last executing test programs: 4m54.900592026s ago: executing program 3 (id=150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002500)=""/4137, 0x1029}], 0x1}, 0x0) 4m53.789839652s ago: executing program 3 (id=154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 4m52.374631542s ago: executing program 3 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 4m52.137787925s ago: executing program 3 (id=160): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) shutdown(r5, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r6, @ANYBLOB="006970366772659fc5ffff00831b0d6ecd7383090020010000000000000000000000000000000000000000000000000000000200"], 0x4c}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x88}, {&(0x7f0000004900)=""/4068, 0xab}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xd4843, 0x0) unshare(0x22020600) 4m45.729650587s ago: executing program 3 (id=181): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x80000000000}, 0xfd4d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, &(0x7f0000000040)) setsockopt$inet6_int(r6, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000e00), 0x0, 0x2000c051) recvmmsg(r6, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) 4m44.79331409s ago: executing program 3 (id=183): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@void, @void, @eth={@multicast, @random='\x00\x00\x00\x00P\x00', @val={@val, {0x6558}}, {@can={0xc, {{0x1}, 0x1, 0x5, 0x0, 0x0, "9e896c295a5cde48"}}}}}, 0x26) syz_init_net_socket$x25(0x9, 0x5, 0x0) 4m29.612438277s ago: executing program 32 (id=183): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@void, @void, @eth={@multicast, @random='\x00\x00\x00\x00P\x00', @val={@val, {0x6558}}, {@can={0xc, {{0x1}, 0x1, 0x5, 0x0, 0x0, "9e896c295a5cde48"}}}}}, 0x26) syz_init_net_socket$x25(0x9, 0x5, 0x0) 18.21027519s ago: executing program 4 (id=961): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x40a4, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c6372843ecbdda9f132dd908b4c422c6561746f723d30c6da432c64", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eeb646000000000000000801658ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cd"], 0x0, 0x5c8, &(0x7f0000005440)="$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") close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x4000804) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x1a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="06"], 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000000c0)="96685102d300000013000010888e", 0xe, 0x4000004, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 16.260162218s ago: executing program 4 (id=967): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2a0, 0x2c8, 0x0, {0x0, 0x5803}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000080)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x4, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x10) bind$can_raw(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 14.141710008s ago: executing program 5 (id=973): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) shutdown(r5, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r6, @ANYBLOB], 0x4c}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x88}, {&(0x7f0000004900)=""/4068, 0xab}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xd4843, 0x0) unshare(0x22020600) 12.347561093s ago: executing program 5 (id=978): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002500)=""/4137, 0x1029}], 0x1}, 0x0) 12.080485677s ago: executing program 4 (id=980): memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x238542, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x8480, 0x2e) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x1, 0x74bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x11}, {0xfff4, 0xfff2}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x200c8045) 6.788267623s ago: executing program 0 (id=993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) 6.505215117s ago: executing program 0 (id=995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r1}, @fd={0x77622a85}, @fda={0x66646185, 0x5, 0x1, 0x1a}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 5.541827241s ago: executing program 1 (id=997): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0xc190) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 5.522948031s ago: executing program 0 (id=998): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x4dd4a000) fanotify_init(0x0, 0x8000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000340)=@profile={'stack ', 'sched_switch\x00'}, 0x13) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002500)=""/4137, 0x1029}], 0x1}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) syz_clone3(0x0, 0x0) 5.111454017s ago: executing program 4 (id=1000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 5.067598298s ago: executing program 5 (id=1001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x40a4, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c6372843ecbdda9f132dd908b4c422c6561746f723d30c6da432c64", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eeb646000000000000000801658ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cd"], 0x0, 0x5c8, &(0x7f0000005440)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x1a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="06"], 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xd0, 0x3ed, 0x8, 0x70bd2d, 0x25dfdbfb, "330efcb7b242bc09f9e9af56b80d1dc6eacc7492b0b34dacd925574272217c5ce2972e5c9e5fa8b18ea662cb1811780be108dc57920e9896f89459cf04fa86ee6c4d321e8ab875574435969dd9a02b72fbc8746c1e30bc6c44cbd32310b71023e956cd3e2e2af212a838e50c01acaabf3bc07b18829623daeeb598f41b26e4413f1a4e93f048bba75300c79b9cf4d02a9954369cb273edd6a9238bd76cb7770757e51cb56468138fcb054283ad9161c7c762e7e856f7af4bf772ffeb782ba9", ["", "", ""]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) 4.412421877s ago: executing program 0 (id=1002): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) shutdown(r5, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r6, @ANYBLOB], 0x4c}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x88}, {&(0x7f0000004900)=""/4068, 0xab}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xd4843, 0x0) unshare(0x22020600) 4.378263627s ago: executing program 2 (id=1003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4.313906348s ago: executing program 1 (id=1004): r0 = socket(0x2c, 0x3, 0x0) close(0xffffffffffffffff) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000001b00)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 4.149009831s ago: executing program 1 (id=1005): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0xfd4d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000000040)) setsockopt$inet6_int(r5, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000e00), 0x0, 0x2000c051) recvmmsg(r5, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) 3.428231691s ago: executing program 2 (id=1006): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2a0, 0x2c8, 0x0, {0x0, 0x5803}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000080)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x4, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x10) bind$can_raw(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 3.427472411s ago: executing program 5 (id=1007): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x40a4, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c6372843ecbdda9f132dd908b4c422c6561746f723d30c6da432c64", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eeb646000000000000000801658ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cd"], 0x0, 0x5c8, &(0x7f0000005440)="$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") close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x1a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="06"], 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000000c0)="96685102d300000013000010888e", 0xe, 0x4000004, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 3.426999201s ago: executing program 4 (id=1008): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r0}, @fd={0x77622a85}, @fda={0x66646185, 0x5, 0x1, 0x1a}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 3.403697841s ago: executing program 0 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) memfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') pread64(r3, &(0x7f0000001600)=""/4098, 0x1002, 0x800000008) 2.162790699s ago: executing program 4 (id=1010): memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x238542, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x8480, 0x2e) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x1, 0x74bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x11}, {0xfff4, 0xfff2}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x200c8045) 2.162287929s ago: executing program 0 (id=1011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002500)=""/4137, 0x1029}], 0x1}, 0x0) 2.161519799s ago: executing program 1 (id=1012): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x4dd4a000) fanotify_init(0x0, 0x8000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000340)=@profile={'stack ', 'sched_switch\x00'}, 0x13) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002500)=""/4137, 0x1029}], 0x1}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) syz_clone3(0x0, 0x0) 1.274819412s ago: executing program 2 (id=1013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) 1.199053143s ago: executing program 1 (id=1014): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0xc190) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 1.168656653s ago: executing program 5 (id=1015): r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBqNVIFjUjsrEqChNSAEMohQhFcerUSp7GySSvHRWmEyAYoSJw4oR44FKFw6AkhhFQOCFHOSEhcOOUeiRuHHABXM7O7Xtsbx25ir9t+PtJ43ts3773f/DJ/dsexNsBn1rnXsr+XIueOn79Z1u/d7XTv3e1cG5STTCVpJM16laKdFB8mZ1Mv+Xz5Yn+44mHzvHL/g6L57vudutbsL9X2jc36bTB2y15yYFjZl2SmLv53y8NuGK9aqnEuro73cFObNRbDuMuEHRskDiZtZYPeamPjkd23ft4Ce9bt+r65wXRyMPXdtbrF9a8Oj74yTN6m16be7sUBAAAAO2XsZ/lRTz3Ig9zMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4divo7A4v+0hiUZ1IMvv+/NfKd+q0Jh/uY3rlcrb771KQDAQAAAAAAAIDH8sKDPMjNHBrUV4rqd/4vVpXD1c/P5a3cyEKWciI3M5/lLGcpc0mmRwZq3ZxfXl6a29jzlyl7rqys3O73PDW256m1cfXWBzrufxps2AgAAAAAAAAAPrN+lHOrv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC9oEj21atqOTwoT6fRTHIgSauYGW7emmiwT8BfJh0AAAAA7Lx2f32o+H9dWCmqz/xHqs/9B/JWrmc5i1lONwu5VD0LqD/1N/7R63Tv3e1cK5eNA3/j39uKoxox9bOH8TPPVls8N+xxLt/O93I8M7mQpSzm+5nPchYyk29VpfkUme4/vZi+d7edQawb4z27pnZhfWwvjJTL+I5WkbRzOYtVbCdysTUIvdHf7ujIbH9sJetmvFNmp3i1b4s5utRfl3v0i/56b5iu9nz/MCOz/dyX2Xh6NO8bc7/N42T9THNpDJ9BHV6dpayun+lj5fxgf13m+qc7m/NtPkpbm4nez8va4Og7snnOky//868XrjSuX71y+cbxvXMYfUzrj4nOSCae31ImumUmeo+RiQOPE/+T0+pno76Kbu9q+WLV91AW8528kUtZyOnMZi5nMpuv5VQ6OTWS1+c2z2t1rjW2d64d+1K/UN6TfjZyb9o1Uw9rKPP69EheR69001Xb6CurWXpmC1kqWhmfpX+NDaX5hX6hnOPHI3ecyVufibmRTDy7eSZ+/b+VJDe6168uXZl/c5M5bv354EuD8qBQnrbvrL02/+ZJ7tc29He3PF6eKf+xUt82Ro+Osu3ZQVudr6KZ1X6Hh21r73OtVqrzuW571JlajnTkzriR6rbnx87SqdqOjrSteZeTN9IdvgsBYA87+PLBVvt+++/t99o/aV9pnz/wzakzU19sZf/fmn/a97vGbxtfL17Oe/lhDk06UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS48fatq/Pd7sLSHiyk8YQHvDO2aZCK+pXW3tj3T2pharMj6vdJNunemkTM7SR7InVp7sJcUxnTdH74SjtpDONJcnWPfMEdsBNOLl978+SNt299ZfHa/OsLry9cP3Xm9KunO1+du33y8mJ3Ybb+OekogZ2w+jZg0pEAAAAAAAAAAAAAW7Ubf94wZtqiN4F9BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6Zzr2W/b0UmZs9MVvW793tdMtlUF7dspmkkaT4QVJ8mJxNvWR6ZLjiYfO8cv+DX7307vud1bGag+0b6/r94T8rK9vci15/yUySff31o01tabyLI+P1thlYrRjuYZmwY4PEwaR9FAAA///howfX") syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}}, 0x0, 0x0, 0x0) 1.060576145s ago: executing program 2 (id=1016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 157.943838ms ago: executing program 2 (id=1017): r0 = socket(0x2c, 0x3, 0x0) close(0xffffffffffffffff) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000001b00)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 156.613437ms ago: executing program 5 (id=1018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x40a4, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c6372843ecbdda9f132dd908b4c422c6561746f723d30c6da432c64", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eeb646000000000000000801658ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cd"], 0x0, 0x5c8, &(0x7f0000005440)="$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") close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x1a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="06"], 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xd0, 0x3ed, 0x8, 0x70bd2d, 0x25dfdbfb, "330efcb7b242bc09f9e9af56b80d1dc6eacc7492b0b34dacd925574272217c5ce2972e5c9e5fa8b18ea662cb1811780be108dc57920e9896f89459cf04fa86ee6c4d321e8ab875574435969dd9a02b72fbc8746c1e30bc6c44cbd32310b71023e956cd3e2e2af212a838e50c01acaabf3bc07b18829623daeeb598f41b26e4413f1a4e93f048bba75300c79b9cf4d02a9954369cb273edd6a9238bd76cb7770757e51cb56468138fcb054283ad9161c7c762e7e856f7af4bf772ffeb782ba9", ["", "", ""]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) 92.259859ms ago: executing program 1 (id=1019): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) shutdown(r5, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r6, @ANYBLOB="006970366772659fc5ffff00831b0d6ecd738309002001000000"], 0x4c}}, 0x0) readv(r0, &(0x7f0000000400)=[{0x0, 0x88}, {&(0x7f0000004900)=""/4068, 0xab}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xd4843, 0x0) unshare(0x22020600) 0s ago: executing program 2 (id=1020): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r0}, @fd={0x77622a85}, @fda={0x66646185, 0x5, 0x1, 0x1a}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): lter on device bond0 [ 38.183961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.187221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.191052][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.193063][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.208857][ T4316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.212617][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.231345][ T4316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.236788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.239555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.248116][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.259013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.262238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.265846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.268334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.271289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.273981][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.276121][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.282841][ T4312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.292895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.296477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.299923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.302670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.305922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.308490][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.310474][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.312890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.327691][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.330637][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.333217][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.335436][ T1742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.338632][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.343111][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.347259][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.349811][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.363227][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.366450][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.369240][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.372434][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.376370][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.378356][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.380727][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.394072][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.401937][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.405493][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.408155][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.411169][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.413795][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.428807][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.431408][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.434338][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.442963][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.446749][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.449909][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.466126][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.469069][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.471763][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.473777][ T1742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.481686][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.485805][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.488609][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.500542][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.503401][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.506860][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.509735][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.512353][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.514367][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.518362][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.521314][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.525634][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.531752][ T4316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.536077][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.543346][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.546674][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.549336][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.551963][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.555078][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.557517][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.562329][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.569593][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.573171][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.577271][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.580528][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.592035][ T4312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.608632][ T4312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.629295][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.632081][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.637632][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.640770][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.643464][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.651034][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.653721][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.659551][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.662238][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.669337][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.672134][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.677758][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.680558][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.683643][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.685716][ T1742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.688669][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.691405][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.694063][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.696131][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.699103][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.702397][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.705346][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.729140][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.732049][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.738966][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.755112][ T4311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.778034][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.780636][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.783002][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.786305][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.789578][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.792358][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.795720][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.811639][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.814227][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.822750][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.839822][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.842671][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.866113][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.868287][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.896147][ T4316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.907479][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.911546][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.928882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.931497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.964183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.970202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.972316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.978118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.981051][ T4311] device veth0_vlan entered promiscuous mode [ 38.986150][ T4312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.021552][ T4311] device veth1_vlan entered promiscuous mode [ 39.031998][ T4316] device veth0_vlan entered promiscuous mode [ 39.036764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.039476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.042173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.054067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.068504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.070999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.099573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.101844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.107726][ T4311] device veth0_macvtap entered promiscuous mode [ 39.117410][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.120316][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.123452][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.127595][ T4316] device veth1_vlan entered promiscuous mode [ 39.136455][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.148206][ T4311] device veth1_macvtap entered promiscuous mode [ 39.154417][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.157518][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.160081][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.162783][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.171613][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.184393][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.193877][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.196851][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.202522][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.219764][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.222618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.232802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.237438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.240143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.270862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.273717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.279192][ T4311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.281632][ T4311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.284127][ T4311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.288372][ T4311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.297659][ T4316] device veth0_macvtap entered promiscuous mode [ 39.302454][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.304805][ T4321] Bluetooth: hci3: command 0x041b tx timeout [ 39.307086][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.309738][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.312481][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.315857][ T4320] Bluetooth: hci0: command 0x041b tx timeout [ 39.315885][ T4321] Bluetooth: hci2: command 0x041b tx timeout [ 39.317543][ T4320] Bluetooth: hci1: command 0x041b tx timeout [ 39.319240][ T4321] Bluetooth: hci4: command 0x041b tx timeout [ 39.321528][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.331143][ T4306] device veth0_vlan entered promiscuous mode [ 39.339300][ T4316] device veth1_macvtap entered promiscuous mode [ 39.346190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.349256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.352150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.378736][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.382344][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.420246][ T4306] device veth1_vlan entered promiscuous mode [ 39.426378][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.429425][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.433487][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.437938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.440593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.443183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.447682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.450580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.453455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.457682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.467479][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.471311][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.482175][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.492948][ T4312] device veth0_vlan entered promiscuous mode [ 39.506675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.509400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.512188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.522355][ T4316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.529927][ T4316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.532304][ T4316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.535323][ T4316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.544107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.548228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.551141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.553690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.557406][ T4307] device veth0_vlan entered promiscuous mode [ 39.565632][ T4307] device veth1_vlan entered promiscuous mode [ 39.580168][ T4312] device veth1_vlan entered promiscuous mode [ 39.587155][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.589477][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.592433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.598167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.600935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.603540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.640536][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.643268][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.648316][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.663345][ T4306] device veth0_macvtap entered promiscuous mode [ 39.677459][ T1742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.679740][ T1742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.683669][ T4306] device veth1_macvtap entered promiscuous mode [ 39.691757][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.695732][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.699785][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.702761][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.706095][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.712726][ T4307] device veth0_macvtap entered promiscuous mode [ 39.720824][ T4307] device veth1_macvtap entered promiscuous mode [ 39.748636][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.751921][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.761994][ T4312] device veth0_macvtap entered promiscuous mode [ 39.772887][ T4312] device veth1_macvtap entered promiscuous mode [ 39.779544][ T1742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.781834][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.781883][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.788564][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.789895][ T1742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.791626][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.800131][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.813150][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.816172][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.818806][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.821377][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.824169][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.835975][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.839035][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.841811][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.849562][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.852354][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.859483][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.864162][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.878970][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.882893][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.892613][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.898388][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.901713][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.910908][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.913724][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.919624][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.922395][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.929396][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.933520][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.939240][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.942092][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.949688][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.953065][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.960479][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.970042][ T4307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.972520][ T4307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.977158][ T4307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.979729][ T4307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.057747][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.060536][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.063484][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.073188][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.086296][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.086788][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.091729][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.091789][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.097807][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.100873][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.103922][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.153141][ T4420] Zero length message leads to an empty skb [ 40.227588][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.367884][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.446989][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.504667][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.555013][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.601834][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.627461][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.698248][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.748046][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.751161][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.766480][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.816206][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.818952][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.821801][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.830129][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.832899][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.846230][ T4422] loop3: detected capacity change from 0 to 256 [ 40.852022][ T4306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.858304][ T4422] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.861846][ T4422] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 40.865062][ T4306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867458][ T4306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.869941][ T4306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.883079][ T4422] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 40.889126][ T4312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.891793][ T4312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.899981][ T4312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.902878][ T4312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.935759][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.938065][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.941165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.975967][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.978288][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.981333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.402475][ T4320] Bluetooth: hci1: command 0x040f tx timeout [ 41.404341][ T4320] Bluetooth: hci2: command 0x040f tx timeout [ 41.406716][ T4320] Bluetooth: hci0: command 0x040f tx timeout [ 41.756851][ T4308] Bluetooth: hci4: command 0x040f tx timeout [ 41.792061][ T4320] Bluetooth: hci3: command 0x040f tx timeout [ 42.028875][ T4433] binfmt_misc: register: failed to install interpreter file ./file2 [ 42.460524][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.462875][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.486528][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.534941][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.537276][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.540590][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.619054][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.621533][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.626329][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.645309][ T1742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.647697][ T1742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.650856][ T1742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.653950][ T4427] loop1: detected capacity change from 0 to 32768 [ 42.657131][ T4427] ======================================================= [ 42.657131][ T4427] WARNING: The mand mount option has been deprecated and [ 42.657131][ T4427] and is ignored by this kernel. Remove the mand [ 42.657131][ T4427] option from the mount to silence this warning. [ 42.657131][ T4427] ======================================================= [ 42.851978][ T4427] XFS (loop1): Mounting V5 Filesystem [ 43.553150][ T4320] Bluetooth: hci1: command 0x0419 tx timeout [ 43.555171][ T4308] Bluetooth: hci2: command 0x0419 tx timeout [ 43.557201][ T4321] Bluetooth: hci0: command 0x0419 tx timeout [ 43.623965][ T4427] XFS (loop1): Ending clean mount [ 43.681178][ T4427] XFS (loop1): Quotacheck needed: Please wait. [ 43.760755][ T4437] loop2: detected capacity change from 0 to 32768 [ 43.769552][ T4427] XFS (loop1): Quotacheck: Done. [ 43.791144][ T4437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8 (4437) [ 43.830511][ T4437] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.833702][ T4437] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 43.846870][ T4437] BTRFS info (device loop2): using free space tree [ 43.864904][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 43.866847][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 44.092448][ T4437] BTRFS info (device loop2): enabling ssd optimizations [ 44.209926][ T4459] loop0: detected capacity change from 0 to 32768 [ 44.223627][ T4459] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.9 (4459) [ 44.277563][ T4316] XFS (loop1): Unmounting Filesystem [ 44.303983][ T4469] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.308421][ T516] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 44.412320][ T4307] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 44.564912][ T4483] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10'. [ 44.592862][ T4459] loop0: detected capacity change from 0 to 2048 [ 44.675276][ T4459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.024451][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 45.087112][ T27] audit: type=1400 audit(45.060:2): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4496 comm="syz.1.11" [ 48.457941][ T4525] binfmt_misc: register: failed to install interpreter file ./file2 [ 49.078844][ T4546] fuse: Bad value for 'fd' [ 49.350454][ T4541] loop4: detected capacity change from 0 to 32768 [ 49.363462][ T4541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.23 (4541) [ 49.636067][ T4541] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 49.821685][ T4541] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 49.962632][ T4541] BTRFS info (device loop4): using free space tree [ 50.346961][ T4539] loop1: detected capacity change from 0 to 32768 [ 50.381138][ T4541] BTRFS info (device loop4): enabling ssd optimizations [ 50.384033][ T4583] loop3: detected capacity change from 0 to 256 [ 50.390979][ T4583] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.396738][ T4583] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 50.410773][ T27] audit: type=1400 audit(50.380:3): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4569 comm="syz.0.28" [ 50.692813][ T4539] XFS (loop1): Mounting V5 Filesystem [ 50.723928][ T4583] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 51.301216][ T4591] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 51.696560][ T4605] binfmt_misc: register: failed to install interpreter file ./file2 [ 52.551874][ T4539] XFS (loop1): Ending clean mount [ 52.564026][ T4539] XFS (loop1): Quotacheck needed: Please wait. [ 52.595568][ T4539] XFS (loop1): Quotacheck: Done. [ 52.732620][ T4316] XFS (loop1): Unmounting Filesystem [ 52.949242][ T4312] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.170079][ T4620] fuse: Bad value for 'fd' [ 54.299317][ T4631] netlink: 44 bytes leftover after parsing attributes in process `syz.0.33'. [ 55.018406][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.022056][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.024265][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.397975][ T27] audit: type=1400 audit(55.370:4): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4645 comm="syz.1.42" [ 55.761028][ T4651] binfmt_misc: register: failed to install interpreter file ./file2 [ 57.401742][ T4660] loop1: detected capacity change from 0 to 256 [ 57.434645][ T4660] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.437810][ T4660] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 57.524852][ T4660] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 57.526821][ T4664] fuse: Bad value for 'fd' [ 59.229718][ T4654] loop3: detected capacity change from 0 to 32768 [ 59.351009][ T4662] loop4: detected capacity change from 0 to 32768 [ 59.359539][ T4662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.47 (4662) [ 59.425929][ T4654] XFS (loop3): Mounting V5 Filesystem [ 59.481027][ T4662] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 59.488934][ T4662] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 59.494665][ T4662] BTRFS info (device loop4): using free space tree [ 59.495783][ T4654] XFS (loop3): log mount failed [ 59.604128][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.617446][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.622226][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.312424][ T4662] BTRFS info (device loop4): enabling ssd optimizations [ 60.868069][ T27] audit: type=1400 audit(60.840:5): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4709 comm="syz.1.56" [ 60.899204][ T4312] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.416183][ T4718] binfmt_misc: register: failed to install interpreter file ./file2 [ 62.632344][ T4622] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4622) [ 62.958383][ T4732] loop3: detected capacity change from 0 to 256 [ 62.973339][ T4732] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.196587][ T4732] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 63.711854][ T4732] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 64.237303][ T4744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.58'. [ 64.506821][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.819201][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.146677][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.150327][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.152963][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.386218][ T4727] loop0: detected capacity change from 0 to 32768 [ 65.405073][ T4727] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 65.552987][ T4622] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 65.702847][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 65.833300][ T4763] binfmt_misc: register: failed to install interpreter file ./file2 [ 66.524781][ T4754] loop3: detected capacity change from 0 to 32768 [ 66.549634][ T4754] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 66.793109][ T4754] loop3: detected capacity change from 0 to 2048 [ 66.888223][ T27] audit: type=1400 audit(66.860:6): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4769 comm="syz.1.73" [ 67.465063][ T4754] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.372028][ T4311] EXT4-fs (loop3): unmounting filesystem. [ 68.387601][ T4790] loop1: detected capacity change from 0 to 256 [ 68.395597][ T4790] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.406148][ T4790] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 68.417126][ T4790] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 69.750301][ T14] cfg80211: failed to load regulatory.db [ 70.449590][ T4806] binfmt_misc: register: failed to install interpreter file ./file2 [ 71.220152][ T4795] loop2: detected capacity change from 0 to 32768 [ 71.314768][ T4795] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 71.380441][ T4811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.79'. [ 71.662457][ T4621] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 71.798349][ T4802] loop3: detected capacity change from 0 to 40427 [ 71.832749][ T4802] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 71.911161][ T4802] F2FS-fs (loop3): invalid crc value [ 72.339944][ T4802] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.775122][ T4802] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.857161][ T27] audit: type=1400 audit(72.830:7): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4822 comm="syz.4.87" [ 73.721719][ T4839] loop2: detected capacity change from 0 to 256 [ 73.756676][ T4839] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.759757][ T4839] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 73.827505][ T4839] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 75.398897][ T4845] binfmt_misc: register: failed to install interpreter file ./file2 [ 77.287896][ T4873] netlink: 44 bytes leftover after parsing attributes in process `syz.1.95'. [ 78.629975][ T4887] loop1: detected capacity change from 0 to 256 [ 78.633326][ T4887] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.641599][ T4887] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 78.657765][ T4887] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 78.766438][ T4892] binfmt_misc: register: failed to install interpreter file ./file2 [ 79.504000][ T27] audit: type=1326 audit(79.470:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5aba8 code=0x7ffc0000 [ 79.516742][ T27] audit: type=1326 audit(79.490:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5aba8 code=0x7ffc0000 [ 79.543642][ T27] audit: type=1326 audit(79.