan entered promiscuous mode
[   32.315578][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.319941][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.321673][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.323609][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.326946][ T4338] device veth0_vlan entered promiscuous mode
[   32.330469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.332909][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.335010][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.336378][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.350817][ T4338] device veth1_vlan entered promiscuous mode
[   32.358719][ T4333] device veth0_macvtap entered promiscuous mode
[   32.361665][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.363534][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.365061][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.366804][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.368214][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.369816][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.381381][ T4338] device veth0_macvtap entered promiscuous mode
[   32.395814][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.397455][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.398895][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.400406][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.401833][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.405682][ T4333] device veth1_macvtap entered promiscuous mode
[   32.417328][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.419612][ T4338] device veth1_macvtap entered promiscuous mode
[   32.424606][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.426166][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.427632][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.428884][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.430090][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.431478][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.443656][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.445328][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.447920][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.449428][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.450931][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.458700][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.460378][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.464574][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.466971][ T4332] device veth0_vlan entered promiscuous mode
[   32.468134][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.469910][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.478659][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.483211][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   32.484566][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   32.489039][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.491431][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.496459][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.498596][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.500097][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.501649][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.504406][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.505933][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.509659][ T4338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.511003][ T4338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.515123][ T4338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.516439][ T4338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.519764][ T4332] device veth1_vlan entered promiscuous mode
[   32.530766][ T4333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.535305][ T4333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.536602][ T4333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.537878][ T4333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.556325][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.557929][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.559430][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.560833][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.562977][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.564505][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.566041][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   32.567512][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.569751][ T4332] device veth0_macvtap entered promiscuous mode
[   32.580984][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.582774][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.584288][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.586141][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.587791][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.599389][ T4332] device veth1_macvtap entered promiscuous mode
[   32.601674][ T4328] device veth0_vlan entered promiscuous mode
[   32.628979][ T4328] device veth1_vlan entered promiscuous mode
[   32.632829][ T4327] device veth0_vlan entered promiscuous mode
[   32.636557][ T1660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.637929][ T1660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.641546][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.645575][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.647098][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.648581][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.651258][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.653681][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.655241][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.656809][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   32.658199][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   32.659738][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.661239][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.665612][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.673489][ T4327] device veth1_vlan entered promiscuous mode
[   32.676779][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.678413][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.680200][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.681672][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   32.683857][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   32.696268][ T1660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.696352][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.697501][ T1660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.700820][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.703235][  T141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   32.705516][ T4328] device veth0_macvtap entered promiscuous mode
[   32.707277][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.709040][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.710537][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.713256][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.715348][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.716424][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.717964][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.719430][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.725015][ T4328] device veth1_macvtap entered promiscuous mode
[   32.739362][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.740650][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.742419][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.743916][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   32.747835][ T4332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.749189][ T4332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.750673][ T4332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.752925][ T4332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.761646][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.766667][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.768272][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.770004][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.771526][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.773702][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.776437][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.782411][ T1660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.783759][ T1660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.786682][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.788517][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.790073][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   32.791630][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.794253][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   32.796726][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.798505][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.800022][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.801673][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.803870][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.805470][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.807817][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.810621][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.812587][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.815410][ T4327] device veth0_macvtap entered promiscuous mode
[   32.825738][ T4327] device veth1_macvtap entered promiscuous mode
[   32.827963][ T4328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.829368][ T4328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.830742][ T4328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.833646][ T4328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.840112][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.841819][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.844370][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.845983][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.847473][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.848983][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.850493][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   32.853211][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.855497][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.858736][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.860551][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.863015][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.864789][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.866274][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.867934][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.869463][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   32.871128][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   32.873869][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.876860][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   32.878450][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   32.879803][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   32.881323][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.884836][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   32.887172][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.924835][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.926424][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.928448][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.929860][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.038037][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.039440][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.046681][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.317743][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.319139][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.321837][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.346271][ T1660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.347770][ T1660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.353040][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.359744][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.361123][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.363386][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   33.391908][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.393446][ T1660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   33.394574][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.396659][ T1660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   33.396769][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.399897][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   33.659260][ T4426] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   33.661429][ T4426] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   33.872940][ T4429] loop0: detected capacity change from 0 to 2048
[   33.920951][ T4344] Bluetooth: hci2: command 0x041b tx timeout
[   33.920978][ T4344] Bluetooth: hci1: command 0x041b tx timeout
[   33.920999][ T4344] Bluetooth: hci3: command 0x041b tx timeout
[   33.921016][ T4344] Bluetooth: hci4: command 0x041b tx timeout
[   33.921030][ T4344] Bluetooth: hci0: command 0x041b tx timeout
[   33.957340][ T4429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   34.068866][ T4433] device syzkaller0 entered promiscuous mode
[   34.492432][ T4441] loop2: detected capacity change from 0 to 2048
[   34.645646][ T4441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   35.006369][ T4453] loop4: detected capacity change from 0 to 2048
[   35.013573][ T4454] capability: warning: `syz.0.12' uses deprecated v2 capabilities in a way that may be insecure
[   35.249307][ T4453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   35.762812][ T4463] loop2: detected capacity change from 0 to 2048
[   35.810960][ T4463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   35.932340][ T4342] Bluetooth: hci0: command 0x040f tx timeout
[   35.933398][ T4342] Bluetooth: hci4: command 0x040f tx timeout
[   35.934396][ T4342] Bluetooth: hci3: command 0x040f tx timeout
[   35.935423][ T4342] Bluetooth: hci1: command 0x040f tx timeout
[   35.936432][ T4342] Bluetooth: hci2: command 0x040f tx timeout
[   36.331968][ T4481] loop3: detected capacity change from 0 to 2048
[   36.605996][ T4481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   37.360957][ T4498] loop2: detected capacity change from 0 to 2048
[   37.367371][ T4498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   38.012570][ T4344] Bluetooth: hci2: command 0x0419 tx timeout
[   38.014151][ T4342] Bluetooth: hci1: command 0x0419 tx timeout
[   38.015194][   T47] Bluetooth: hci3: command 0x0419 tx timeout
[   38.016230][ T4334] Bluetooth: hci4: command 0x0419 tx timeout
[   38.016908][ T4329] Bluetooth: hci0: command 0x0419 tx timeout
[   38.261027][ T4514] loop1: detected capacity change from 0 to 2048
[   38.313289][ T4514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   41.248003][ T4561] loop2: detected capacity change from 0 to 2048
[   41.415946][ T4561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   44.022649][ T4608] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   44.025064][ T4608] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   45.377961][ T4636] loop0: detected capacity change from 0 to 2048
[   45.900077][ T4641] loop3: detected capacity change from 0 to 2048
[   45.909998][ T4642] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   45.911901][ T4642] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   45.921484][ T4636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   45.923521][ T4641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   46.226098][ T4654] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   46.230072][ T4654] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   46.690983][ T4668] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   46.693826][ T4668] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   47.353758][ T4679] loop3: detected capacity change from 0 to 2048
[   47.442882][ T4683] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   47.445605][ T4683] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   47.844988][ T4679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   48.105000][ T4691] loop4: detected capacity change from 0 to 2048
[   48.153544][ T4691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   48.411426][ T4696] loop2: detected capacity change from 0 to 2048
[   48.416941][ T4696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   48.457965][ T4702] tipc: Started in network mode
[   48.459157][ T4702] tipc: Node identity 62c5bdb55d6f, cluster identity 4711
[   48.464500][ T4702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.470659][ T4702] device syzkaller0 entered promiscuous mode
[   48.562537][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'.
[   48.582633][ T4707] netlink: 44 bytes leftover after parsing attributes in process `syz.0.74'.
[   48.597825][ T4702] tipc: Resetting bearer <eth:syzkaller0>
[   48.608803][ T4701] tipc: Resetting bearer <eth:syzkaller0>
[   48.705209][ T4701] tipc: Disabling bearer <eth:syzkaller0>
[   49.247803][ T4724] loop2: detected capacity change from 0 to 7
[   49.256489][ T4317] Dev loop2: unable to read RDB block 7
[   49.257717][ T4317]  loop2: AHDI p1 p2 p3
[   49.258561][ T4317] loop2: partition table partially beyond EOD, truncated
[   49.262542][ T4317] loop2: p1 start 1601398130 is beyond EOD, truncated
[   49.263615][ T4317] loop2: p2 start 1702059890 is beyond EOD, truncated
[   49.284504][ T4724] Dev loop2: unable to read RDB block 7
[   49.285722][ T4724]  loop2: AHDI p1 p2 p3
[   49.286404][ T4724] loop2: partition table partially beyond EOD, truncated
[   49.288103][ T4724] loop2: p1 start 1601398130 is beyond EOD, truncated
[   49.289761][ T4724] loop2: p2 start 1702059890 is beyond EOD, truncated
[   49.299915][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.301672][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.556748][ T4730] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   49.560599][ T4730] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   50.190931][ T4741] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   50.194139][ T4741] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   50.792349][ T4747] loop3: detected capacity change from 0 to 2048
[   50.792712][ T4746] loop1: detected capacity change from 0 to 2048
[   50.795680][ T4746] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   50.796189][ T4747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   50.891022][ T4719] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.892615][ T4329] Bluetooth: hci1: command 0x0406 tx timeout
[   50.916798][ T4719] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.092968][ T4755] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   51.096275][ T4755] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   51.632848][ T4761] loop1: detected capacity change from 0 to 2048
[   51.663172][ T4761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   51.924452][ T4719] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.926142][ T4719] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.927594][ T4719] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.930470][ T4719] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.514289][ T4775] netlink: 44 bytes leftover after parsing attributes in process `syz.2.92'.
[   52.519179][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'.
[   52.822785][ T4785] loop1: detected capacity change from 0 to 2048
[   52.830848][ T4785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   52.888924][ T4767] device syzkaller0 entered promiscuous mode
[   53.416782][ T4792] loop4: detected capacity change from 0 to 2048
[   53.716689][ T4792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   53.981397][ T4810] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   53.984115][ T4810] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   54.893691][ T4821] device syzkaller0 entered promiscuous mode
[   54.922353][ T4823] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   54.923698][ T4823] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   54.931240][ T4823] vhci_hcd vhci_hcd.0: Device attached
[   54.936276][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.937944][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.940693][ T4824] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[   54.946808][ T4430] vhci_hcd: stop threads
[   55.256379][ T4430] vhci_hcd: release socket
[   55.257487][ T4430] vhci_hcd: disconnect device
[   55.274774][ T4377] vhci_hcd: vhci_device speed not set
[   55.294178][ T4831] loop4: detected capacity change from 0 to 128
[   55.398401][ T4839] loop1: detected capacity change from 0 to 128
[   55.401135][ T4839] FAT-fs (loop1): Unrecognized mount option "shortn" or missing value
[   56.916613][ T4868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.117'.
[   57.027575][ T4875] binder: 4874:4875 tried to acquire reference to desc 0, got 1 instead
[   57.032585][ T4875] binder: 4874:4875 got transaction with invalid data ptr
[   57.034259][ T4875] binder: 4874:4875 transaction async to 4874:0 failed 5/29201/-14, size 0-24 line 3333
[   57.036393][ T4379] binder: undelivered TRANSACTION_ERROR: 29201
[   57.326529][ T4885] loop2: detected capacity change from 0 to 2048
[   57.529743][ T4885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   58.156233][ T4903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'.
[   58.270139][ T4904] loop2: detected capacity change from 0 to 2048
[   58.301854][ T4904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   58.575978][ T4910] binder: 4909:4910 tried to acquire reference to desc 0, got 1 instead
[   58.590257][ T4910] binder: 4909:4910 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   58.602446][ T4910] binder: 4910 RLIMIT_NICE not set
[   58.628850][ T4915] binder: 4909:4915 got transaction with invalid fd, -1
[   58.630042][ T4915] binder: 4915:4909 translate fd failed
[   58.630921][ T4915] binder: 4909:4915 transaction async to 4909:0 failed 10/29201/-9, size 72-24 line 3415
[   58.875053][ T4931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.140'.
[   59.395062][ T4379] binder: undelivered TRANSACTION_ERROR: 29201
[   59.905933][ T4954] loop0: detected capacity change from 0 to 2048
[   59.965505][ T4954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   60.141190][ T4960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.151'.
[   60.286022][ T4967] IPVS: wrr: FWM 3 0x00000003 - no destination available
[   60.287500][    C0] IPVS: wrr: FWM 3 0x00000003 - no destination available
[   60.342705][ T4968] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   60.345171][ T4968] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   60.585035][ T4970] device syzkaller0 entered promiscuous mode
[   60.635037][ T4976] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   61.132455][ T4991] syz.4.160 uses obsolete (PF_INET,SOCK_PACKET)
[   61.193580][ T4994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.162'.
[   61.751399][ T5006] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   61.754494][ T5006] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   62.165047][ T5013] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   62.168014][ T5013] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   62.413043][ T5019] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   63.010454][ T5033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'.