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5aba8 code=0x7ffc0000 [ 79.614645][ T27] audit: type=1326 audit(79.500:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffffb6d5aba8 code=0x7ffc0000 [ 79.628746][ T27] audit: type=1326 audit(79.500:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5aba8 code=0x7ffc0000 [ 79.657385][ T27] audit: type=1326 audit(79.500:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6d5aba8 code=0x7ffc0000 [ 79.664263][ T27] audit: type=1326 audit(79.500:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb6d5aba8 code=0x7ffc0000 [ 79.944693][ T27] audit: type=1326 audit(79.500:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4894 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb6d5aba8 code=0x7ffc0000 [ 80.285286][ T27] audit: type=1400 audit(80.260:16): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=4889 comm="syz.3.104" [ 81.287777][ T4911] binder: 4910:4911 tried to acquire reference to desc 0, got 1 instead [ 81.598916][ T4918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 82.101771][ T4457] binder: undelivered transaction 5, process died. [ 82.104127][ T4457] binder: undelivered TRANSACTION_COMPLETE [ 82.123267][ T4899] loop4: detected capacity change from 0 to 32768 [ 82.331090][ T4899] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.334168][ T4899] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 82.341099][ T4899] BTRFS info (device loop4): using free space tree [ 83.160627][ T4899] BTRFS error (device loop4): open_ctree failed: -12 [ 83.474210][ T4952] binfmt_misc: register: failed to install interpreter file ./file2 [ 84.157443][ T4949] netlink: 44 bytes leftover after parsing attributes in process `syz.2.113'. [ 84.186338][ T4956] loop3: detected capacity change from 0 to 256 [ 84.208165][ T4956] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.231315][ T4956] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 84.291147][ T4956] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 84.557832][ T4621] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4621) [ 86.136651][ T4975] binder: 4973:4975 tried to acquire reference to desc 0, got 1 instead [ 86.584714][ T4484] binder: undelivered transaction 10, process died. [ 86.586865][ T4484] binder: undelivered TRANSACTION_COMPLETE [ 86.603606][ T4958] loop1: detected capacity change from 0 to 40427 [ 86.611963][ T4958] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 86.625809][ T4958] F2FS-fs (loop1): invalid crc value [ 86.639716][ T4958] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.721223][ T4996] binfmt_misc: register: failed to install interpreter file ./file2 [ 87.762794][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 88.836036][ T5006] device dummy0 entered promiscuous mode [ 88.837959][ T5006] device macvtap1 entered promiscuous mode [ 88.846829][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 88.958721][ T5014] device dummy0 left promiscuous mode [ 89.014725][ T5020] loop2: detected capacity change from 0 to 256 [ 89.031093][ T5020] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.056927][ T5020] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 89.103568][ T5020] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 90.989119][ T5017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.132'. [ 90.996862][ T5039] binder: 5038:5039 tried to acquire reference to desc 0, got 1 instead [ 91.835073][ T14] binder: undelivered TRANSACTION_COMPLETE [ 91.841157][ T14] binder: undelivered transaction 15, process died. [ 91.967127][ T5061] loop4: detected capacity change from 0 to 2048 [ 92.022484][ T5061] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.122641][ T5061] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.149: bg 0: block 234: padding at end of block bitmap is not set [ 92.158429][ T5061] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 92.171845][ T5061] EXT4-fs (loop4): This should not happen!! Data will be lost [ 92.171845][ T5061] [ 92.175191][ T5061] EXT4-fs (loop4): Total free blocks count 0 [ 92.177018][ T5061] EXT4-fs (loop4): Free/Dirty block details [ 92.178919][ T5061] EXT4-fs (loop4): free_blocks=0 [ 92.180413][ T5061] EXT4-fs (loop4): dirty_blocks=16 [ 92.182032][ T5061] EXT4-fs (loop4): Block reservation details [ 92.189461][ T5061] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 92.325745][ T4312] EXT4-fs (loop4): unmounting filesystem. [ 92.341594][ T5069] netlink: 14220 bytes leftover after parsing attributes in process `syz.1.151'. [ 93.056056][ T5072] loop4: detected capacity change from 0 to 256 [ 93.081198][ T5072] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.096973][ T5072] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 93.273603][ T5072] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 94.838847][ T5092] binder: 5090:5092 tried to acquire reference to desc 0, got 1 instead [ 95.332056][ T5099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.159'. [ 95.802630][ T4369] binder: undelivered transaction 20, process died. [ 95.804647][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 96.038023][ T5105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.056820][ T5105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.242337][ T5106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.160'. [ 97.373848][ T5123] loop4: detected capacity change from 0 to 2048 [ 97.519304][ T5123] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.284259][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'. [ 98.287081][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'. [ 98.336934][ T5134] binder: 5131:5134 tried to acquire reference to desc 0, got 1 instead [ 99.682470][ T4360] binder: undelivered transaction 25, process died. [ 99.684495][ T4360] binder: undelivered TRANSACTION_COMPLETE [ 101.473795][ T5165] device syzkaller0 entered promiscuous mode [ 102.423221][ T5176] syz.3.183 uses obsolete (PF_INET,SOCK_PACKET) [ 114.041477][ T5188] loop2: detected capacity change from 0 to 256 [ 114.103458][ T5188] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.108332][ T5188] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 114.122105][ T5188] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 114.162268][ T5187] binder: 5186:5187 tried to acquire reference to desc 0, got 1 instead [ 117.403597][ T4361] binder: undelivered transaction 30, process died. [ 117.407434][ T4361] binder: undelivered TRANSACTION_COMPLETE [ 117.567035][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.570145][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.572674][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.576180][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.578887][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 117.582040][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.634761][ T5208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 117.665892][ T5208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 119.502172][ T5243] netlink: 104 bytes leftover after parsing attributes in process `syz.0.197'. [ 119.545978][ T5228] netlink: 44 bytes leftover after parsing attributes in process `syz.4.191'. [ 119.624634][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 119.832098][ T5251] binder: 5250:5251 tried to acquire reference to desc 0, got 1 instead [ 120.126738][ T5204] chnl_net:caif_netlink_parms(): no params data found [ 120.250382][ T4553] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.407953][ T4553] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.449134][ T5247] loop2: detected capacity change from 0 to 32768 [ 120.451689][ T5247] XFS: attr2 mount option is deprecated. [ 120.536880][ T4553] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.543638][ T5247] XFS (loop2): Mounting V5 Filesystem [ 120.544200][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.548147][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.559294][ T5204] device bridge_slave_0 entered promiscuous mode [ 120.588984][ T5204] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.605083][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.629400][ T5204] device bridge_slave_1 entered promiscuous mode [ 120.668248][ T4489] binder: undelivered TRANSACTION_COMPLETE [ 120.720368][ T4369] binder: undelivered transaction 35, process died. [ 120.745082][ T5247] XFS (loop2): Ending clean mount [ 120.753577][ T5247] XFS (loop2): Quotacheck needed: Please wait. [ 120.758501][ T4553] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.839475][ T5204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.852712][ T5204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.905261][ T5204] team0: Port device team_slave_0 added [ 120.932130][ T5247] XFS (loop2): Quotacheck: Done. [ 120.965438][ T5204] team0: Port device team_slave_1 added [ 121.704708][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 121.731404][ T5204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.733456][ T5204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.794754][ T5204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.799170][ T5204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.801095][ T5204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.810149][ T4307] XFS (loop2): Unmounting Filesystem [ 121.845068][ T5204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.784817][ T47] Bluetooth: hci5: command 0x040f tx timeout [ 124.014519][ C0] sched: RT throttling activated [ 124.128110][ T5204] device hsr_slave_0 entered promiscuous mode [ 124.164922][ T5204] device hsr_slave_1 entered promiscuous mode [ 124.204645][ T5204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.207703][ T5204] Cannot create hsr debugfs directory [ 125.233053][ T5204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.319799][ T5311] binder: 5309:5311 tried to acquire reference to desc 0, got 1 instead [ 125.533489][ T22] binder: undelivered transaction 40, process died. [ 125.550813][ T22] binder: undelivered TRANSACTION_COMPLETE [ 125.598805][ T5204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.643255][ T5204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.758345][ T5204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.864627][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 125.948942][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.951136][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.161687][ T5204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.196132][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.199986][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.270521][ T5204] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.293943][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.298987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.309394][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.311489][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.407706][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.412942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.417710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.438067][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.440221][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.454844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.875467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.878717][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.882453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.895464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.906293][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.925744][ T5340] netlink: 44 bytes leftover after parsing attributes in process `syz.1.214'. [ 126.970507][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.975772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.981739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.000384][ T5345] loop4: detected capacity change from 0 to 256 [ 127.006628][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.015235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.018584][ T5204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.032759][ T5345] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.043529][ T5345] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 127.068380][ T5345] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 129.537126][ T4553] device hsr_slave_0 left promiscuous mode [ 129.681978][ T4553] device hsr_slave_1 left promiscuous mode [ 129.706030][ T5384] binder: 5377:5384 tried to acquire reference to desc 0, got 1 instead [ 130.464907][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.468485][ T4553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.472141][ T4553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.491308][ T4553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.499526][ T4457] binder: undelivered TRANSACTION_COMPLETE [ 130.535236][ T4553] device bridge_slave_1 left promiscuous mode [ 130.538173][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.550361][ T22] binder: undelivered transaction 45, process died. [ 130.636835][ T4553] device bridge_slave_0 left promiscuous mode [ 