[   63.104662][ T5034] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   63.107956][ T5034] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   63.410237][ T5042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'.
[   63.718324][ T5045] loop3: detected capacity change from 0 to 2048
[   63.752838][ T5045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   63.867341][ T5051] IPVS: wrr: FWM 3 0x00000003 - no destination available
[   63.970742][ T5055] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   64.536362][ T2064] ieee802154 phy0 wpan0: encryption failed: -22
[   64.546943][ T2064] ieee802154 phy1 wpan1: encryption failed: -22
[   64.573828][    T7] cfg80211: failed to load regulatory.db
[   65.481376][ T5080] loop4: detected capacity change from 0 to 2048
[   65.491336][ T5081] loop1: detected capacity change from 0 to 2048
[   65.514487][ T5080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   65.516022][ T5081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   66.069873][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'.
[   66.488848][ T5114] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   68.938419][ T5132] loop3: detected capacity change from 0 to 2048
[   68.942966][ T5132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.607863][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'.
[   69.694658][ T5157] IPVS: wrr: FWM 3 0x00000003 - no destination available
[   69.837309][ T5166] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   70.308451][ T5175] binder: 5172:5175 got transaction to invalid handle, 1
[   70.309755][ T5175] binder: 5175:5172 cannot find target node
[   70.310656][ T5175] binder: 5172:5175 transaction async to 0:0 failed 18/29201/-22, size 0-24 line 3045
[   70.320907][ T5175] binder: 5172:5175 got transaction to invalid handle, 1
[   70.325037][ T5175] binder: 5175:5172 cannot find target node
[   70.326091][ T5175] binder: 5172:5175 transaction async to 0:0 failed 19/29201/-22, size 72-24 line 3045
[   70.328098][ T4413] binder: undelivered TRANSACTION_ERROR: 29201
[   70.806172][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[   71.437858][ T5207] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   71.862712][ T5215] loop1: detected capacity change from 0 to 2048
[   71.868821][ T5215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.943600][ T5220] binder: tried to use weak ref as strong ref
[   71.944787][ T5220] binder: 5219:5220 Acquire 1 refcount change on invalid ref 0 ret -22
[   71.947245][ T5220] binder: 5219:5220 got transaction to invalid handle, 1
[   71.951744][ T5220] binder: 5220:5219 cannot find target node
[   71.964390][ T5220] binder: 5219:5220 transaction async to 0:0 failed 22/29201/-22, size 0-24 line 3045
[   71.968519][ T5220] binder: 5219:5220 got transaction to invalid handle, 1
[   71.969796][ T5220] binder: 5220:5219 cannot find target node
[   71.970743][ T5220] binder: 5219:5220 transaction async to 0:0 failed 23/29201/-22, size 72-24 line 3045
[   71.980989][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[   72.027462][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'.
[   72.091503][ T5238] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   72.396556][ T5258] binder: tried to use weak ref as strong ref
[   72.397974][ T5258] binder: 5257:5258 Acquire 1 refcount change on invalid ref 0 ret -22
[   72.399815][ T5258] binder: 5257:5258 got transaction to invalid handle, 1
[   72.401337][ T5258] binder: 5257:5258 got transaction to invalid handle, 1
[   72.481077][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[   72.608160][ T5275] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   73.366669][ T5291] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   73.367847][ T5291] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   73.371667][ T5291] vhci_hcd vhci_hcd.0: Device attached
[   73.386703][ T5291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.394298][ T5291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.399350][ T5292] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[   73.401416][ T4500] vhci_hcd: stop threads
[   73.402750][ T4500] vhci_hcd: release socket
[   73.403581][ T4500] vhci_hcd: disconnect device
[   73.421838][ T5297] Zero length message leads to an empty skb
[   73.426180][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'.
[   73.500943][ T5306] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   73.573403][ T5311] binder_alloc: 5309: binder_alloc_buf, no vma
[   73.575026][ T5311] binder_alloc: 5309: binder_alloc_buf, no vma
[   74.241987][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'.
[   74.530451][ T5353] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   74.621502][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'.
[   75.440553][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'.
[   75.498494][ T5396] tipc: Started in network mode
[   75.501831][ T5396] tipc: Node identity 1201715cf956, cluster identity 4711
[   75.505840][ T5396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.510446][ T5396] device syzkaller0 entered promiscuous mode
[   75.527298][ T5398] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   75.528447][ T5398] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   75.530469][ T5398] vhci_hcd vhci_hcd.0: Device attached
[   75.553466][ T5396] netlink: 44 bytes leftover after parsing attributes in process `syz.2.296'.
[   75.558745][ T5396] tipc: Resetting bearer <eth:syzkaller0>
[   75.567400][ T5393] tipc: Resetting bearer <eth:syzkaller0>
[   75.633545][ T5393] tipc: Disabling bearer <eth:syzkaller0>
[   75.729160][    T7] vhci_hcd: vhci_device speed not set
[   75.751279][ T5413] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   75.792042][    T7] usb 2-1: new full-speed USB device number 2 using vhci_hcd
[   75.802135][ T4380] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[   75.984798][ T4380] usb 1-1: config 0 has no interfaces?
[   75.985826][ T4380] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[   75.987699][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.998921][ T4380] usb 1-1: config 0 descriptor??
[   76.089397][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'.
[   76.222745][ T5399] vhci_hcd: cannot find the pending unlink 1025
[   76.223904][ T5399] usbip_core: unknown command
[   76.224667][ T5399] vhci_hcd: unknown pdu 8
[   76.225340][ T5399] usbip_core: unknown command
[   76.226438][ T4620] vhci_hcd: stop threads
[   76.227988][ T4620] vhci_hcd: release socket
[   76.228739][ T4620] vhci_hcd: disconnect device
[   76.229143][ T4380] usb 1-1: USB disconnect, device number 2
[   76.302065][    T7] vhci_hcd: vhci_device speed not set
[   76.791147][ T5448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'.
[   76.827110][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'.
[   76.924171][ T5458] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   77.168816][ T5462] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   77.171054][ T5462] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   77.750623][ T5475] binder_user_error: 5 callbacks suppressed
[   77.750633][ T5475] binder: tried to use weak ref as strong ref
[   77.756417][ T5475] binder: 5474:5475 Acquire 1 refcount change on invalid ref 0 ret -22
[   77.758016][ T5475] binder: 5474:5475 got transaction to invalid handle, 1
[   77.759106][ T5475] binder_debug: 15 callbacks suppressed
[   77.759119][ T5475] binder: 5475:5474 cannot find target node
[   77.760773][ T5475] binder: 5474:5475 transaction async to 0:0 failed 40/29201/-22, size 0-24 line 3045
[   77.919971][ T5476] loop0: detected capacity change from 0 to 2048
[   78.113346][ T5476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   78.117168][ T5479] binder: 5474:5479 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   78.119269][ T5479] binder: 5479 RLIMIT_NICE not set
[   78.132056][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[   78.449352][ T5496] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   78.452758][ T5496] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   78.939681][ T5501] loop0: detected capacity change from 0 to 2048
[   79.021244][ T5501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   79.291116][ T5512] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   79.396508][ T5516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'.
[   79.411375][ T5518] binder: tried to use weak ref as strong ref
[   79.412734][ T5518] binder: 5517:5518 Acquire 1 refcount change on invalid ref 0 ret -22
[   79.414435][ T5518] binder: 5517:5518 got transaction to invalid handle, 1
[   79.415609][ T5518] binder: 5518:5517 cannot find target node
[   79.416701][ T5518] binder: 5517:5518 transaction async to 0:0 failed 43/29201/-22, size 0-24 line 3045
[   79.418591][ T5518] binder: 5517:5518 got transaction to invalid handle, 1
[   79.419856][ T5518] binder: 5518:5517 cannot find target node
[   79.420716][ T5518] binder: 5517:5518 transaction async to 0:0 failed 44/29201/-22, size 72-24 line 3045
[   79.423039][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[   79.629536][ T5527] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   79.631767][ T5527] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   80.109330][ T5534] loop0: detected capacity change from 0 to 2048
[   80.178811][ T5534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.534792][ T5543] loop1: detected capacity change from 0 to 2048
[   80.558084][ T5543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.870336][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.871761][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.045857][ T5553] binder: tried to use weak ref as strong ref
[   81.048110][ T5553] binder: 5553:5552 cannot find target node
[   81.049384][ T5553] binder: 5552:5553 transaction async to 0:0 failed 47/29201/-22, size 0-24 line 3045
[   81.444263][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.465508][ T5538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.953801][ T5582] loop3: detected capacity change from 0 to 2048
[   82.032929][ T5582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   82.199773][ T5538] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.201510][ T5538] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.203467][ T5538] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.205167][ T5538] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.215222][ T5585] binder: BINDER_SET_CONTEXT_MGR already set
[   82.216357][ T5585] binder: 5584:5585 ioctl 4018620d 200002c0 returned -16
[   82.846231][ T5566] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   83.018482][ T5606] loop3: detected capacity change from 0 to 2048
[   83.192355][ T5609] loop4: detected capacity change from 0 to 2048
[   83.268710][ T5606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.268726][ T5609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.926184][ T5628] binder: BINDER_SET_CONTEXT_MGR already set
[   83.927234][ T5628] binder: 5627:5628 ioctl 4018620d 200002c0 returned -16
[   83.950268][ T5628] binder_user_error: 8 callbacks suppressed
[   83.950277][ T5628] binder: 5627:5628 got transaction to invalid handle, 1
[   83.952745][ T5628] binder_debug: 11 callbacks suppressed
[   83.952752][ T5628] binder: 5628:5627 cannot find target node
[   83.954728][ T5628] binder: 5627:5628 transaction async to 0:0 failed 60/29201/-22, size 0-24 line 3045
[   83.957330][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[   84.629497][ T5644] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   84.955440][ T5654] loop1: detected capacity change from 0 to 2048
[   84.982294][ T5654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.197679][ T5657] binder: BINDER_SET_CONTEXT_MGR already set
[   85.198886][ T5657] binder: 5656:5657 ioctl 4018620d 200002c0 returned -16
[   85.206064][ T5657] binder: 5656:5657 got transaction to invalid handle, 1
[   85.207330][ T5657] binder: 5657:5656 cannot find target node
[   85.208234][ T5657] binder: 5656:5657 transaction async to 0:0 failed 63/29201/-22, size 0-24 line 3045
[   85.227109][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.228606][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.233124][ T5658] netlink: 144 bytes leftover after parsing attributes in process `syz.2.383'.
[   85.253256][ T5658] netlink: 'syz.2.383': attribute type 10 has an invalid length.
[   85.254466][ T5658] netlink: 152 bytes leftover after parsing attributes in process `syz.2.383'.
[   85.256967][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[   85.270000][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.271410][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.654049][ T5669] 9pnet_fd: Insufficient options for proto=fd
[   86.689791][ T5690] binder: 5689:5690 got transaction to invalid handle, 1
[   86.691249][ T5690] binder: 5690:5689 cannot find target node
[   86.693802][ T5690] binder: 5689:5690 transaction async to 0:0 failed 67/29201/-22, size 0-24 line 3045
[   86.695979][ T5690] binder: 5689:5690 got transaction to invalid handle, 1
[   86.697405][ T5690] binder: 5690:5689 cannot find target node
[   86.698447][ T5690] binder: 5689:5690 transaction async to 0:0 failed 68/29201/-22, size 72-24 line 3045
[   86.738936][ T5696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.740551][ T5696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.743979][ T5696] netlink: 144 bytes leftover after parsing attributes in process `syz.1.398'.
[   86.746706][ T5696] netlink: 'syz.1.398': attribute type 10 has an invalid length.
[   86.748176][ T5696] netlink: 152 bytes leftover after parsing attributes in process `syz.1.398'.
[   86.754805][ T5696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.756496][ T5696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.894971][ T5700] 9pnet_fd: Insufficient options for proto=fd
[   87.015240][ T5703] device syzkaller0 entered promiscuous mode
[   87.207359][ T5710] device syzkaller0 entered promiscuous mode
[   87.389981][ T5721] binder: 5720:5721 got transaction to invalid handle, 1
[   87.394326][ T5721] binder: 5720:5721 got transaction to invalid handle, 1
[   87.610704][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready
[   88.829472][ T5743] 9pnet_fd: Insufficient options for proto=fd
[   88.844150][ T5737] device bridge1 entered promiscuous mode
[   88.862776][ T5737] team0: Port device bridge1 added
[   88.882009][ T5737] bridge0: port 3(team0) entered blocking state
[   88.891147][ T5737] bridge0: port 3(team0) entered disabled state
[   88.903631][ T5737] device team0 entered promiscuous mode
[   88.904570][ T5737] device team_slave_0 entered promiscuous mode
[   88.905682][ T5737] device team_slave_1 entered promiscuous mode
[   88.958963][ T5752] loop2: detected capacity change from 0 to 2048
[   88.974310][ T5752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   88.989935][ T5755] binder: 5754:5755 got transaction to invalid handle, 1
[   88.991219][ T5755] binder_debug: 6 callbacks suppressed
[   88.991232][ T5755] binder: 5755:5754 cannot find target node
[   88.994354][ T5755] binder: 5754:5755 transaction async to 0:0 failed 77/29201/-22, size 0-24 line 3045
[   88.996218][ T5755] binder: 5754:5755 got transaction to invalid handle, 1
[   88.997307][ T5755] binder: 5755:5754 cannot find target node
[   88.998513][ T5755] binder: 5754:5755 transaction async to 0:0 failed 78/29201/-22, size 72-24 line 3045
[   89.022505][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[   89.050808][ T5761] device syzkaller0 entered promiscuous mode
[   89.114763][ T5764] loop1: detected capacity change from 0 to 128
[   89.302711][ T5771] loop2: detected capacity change from 0 to 2048
[   89.316076][ T5771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.671534][ T5793] binder: BINDER_SET_CONTEXT_MGR already set
[   89.676490][ T5793] binder: 5792:5793 ioctl 4018620d 200002c0 returned -16
[   90.073013][ T5799] device syzkaller0 entered promiscuous mode
[   90.918388][ T5822] loop4: detected capacity change from 0 to 2048
[   90.982833][ T5822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.102817][ T5820] fuse: Bad value for 'fd'
[   91.157436][ T5826] binder: BINDER_SET_CONTEXT_MGR already set
[   91.158550][ T5826] binder: 5824:5826 ioctl 4018620d 200002c0 returned -16
[   91.418380][ T5838] device syzkaller0 entered promiscuous mode
[   91.692257][ T4377] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   91.699470][ T5850] fuse: Bad value for 'fd'
[   91.902067][ T4377] usb 1-1: Using ep0 maxpacket: 32
[   91.904717][ T4377] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[   91.906277][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.908558][ T4377] usb 1-1: config 0 descriptor??
[   91.914319][ T4377] gspca_main: sunplus-2.14.0 probing 041e:400b
[   91.927178][ T5858] binder: BINDER_SET_CONTEXT_MGR already set
[   91.928262][ T5858] binder: 5857:5858 ioctl 4018620d 200002c0 returned -16
[   92.411337][ T5865] device bridge1 entered promiscuous mode
[   92.414863][ T5865] team0: Port device bridge1 added
[   92.426909][ T5865] bridge0: port 3(team0) entered blocking state
[   92.428125][ T5865] bridge0: port 3(team0) entered disabled state
[   92.430952][ T5865] device team0 entered promiscuous mode
[   92.432415][ T5865] device team_slave_0 entered promiscuous mode
[   92.433979][ T5865] device team_slave_1 entered promiscuous mode
[   92.435631][ T5865] bridge0: port 3(team0) entered blocking state
[   92.436844][ T5865] bridge0: port 3(team0) entered forwarding state
[   92.602703][ T5873] netlink: 184 bytes leftover after parsing attributes in process `syz.2.459'.
[   92.705848][ T5875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   92.709146][ T5875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   92.710419][ T5875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   92.716568][ T5875] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   92.766639][ T5879] device syzkaller0 entered promiscuous mode
[   93.018578][ T5885] fuse: Bad value for 'fd'
[   93.137429][ T5889] device bridge1 entered promiscuous mode
[   93.143778][ T5889] team0: Port device bridge1 added
[   93.196119][ T5889] bridge0: port 3(team0) entered blocking state
[   93.197315][ T5889] bridge0: port 3(team0) entered disabled state
[   93.199229][ T5889] device team0 entered promiscuous mode
[   93.200183][ T5889] device team_slave_0 entered promiscuous mode
[   93.201388][ T5889] device team_slave_1 entered promiscuous mode
[   93.204028][ T5889] bridge0: port 3(team0) entered blocking state
[   93.205180][ T5889] bridge0: port 3(team0) entered forwarding state
[   93.392195][ T5893] loop1: detected capacity change from 0 to 32768
[   93.396646][ T5893] =======================================================
[   93.396646][ T5893] WARNING: The mand mount option has been deprecated and
[   93.396646][ T5893]          and is ignored by this kernel. Remove the mand
[   93.396646][ T5893]          option from the mount to silence this warning.
[   93.396646][ T5893] =======================================================
[   93.432407][ T5840] netlink: 144 bytes leftover after parsing attributes in process `syz.0.449'.
[   93.436953][ T5840] netlink: 'syz.0.449': attribute type 10 has an invalid length.
[   93.438251][ T5840] netlink: 152 bytes leftover after parsing attributes in process `syz.0.449'.
[   93.441637][ T5840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.445648][ T5840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.477717][ T5893] JBD2: Ignoring recovery information on journal
[   93.487152][ T4377] gspca_sunplus: reg_w_riv err -71
[   93.488674][ T4377] sunplus: probe of 1-1:0.0 failed with error -71
[   93.497046][ T4377] usb 1-1: USB disconnect, device number 3
[   93.554930][ T5893] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   93.603300][ T5906] device syzkaller0 entered promiscuous mode
[   93.679870][ T4327] ocfs2: Unmounting device (7,1) on (node local)
[   94.096150][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.097763][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.105800][ T5921] netlink: 144 bytes leftover after parsing attributes in process `syz.4.479'.
[   94.111304][ T5921] netlink: 'syz.4.479': attribute type 10 has an invalid length.
[   94.114055][ T5921] netlink: 152 bytes leftover after parsing attributes in process `syz.4.479'.
[   94.117014][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.119442][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.488681][ T5934] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   94.489737][ T5934] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   94.490870][ T5934] vhci_hcd vhci_hcd.0: Device attached
[   94.494669][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.496199][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.498791][ T5935] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[   94.501022][ T5739] vhci_hcd: stop threads
[   94.501741][ T5739] vhci_hcd: release socket
[   94.503322][ T5739] vhci_hcd: disconnect device
[   94.728258][ T5940] loop4: detected capacity change from 0 to 64
[   94.800445][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.805289][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.026479][ T5948] device syzkaller0 entered promiscuous mode
[   95.066210][ T5946] loop1: detected capacity change from 0 to 32768
[   95.070099][ T5946] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.488 (5946)
[   95.079384][ T5946] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.081028][ T5946] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   95.082740][ T5946] BTRFS info (device loop1): metadata ratio 7
[   95.083707][ T5946] BTRFS info (device loop1): setting nodatasum
[   95.084685][ T5946] BTRFS info (device loop1): use zlib compression, level 3
[   95.085796][ T5946] BTRFS info (device loop1): turning on async discard
[   95.086826][ T5946] BTRFS info (device loop1): turning on sync discard
[   95.087840][ T5946] BTRFS info (device loop1): using free space tree
[   95.145392][ T5946] BTRFS info (device loop1): enabling ssd optimizations
[   95.148784][ T5946] BTRFS info (device loop1): checking UUID tree
[   95.153243][ T5946] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.200464][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.207750][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.211760][ T5969] netlink: 144 bytes leftover after parsing attributes in process `syz.3.490'.
[   95.221592][ T5969] netlink: 'syz.3.490': attribute type 10 has an invalid length.
[   95.224219][ T5969] netlink: 152 bytes leftover after parsing attributes in process `syz.3.490'.
[   95.227661][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.249061][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.388395][ T5977] binder: 5976:5977 IncRefs 0 refcount change on invalid ref 0 ret -22
[   95.391530][ T5977] binder: 5976:5977 got transaction to invalid handle, 1
[   95.395621][ T5977] binder: 5977:5976 cannot find target node
[   95.396585][ T5977] binder: 5976:5977 transaction async to 0:0 failed 84/29201/-22, size 0-24 line 3045
[   95.398457][ T5977] binder: 5976:5977 got transaction to invalid handle, 1
[   95.399639][ T5977] binder: 5977:5976 cannot find target node
[   95.400756][ T5977] binder: 5976:5977 transaction async to 0:0 failed 85/29201/-22, size 72-24 line 3045
[   95.403842][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[   95.468257][ T5982] 9pnet_fd: Insufficient options for proto=fd
[   95.825174][ T5992] loop4: detected capacity change from 0 to 64
[   95.847350][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.850292][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.855201][ T5994] device syzkaller0 entered promiscuous mode
[   97.293637][ T6009] binder: 6008:6009 IncRefs 0 refcount change on invalid ref 0 ret -22
[   97.306330][ T6009] binder: 6008:6009 got transaction to invalid handle, 1
[   97.307621][ T6009] binder: 6009:6008 cannot find target node
[   97.308597][ T6009] binder: 6008:6009 transaction async to 0:0 failed 88/29201/-22, size 0-24 line 3045
[   97.320075][ T6009] binder: 6008:6009 got transaction to invalid handle, 1
[   97.324285][ T6009] binder: 6009:6008 cannot find target node
[   97.325471][ T6009] binder: 6008:6009 transaction async to 0:0 failed 89/29201/-22, size 72-24 line 3045
[   97.327517][ T4413] binder: undelivered TRANSACTION_ERROR: 29201
[   97.425889][ T6016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.507'.
[   97.430191][ T6018] 9pnet_fd: Insufficient options for proto=fd
[   97.685764][ T6028] loop3: detected capacity change from 0 to 32768
[   97.761393][ T6040] loop0: detected capacity change from 0 to 128
[   97.782115][ T6028] XFS (loop3): Mounting V5 Filesystem
[   97.864481][ T6028] XFS (loop3): Ending clean mount
[   97.868876][ T6028] XFS (loop3): Quotacheck needed: Please wait.
[   97.939382][ T6028] XFS (loop3): Quotacheck: Done.
[   97.979535][ T4333] XFS (loop3): Unmounting Filesystem
[   98.451594][ T6052] binder: 6051:6052 IncRefs 0 refcount change on invalid ref 0 ret -22
[   98.455128][ T6052] binder: 6051:6052 got transaction to invalid handle, 1
[   98.512028][  T111] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   98.595969][ T6064] 9pnet_fd: Insufficient options for proto=fd
[   98.752202][  T111] usb 1-1: Using ep0 maxpacket: 16
[   98.755260][  T111] usb 1-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config
[   98.756898][  T111] usb 1-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 25
[   98.758934][  T111] usb 1-1: config 0 interface 0 has no altsetting 0
[   98.760420][  T111] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[   98.783775][  T111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.789229][  T111] usb 1-1: config 0 descriptor??
[   98.796441][  T111] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   98.868331][ T6074] loop3: detected capacity change from 0 to 128
[   99.004765][  T111] usb 1-1: USB disconnect, device number 4
[   99.106199][ T4317] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   99.118802][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.120219][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.241074][ T6082] binder: 6081:6082 IncRefs 0 refcount change on invalid ref 0 ret -22
[   99.244114][ T6082] binder: 6081:6082 got transaction to invalid handle, 1
[   99.964032][ T6100] loop0: detected capacity change from 0 to 128
[  100.316087][ T6104] loop1: detected capacity change from 0 to 128
[  100.532118][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.535022][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.701514][ T4413] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  100.711041][ T6113] binder: 6111:6113 IncRefs 0 refcount change on invalid ref 0 ret -22
[  100.713758][ T6113] binder: 6111:6113 got transaction to invalid handle, 1
[  100.715022][ T6113] binder_debug: 6 callbacks suppressed
[  100.715036][ T6113] binder: 6113:6111 cannot find target node
[  100.716931][ T6113] binder: 6111:6113 transaction async to 0:0 failed 95/29201/-22, size 0-24 line 3045
[  100.719075][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  100.892115][ T4413] usb 1-1: Using ep0 maxpacket: 16
[  100.895362][ T4413] usb 1-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config
[  100.897527][ T4413] usb 1-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 25
[  100.899646][ T4413] usb 1-1: config 0 interface 0 has no altsetting 0
[  100.901125][ T4413] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  100.904229][ T4413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.909574][ T4413] usb 1-1: config 0 descriptor??
[  100.915926][ T4413] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  101.631856][ T6126] loop4: detected capacity change from 0 to 128
[  101.731323][ T6129] netlink: 44 bytes leftover after parsing attributes in process `syz.3.545'.