130.638874][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.965875][ T4553] device veth1_macvtap left promiscuous mode [ 130.967976][ T4553] device veth0_macvtap left promiscuous mode [ 130.969784][ T4553] device veth1_vlan left promiscuous mode [ 130.980735][ T4553] device veth0_vlan left promiscuous mode [ 134.347877][ T4553] team0 (unregistering): Port device team_slave_1 removed [ 134.537371][ T4553] team0 (unregistering): Port device team_slave_0 removed [ 134.726451][ T4553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.926047][ T4553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.390269][ T4553] bond0 (unregistering): Released all slaves [ 137.650263][ T5398] netlink: 44 bytes leftover after parsing attributes in process `syz.4.226'. [ 137.729633][ T5204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.737702][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.739996][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.930878][ T5435] binder: 5433:5435 tried to acquire reference to desc 0, got 1 instead [ 138.148329][ T22] binder: undelivered transaction 50, process died. [ 138.150435][ T22] binder: undelivered TRANSACTION_COMPLETE [ 139.996282][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.999153][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.102738][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.105935][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.110010][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.642976][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.843341][ T5204] device veth0_vlan entered promiscuous mode [ 140.894268][ T5204] device veth1_vlan entered promiscuous mode [ 140.915703][ T5478] netlink: 44 bytes leftover after parsing attributes in process `syz.0.240'. [ 141.072814][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.077431][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.126192][ T5204] device veth0_macvtap entered promiscuous mode [ 141.149181][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.152103][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.155472][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.159099][ T5204] device veth1_macvtap entered promiscuous mode [ 141.190822][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.193779][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.212247][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.235504][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.238357][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.241224][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.243895][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.273666][ T5499] binder: 5498:5499 tried to acquire reference to desc 0, got 1 instead [ 141.279481][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.287068][ T5204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.306871][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.309580][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.312478][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.356531][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.362808][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.369242][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.381829][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.394556][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.400910][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.411255][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.423731][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.446335][ T5204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.455239][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.458553][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.463672][ T5204] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.469404][ T5204] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.474169][ T5204] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.486560][ T5204] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.603823][ T4553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.612599][ T4553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.656040][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.698089][ T4555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.710493][ T4555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.726452][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.478318][ T4360] binder: undelivered transaction 55, process died. [ 142.480254][ T4360] binder: undelivered TRANSACTION_COMPLETE [ 143.026043][ T4360] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.337843][ T4360] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 143.608347][ T4360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.611548][ T4360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.614268][ T4360] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 143.698208][ T4360] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 143.721356][ T4360] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 143.723675][ T4360] usb 1-1: Manufacturer: syz [ 143.757206][ T4360] usb 1-1: config 0 descriptor?? [ 144.129263][ T5546] netlink: 44 bytes leftover after parsing attributes in process `syz.5.253'. [ 144.369322][ T4360] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 144.374667][ T4360] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 144.392460][ T4360] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 144.471311][ T5554] loop2: detected capacity change from 0 to 256 [ 144.477272][ T5554] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.482716][ T5554] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 144.493012][ T5554] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 145.286290][ T4361] usb 1-1: USB disconnect, device number 2 [ 145.392557][ T5553] fido_id[5553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 145.551844][ T5575] binder: 5573:5575 tried to acquire reference to desc 0, got 1 instead [ 145.829611][ T5589] loop4: detected capacity change from 0 to 1024 [ 146.838548][ T4360] binder: undelivered transaction 60, process died. [ 146.840597][ T4360] binder: undelivered TRANSACTION_COMPLETE [ 146.858437][ T4737] hfsplus: b-tree write err: -5, ino 4 [ 147.544805][ T5622] netlink: 44 bytes leftover after parsing attributes in process `syz.0.269'. [ 149.556397][ T5644] binder: 5643:5644 tried to acquire reference to desc 0, got 1 instead [ 149.656065][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 150.370441][ T4484] binder: undelivered transaction 65, process died. [ 150.387552][ T4484] binder: undelivered TRANSACTION_COMPLETE [ 150.912985][ T5672] loop4: detected capacity change from 0 to 256 [ 150.948961][ T5672] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.952063][ T5672] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 150.977900][ T5672] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 151.972203][ T5681] loop5: detected capacity change from 0 to 1024 [ 153.556298][ T4554] hfsplus: b-tree write err: -5, ino 4 [ 154.422337][ T5699] netlink: 44 bytes leftover after parsing attributes in process `syz.0.297'. [ 154.735526][ T5717] binder: 5715:5717 tried to acquire reference to desc 0, got 1 instead [ 155.589699][ T5711] loop4: detected capacity change from 0 to 32768 [ 155.607154][ T5733] loop2: detected capacity change from 0 to 256 [ 155.620789][ T5711] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.624322][ T5711] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 155.655501][ T5733] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.659780][ T5711] BTRFS info (device loop4): using free space tree [ 155.694387][ T5733] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 155.791833][ T5733] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 155.797974][ T4361] binder: undelivered TRANSACTION_COMPLETE [ 156.027501][ T5711] BTRFS info (device loop4): enabling ssd optimizations [ 156.546492][ T11] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 156.645289][ T4312] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.886353][ T5765] loop2: detected capacity change from 0 to 1024 [ 157.855056][ T5289] hfsplus: b-tree write err: -5, ino 4 [ 157.959202][ T5782] loop2: detected capacity change from 0 to 1024 [ 158.738956][ T5792] netlink: 44 bytes leftover after parsing attributes in process `syz.4.303'. [ 158.754849][ T4320] Bluetooth: hci3: command 0x0406 tx timeout [ 158.764408][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 158.811768][ T4308] Bluetooth: hci4: command 0x0406 tx timeout [ 158.813582][ T4321] Bluetooth: hci0: command 0x0406 tx timeout [ 159.553193][ T4486] binder: undelivered transaction 70, process died. [ 159.567796][ T4590] hfsplus: b-tree write err: -5, ino 4 [ 159.701941][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 161.556826][ T5832] loop5: detected capacity change from 0 to 131072 [ 161.703905][ T5832] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 161.706403][ T5832] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 161.721905][ T5832] F2FS-fs (loop5): invalid crc value [ 161.823863][ T5803] loop4: detected capacity change from 0 to 32768 [ 161.830188][ T5803] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.307 (5803) [ 161.838703][ T5832] F2FS-fs (loop5): Found nat_bits in checkpoint [ 161.843899][ T5803] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.850768][ T5803] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 161.854051][ T5803] BTRFS info (device loop4): using free space tree [ 161.860631][ T5832] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 161.862730][ T5832] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 162.793219][ T5832] F2FS-fs (loop5): Start checkpoint disabled! [ 162.869064][ T5803] BTRFS error (device loop4): open_ctree failed: -12 [ 163.220147][ T5876] binder: 5875:5876 tried to acquire reference to desc 0, got 1 instead [ 163.230647][ T5871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.318'. [ 163.443016][ T5421] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (5421) [ 164.070982][ T4389] binder: undelivered TRANSACTION_COMPLETE [ 164.154174][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 167.283868][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.287216][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.788649][ T4617] binder: undelivered transaction 75, process died. [ 168.182070][ T5972] loop5: detected capacity change from 0 to 1024 [ 168.521432][ T5957] loop2: detected capacity change from 0 to 32768 [ 168.882313][ T5957] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.985238][ T5957] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 169.144615][ T5981] netlink: 44 bytes leftover after parsing attributes in process `syz.5.345'. [ 169.468366][ T5957] BTRFS info (device loop2): using free space tree [ 169.582876][ T27] audit: type=1400 audit(169.550:17): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=5974 comm="syz.4.343" [ 169.670589][ T5957] BTRFS info (device loop2): enabling ssd optimizations [ 169.782061][ T9] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 170.757689][ T4307] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.958527][ T6023] loop5: detected capacity change from 0 to 1024 [ 171.743787][ T5421] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.766629][ T6023] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 171.871802][ T6038] binder: 6034:6038 tried to acquire reference to desc 0, got 1 instead [ 172.102386][ T6046] loop5: detected capacity change from 0 to 256 [ 172.131389][ T6046] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.146387][ T6046] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 172.175152][ T6046] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 173.071187][ T4360] binder: undelivered TRANSACTION_COMPLETE [ 173.570099][ T6064] netlink: 44 bytes leftover after parsing attributes in process `syz.5.357'. [ 174.247873][ T27] audit: type=1400 audit(174.220:18): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6076 comm="syz.1.360" [ 174.605794][ T6080] loop5: detected capacity change from 0 to 32768 [ 174.625849][ T6080] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.361 (6080) [ 174.638362][ T6080] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.646258][ T6080] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 174.648899][ T6080] BTRFS info (device loop5): using free space tree [ 174.669462][ T4484] binder: undelivered transaction 80, process died. [ 174.768480][ T6080] BTRFS info (device loop5): enabling ssd optimizations [ 174.953558][ T9] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 175.738553][ T6122] loop4: detected capacity change from 0 to 256 [ 175.765167][ T6122] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.872545][ T5204] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.904848][ T6122] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 175.928805][ T6122] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 177.420072][ T5428] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop5 scanned by udevd (5428) [ 177.517996][ T6148] netlink: 44 bytes leftover after parsing attributes in process `syz.1.371'. [ 177.765129][ T6161] binder: 6160:6161 tried to acquire reference to desc 0, got 1 instead [ 178.637725][ T4360] binder: undelivered TRANSACTION_COMPLETE [ 178.700357][ T6123] loop2: detected capacity change from 0 to 32768 [ 178.735812][ T4486] binder: undelivered transaction 85, process died. [ 179.230627][ T5421] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 180.869769][ T27] audit: type=1400 audit(180.840:19): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6209 comm="syz.5.379" [ 181.504918][ T6229] loop2: detected capacity change from 0 to 256 [ 181.528583][ T6229] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.542754][ T6229] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 181.562671][ T6229] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 182.232489][ T6233] netlink: 44 bytes leftover after parsing attributes in process `syz.5.385'. [ 183.010485][ T6244] loop2: detected capacity change from 0 to 32768 [ 183.029307][ T6244] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 183.270774][ T6261] binder: 6260:6261 tried to acquire reference to desc 0, got 1 instead [ 183.274419][ T5428] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 184.130069][ T5766] binder: undelivered TRANSACTION_COMPLETE [ 184.209858][ T4616] binder: undelivered transaction 90, process died. [ 184.978989][ T6267] loop5: detected capacity change from 0 to 32768 [ 185.014885][ T6267] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.017877][ T6267] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 185.027438][ T6267] BTRFS info (device loop5): using free space tree [ 185.224843][ T6267] BTRFS info (device loop5): enabling ssd optimizations [ 185.356367][ T4553] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 185.520971][ T5204] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.639336][ T27] audit: type=1400 audit(186.600:20): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6303 comm="syz.5.396" [ 187.012517][ T6312] netlink: 44 bytes leftover after parsing attributes in process `syz.0.398'. [ 187.386607][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.389340][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.148650][ T6314] loop5: detected capacity change from 0 to 32768 [ 188.185644][ T6314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.400 (6314) [ 188.666923][ T6314] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.046333][ T6314] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 189.048712][ T6314] BTRFS info (device loop5): using free space tree [ 189.249175][ T6349] binder: 6337:6349 tried to acquire reference to desc 0, got 1 instead [ 189.426457][ T6314] BTRFS info (device loop5): enabling ssd optimizations [ 190.106418][ T4360] binder: undelivered TRANSACTION_COMPLETE [ 190.183507][ T4556] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 190.197152][ T4489] binder: undelivered transaction 95, process died. [ 190.431572][ T5204] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.535869][ T6363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.409'. [ 191.441175][ T27] audit: type=1400 audit(191.410:21): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6367 comm="syz.2.411" [ 191.536488][ T5428] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop5 scanned by udevd (5428) [ 193.833546][ T6393] loop2: detected capacity change from 0 to 1024 [ 193.841075][ T6395] binder: 6394:6395 tried to acquire reference to desc 0, got 1 instead [ 194.633311][ T6028] binder: undelivered TRANSACTION_COMPLETE [ 195.016701][ T6407] netlink: 44 bytes leftover after parsing attributes in process `syz.2.421'. [ 195.763585][ T6409] loop2: detected capacity change from 0 to 1024 [ 196.539898][ T6030] binder: undelivered transaction 100, process died. [ 196.552489][ T6414] loop2: detected capacity change from 0 to 32768 [ 196.565733][ T6414] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 196.725128][ T5428] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 196.771735][ T27] audit: type=1400 audit(196.740:22): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6418 comm="syz.1.426" [ 199.146837][ T6455] binder: 6453:6455 tried to acquire reference to desc 0, got 1 instead [ 199.297953][ T6456] netlink: 44 bytes leftover after parsing attributes in process `syz.5.433'. [ 200.138737][ T6030] binder: undelivered TRANSACTION_COMPLETE [ 200.773148][ T27] audit: type=1400 audit(200.740:23): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6469 comm="syz.2.441" [ 200.843605][ T6458] loop4: detected capacity change from 0 to 32768 [ 200.857923][ T6458] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 201.063425][ T5428] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 201.928771][ T6483] loop4: detected capacity change from 0 to 1024 [ 202.050871][ T5428] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.943687][ T6490] loop2: detected capacity change from 0 to 1024 [ 203.288708][ T5421] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.944825][ T6028] binder: undelivered transaction 105, process died. [ 204.140915][ T6502] netlink: 44 bytes leftover after parsing attributes in process `syz.0.449'. [ 204.987723][ T27] audit: type=1400 audit(204.960:24): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6506 comm="syz.0.453" [ 206.697018][ T6524] loop4: detected capacity change from 0 to 1024 [ 207.836638][ T6534] binder: 6533:6534 tried to acquire reference to desc 0, got 1 instead [ 209.308645][ T6550] netlink: 44 bytes leftover after parsing attributes in process `syz.5.463'. [ 209.394675][ T27] audit: type=1400 audit(208.190:25): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6545 comm="syz.0.465" [ 209.853064][ T4353] binder: undelivered TRANSACTION_COMPLETE [ 210.493330][ T6564] loop5: detected capacity change from 0 to 32768 [ 210.551806][ T6564] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.556483][ T6564] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 210.563490][ T6564] BTRFS info (device loop5): using free space tree [ 210.804079][ T6564] BTRFS info (device loop5): enabling ssd optimizations [ 210.889162][ T39] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 211.070036][ T5204] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.453486][ T113] binder: undelivered transaction 110, process died. [ 211.537155][ T6596] loop2: detected capacity change from 0 to 256 [ 211.547888][ T6596] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.554703][ T6596] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 211.560939][ T6596] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 212.617318][ T6602] loop5: detected capacity change from 0 to 1024 [ 213.589888][ T27] audit: type=1400 audit(213.020:26): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6605 comm="syz.2.477" [ 213.600630][ T5428] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.011529][ T6623] netlink: 44 bytes leftover after parsing attributes in process `syz.0.480'. [ 214.749809][ T6627] binder: BINDER_SET_CONTEXT_MGR already set [ 214.751930][ T6627] binder: 6625:6627 ioctl 4018620d 20000040 returned -16 [ 214.779991][ T6627] binder: tried to use weak ref as strong ref [ 214.782031][ T6627] binder: 6625:6627 Acquire 1 refcount change on invalid ref 0 ret -22 [ 214.837135][ T6618] loop4: detected capacity change from 0 to 32768 [ 214.916136][ T6618] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.481 (6618) [ 214.965915][ T6618] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.968757][ T6618] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 214.986449][ T6618] BTRFS info (device loop4): using free space tree [ 215.095149][ T6626] loop5: detected capacity change from 0 to 32768 [ 215.105794][ T6626] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.483 (6626) [ 215.139855][ T6618] BTRFS info (device loop4): enabling ssd optimizations [ 215.262260][ T4556] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 215.304305][ T4312] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.490063][ T5421] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (5421) [ 215.578756][ T6657] binder: 6625:6657 got transaction to invalid handle, 1 [ 215.580974][ T6657] binder: 6657:6625 cannot find target node [ 215.582644][ T6657] binder: 6625:6657 transaction async to 0:0 failed 113/29201/-22, size 80-0 line 3054 [ 216.171729][ T5867] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.468770][ T27] audit: type=1400 audit(216.440:27): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6659 comm="syz.1.489" [ 217.602297][ T6683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.494'. [ 219.377936][ T6697] loop2: detected capacity change from 0 to 256 [ 219.404772][ T6697] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.407823][ T6697] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 219.427815][ T6697] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 219.462609][ T6691] loop5: detected capacity change from 0 to 32768 [ 219.593613][ T6691] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.598062][ T6691] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 219.601538][ T6691] BTRFS info (device loop5): using free space tree [ 220.368063][ T6691] BTRFS info (device loop5): enabling ssd optimizations [ 220.649686][ T4508] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 220.662643][ T6728] binder: 6726:6728 tried to acquire reference to desc 0, got 1 instead [ 220.720015][ T27] audit: type=1400 audit(220.690:28): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6727 comm="syz.2.503" [ 220.759125][ T5204] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.862517][ T5428] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop5 scanned by udevd (5428) [ 221.649679][ T6741] netlink: 44 bytes leftover after parsing attributes in process `syz.5.505'. [ 221.697766][ T4361] binder: undelivered TRANSACTION_COMPLETE [ 222.052523][ T4361] binder: undelivered transaction 118, process died. [ 223.304021][ T6761] loop5: detected capacity change from 0 to 1024 [ 223.356653][ T5428] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.432160][ T6767] loop4: detected capacity change from 0 to 1024 [ 224.745972][ T27] audit: type=1400 audit(224.720:29): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6772 comm="syz.5.517" [ 225.057215][ T6771] loop4: detected capacity change from 0 to 32768 [ 225.077811][ T6771] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 225.219569][ T5428] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 225.288695][ T6782] binder: BINDER_SET_CONTEXT_MGR already set [ 225.300192][ T6782] binder: 6777:6782 ioctl 4018620d 20000040 returned -16 [ 225.493751][ T6787] netlink: 44 bytes leftover after parsing attributes in process `syz.1.519'. [ 226.488280][ T6798] loop2: detected capacity change from 0 to 256 [ 226.522834][ T6798] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.546053][ T6798] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 226.566934][ T6798] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 227.019068][ T6802] binder: 6777:6802 got transaction to invalid handle, 1 [ 227.021173][ T6802] binder: 6802:6777 cannot find target node [ 227.022769][ T6802] binder: 6777:6802 transaction async to 0:0 failed 120/29201/-22, size 80-0 line 3054 [ 227.306367][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.366791][ T6813] loop2: detected capacity change from 0 to 32768 [ 228.373501][ T6813] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 228.553949][ T5428] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 228.703256][ T27] audit: type=1400 audit(228.670:30): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6822 comm="syz.2.532" [ 229.106104][ T6835] netlink: 44 bytes leftover after parsing attributes in process `syz.2.534'. [ 231.174213][ T6858] loop2: detected capacity change from 0 to 256 [ 231.195351][ T6858] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.204579][ T6858] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 231.222155][ T6858] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 231.246884][ T6861] binder: 6860:6861 tried to acquire reference to desc 0, got 1 instead [ 232.434589][ T4361] binder: undelivered transaction 125, process died. [ 232.439756][ T4361] binder: undelivered TRANSACTION_COMPLETE [ 232.485409][ T27] audit: type=1400 audit(231.900:31): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6862 comm="syz.4.545" [ 232.996108][ T6875] netlink: 44 bytes leftover after parsing attributes in process `syz.0.547'. [ 233.960245][ T6859] loop5: detected capacity change from 0 to 32768 [ 234.000173][ T6859] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.015784][ T6859] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 234.018307][ T6859] BTRFS info (device loop5): using free space tree [ 234.223972][ T6859] BTRFS error (device loop5): open_ctree failed: -12 [ 234.353357][ T5428] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (5428) [ 234.637903][ T6913] loop2: detected capacity change from 0 to 1024 [ 234.697352][ T5421] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.613592][ T27] audit: type=1400 audit(235.540:32): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6921 comm="syz.1.556" [ 235.716942][ T6927] loop5: detected capacity change from 0 to 256 [ 235.728835][ T6926] binder: 6924:6926 tried to acquire reference to desc 0, got 1 instead [ 235.745009][ T6927] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.888662][ T6927] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 235.913413][ T6927] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 236.675064][ T4487] binder: undelivered transaction 130, process died. [ 236.677101][ T4487] binder: undelivered TRANSACTION_COMPLETE [ 237.411714][ T6938] netlink: 44 bytes leftover after parsing attributes in process `syz.1.560'. [ 238.454273][ T6942] loop2: detected capacity change from 0 to 32768 [ 238.493372][ T6942] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.517808][ T6942] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 238.534706][ T6942] BTRFS info (device loop2): using free space tree [ 238.673620][ T6943] loop5: detected capacity change from 0 to 32768 [ 238.691465][ T6943] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.562 (6943) [ 238.804009][ T27] audit: type=1400 audit(238.770:33): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6956 comm="syz.1.567" [ 238.861897][ T6942] BTRFS info (device loop2): enabling ssd optimizations [ 239.015387][ T4515] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 239.127158][ T5421] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (5421) [ 239.261934][ T4307] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.630607][ T6992] loop2: detected capacity change from 0 to 1024 [ 239.864292][ T5428] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 240.664620][ T4310] Bluetooth: hci5: command 0x0406 tx timeout [ 240.724298][ T6999] binder: 6998:6999 tried to acquire reference to desc 0, got 1 instead [ 241.823539][ T7008] netlink: 44 bytes leftover after parsing attributes in process `syz.5.574'. [ 241.873858][ T5867] binder: undelivered transaction 135, process died. [ 242.004919][ T5867] binder: undelivered TRANSACTION_COMPLETE [ 242.336588][ T7014] loop2: detected capacity change from 0 to 1024 [ 242.628041][ T27] audit: type=1400 audit(242.600:34): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7021 comm="syz.0.582" [ 242.829881][ T7016] loop4: detected capacity change from 0 to 32768 [ 242.839447][ T7022] loop5: detected capacity change from 0 to 32768 [ 242.844740][ T7022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.580 (7022) [ 242.852445][ T7016] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.579 (7016) [ 242.861317][ T7022] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.866410][ T7022] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 