[  101.734989][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.736399][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.856938][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.859204][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.752608][ T4455] usb 1-1: USB disconnect, device number 5
[  103.354428][ T6147] binder: 6144:6147 IncRefs 0 refcount change on invalid ref 0 ret -22
[  103.357480][ T6147] binder: 6144:6147 got transaction to invalid handle, 1
[  103.358772][ T6147] binder: 6147:6144 cannot find target node
[  103.359648][ T6147] binder: 6144:6147 transaction async to 0:0 failed 97/29201/-22, size 0-24 line 3045
[  103.361764][ T4455] binder: undelivered TRANSACTION_ERROR: 29201
[  104.632915][ T6180] loop2: detected capacity change from 0 to 128
[  104.865124][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.867427][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.136118][ T6186] binder: 6185:6186 IncRefs 0 refcount change on invalid ref 0 ret -22
[  105.153672][ T6186] binder: 6185:6186 got transaction to invalid handle, 1
[  105.155032][ T6186] binder: 6186:6185 cannot find target node
[  105.155990][ T6186] binder: 6185:6186 transaction async to 0:0 failed 99/29201/-22, size 0-24 line 3045
[  105.234690][ T4413] binder: undelivered TRANSACTION_ERROR: 29201
[  105.325920][ T6193] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  105.338306][ T6193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.339624][ T6193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.468809][ T6203] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  105.471243][ T6203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.473221][ T6203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.316932][ T6221] binder: 6220:6221 IncRefs 0 refcount change on invalid ref 0 ret -22
[  106.320222][ T6221] binder: 6220:6221 got transaction to invalid handle, 1
[  106.321667][ T6221] binder: 6221:6220 cannot find target node
[  106.323579][ T6221] binder: 6220:6221 transaction async to 0:0 failed 101/29201/-22, size 0-24 line 3045
[  106.325804][ T4455] binder: undelivered TRANSACTION_ERROR: 29201
[  106.611569][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  106.621279][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  106.625305][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.777941][ T6238] loop0: detected capacity change from 0 to 128
[  107.270320][ T6250] binder: 6249:6250 ioctl 4018620d 0 returned -22
[  107.276752][ T6250] binder: 6249:6250 IncRefs 0 refcount change on invalid ref 0 ret -22
[  107.280116][ T6250] binder: 6249:6250 got transaction to invalid handle, 1
[  107.281434][ T6250] binder: 6250:6249 cannot find target node
[  107.282628][ T4375] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  107.284441][ T6250] binder: 6249:6250 transaction async to 0:0 failed 104/29201/-22, size 0-24 line 3045
[  107.287085][ T6250] binder: 6249:6250 got transaction to invalid handle, 1
[  107.288391][ T6250] binder: 6250:6249 cannot find target node
[  107.289289][ T6250] binder: 6249:6250 transaction async to 0:0 failed 105/29201/-22, size 72-24 line 3045
[  107.291545][ T4413] binder: undelivered TRANSACTION_ERROR: 29201
[  107.732045][ T4375] usb 1-1: Using ep0 maxpacket: 16
[  107.812831][ T4375] usb 1-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config
[  107.854145][ T4375] usb 1-1: config 0 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 25
[  107.856172][ T4375] usb 1-1: config 0 interface 0 has no altsetting 0
[  107.857285][ T4375] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  107.858678][ T4375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.860812][ T4375] usb 1-1: config 0 descriptor??
[  107.864206][ T4375] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  108.779472][ T6279] binder: 6277:6279 ioctl 4018620d 0 returned -22
[  108.780295][ T6281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  108.783288][ T6281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  108.784650][ T6281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  108.786733][ T6279] binder: 6277:6279 IncRefs 0 refcount change on invalid ref 0 ret -22
[  108.797684][ T6279] binder: 6277:6279 got transaction to invalid handle, 1
[  108.798847][ T6279] binder: 6279:6277 cannot find target node
[  108.799784][ T6279] binder: 6277:6279 transaction async to 0:0 failed 108/29201/-22, size 0-24 line 3045
[  108.816807][ T6279] binder: 6277:6279 got transaction to invalid handle, 1
[  108.909454][ T6293] loop1: detected capacity change from 0 to 128
[  108.998700][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.000104][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.841306][  T111] usb 1-1: USB disconnect, device number 6
[  109.882331][ T6312] loop3: detected capacity change from 0 to 128
[  110.117449][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.119520][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.859361][ T6328] binder: 6327:6328 ioctl 4018620d 0 returned -22
[  110.860908][ T6328] binder: 6327:6328 IncRefs 0 refcount change on invalid ref 0 ret -22
[  110.863639][ T6328] binder: 6327:6328 got transaction to invalid handle, 1
[  110.929642][ T6332] fuse: Bad value for 'fd'
[  110.986610][ T6326] loop2: detected capacity change from 0 to 32768
[  111.050650][ T6326] XFS (loop2): Mounting V5 Filesystem
[  111.149920][ T6326] XFS (loop2): Ending clean mount
[  111.157936][ T6326] XFS (loop2): Quotacheck needed: Please wait.
[  111.173485][ T6326] XFS (loop2): Quotacheck: Done.
[  111.267155][ T6350] loop4: detected capacity change from 0 to 128
[  111.321909][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.324073][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.487739][ T6341] loop1: detected capacity change from 0 to 32768
[  111.514786][ T6341] JBD2: Ignoring recovery information on journal
[  111.541628][ T6341] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  111.629634][ T4327] ocfs2: Unmounting device (7,1) on (node local)
[  111.713363][ T6360] loop1: detected capacity change from 0 to 128
[  111.948230][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.951512][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.808712][ T6326] Set syz1 is full, maxelem 65536 reached
[  113.085276][ T4338] XFS (loop2): Unmounting Filesystem
[  113.093257][ T6371] binder: BINDER_SET_CONTEXT_MGR already set
[  113.094440][ T6371] binder: 6370:6371 ioctl 4018620d 200002c0 returned -16
[  113.476067][ T6378] fuse: Bad value for 'group_id'
[  113.654559][ T6383] fuse: Bad value for 'fd'
[  113.751002][ T6384] netlink: 184 bytes leftover after parsing attributes in process `syz.0.630'.
[  114.129136][ T6401] device bridge2 entered promiscuous mode
[  114.139566][ T6401] team0: Port device bridge2 added
[  114.623556][ T6405] fuse: Bad value for 'group_id'
[  114.785405][ T6409] fuse: Bad value for 'fd'
[  114.793249][ T6407] loop4: detected capacity change from 0 to 32768
[  114.889018][ T6407] XFS (loop4): Mounting V5 Filesystem
[  114.964827][ T6407] XFS (loop4): Ending clean mount
[  114.973095][ T6407] XFS (loop4): Quotacheck needed: Please wait.
[  115.007935][ T6407] XFS (loop4): Quotacheck: Done.
[  115.524915][ T6439] loop1: detected capacity change from 0 to 128
[  115.609770][ T6429] loop2: detected capacity change from 0 to 32768
[  115.658121][ T6429] XFS (loop2): Mounting V5 Filesystem
[  115.684395][ T6429] XFS (loop2): Ending clean mount
[  115.686856][ T6429] XFS (loop2): Quotacheck needed: Please wait.
[  115.708629][ T6429] XFS (loop2): Quotacheck: Done.
[  115.924215][ T6453] fuse: Bad value for 'group_id'
[  116.050669][ T4338] XFS (loop2): Unmounting Filesystem
[  116.331407][ T6407] Set syz1 is full, maxelem 65536 reached
[  116.341509][ T4328] XFS (loop4): Unmounting Filesystem
[  117.915517][ T6495] loop2: detected capacity change from 0 to 128
[  118.366084][ T6498] loop4: detected capacity change from 0 to 32768
[  118.386254][ T6499] loop1: detected capacity change from 0 to 32768
[  118.436936][ T6499] XFS (loop1): Mounting V5 Filesystem
[  118.443677][ T6498] XFS (loop4): Mounting V5 Filesystem
[  118.497817][ T6499] XFS (loop1): Ending clean mount
[  118.500646][ T6499] XFS (loop1): Quotacheck needed: Please wait.
[  118.514120][ T6498] XFS (loop4): Ending clean mount
[  118.517769][ T6499] XFS (loop1): Quotacheck: Done.
[  118.518776][ T6498] XFS (loop4): Quotacheck needed: Please wait.
[  118.538443][ T6498] XFS (loop4): Quotacheck: Done.
[  118.797805][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  118.800081][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  118.801587][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  118.968626][ T4328] XFS (loop4): Unmounting Filesystem
[  119.549578][ T6566] loop3: detected capacity change from 0 to 128
[  119.925182][ T6499] Set syz1 is full, maxelem 65536 reached
[  119.961554][ T4327] XFS (loop1): Unmounting Filesystem
[  120.518387][ T6582] netlink: 184 bytes leftover after parsing attributes in process `syz.1.685'.
[  120.944003][ T6594] loop4: detected capacity change from 0 to 32768
[  120.988203][ T6594] XFS (loop4): Mounting V5 Filesystem
[  121.021754][ T6594] XFS (loop4): Ending clean mount
[  121.024517][ T6594] XFS (loop4): Quotacheck needed: Please wait.
[  121.041513][ T6594] XFS (loop4): Quotacheck: Done.
[  121.159435][ T4328] XFS (loop4): Unmounting Filesystem
[  121.720233][ T6626] loop3: detected capacity change from 0 to 128
[  121.860313][ T6624] loop4: detected capacity change from 0 to 32768
[  121.895178][ T6624] XFS (loop4): Mounting V5 Filesystem
[  121.929751][ T6624] XFS (loop4): Ending clean mount
[  121.931507][ T6624] XFS (loop4): Quotacheck needed: Please wait.
[  121.948304][ T6624] XFS (loop4): Quotacheck: Done.
[  121.954231][ T6624] Set syz1 is full, maxelem 65536 reached
[  121.968679][ T4328] XFS (loop4): Unmounting Filesystem
[  122.279490][ T6654] binder_user_error: 1 callbacks suppressed
[  122.279499][ T6654] binder: 6653:6654 got transaction to invalid handle, 1
[  122.281611][ T6654] binder_debug: 8 callbacks suppressed
[  122.281620][ T6654] binder: 6654:6653 cannot find target node
[  122.285695][ T6654] binder: 6653:6654 transaction async to 0:0 failed 118/29201/-22, size 0-24 line 3045
[  122.287617][ T6654] binder: 6653:6654 got transaction to invalid handle, 1
[  122.288789][ T6654] binder: 6654:6653 cannot find target node
[  122.289755][ T6654] binder: 6653:6654 transaction async to 0:0 failed 119/29201/-22, size 72-24 line 3045
[  122.291706][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  123.320701][ T6678] loop0: detected capacity change from 0 to 32768
[  123.356135][ T6678] XFS (loop0): Mounting V5 Filesystem
[  123.397551][ T6678] XFS (loop0): Ending clean mount
[  123.400352][ T6678] XFS (loop0): Quotacheck needed: Please wait.
[  123.420429][ T6678] XFS (loop0): Quotacheck: Done.
[  123.446994][ T4332] XFS (loop0): Unmounting Filesystem
[  123.470206][ T6692] device syzkaller0 entered promiscuous mode
[  123.644001][ T6702] binder: 6701:6702 got transaction to invalid handle, 1
[  123.645427][ T6702] binder: 6702:6701 cannot find target node
[  123.646400][ T6702] binder: 6701:6702 transaction async to 0:0 failed 123/29201/-22, size 0-24 line 3045
[  123.648558][ T6702] binder: 6701:6702 got transaction to invalid handle, 1
[  123.649881][ T6702] binder: 6702:6701 cannot find target node
[  123.650776][ T6702] binder: 6701:6702 transaction async to 0:0 failed 124/29201/-22, size 72-24 line 3045
[  123.653290][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  124.136024][ T6712] device syzkaller0 entered promiscuous mode
[  124.306277][ T6718] loop4: detected capacity change from 0 to 32768
[  124.324426][ T6718] XFS (loop4): Mounting V5 Filesystem
[  124.346634][ T6718] XFS (loop4): Ending clean mount
[  124.349731][ T6718] XFS (loop4): Quotacheck needed: Please wait.
[  124.417559][ T6718] XFS (loop4): Quotacheck: Done.
[  124.443712][ T4328] XFS (loop4): Unmounting Filesystem
[  124.619490][ T6737] binder: BINDER_SET_CONTEXT_MGR already set
[  124.620522][ T6737] binder: 6736:6737 ioctl 4018620d 200002c0 returned -16
[  124.645528][ T6737] binder: 6736:6737 Acquire 1 refcount change on invalid ref 0 ret -22
[  124.648077][ T6737] binder: 6736:6737 got transaction to invalid handle, 1
[  124.649401][ T6737] binder: 6736:6737 got transaction to invalid handle, 1
[  124.678649][ T6729] loop0: detected capacity change from 0 to 32768
[  124.689804][ T6739] device syzkaller0 entered promiscuous mode
[  124.714239][ T6729] XFS (loop0): Mounting V5 Filesystem
[  124.793980][ T6733] loop2: detected capacity change from 0 to 32768
[  124.797437][ T6729] XFS (loop0): Ending clean mount
[  124.799310][ T6733] XFS (loop2): Mounting V5 Filesystem
[  124.799648][ T6729] XFS (loop0): Quotacheck needed: Please wait.
[  124.831793][ T6729] XFS (loop0): Quotacheck: Done.
[  124.840715][ T6733] XFS (loop2): Ending clean mount
[  124.850545][ T6733] XFS (loop2): Quotacheck needed: Please wait.
[  124.870695][ T6733] XFS (loop2): Quotacheck: Done.
[  124.873733][ T6761] fuse: Unknown parameter 'grou00000000000000000000'
[  124.881580][ T4332] XFS (loop0): Unmounting Filesystem
[  124.931215][ T4338] XFS (loop2): Unmounting Filesystem
[  125.666153][ T6775] device syzkaller0 entered promiscuous mode
[  125.771525][ T6785] binder: 6784:6785 got transaction to invalid handle, 1
[  125.773509][ T6785] binder: 6784:6785 got transaction to invalid handle, 1
[  126.105832][ T2064] ieee802154 phy0 wpan0: encryption failed: -22
[  126.107163][ T2064] ieee802154 phy1 wpan1: encryption failed: -22
[  126.120641][ T6789] fuse: Unknown parameter 'grou00000000000000000000'
[  126.242851][ T6794] loop3: detected capacity change from 0 to 32768
[  126.324409][ T6794] XFS (loop3): Mounting V5 Filesystem
[  126.352529][ T6794] XFS (loop3): Ending clean mount
[  126.356193][ T6794] XFS (loop3): Quotacheck needed: Please wait.
[  126.370188][ T6794] XFS (loop3): Quotacheck: Done.
[  126.390606][ T6808] device syzkaller0 entered promiscuous mode
[  126.409670][ T4333] XFS (loop3): Unmounting Filesystem
[  126.609238][ T6821] binder: 6820:6821 got transaction to invalid handle, 1
[  126.826300][ T6830] fuse: Unknown parameter 'grou00000000000000000000'
[  127.290354][ T6840] loop3: detected capacity change from 0 to 32768
[  127.320945][ T6840] XFS (loop3): Mounting V5 Filesystem
[  127.330170][ T6848] device syzkaller0 entered promiscuous mode
[  127.356454][ T6840] XFS (loop3): Ending clean mount
[  127.359328][ T6840] XFS (loop3): Quotacheck needed: Please wait.
[  127.377360][ T6840] XFS (loop3): Quotacheck: Done.
[  127.394108][ T4333] XFS (loop3): Unmounting Filesystem
[  127.597039][ T6859] device syzkaller0 entered promiscuous mode
[  127.610399][ T6863] fuse: Unknown parameter 'group_i00000000000000000000'
[  128.660892][ T6873] loop0: detected capacity change from 0 to 32768
[  128.680524][ T6892] fuse: Unknown parameter 'group_i00000000000000000000'
[  128.694621][ T6889] device syzkaller0 entered promiscuous mode
[  128.859407][ T6873] XFS (loop0): Mounting V5 Filesystem
[  128.896262][ T6873] XFS (loop0): Ending clean mount
[  128.900012][ T6873] XFS (loop0): Quotacheck needed: Please wait.
[  128.920319][ T6873] XFS (loop0): Quotacheck: Done.
[  128.933033][ T6893] loop1: detected capacity change from 0 to 32768
[  128.980532][ T4332] XFS (loop0): Unmounting Filesystem
[  129.005726][ T6893] XFS (loop1): Mounting V5 Filesystem
[  129.038421][ T6899] loop4: detected capacity change from 0 to 32768
[  129.060857][ T6893] XFS (loop1): Ending clean mount
[  129.063554][ T6893] XFS (loop1): Quotacheck needed: Please wait.
[  129.090415][ T6893] XFS (loop1): Quotacheck: Done.
[  129.141517][ T6899] XFS (loop4): Mounting V5 Filesystem
[  129.159355][ T4327] XFS (loop1): Unmounting Filesystem
[  129.215429][ T6899] XFS (loop4): Ending clean mount
[  129.223033][ T6899] XFS (loop4): Quotacheck needed: Please wait.
[  129.237331][ T6899] XFS (loop4): Quotacheck: Done.
[  129.265403][ T4328] XFS (loop4): Unmounting Filesystem
[  129.815798][ T6941] device syzkaller0 entered promiscuous mode
[  130.189858][ T6950] fuse: Unknown parameter 'group_i00000000000000000000'
[  130.254822][ T6954] device syzkaller0 entered promiscuous mode
[  130.437036][ T6958] loop3: detected capacity change from 0 to 32768
[  130.456168][ T6960] loop1: detected capacity change from 0 to 32768
[  130.462344][ T6958] XFS (loop3): Mounting V5 Filesystem
[  130.491704][ T6958] XFS (loop3): Ending clean mount
[  130.496821][ T6958] XFS (loop3): Quotacheck needed: Please wait.
[  130.520212][ T6958] XFS (loop3): Quotacheck: Done.
[  130.546526][ T6960] XFS (loop1): Mounting V5 Filesystem
[  130.549932][ T4333] XFS (loop3): Unmounting Filesystem
[  130.589630][ T6960] XFS (loop1): Ending clean mount
[  130.594332][ T6960] XFS (loop1): Quotacheck needed: Please wait.
[  130.644507][ T6960] XFS (loop1): Quotacheck: Done.
[  130.678743][ T6990] fuse: Unknown parameter 'group_id00000000000000000000'
[  130.929916][ T4327] XFS (loop1): Unmounting Filesystem
[  130.976497][ T6997] binder: 6996:6997 ioctl 4018620d 0 returned -22
[  130.978603][ T6997] binder_user_error: 1 callbacks suppressed
[  130.978610][ T6997] binder: tried to use weak ref as strong ref
[  130.980816][ T6997] binder: 6996:6997 Acquire 1 refcount change on invalid ref 0 ret -22
[  130.983049][ T6997] binder: 6996:6997 got transaction to invalid handle, 1
[  130.984352][ T6997] binder_debug: 15 callbacks suppressed
[  130.984366][ T6997] binder: 6997:6996 cannot find target node
[  130.986432][ T6997] binder: 6996:6997 transaction async to 0:0 failed 140/29201/-22, size 0-24 line 3045
[  130.988302][ T6997] binder: 6996:6997 got transaction to invalid handle, 1
[  130.989842][ T6997] binder: 6997:6996 cannot find target node
[  130.991056][ T6997] binder: 6996:6997 transaction async to 0:0 failed 141/29201/-22, size 72-24 line 3045
[  130.993709][  T111] binder: undelivered TRANSACTION_ERROR: 29201
[  131.038404][ T7003] device syzkaller0 entered promiscuous mode
[  131.253112][ T7001] loop2: detected capacity change from 0 to 32768
[  131.308560][ T7001] XFS (loop2): Mounting V5 Filesystem
[  131.817167][ T7001] XFS (loop2): Ending clean mount
[  131.821057][ T7001] XFS (loop2): Quotacheck needed: Please wait.
[  132.101372][ T7001] XFS (loop2): Quotacheck: Done.
[  132.113802][ T7030] fuse: Unknown parameter 'group_id00000000000000000000'
[  132.202307][ T4338] XFS (loop2): Unmounting Filesystem
[  132.262426][ T7036] device syzkaller0 entered promiscuous mode
[  132.353423][ T7035] loop1: detected capacity change from 0 to 32768
[  132.412766][ T7035] XFS (loop1): Mounting V5 Filesystem
[  132.433176][ T7049] binder: 7048:7049 ioctl 4018620d 0 returned -22
[  132.448811][ T7049] binder: tried to use weak ref as strong ref
[  132.449908][ T7049] binder: 7048:7049 Acquire 1 refcount change on invalid ref 0 ret -22
[  132.474487][ T7035] XFS (loop1): Ending clean mount
[  132.476699][ T7049] binder: 7048:7049 got transaction to invalid handle, 1
[  132.477871][ T7049] binder: 7049:7048 cannot find target node
[  132.478829][ T7049] binder: 7048:7049 transaction async to 0:0 failed 144/29201/-22, size 0-24 line 3045
[  132.480660][ T7035] XFS (loop1): Quotacheck needed: Please wait.
[  132.512813][ T7035] XFS (loop1): Quotacheck: Done.
[  132.521852][ T7049] binder: 7048:7049 got transaction to invalid handle, 1
[  132.539199][ T7049] binder: 7049:7048 cannot find target node
[  132.540109][ T7049] binder: 7048:7049 transaction async to 0:0 failed 145/29201/-22, size 72-24 line 3045
[  132.549334][ T4413] binder: undelivered TRANSACTION_ERROR: 29201
[  132.597104][ T4327] XFS (loop1): Unmounting Filesystem
[  132.641373][ T7055] device syzkaller0 entered promiscuous mode
[  132.753527][ T7065] fuse: Unknown parameter 'group_id00000000000000000000'
[  133.223968][ T7061] loop4: detected capacity change from 0 to 32768
[  133.247579][ T7061] XFS (loop4): Mounting V5 Filesystem
[  133.293425][ T7061] XFS (loop4): Ending clean mount
[  133.305138][ T7061] XFS (loop4): Quotacheck needed: Please wait.
[  133.320215][ T7061] XFS (loop4): Quotacheck: Done.
[  133.353356][ T7061] Set syz1 is full, maxelem 65536 reached
[  133.373530][ T4328] XFS (loop4): Unmounting Filesystem
[  133.435547][ T7080] loop3: detected capacity change from 0 to 32768
[  133.441596][ T7080] XFS (loop3): Mounting V5 Filesystem
[  133.487443][ T7080] XFS (loop3): Ending clean mount
[  133.489245][ T7080] XFS (loop3): Quotacheck needed: Please wait.
[  133.503440][ T7080] XFS (loop3): Quotacheck: Done.
[  133.520386][ T4333] XFS (loop3): Unmounting Filesystem
[  133.695277][ T7096] binder: 7095:7096 ioctl 4018620d 0 returned -22
[  133.698930][ T7096] binder: tried to use weak ref as strong ref
[  133.699879][ T7096] binder: 7095:7096 Acquire 1 refcount change on invalid ref 0 ret -22
[  133.743035][ T7092] loop1: detected capacity change from 0 to 32768
[  133.781980][ T7092] XFS (loop1): Mounting V5 Filesystem
[  133.820059][ T7094] loop0: detected capacity change from 0 to 32768
[  133.830989][ T7094] XFS (loop0): Mounting V5 Filesystem
[  133.834006][ T7092] XFS (loop1): Ending clean mount
[  133.844171][ T7092] XFS (loop1): Quotacheck needed: Please wait.
[  133.858357][ T7092] XFS (loop1): Quotacheck: Done.
[  133.889515][ T7094] XFS (loop0): Ending clean mount
[  133.891721][ T7094] XFS (loop0): Quotacheck needed: Please wait.
[  133.910946][ T4327] XFS (loop1): Unmounting Filesystem
[  133.960688][ T7094] XFS (loop0): Quotacheck: Done.
[  133.995301][ T7120] fuse: Bad value for 'user_id'
[  134.004343][ T4332] XFS (loop0): Unmounting Filesystem
[  134.050473][ T7102] loop2: detected capacity change from 0 to 32768
[  134.057866][ T7102] XFS (loop2): Mounting V5 Filesystem
[  134.090004][ T7102] XFS (loop2): Ending clean mount
[  134.096878][ T7102] XFS (loop2): Quotacheck needed: Please wait.
[  134.109603][ T7102] XFS (loop2): Quotacheck: Done.
[  134.148299][ T4338] XFS (loop2): Unmounting Filesystem
[  134.250317][ T7135] fuse: Bad value for 'fd'
[  134.916830][ T7148] binder: 7147:7148 ioctl c0306201 0 returned -14
[  135.510559][ T7163] fuse: Bad value for 'user_id'
[  135.539464][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  135.541594][ T7153] loop2: detected capacity change from 0 to 32768
[  135.549640][ T7153] XFS (loop2): Mounting V5 Filesystem
[  135.561469][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  135.570000][ T7153] XFS (loop2): Ending clean mount
[  135.571672][ T7153] XFS (loop2): Quotacheck needed: Please wait.
[  135.573181][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  135.597412][ T7153] XFS (loop2): Quotacheck: Done.
[  135.650613][ T4338] XFS (loop2): Unmounting Filesystem
[  135.697426][ T7176] loop0: detected capacity change from 0 to 32768
[  135.717853][ T7176] XFS (loop0): Mounting V5 Filesystem
[  135.745538][ T7176] XFS (loop0): Ending clean mount
[  135.747275][ T7176] XFS (loop0): Quotacheck needed: Please wait.
[  135.764700][ T7176] XFS (loop0): Quotacheck: Done.
[  135.807888][ T7197] binder: 7194:7197 ioctl c0306201 0 returned -14
[  135.835545][ T4332] XFS (loop0): Unmounting Filesystem
[  136.422428][ T7204] fuse: Bad value for 'fd'
[  136.471349][ T7208] fuse: Bad value for 'user_id'
[  137.174888][ T7222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.180497][ T7222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.201206][ T7222] netlink: 'syz.3.864': attribute type 10 has an invalid length.
[  137.208502][ T7222] netlink: 152 bytes leftover after parsing attributes in process `syz.3.864'.