242.870753][ T7022] BTRFS info (device loop5): using free space tree [ 242.980643][ T7022] BTRFS info (device loop5): enabling ssd optimizations [ 243.064261][ T4508] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 243.072111][ T5428] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (5428) [ 243.188226][ T5204] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.571712][ T7056] loop5: detected capacity change from 0 to 256 [ 243.589597][ T7056] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.610068][ T7056] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 243.633383][ T7056] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 244.744801][ T7062] netlink: 44 bytes leftover after parsing attributes in process `syz.5.588'. [ 245.727859][ T7073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.590'. [ 246.137149][ T7076] loop2: detected capacity change from 0 to 1024 [ 246.677483][ T5421] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.960919][ T7079] loop4: detected capacity change from 0 to 32768 [ 247.004846][ T7079] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.595 (7079) [ 247.034876][ T27] audit: type=1400 audit(247.000:35): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7086 comm="syz.2.597" [ 247.128571][ T7079] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.132768][ T7079] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 247.136061][ T7079] BTRFS info (device loop4): using free space tree [ 247.170142][ T7079] BTRFS info (device loop4): enabling ssd optimizations [ 247.994412][ T7119] binder: 7118:7119 tried to acquire reference to desc 0, got 1 instead [ 248.064403][ T7114] loop2: detected capacity change from 0 to 1024 [ 248.087102][ T516] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 248.230815][ T4312] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.429083][ T5428] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop4 scanned by udevd (5428) [ 248.742940][ T7131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.605'. [ 248.826095][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.827949][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.862495][ T14] binder: undelivered TRANSACTION_COMPLETE [ 250.201172][ T7142] netlink: 44 bytes leftover after parsing attributes in process `syz.2.606'. [ 250.873850][ T27] audit: type=1400 audit(250.840:36): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7146 comm="syz.2.610" [ 251.064842][ T24] binder: undelivered transaction 140, process died. [ 252.402839][ T7166] loop5: detected capacity change from 0 to 1024 [ 252.522355][ T7158] loop2: detected capacity change from 0 to 32768 [ 252.534182][ T7158] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 252.611745][ T5421] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 253.905849][ T7182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.620'. [ 254.178829][ T7185] binder: 7184:7185 tried to acquire reference to desc 0, got 1 instead [ 254.429714][ T27] audit: type=1400 audit(254.400:37): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7186 comm="syz.0.623" [ 255.894222][ T6904] binder: undelivered TRANSACTION_COMPLETE [ 256.021094][ T7193] loop5: detected capacity change from 0 to 32768 [ 256.033971][ T7193] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 256.262881][ T5428] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 257.176821][ T6028] binder: undelivered transaction 145, process died. [ 258.323494][ T7224] loop2: detected capacity change from 0 to 1024 [ 258.553946][ T27] audit: type=1400 audit(258.510:38): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7225 comm="syz.4.636" [ 258.636962][ T7230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.634'. [ 258.755985][ T5421] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.457677][ T7245] binder: 7243:7245 tried to acquire reference to desc 0, got 1 instead [ 260.532527][ T7237] loop4: detected capacity change from 0 to 32768 [ 260.575901][ T7237] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.579638][ T7237] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 260.596393][ T7237] BTRFS info (device loop4): using free space tree [ 260.761247][ T7237] BTRFS info (device loop4): enabling ssd optimizations [ 261.010274][ T516] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 261.178255][ T4312] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.184900][ T6032] binder: undelivered TRANSACTION_COMPLETE [ 261.520546][ T7277] netlink: 44 bytes leftover after parsing attributes in process `syz.4.644'. [ 262.766301][ T27] audit: type=1400 audit(262.740:39): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7283 comm="syz.4.648" [ 263.046420][ T6982] binder: undelivered transaction 150, process died. [ 263.318791][ T7296] loop2: detected capacity change from 0 to 256 [ 264.001465][ T7297] netlink: 44 bytes leftover after parsing attributes in process `syz.5.649'. [ 264.064984][ T7296] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.085201][ T7296] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 264.103114][ T7296] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 264.307288][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.656'. [ 266.169127][ T7331] binder: 7330:7331 tried to acquire reference to desc 0, got 1 instead [ 266.196305][ T7334] loop2: detected capacity change from 0 to 1024 [ 266.883105][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 267.036738][ T113] binder: undelivered transaction 155, process died. [ 267.240041][ T7346] loop4: detected capacity change from 0 to 1024 [ 267.278912][ T27] audit: type=1400 audit(267.250:40): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7343 comm="syz.2.665" [ 268.248333][ T7353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.667'. [ 268.800923][ T7356] loop5: detected capacity change from 0 to 256 [ 268.848055][ T7356] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.851140][ T7356] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 268.888285][ T7359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.670'. [ 268.889727][ T7356] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 269.908645][ T7373] loop2: detected capacity change from 0 to 1024 [ 269.973192][ T5421] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.057394][ T7379] binder: 7374:7379 tried to acquire reference to desc 0, got 1 instead [ 270.239796][ T27] audit: type=1400 audit(270.210:41): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7376 comm="syz.4.678" [ 270.974634][ T4369] binder: undelivered transaction 160, process died. [ 270.977046][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 271.412205][ T7394] netlink: 44 bytes leftover after parsing attributes in process `syz.1.682'. [ 273.555553][ T7420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 274.359693][ T7432] binder: 7428:7432 got transaction to invalid handle, 1 [ 274.361774][ T7432] binder: 7432:7428 cannot find target node [ 274.363581][ T7432] binder: 7428:7432 transaction async to 0:0 failed 164/29201/-22, size 80-0 line 3054 [ 275.011791][ T5866] binder: undelivered TRANSACTION_ERROR: 29201 [ 275.101933][ T7436] loop5: detected capacity change from 0 to 1024 [ 275.595091][ T7440] netlink: 44 bytes leftover after parsing attributes in process `syz.0.693'. [ 276.277828][ T7449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.699'. [ 276.430367][ T7455] loop2: detected capacity change from 0 to 256 [ 276.433457][ T7455] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.442036][ T7455] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 276.927202][ T7455] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 277.807254][ T7476] loop4: detected capacity change from 0 to 1024 [ 278.150699][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz.5.705'. [ 278.271871][ T7487] binder: 7477:7487 got transaction to invalid handle, 1 [ 278.273819][ T7487] binder: 7487:7477 cannot find target node [ 278.275587][ T7487] binder: 7477:7487 transaction async to 0:0 failed 168/29201/-22, size 80-0 line 3054 [ 278.860395][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 280.289875][ T7503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.715'. [ 281.333056][ T7513] loop4: detected capacity change from 0 to 256 [ 281.374121][ T7513] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.377770][ T7513] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 281.403604][ T7513] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 282.487985][ T7521] loop2: detected capacity change from 0 to 1024 [ 282.904733][ T7533] binder: 7519:7533 got transaction to invalid handle, 1 [ 282.906719][ T7533] binder: 7533:7519 cannot find target node [ 282.908375][ T7533] binder: 7519:7533 transaction async to 0:0 failed 172/29201/-22, size 80-0 line 3054 [ 283.337518][ T7529] loop4: detected capacity change from 0 to 1024 [ 283.435100][ T4353] binder: undelivered TRANSACTION_ERROR: 29201 [ 283.632145][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.726'. [ 284.162718][ T7550] loop2: detected capacity change from 0 to 256 [ 284.273693][ T7550] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.289405][ T7550] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 284.366467][ T7550] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 285.685371][ T7566] netlink: 44 bytes leftover after parsing attributes in process `syz.4.734'. [ 286.291705][ T7571] binder: tried to use weak ref as strong ref [ 286.293468][ T7571] binder: 7569:7571 Acquire 1 refcount change on invalid ref 0 ret -22 [ 286.574870][ T7576] binder: 7569:7576 got transaction to invalid handle, 1 [ 286.576885][ T7576] binder: 7576:7569 cannot find target node [ 286.578649][ T7576] binder: 7569:7576 transaction async to 0:0 failed 175/29201/-22, size 80-0 line 3054 [ 287.158026][ T4615] binder: undelivered TRANSACTION_ERROR: 29201 [ 287.299967][ T7580] loop4: detected capacity change from 0 to 1024 [ 288.387720][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 288.917444][ T7596] loop5: detected capacity change from 0 to 256 [ 288.931794][ T7596] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.945802][ T7596] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 288.957294][ T7596] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 290.853336][ T7610] binder: tried to use weak ref as strong ref [ 290.855195][ T7610] binder: 7606:7610 Acquire 1 refcount change on invalid ref 0 ret -22 [ 291.344674][ T7617] binder: 7606:7617 got transaction to invalid handle, 1 [ 291.346749][ T7617] binder: 7617:7606 cannot find target node [ 291.348450][ T7617] binder: 7606:7617 transaction async to 0:0 failed 178/29201/-22, size 80-0 line 3054 [ 291.923864][ T4353] binder: undelivered TRANSACTION_ERROR: 29201 [ 292.121619][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 295.995374][ T7665] binder: tried to use weak ref as strong ref [ 295.997048][ T7665] binder: 7664:7665 Acquire 1 refcount change on invalid ref 0 ret -22 [ 296.274438][ T7669] binder: 7664:7669 got transaction to invalid handle, 1 [ 296.276616][ T7669] binder: 7669:7664 cannot find target node [ 296.278348][ T7669] binder: 7664:7669 transaction async to 0:0 failed 181/29201/-22, size 80-0 line 3054 [ 296.877038][ T4615] binder: undelivered TRANSACTION_ERROR: 29201 [ 297.005945][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 298.940165][ T7698] loop2: detected capacity change from 0 to 256 [ 298.952269][ T7698] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.959176][ T27] audit: type=1400 audit(298.930:42): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7693 comm="syz.4.773" [ 299.126245][ T7698] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 299.813473][ T7698] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 300.596895][ T7710] binder: 7708:7710 tried to acquire reference to desc 0, got 1 instead [ 300.902924][ T7719] binder_alloc: 7708: binder_alloc_buf, no vma [ 300.905183][ T7719] binder: cannot allocate buffer: vma cleared, target dead or dying [ 300.905423][ T7719] binder: 7708:7719 transaction async to 7708:0 failed 186/29189/-3, size 80-0 line 3239 [ 301.485693][ T4361] binder: undelivered TRANSACTION_ERROR: 29189 [ 301.634087][ T7721] loop2: detected capacity change from 0 to 1024 [ 304.194627][ T27] audit: type=1400 audit(304.150:43): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7739 comm="syz.2.785" [ 304.891662][ T7748] loop4: detected capacity change from 0 to 1024 [ 304.939711][ T7750] loop2: detected capacity change from 0 to 256 [ 304.958046][ T7750] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.961006][ T7750] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 304.974541][ T5428] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.998650][ T7750] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 305.907951][ T7758] binder: 7757:7758 tried to acquire reference to desc 0, got 1 instead [ 306.184469][ T7760] binder_alloc: 7757: binder_alloc_buf, no vma [ 306.186566][ T7760] binder: cannot allocate buffer: vma cleared, target dead or dying [ 306.186780][ T7760] binder: 7757:7760 transaction async to 7757:0 failed 191/29189/-3, size 80-0 line 3239 [ 306.767545][ T6032] binder: undelivered TRANSACTION_ERROR: 29189 [ 307.012842][ T7767] loop5: detected capacity change from 0 to 1024 [ 307.488474][ T5428] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.165364][ T27] audit: type=1400 audit(308.120:44): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7779 comm="syz.1.798" [ 309.145884][ T7796] loop5: detected capacity change from 0 to 128 [ 309.161451][ T7796] zonefs (loop5) ERROR: Not a zoned block device [ 309.633365][ T7795] loop4: detected capacity change from 0 to 256 [ 309.669172][ T7795] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.672256][ T7795] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 309.713760][ T7795] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 309.956357][ T7801] binder: BINDER_SET_CONTEXT_MGR already set [ 309.963607][ T7801] binder: 7800:7801 ioctl 4018620d 20000040 returned -16 [ 310.414872][ T7801] binder: tried to use weak ref as strong ref [ 310.576875][ T7801] binder: 7800:7801 Acquire 1 refcount change on invalid ref 0 ret -22 [ 310.595902][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.597856][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.674958][ T7806] binder: 7800:7806 got transaction to invalid handle, 1 [ 310.676987][ T7806] binder: 7806:7800 cannot find target node [ 310.678588][ T7806] binder: 7800:7806 transaction async to 0:0 failed 