[  137.210978][ T7222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.216838][ T7222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.230815][ T7214] loop1: detected capacity change from 0 to 32768
[  137.296017][ T7214] XFS (loop1): Mounting V5 Filesystem
[  137.318817][ T7214] XFS (loop1): Ending clean mount
[  137.320531][ T7214] XFS (loop1): Quotacheck needed: Please wait.
[  137.335876][ T7220] loop4: detected capacity change from 0 to 32768
[  137.343320][ T7214] XFS (loop1): Quotacheck: Done.
[  137.404162][ T7226] loop2: detected capacity change from 0 to 32768
[  137.413221][ T7220] XFS (loop4): Mounting V5 Filesystem
[  137.415648][ T4327] XFS (loop1): Unmounting Filesystem
[  137.438433][ T7247] fuse: Bad value for 'fd'
[  137.444080][ T7226] XFS (loop2): Mounting V5 Filesystem
[  137.477225][ T7220] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  137.485028][ T7220] XFS (loop4): Starting recovery (logdev: internal)
[  137.520693][ T7226] XFS (loop2): Ending clean mount
[  137.524461][ T7226] XFS (loop2): Quotacheck needed: Please wait.
[  137.531515][ T7220] XFS (loop4): Ending recovery (logdev: internal)
[  137.541658][ T7226] XFS (loop2): Quotacheck: Done.
[  137.585507][ T4338] XFS (loop2): Unmounting Filesystem
[  137.626484][ T7258] fuse: Bad value for 'fd'
[  137.633722][ T7220] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x3a4/0x590, xfs_bnobt block 0x8
[  137.635557][ T7220] XFS (loop4): Unmount and run xfs_repair
[  137.720884][ T7262] binder: 7261:7262 ioctl c0306201 0 returned -14
[  137.722457][ T7262] binder_user_error: 6 callbacks suppressed
[  137.722463][ T7262] binder: 7261:7262 got transaction to invalid handle, 1
[  137.724538][ T7262] binder_debug: 15 callbacks suppressed
[  137.724551][ T7262] binder: 7262:7261 cannot find target node
[  137.726360][ T7262] binder: 7261:7262 transaction async to 0:0 failed 163/29201/-22, size 0-24 line 3045
[  137.728520][ T7262] binder: 7261:7262 got transaction to invalid handle, 1
[  137.729587][ T7262] binder: 7262:7261 cannot find target node
[  137.730452][ T7262] binder: 7261:7262 transaction async to 0:0 failed 164/29201/-22, size 72-24 line 3045
[  137.732662][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  138.072986][ T7271] loop1: detected capacity change from 0 to 32768
[  138.123721][ T7271] XFS (loop1): Mounting V5 Filesystem
[  138.170373][ T7271] XFS (loop1): Ending clean mount
[  138.174939][ T7271] XFS (loop1): Quotacheck needed: Please wait.
[  138.194129][ T7271] XFS (loop1): Quotacheck: Done.
[  138.244295][ T4327] XFS (loop1): Unmounting Filesystem
[  138.301496][ T7273] loop2: detected capacity change from 0 to 32768
[  138.403123][ T7273] XFS (loop2): Mounting V5 Filesystem
[  138.447249][ T7273] XFS (loop2): Ending clean mount
[  138.448908][ T7273] XFS (loop2): Quotacheck needed: Please wait.
[  138.797027][ T7273] XFS (loop2): Quotacheck: Done.
[  138.821665][ T7301] fuse: Bad value for 'fd'
[  138.824679][ T7220] XFS (loop4): Unmounting Filesystem
[  138.937877][ T4338] XFS (loop2): Unmounting Filesystem
[  139.084020][ T7305] loop0: detected capacity change from 0 to 32768
[  139.101232][ T7305] XFS (loop0): Mounting V5 Filesystem
[  139.130150][ T7305] XFS (loop0): Ending clean mount
[  139.137627][ T7305] XFS (loop0): Quotacheck needed: Please wait.
[  139.152407][ T7305] XFS (loop0): Quotacheck: Done.
[  139.220564][ T4332] XFS (loop0): Unmounting Filesystem
[  139.340572][ T7330] device syzkaller0 entered promiscuous mode
[  139.363650][ T7335] fuse: Bad value for 'fd'
[  139.404433][ T7322] loop1: detected capacity change from 0 to 32768
[  139.564424][ T7322] XFS (loop1): Mounting V5 Filesystem
[  139.600839][ T7322] XFS (loop1): Ending clean mount
[  139.603797][ T7338] Set syz1 is full, maxelem 65536 reached
[  139.604609][ T7322] XFS (loop1): Quotacheck needed: Please wait.
[  139.606274][ T7338] Set syz1 is full, maxelem 65536 reached
[  139.634351][ T7322] XFS (loop1): Quotacheck: Done.
[  139.696479][ T4327] XFS (loop1): Unmounting Filesystem
[  139.853438][ T7356] loop0: detected capacity change from 0 to 32768
[  140.014600][ T7356] XFS (loop0): Mounting V5 Filesystem
[  140.134136][ T7356] XFS (loop0): Ending clean mount
[  140.139379][ T7356] XFS (loop0): Quotacheck needed: Please wait.
[  140.215864][ T7381] loop1: detected capacity change from 0 to 128
[  140.267197][ T7356] XFS (loop0): Quotacheck: Done.
[  140.348616][ T4332] XFS (loop0): Unmounting Filesystem
[  140.369398][ T7386] fuse: Bad value for 'fd'
[  140.388850][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.390458][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.547667][ T7390] loop3: detected capacity change from 0 to 32768
[  140.550951][ T7388] Set syz1 is full, maxelem 65536 reached
[  140.552323][ T7388] Set syz1 is full, maxelem 65536 reached
[  140.581143][ T7390] XFS (loop3): Mounting V5 Filesystem
[  140.656141][ T7390] XFS (loop3): Ending clean mount
[  140.663427][ T7390] XFS (loop3): Quotacheck needed: Please wait.
[  140.691898][ T7390] XFS (loop3): Quotacheck: Done.
[  140.721523][ T4333] XFS (loop3): Unmounting Filesystem
[  141.010276][ T7424] fuse: Bad value for 'fd'
[  141.178084][ T7422] Set syz1 is full, maxelem 65536 reached
[  141.847315][ T7444] netlink: 184 bytes leftover after parsing attributes in process `syz.4.923'.
[  141.878574][ T7426] XFS (loop2): Mounting V5 Filesystem
[  141.925702][ T7426] XFS (loop2): Ending clean mount
[  141.927732][ T7426] XFS (loop2): Quotacheck needed: Please wait.
[  141.944431][ T7426] XFS (loop2): Quotacheck: Done.
[  141.999446][ T4338] XFS (loop2): Unmounting Filesystem
[  142.198459][ T7471] device syzkaller0 entered promiscuous mode
[  142.248005][ T7459] XFS (loop0): Mounting V5 Filesystem
[  142.269036][ T7459] XFS (loop0): Ending clean mount
[  142.270640][ T7459] XFS (loop0): Quotacheck needed: Please wait.
[  142.337631][ T7459] XFS (loop0): Quotacheck: Done.
[  142.367244][ T4332] XFS (loop0): Unmounting Filesystem
[  142.945302][ T7493] set_capacity_and_notify: 2 callbacks suppressed
[  142.945312][ T7493] loop2: detected capacity change from 0 to 32768
[  142.966169][ T7493] XFS (loop2): Mounting V5 Filesystem
[  142.988872][ T7493] XFS (loop2): Ending clean mount
[  142.990514][ T7493] XFS (loop2): Quotacheck needed: Please wait.
[  143.007788][ T7493] XFS (loop2): Quotacheck: Done.
[  143.105738][ T4338] XFS (loop2): Unmounting Filesystem
[  143.268603][ T7509] loop3: detected capacity change from 0 to 32768
[  143.331020][ T7519] fuse: Invalid rootmode
[  143.422909][ T7509] XFS (loop3): Mounting V5 Filesystem
[  143.511294][ T7509] XFS (loop3): Ending clean mount
[  143.520791][ T7509] XFS (loop3): Quotacheck needed: Please wait.
[  143.570332][ T7509] XFS (loop3): Quotacheck: Done.
[  143.631658][ T4333] XFS (loop3): Unmounting Filesystem
[  143.726629][ T7538] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  143.958449][ T7547] device syzkaller0 entered promiscuous mode
[  143.970269][ T7549] device syzkaller0 entered promiscuous mode
[  144.163878][ T7554] device tunl0 entered promiscuous mode
[  144.164874][ T7554] netlink: 'syz.4.955': attribute type 4 has an invalid length.
[  144.165971][ T7554] netlink: 9 bytes leftover after parsing attributes in process `syz.4.955'.
[  144.290893][ T7570] fuse: Invalid rootmode
[  144.623491][ T7587] loop3: detected capacity change from 0 to 128
[  145.114594][ T7597] device syzkaller0 entered promiscuous mode
[  145.246058][ T7605] binder: 7604:7605 got transaction to invalid handle, 1
[  145.247398][ T7605] binder: 7605:7604 cannot find target node
[  145.248366][ T7605] binder: 7604:7605 transaction async to 0:0 failed 168/29201/-22, size 0-24 line 3045
[  145.250208][ T7599] loop0: detected capacity change from 0 to 32768
[  145.259379][ T7605] binder: 7604:7605 got transaction to invalid handle, 1
[  145.261602][ T7605] binder: 7605:7604 cannot find target node
[  145.263788][ T7605] binder: 7604:7605 transaction async to 0:0 failed 169/29201/-22, size 72-24 line 3045
[  145.274818][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  145.288324][ T7599] XFS (loop0): Mounting V5 Filesystem
[  145.345261][ T7599] XFS (loop0): Ending clean mount
[  145.348835][ T7599] XFS (loop0): Quotacheck needed: Please wait.
[  145.368662][ T7599] XFS (loop0): Quotacheck: Done.
[  145.421692][ T4332] XFS (loop0): Unmounting Filesystem
[  145.549516][ T7623] loop2: detected capacity change from 0 to 32768
[  145.581246][ T7623] XFS (loop2): Mounting V5 Filesystem
[  145.643449][ T7623] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  145.658879][ T7623] XFS (loop2): Starting recovery (logdev: internal)
[  145.673572][ T7623] XFS (loop2): Ending recovery (logdev: internal)
[  145.694889][ T7623] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3a4/0x590, xfs_bnobt block 0x8
[  145.696663][ T7623] XFS (loop2): Unmount and run xfs_repair
[  145.713728][ T7623] XFS (loop2): Internal error ltbno + ltlen > bno at line 1955 of file fs/xfs/libxfs/xfs_alloc.c.  Caller xfs_free_ag_extent+0xcf8/0x1288
[  145.716199][ T7623] CPU: 0 PID: 7623 Comm: syz.2.978 Not tainted syzkaller #0
[  145.717277][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[  145.718764][ T7623] Call trace:
[  145.719251][ T7623]  dump_backtrace+0x1c4/0x1f0
[  145.719968][ T7623]  show_stack+0x2c/0x3c
[  145.720603][ T7623]  __dump_stack+0x30/0x40
[  145.721303][ T7623]  dump_stack_lvl+0xf4/0x15c
[  145.722035][ T7623]  dump_stack+0x1c/0x5c
[  145.722667][ T7623]  xfs_corruption_error+0x12c/0x188
[  145.723525][ T7623]  xfs_free_ag_extent+0xd30/0x1288
[  145.724327][ T7623]  __xfs_free_extent+0x1dc/0x338
[  145.725123][ T7623]  xfs_trans_free_extent+0x354/0x84c
[  145.725976][ T7623]  xfs_extent_free_finish_item+0x3c/0xa8
[  145.726863][ T7623]  xfs_defer_finish_noroll+0xf34/0x1fd4
[  145.727815][ T7623]  xfs_defer_finish+0x24/0x184
[  145.728540][ T7623]  xfs_itruncate_extents_flags+0x2c0/0xa14
[  145.729457][ T7623]  xfs_free_eofblocks+0x2b0/0x38c
[  145.730306][ T7623]  xfs_release+0x1bc/0x35c
[  145.730996][ T7623]  xfs_file_release+0x20/0x30
[  145.731775][ T7623]  __fput+0x1b4/0x7b0
[  145.732422][ T7623]  ____fput+0x20/0x30
[  145.733099][ T7623]  task_work_run+0x1f4/0x280
[  145.733844][ T7623]  do_notify_resume+0x20f8/0x2c84
[  145.734557][ T7623]  el0_svc+0x98/0x128
[  145.735266][ T7623]  el0t_64_sync_handler+0x84/0xf0
[  145.736114][ T7623]  el0t_64_sync+0x18c/0x190
[  145.772182][ T7623] XFS (loop2): Corruption detected. Unmount and run xfs_repair
[  145.776815][ T7623] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x16ec/0x1fd4 (fs/xfs/libxfs/xfs_defer.c:580).  Shutting down filesystem.
[  145.785600][ T7623] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  145.813611][ T7623] XFS (loop2): Unmounting Filesystem
[  145.878697][ T7651] binder: 7650:7651 tried to acquire reference to desc 0, got 1 instead
[  145.880307][ T7651] binder: 7650:7651 ioctl c0306201 0 returned -14
[  145.881692][ T7651] binder: 7650:7651 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  145.884310][ T7651] binder: 7651 RLIMIT_NICE not set
[  145.905075][ T7653] device syzkaller0 entered promiscuous mode
[  145.935411][ T7654] binder: 7650:7654 got transaction with invalid fd, -1
[  145.936838][ T7654] binder: 7654:7650 translate fd failed
[  145.937826][ T7654] binder: 7650:7654 transaction async to 7650:0 failed 174/29201/-9, size 72-24 line 3415
[  146.079595][ T7656] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  146.132163][ T4380] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  146.323911][ T7664] loop1: detected capacity change from 0 to 2048
[  146.329490][ T4380] usb 1-1: Using ep0 maxpacket: 32
[  146.354573][ T7664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.518812][ T4380] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  146.520401][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.523735][ T4380] usb 1-1: config 0 descriptor??
[  146.529640][ T4380] gspca_main: sunplus-2.14.0 probing 041e:400b
[  146.709452][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  146.767806][ T7672] loop3: detected capacity change from 0 to 128
[  147.239785][ T4380] gspca_sunplus: reg_w_riv err -110
[  147.240730][ T4380] sunplus: probe of 1-1:0.0 failed with error -110
[  147.363625][ T7678] Set syz1 is full, maxelem 65536 reached
[  147.398488][ T7691] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  147.490638][ T7683] loop1: detected capacity change from 0 to 32768
[  147.558223][ T7683] XFS (loop1): Mounting V5 Filesystem
[  147.580880][ T7683] XFS (loop1): Ending clean mount
[  147.587286][ T7683] XFS (loop1): Quotacheck needed: Please wait.
[  147.617606][ T7683] XFS (loop1): Quotacheck: Done.
[  147.681894][ T4327] XFS (loop1): Unmounting Filesystem
[  147.923038][ T7724] Set syz1 is full, maxelem 65536 reached
[  148.040396][ T7737] binder: 7735:7737 tried to acquire reference to desc 0, got 1 instead
[  148.042172][ T7737] binder: 7735:7737 ioctl c0306201 0 returned -14
[  148.043345][ T7737] binder: 7735:7737 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  148.045289][ T7737] binder: 7737 RLIMIT_NICE not set
[  148.047073][ T7730] loop3: detected capacity change from 0 to 32768
[  148.064504][ T7730] XFS (loop3): Mounting V5 Filesystem
[  148.085000][ T7730] XFS (loop3): Ending clean mount
[  148.349332][ T7730] XFS (loop3): Quotacheck needed: Please wait.
[  148.363661][ T7749] binder: 7735:7749 got transaction with invalid fd, -1
[  148.365405][ T7749] binder: 7749:7735 translate fd failed
[  148.366639][ T7749] binder: 7735:7749 transaction async to 7735:0 failed 183/29201/-9, size 72-24 line 3415
[  148.401625][ T7730] XFS (loop3): Quotacheck: Done.
[  148.535031][ T7751] loop2: detected capacity change from 0 to 32768
[  148.557471][ T7751] XFS (loop2): Mounting V5 Filesystem
[  148.611291][ T7751] XFS (loop2): Ending clean mount
[  148.615436][ T7751] XFS (loop2): Quotacheck needed: Please wait.
[  148.641366][ T7751] XFS (loop2): Quotacheck: Done.
[  148.847106][ T4338] XFS (loop2): Unmounting Filesystem
[  148.891557][ T4444] usb 1-1: USB disconnect, device number 7
[  148.965228][ T7775] fuse: Bad value for 'group_id'
[  148.985094][ T7772] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  149.579958][ T7779] loop0: detected capacity change from 0 to 32768
[  149.613132][ T7779] XFS (loop0): Mounting V5 Filesystem
[  149.674996][ T7779] XFS (loop0): Ending clean mount
[  149.676598][ T7779] XFS (loop0): Quotacheck needed: Please wait.
[  149.696395][ T7779] XFS (loop0): Quotacheck: Done.
[  149.738027][ T4332] XFS (loop0): Unmounting Filesystem
[  149.777675][ T7797] loop1: detected capacity change from 0 to 32768
[  149.826512][ T7797] XFS (loop1): Mounting V5 Filesystem
[  149.870663][ T7797] XFS (loop1): Ending clean mount
[  149.873112][ T7797] XFS (loop1): Quotacheck needed: Please wait.
[  149.894783][ T7797] XFS (loop1): Quotacheck: Done.
[  149.950236][ T7730] Set syz1 is full, maxelem 65536 reached
[  149.965209][ T4333] XFS (loop3): Unmounting Filesystem
[  149.966158][ T4327] XFS (loop1): Unmounting Filesystem
[  150.031471][ T7815] IPVS: lc: FWM 3 0x00000003 - no destination available
[  150.086594][ T7818] fuse: Bad value for 'group_id'
[  150.462173][ T7831] loop1: detected capacity change from 0 to 32768
[  150.498083][ T7840] loop3: detected capacity change from 0 to 128
[  150.995850][ T4444] binder_debug: 3 callbacks suppressed
[  150.995863][ T4444] binder: undelivered TRANSACTION_ERROR: 29201
[  151.068870][ T7831] XFS (loop1): Mounting V5 Filesystem
[  151.109899][ T7842] loop2: detected capacity change from 0 to 32768
[  151.127045][ T7842] XFS (loop2): Mounting V5 Filesystem
[  151.140984][ T7857] IPVS: lc: FWM 3 0x00000003 - no destination available
[  151.141489][ T7831] XFS (loop1): Ending clean mount
[  151.153863][ T7831] XFS (loop1): Quotacheck needed: Please wait.
[  151.180477][ T7870] fuse: Bad value for 'group_id'
[  151.200701][ T7831] XFS (loop1): Quotacheck: Done.
[  151.206490][ T7842] XFS (loop2): Ending clean mount
[  151.210384][ T7842] XFS (loop2): Quotacheck needed: Please wait.
[  151.239898][ T7842] XFS (loop2): Quotacheck: Done.
[  151.256396][ T4338] XFS (loop2): Unmounting Filesystem
[  151.297279][ T4327] XFS (loop1): Unmounting Filesystem
[  151.447541][ T7868] loop0: detected capacity change from 0 to 32768
[  151.790657][ T7868] XFS (loop0): Mounting V5 Filesystem
[  151.814765][ T7868] XFS (loop0): Ending clean mount
[  151.817660][ T7868] XFS (loop0): Quotacheck needed: Please wait.
[  151.844985][ T7868] XFS (loop0): Quotacheck: Done.
[  151.863756][ T4332] XFS (loop0): Unmounting Filesystem
[  152.619605][ T7927] loop2: detected capacity change from 0 to 2048
[  152.935891][ T7927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.035286][ T7922] loop3: detected capacity change from 0 to 32768
[  153.086242][ T7922] XFS (loop3): Mounting V5 Filesystem
[  153.125109][ T7922] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  153.136298][ T7922] XFS (loop3): Starting recovery (logdev: internal)
[  153.153744][ T7922] XFS (loop3): Ending recovery (logdev: internal)
[  153.211386][ T7922] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x3a4/0x590, xfs_bnobt block 0x8
[  153.217065][ T7922] XFS (loop3): Unmount and run xfs_repair
[  153.250043][ T7932] loop2: detected capacity change from 0 to 32768
[  153.285610][ T7932] XFS (loop2): Mounting V5 Filesystem
[  153.321199][ T7932] XFS (loop2): Ending clean mount
[  153.324251][ T7932] XFS (loop2): Quotacheck needed: Please wait.
[  153.344895][ T7932] XFS (loop2): Quotacheck: Done.
[  153.409069][ T7959] binder_user_error: 4 callbacks suppressed
[  153.409079][ T7959] binder: 7958:7959 tried to acquire reference to desc 0, got 1 instead
[  153.424569][ T7959] binder: 7958:7959 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  153.426769][ T7959] binder: 7959 RLIMIT_NICE not set
[  153.431346][ T4338] XFS (loop2): Unmounting Filesystem
[  153.475862][ T7960] binder: 7958:7960 got transaction with invalid fd, -1
[  153.477058][ T7960] binder: 7960:7958 translate fd failed
[  153.477983][ T7960] binder: 7958:7960 transaction async to 7958:0 failed 201/29201/-9, size 72-24 line 3415
[  153.567636][ T7957] loop1: detected capacity change from 0 to 32768
[  153.628578][ T7957] XFS (loop1): Mounting V5 Filesystem
[  153.675254][ T7957] XFS (loop1): Ending clean mount
[  153.677104][ T7957] XFS (loop1): Quotacheck needed: Please wait.
[  153.694032][ T4329] Bluetooth: hci4: command 0x0406 tx timeout
[  153.695091][ T4339] Bluetooth: hci2: command 0x0406 tx timeout
[  153.695945][ T4339] Bluetooth: hci3: command 0x0406 tx timeout
[  153.697074][ T4342] Bluetooth: hci0: command 0x0406 tx timeout
[  153.697959][ T4342] Bluetooth: hci1: command 0x0406 tx timeout
[  153.701269][ T7957] XFS (loop1): Quotacheck: Done.
[  153.747568][ T4327] XFS (loop1): Unmounting Filesystem
[  153.838590][ T7922] XFS (loop3): Unmounting Filesystem
[  154.265171][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  154.295760][ T7980] loop0: detected capacity change from 0 to 2048
[  154.344679][ T7980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.405511][ T7976] loop2: detected capacity change from 0 to 32768
[  154.453917][ T7976] XFS (loop2): Mounting V5 Filesystem
[  154.538610][ T7976] XFS (loop2): Ending clean mount
[  154.545585][ T7976] XFS (loop2): Quotacheck needed: Please wait.
[  154.594121][ T7976] XFS (loop2): Quotacheck: Done.
[  154.936206][ T4338] XFS (loop2): Unmounting Filesystem
[  155.423881][ T4344] Bluetooth: hci2: unexpected subevent 0x0e length: 32 > 15
[  155.490437][ T8019] binder: 8018:8019 tried to acquire reference to desc 0, got 1 instead
[  155.550084][ T8019] binder: 8018:8019 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  155.572965][ T8019] binder: 8019 RLIMIT_NICE not set
[  155.600069][ T8024] loop1: detected capacity change from 0 to 2048
[  155.601199][ T8020] binder: 8018:8020 got transaction with invalid fd, -1
[  155.605808][ T8020] binder: 8020:8018 translate fd failed
[  155.608277][ T8020] binder: 8018:8020 transaction async to 8018:0 failed 210/29201/-9, size 72-24 line 3415
[  155.615914][ T8024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.152724][ T8036] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1091'.
[  156.318091][ T4379] binder: undelivered TRANSACTION_ERROR: 29201
[  157.115599][ T8062] loop2: detected capacity change from 0 to 2048
[  157.130951][ T8062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.283076][ T4344] Bluetooth: hci1: unexpected subevent 0x0e length: 32 > 15
[  157.854595][ T8072] loop2: detected capacity change from 0 to 32768
[  158.030100][ T8072] XFS (loop2): Mounting V5 Filesystem
[  158.106164][ T8072] XFS (loop2): Ending clean mount
[  158.107850][ T8072] XFS (loop2): Quotacheck needed: Please wait.
[  158.128395][ T8072] XFS (loop2): Quotacheck: Done.
[  158.260078][ T8112] binder: 8110:8112 tried to acquire reference to desc 0, got 1 instead
[  158.261892][ T8112] binder: 8110:8112 got transaction with invalid fd, -1
[  158.278077][ T8112] binder: 8112:8110 translate fd failed
[  158.551270][ T8112] binder: 8110:8112 transaction async to 8110:0 failed 220/29201/-9, size 72-24 line 3415
[  158.555210][ T4444] binder: undelivered TRANSACTION_ERROR: 29201
[  158.560105][ T4338] XFS (loop2): Unmounting Filesystem
[  158.570310][ T4444] binder: undelivered transaction 219, process died.
[  158.596544][ T8117] loop1: detected capacity change from 0 to 128
[  158.756003][ T8125] fuse: Unknown parameter 'user_i00000000000000000000'
[  159.289414][ T8142] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  159.398635][ T8140] loop2: detected capacity change from 0 to 32768
[  159.464630][ T8140] XFS (loop2): Mounting V5 Filesystem
[  159.496345][ T8140] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  159.878212][ T8140] XFS (loop2): Starting recovery (logdev: internal)
[  159.908060][ T8140] XFS (loop2): Ending recovery (logdev: internal)
[  159.947590][ T8140] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3a4/0x590, xfs_bnobt block 0x8
[  159.949555][ T8140] XFS (loop2): Unmount and run xfs_repair
[  159.953349][ T8139] XFS (loop2): Internal error ltbno + ltlen > bno at line 1955 of file fs/xfs/libxfs/xfs_alloc.c.  Caller xfs_free_ag_extent+0xcf8/0x1288
[  159.955724][ T8139] CPU: 0 PID: 8139 Comm: syz.2.1115 Not tainted syzkaller #0
[  159.956859][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[  159.958421][ T8139] Call trace:
[  159.958963][ T8139]  dump_backtrace+0x1c4/0x1f0
[  159.959686][ T8139]  show_stack+0x2c/0x3c
[  159.960392][ T8139]  __dump_stack+0x30/0x40
[  159.961125][ T8139]  dump_stack_lvl+0xf4/0x15c
[  159.961905][ T8139]  dump_stack+0x1c/0x5c
[  159.962578][ T8139]  xfs_corruption_error+0x12c/0x188
[  159.963449][ T8139]  xfs_free_ag_extent+0xd30/0x1288
[  159.964270][ T8139]  __xfs_free_extent+0x1dc/0x338
[  159.965016][ T8139]  xfs_trans_free_extent+0x354/0x84c
[  159.965905][ T8139]  xfs_extent_free_finish_item+0x3c/0xa8
[  159.966885][ T8139]  xfs_defer_finish_noroll+0xf34/0x1fd4
[  159.967799][ T8139]  xfs_defer_finish+0x24/0x184
[  159.968605][ T8139]  xfs_itruncate_extents_flags+0x2c0/0xa14
[  159.969634][ T8139]  xfs_free_eofblocks+0x2b0/0x38c
[  159.970400][ T8139]  xfs_release+0x1bc/0x35c
[  159.971081][ T8139]  xfs_file_release+0x20/0x30
[  159.971788][ T8139]  __fput+0x1b4/0x7b0
[  159.972396][ T8139]  ____fput+0x20/0x30
[  159.973006][ T8139]  task_work_run+0x1f4/0x280
[  159.973781][ T8139]  do_notify_resume+0x20f8/0x2c84
[  159.974570][ T8139]  el0_svc+0x98/0x128
[  159.975194][ T8139]  el0t_64_sync_handler+0x84/0xf0
[  159.976043][ T8139]  el0t_64_sync+0x18c/0x190
[  159.982171][ T8139] XFS (loop2): Corruption detected. Unmount and run xfs_repair
[  159.984218][ T8139] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x16ec/0x1fd4 (fs/xfs/libxfs/xfs_defer.c:580).  Shutting down filesystem.
[  159.987022][ T8139] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  160.044859][ T8176] futex_wake_op: syz.1.1132 tries to shift op by 144; fix this program
[  160.061942][ T8176] loop1: detected capacity change from 0 to 256
[  160.084856][ T8176] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  160.401004][ T4338] XFS (loop2): Unmounting Filesystem
[  160.831066][ T8192] xt_connbytes: Forcing CT accounting to be enabled
[  160.832853][ T8192] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  161.094061][   T11] kworker/u4:1: attempt to access beyond end of device
[  161.094061][   T11] loop1: rw=1, sector=3064, nr_sectors = 5352 limit=256
[  161.435845][ T8206] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  161.610902][ T8211] loop1: detected capacity change from 0 to 4096
[  161.640455][ T8211] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  161.697258][ T4327] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  161.706950][ T8213] random: crng reseeded on system resumption
[  162.067453][ T8219] loop1: detected capacity change from 0 to 32768
[  162.076145][ T8228] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1150'.
[  162.126053][ T8219] JBD2: Ignoring recovery information on journal
[  162.141020][ T8219] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  162.461806][ T4327] ocfs2: Unmounting device (7,1) on (node local)
[  162.676370][ T8247] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  162.937748][   T27] audit: type=1326 audit(162.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.3.1156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577fe8 code=0x7ffc0000
[  162.941522][   T27] audit: type=1326 audit(162.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.3.1156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577fe8 code=0x7ffc0000
[  162.956796][   T27] audit: type=1326 audit(162.930:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.3.1156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577fe8 code=0x7ffc0000
[  162.978760][   T27] audit: type=1326 audit(162.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.3.1156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577fe8 code=0x7ffc0000
[  162.980114][ T8254] loop2: detected capacity change from 0 to 256
[  162.988867][   T27] audit: type=1326 audit(162.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.3.1156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffab577fe8 code=0x7ffc0000
[  163.004665][   T27] audit: type=1326 audit(162.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.3.1156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577fe8 code=0x7ffc0000
[  163.014073][ T8254] FAT-fs (loop2): Directory bread(block 64) failed
[  163.015293][ T8254] FAT-fs (loop2): Directory bread(block 65) failed
[  163.016396][ T8254] FAT-fs (loop2): Directory bread(block 66) failed
[  163.020461][   T27] audit: type=1326 audit(162.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.3.1156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577fe8 code=0x7ffc0000
[  163.032610][   T27] audit: type=1326 audit(162.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.3.1156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577fe8 code=0x7ffc0000
[  163.033379][ T8254] FAT-fs (loop2): Directory bread(block 67) failed
[  163.036761][   T27] audit: type=1326 audit(162.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.3.1156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab577fe8 code=0x7ffc0000
[  163.046680][   T27] audit: type=1326 audit(162.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.3.1156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffab577fe8 code=0x7ffc0000
[  163.049001][ T8256] block device autoloading is deprecated and will be removed.
[  163.057544][ T8254] FAT-fs (loop2): Directory bread(block 68) failed
[  163.060746][ T8254] FAT-fs (loop2): Directory bread(block 69) failed
[  163.066842][ T8254] FAT-fs (loop2): Directory bread(block 70) failed
[  163.068565][ T8254] FAT-fs (loop2): Directory bread(block 71) failed
[  163.075351][ T8254] FAT-fs (loop2): Directory bread(block 72) failed
[  163.076377][ T8254] FAT-fs (loop2): Directory bread(block 73) failed
[  163.092802][ T8254] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  163.967167][ T8283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1166'.
[  164.391661][ T8289] overlayfs: failed to clone upperpath
[  164.558849][ T8292] loop1: detected capacity change from 0 to 32768
[  164.560373][ T8292] xfs: Unknown parameter 'appraise'
[  165.251374][ T8310] loop0: detected capacity change from 0 to 256
[  165.266587][ T8310] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  165.555156][ T8317] binder: 8316:8317 unknown command 1074553619
[  165.556425][ T8317] binder: 8316:8317 ioctl c0306201 20000540 returned -22
[  165.558266][ T8317] binder: 8316:8317 ioctl c0306201 0 returned -14
[  166.590671][ T8336] device tunl0 left promiscuous mode
[  167.135470][ T8354] bridge0: port 3(vlan2) entered blocking state
[  167.136933][ T8354] bridge0: port 3(vlan2) entered disabled state
[  167.138572][ T8354] device vlan2 entered promiscuous mode
[  167.139805][ T8354] bridge0: mtu less than device minimum
[  167.294182][ T8358] xt_hashlimit: max too large, truncated to 1048576
[  167.297961][ T8358] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  168.666635][ T8370] loop0: detected capacity change from 0 to 256
[  168.895778][ T8370] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  168.923873][ T8376] netlink: 'syz.1.1195': attribute type 2 has an invalid length.
[  169.125864][ T8389] loop0: detected capacity change from 0 to 4096
[  169.130595][ T8389] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  169.138720][ T8389] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096)
[  169.141430][ T8389] NILFS (loop0): invalid segment: Checksum error in segment payload
[  169.144179][ T8389] NILFS (loop0): unable to fall back to spare super block
[  169.412438][ T8389] NILFS (loop0): error -22 while searching super root
[  169.447406][ T8396] loop2: detected capacity change from 0 to 128
[  169.538628][ T4317] udevd[4317]: incorrect nilfs2 checksum on /dev/loop0
[  169.571197][ T8401] binder: 8400:8401 tried to acquire reference to desc 0, got 1 instead
[  169.627268][ T8403] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4338] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[8403]
[  169.845297][ T8404] binder: 8400:8404 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  169.847564][ T8404] binder: 8404 RLIMIT_NICE not set
[  169.850962][ T8401] binder: 8400:8401 got transaction with invalid fd, -1
[  169.852406][ T8401] binder: 8401:8400 translate fd failed
[  169.853487][ T8401] binder: 8400:8401 transaction async to 8400:0 failed 233/29201/-9, size 72-24 line 3415
[  169.862037][    T7] binder: undelivered transaction 229, process died.
[  169.883636][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  169.905260][ T8405] page:000000009ecbb887 refcount:4 mapcount:1 mapping:00000000321b5898 index:0x0 pfn:0x13a5bc
[  169.907190][ T8405] memcg:ffff0000cc0da000
[  169.907849][ T8405] aops:shmem_aops ino:116
[  169.908513][ T8405] flags: 0x5ffd80000080815(locked|uptodate|lru|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[  169.910193][ T8405] raw: 05ffd80000080815 fffffc0004124588 fffffc0003ec2008 ffff0000f40f1658
[  169.911635][ T8405] raw: 0000000000000000 0000000000000000 0000000400000000 ffff0000cc0da000
[  169.912986][ T8405] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[  169.914097][ T8405] ------------[ cut here ]------------
[  169.914881][ T8405] kernel BUG at mm/filemap.c:153!
[  169.915793][ T8405] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
[  169.917101][ T8405] Modules linked in:
[  169.917728][ T8405] CPU: 0 PID: 8405 Comm: syz.0.1206 Not tainted syzkaller #0
[  169.918802][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026
[  169.920349][ T8405] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  169.921516][ T8405] pc : filemap_unaccount_folio+0x44c/0x4f0
[  169.922365][ T8405] lr : filemap_unaccount_folio+0x44c/0x4f0
[  169.923282][ T8405] sp : ffff8000217e71f0
[  169.923960][ T8405] x29: ffff8000217e71f0 x28: ffff8000217e7520 x27: 0000000000000000
[  169.925515][ T8405] x26: dfff800000000000 x25: ffff7000042fce4c x24: 1fffff80007d2de1
[  169.926851][ T8405] x23: ffff8000217e7280 x22: ffff0000f40f1658 x21: fffffc0003e96f18
[  169.928113][ T8405] x20: ffff0000f40f1658 x19: fffffc0003e96f00 x18: 0000000000000000
[  169.929392][ T8405] x17: 0000000000000000 x16: ffff800011b8ee98 x15: 0000000000000000
[  169.930671][ T8405] x14: 0000000000000001 x13: 1fffe00033e727a3 x12: 0000000000000000
[  169.932010][ T8405] x11: ff008000087c8b38 x10: 0000000000000000 x9 : ffff8000087c8b38
[  169.933256][ T8405] x8 : ffff0000d54e8000 x7 : 0000000000000001 x6 : 0000000000000001
[  169.934515][ T8405] x5 : ffff8000217e6c38 x4 : ffff800015464e60 x3 : ffff800008540378
[  169.935690][ T8405] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000039
[  169.936920][ T8405] Call trace:
[  169.937459][ T8405]  filemap_unaccount_folio+0x44c/0x4f0
[  169.938416][ T8405]  __filemap_remove_folio+0xc4/0x4fc
[  169.939310][ T8405]  filemap_remove_folio+0xd0/0x1c0
[  169.940182][ T8405]  truncate_inode_folio+0x6c/0x84
[  169.941062][ T8405]  shmem_undo_range+0x3c8/0x14a8
[  169.941875][ T8405]  shmem_evict_inode+0x200/0x8b0
[  169.942686][ T8405]  evict+0x3d8/0x824
[  169.943306][ T8405]  iput+0x728/0x7e8
[  169.943902][ T8405]  dentry_unlink_inode+0x360/0x438
[  169.944706][ T8405]  __dentry_kill+0x318/0x590
[  169.945416][ T8405]  dentry_kill+0xcc/0x24c
[  169.946081][ T8405]  dput+0x228/0x444
[  169.946697][ T8405]  __fput+0x480/0x7b0
[  169.947395][ T8405]  ____fput+0x20/0x30
[  169.948038][ T8405]  task_work_run+0x1f4/0x280
[  169.948731][ T8405]  do_notify_resume+0x20f8/0x2c84
[  169.949524][ T8405]  el0_svc+0x98/0x128
[  169.950187][ T8405]  el0t_64_sync_handler+0x84/0xf0
[  169.951021][ T8405]  el0t_64_sync+0x18c/0x190
[  169.951743][ T8405] Code: f004b3e1 91018021 aa1303e0 940381aa (d4210000) 
[  169.952880][ T8405] ---[ end trace 0000000000000000 ]---
[  170.182083][ T8405] Kernel panic - not syncing: Oops - BUG: Fatal exception
[  170.183202][ T8405] SMP: stopping secondary CPUs
[  170.183894][ T8405] Kernel Offset: disabled
[  170.184539][ T8405] CPU features: 0x0a0000,000f0097,a65bfea7
[  170.185421][ T8405] Memory Limit: none
[  170.418999][ T8405] Rebooting in 86400 seconds..