194/29201/-22, size 80-0 line 3054 [ 310.784967][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 311.073848][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 312.243930][ T7840] loop4: detected capacity change from 0 to 1024 [ 312.282882][ T7843] input: syz1 as /devices/virtual/input/input2 [ 312.457537][ T7842] loop5: detected capacity change from 0 to 4096 [ 313.216181][ T4556] hfsplus: b-tree write err: -5, ino 4 [ 314.369402][ T7867] loop4: detected capacity change from 0 to 256 [ 314.392294][ T7867] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.413557][ T7867] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 314.448510][ T7867] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 316.461449][ T27] audit: type=1400 audit(316.430:45): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7881 comm="syz.2.824" [ 320.933691][ T7901] loop2: detected capacity change from 0 to 1024 [ 320.990921][ T7902] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.651989][ T7906] loop5: detected capacity change from 0 to 1024 [ 327.661712][ T7908] binder: tried to use weak ref as strong ref [ 327.663375][ T7908] binder: 7907:7908 Acquire 1 refcount change on invalid ref 0 ret -22 [ 327.919593][ T7917] binder: 7907:7917 got transaction to invalid handle, 1 [ 327.921605][ T7917] binder: 7917:7907 cannot find target node [ 327.923481][ T7917] binder: 7907:7917 transaction async to 0:0 failed 197/29201/-22, size 80-0 line 3054 [ 328.555591][ T6030] binder: undelivered TRANSACTION_ERROR: 29201 [ 328.716880][ T7909] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 329.765750][ T27] audit: type=1400 audit(329.730:46): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7923 comm="syz.0.835" [ 331.426776][ T7949] loop2: detected capacity change from 0 to 256 [ 331.455235][ T7949] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.458276][ T7949] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 331.490276][ T7949] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 332.789107][ T7961] loop2: detected capacity change from 0 to 1024 [ 333.614344][ T7966] binder: tried to use weak ref as strong ref [ 333.629930][ T7966] binder: 7964:7966 Acquire 1 refcount change on invalid ref 0 ret -22 [ 333.714343][ T39] hfsplus: b-tree write err: -5, ino 4 [ 333.953262][ T7970] binder: 7964:7970 got transaction to invalid handle, 1 [ 333.955365][ T7970] binder: 7970:7964 cannot find target node [ 333.957206][ T7970] binder: 7964:7970 transaction async to 0:0 failed 200/29201/-22, size 80-0 line 3054 [ 334.130079][ T6030] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.448580][ T7988] loop2: detected capacity change from 0 to 256 [ 335.481778][ T7988] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.484773][ T7988] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 335.796823][ T27] audit: type=1400 audit(335.740:47): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7982 comm="syz.1.850" [ 336.399592][ T7988] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 337.253581][ T8014] binder: tried to use weak ref as strong ref [ 337.262062][ T8014] binder: 8013:8014 Acquire 1 refcount change on invalid ref 0 ret -22 [ 337.528259][ T8020] binder: 8013:8020 got transaction to invalid handle, 1 [ 337.530284][ T8020] binder: 8020:8013 cannot find target node [ 337.532058][ T8020] binder: 8013:8020 transaction async to 0:0 failed 203/29201/-22, size 80-0 line 3054 [ 338.141850][ T6030] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.178952][ T27] audit: type=1400 audit(340.120:48): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8047 comm="syz.5.867" [ 340.728444][ T8056] loop5: detected capacity change from 0 to 256 [ 340.734781][ T8056] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 340.739015][ T8056] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 340.753065][ T8056] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 340.932761][ T8060] loop2: detected capacity change from 0 to 1024 [ 341.170789][ T7916] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.015626][ T8068] binder: BINDER_SET_CONTEXT_MGR already set [ 342.017349][ T8068] binder: 8067:8068 ioctl 4018620d 20000040 returned -16 [ 342.278684][ T8070] binder: 8067:8070 got transaction to invalid handle, 1 [ 342.280758][ T8070] binder: 8070:8067 cannot find target node [ 342.282479][ T8070] binder: 8067:8070 transaction async to 0:0 failed 206/29201/-22, size 80-0 line 3054 [ 342.895779][ T6032] binder: undelivered TRANSACTION_ERROR: 29201 [ 344.314328][ T8089] loop5: detected capacity change from 0 to 1024 [ 344.815087][ T27] audit: type=1400 audit(344.660:49): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8090 comm="syz.4.879" [ 345.139863][ T8094] loop2: detected capacity change from 0 to 256 [ 345.165105][ T8094] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 345.182103][ T8094] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 345.189224][ T8088] hfsplus: b-tree write err: -5, ino 4 [ 345.209642][ T8094] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 346.538261][ T8101] loop5: detected capacity change from 0 to 1024 [ 346.629387][ T8110] binder: BINDER_SET_CONTEXT_MGR already set [ 346.637350][ T8110] binder: 8107:8110 ioctl 4018620d 20000040 returned -16 [ 346.908540][ T8118] binder: 8107:8118 got transaction to invalid handle, 1 [ 346.910698][ T8118] binder: 8118:8107 cannot find target node [ 346.912518][ T8118] binder: 8107:8118 transaction async to 0:0 failed 209/29201/-22, size 80-0 line 3054 [ 347.491116][ T6030] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.818187][ T8139] loop5: detected capacity change from 0 to 1024 [ 349.678642][ T8149] loop4: detected capacity change from 0 to 1024 [ 349.695772][ T4652] hfsplus: b-tree write err: -5, ino 4 [ 349.838876][ T7916] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 350.797791][ T8160] binder: BINDER_SET_CONTEXT_MGR already set [ 350.799605][ T8160] binder: 8158:8160 ioctl 4018620d 20000040 returned -16 [ 350.810949][ T27] audit: type=1400 audit(350.780:50): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8154 comm="syz.5.898" [ 350.831022][ T8162] loop4: detected capacity change from 0 to 1024 [ 351.069275][ T8165] binder: 8158:8165 got transaction to invalid handle, 1 [ 351.071374][ T8165] binder: 8165:8158 cannot find target node [ 351.073116][ T8165] binder: 8158:8165 transaction async to 0:0 failed 212/29201/-22, size 80-0 line 3054 [ 351.676656][ T6030] binder: undelivered TRANSACTION_ERROR: 29201 [ 353.292562][ T8189] loop2: detected capacity change from 0 to 256 [ 353.330132][ T8189] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.333327][ T8189] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 353.372240][ T8189] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 353.394349][ T8192] loop5: detected capacity change from 0 to 1024 [ 354.400823][ T27] audit: type=1400 audit(354.370:51): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8193 comm="syz.1.912" [ 354.589930][ T8209] loop5: detected capacity change from 0 to 1024 [ 354.705252][ T8210] binder: 8198:8210 got transaction to invalid handle, 1 [ 354.707316][ T8210] binder: 8210:8198 cannot find target node [ 354.709075][ T8210] binder: 8198:8210 transaction async to 0:0 failed 216/29201/-22, size 80-0 line 3054 [ 355.305942][ T6030] binder: undelivered TRANSACTION_ERROR: 29201 [ 355.363039][ T7916] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.439858][ T27] audit: type=1400 audit(358.350:52): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8247 comm="syz.4.926" [ 358.875446][ T8254] binder: BINDER_SET_CONTEXT_MGR already set [ 358.886809][ T8254] binder: 8253:8254 ioctl 4018620d 20000040 returned -16 [ 359.159704][ T8256] binder: 8253:8256 got transaction to invalid handle, 1 [ 359.161845][ T8256] binder: 8256:8253 cannot find target node [ 359.163617][ T8256] binder: 8253:8256 transaction async to 0:0 failed 218/29201/-22, size 80-0 line 3054 [ 359.753429][ T4615] binder: undelivered TRANSACTION_ERROR: 29201 [ 359.853068][ T8261] loop4: detected capacity change from 0 to 1024 [ 360.854242][ T4553] hfsplus: b-tree write err: -5, ino 4 [ 361.141687][ T8274] netlink: 44 bytes leftover after parsing attributes in process `syz.0.931'. [ 363.323951][ T8304] binder: BINDER_SET_CONTEXT_MGR already set [ 363.329812][ T8304] binder: 8300:8304 ioctl 4018620d 20000040 returned -16 [ 363.343819][ T27] audit: type=1400 audit(363.310:53): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8298 comm="syz.2.939" [ 363.618589][ T8312] binder: 8300:8312 got transaction to invalid handle, 1 [ 363.620740][ T8312] binder: 8312:8300 cannot find target node [ 363.622729][ T8312] binder: 8300:8312 transaction async to 0:0 failed 220/29201/-22, size 80-0 line 3054 [ 364.609968][ T6030] binder: undelivered TRANSACTION_ERROR: 29201 [ 365.072084][ T8319] loop2: detected capacity change from 0 to 1024 [ 365.618022][ T8331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.945'. [ 366.049910][ T8330] loop5: detected capacity change from 0 to 1024 [ 366.111071][ T7904] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 366.173277][ T8335] 9pnet_fd: Insufficient options for proto=fd [ 366.426534][ T8345] loop5: detected capacity change from 0 to 256 [ 366.437026][ T8345] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.448077][ T8345] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 366.475263][ T8345] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 367.714709][ T8353] binder: BINDER_SET_CONTEXT_MGR already set [ 367.716621][ T8353] binder: 8351:8353 ioctl 4018620d 20000040 returned -16 [ 367.854779][ T27] audit: type=1400 audit(367.710:54): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8350 comm="syz.2.955" [ 367.997434][ T8362] binder: 8351:8362 got transaction to invalid handle, 1 [ 367.999630][ T8362] binder: 8362:8351 cannot find target node [ 368.001320][ T8362] binder: 8351:8362 transaction async to 0:0 failed 222/29201/-22, size 80-0 line 3054 [ 368.607268][ T6030] binder: undelivered TRANSACTION_ERROR: 29201 [ 368.809057][ T8370] loop5: detected capacity change from 0 to 1024 [ 368.892176][ T8372] loop4: detected capacity change from 0 to 1024 [ 370.112550][ T8375] netlink: 44 bytes leftover after parsing attributes in process `syz.0.959'. [ 370.405352][ T8379] hfsplus: b-tree write err: -5, ino 4 [ 370.520452][ T7916] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.704964][ T8385] 9pnet_fd: Insufficient options for proto=fd [ 371.689169][ T8398] loop4: detected capacity change from 0 to 256 [ 371.703244][ T8398] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 371.707173][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.707244][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.720206][ T27] audit: type=1400 audit(371.690:55): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8396 comm="syz.1.968" [ 371.844696][ T8398] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 371.850095][ T8398] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 372.145059][ T8412] binder: 8403:8412 got transaction to invalid handle, 1 [ 372.147396][ T8412] binder: 8412:8403 cannot find target node [ 372.149401][ T8412] binder: 8403:8412 transaction async to 0:0 failed 225/29201/-22, size 80-0 line 3054 [ 372.888267][ T4615] binder: undelivered TRANSACTION_ERROR: 29201 [ 372.972112][ T8417] loop2: detected capacity change from 0 to 1024 [ 374.344713][ T8429] netlink: 44 bytes leftover after parsing attributes in process `syz.5.973'. [ 374.578831][ T8379] hfsplus: b-tree write err: -5, ino 4 [ 376.128450][ T8456] binder: 8449:8456 got transaction to invalid handle, 1 [ 376.130752][ T8456] binder: 8456:8449 cannot find target node [ 376.132543][ T8456] binder: 8449:8456 transaction async to 0:0 failed 228/29201/-22, size 80-0 line 3054 [ 376.706703][ T4615] binder: undelivered TRANSACTION_ERROR: 29201 [ 377.179857][ T27] audit: type=1400 audit(377.150:56): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8459 comm="syz.1.985" [ 378.406689][ T8479] netlink: 44 bytes leftover after parsing attributes in process `syz.1.988'. [ 378.870839][ T8482] loop2: detected capacity change from 0 to 256 [ 378.894151][ T8482] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 378.902682][ T8482] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 378.915484][ T8484] 9pnet_fd: Insufficient options for proto=fd [ 378.945385][ T8482] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 380.849257][ T8501] binder: 8496:8501 got transaction to invalid handle, 1 [ 380.851918][ T8501] binder: 8501:8496 cannot find target node [ 380.853438][ T8501] binder: 8496:8501 transaction async to 0:0 failed 231/29201/-22, size 80-0 line 3054 [ 381.400930][ T4615] binder: undelivered TRANSACTION_ERROR: 29201 [ 381.726957][ T8509] loop2: detected capacity change from 0 to 1024 [ 381.747799][ T27] audit: type=1400 audit(381.720:57): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8503 comm="syz.0.998" [ 382.668575][ T4554] hfsplus: b-tree write err: -5, ino 4 [ 382.733706][ T8517] loop5: detected capacity change from 0 to 1024 [ 383.149010][ T8524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1002'. [ 383.798062][ T8533] loop2: detected capacity change from 0 to 256 [ 384.679076][ T8533] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.683320][ T8533] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 384.709435][ T8533] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 384.719787][ T8542] loop5: detected capacity change from 0 to 1024 [ 385.176886][ T27] audit: type=1400 audit(385.140:58): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=8546 comm="syz.1.1012" [ 385.960685][ T8565] loop5: detected capacity change from 0 to 1024 [ 386.900235][ T4737] hfsplus: b-tree write err: -5, ino 4 [ 387.038305][ T8576] loop5: detected capacity change from 0 to 1024 [ 387.056946][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 387.064715][ C1] ================================================================== [ 387.067016][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x404/0x45c [ 387.069085][ C1] Read of size 2 at addr ffff0000f301882a by task syz-executor/4307 [ 387.071506][ C1] [ 387.072179][ C1] CPU: 1 PID: 4307 Comm: syz-executor Not tainted 6.1.145-syzkaller #0 [ 387.074486][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.077220][ C1] Call trace: [ 387.078142][ C1] dump_backtrace+0x1c8/0x1f4 [ 387.079521][ C1] show_stack+0x2c/0x3c [ 387.080657][ C1] __dump_stack+0x30/0x40 [ 387.081992][ C1] dump_stack_lvl+0xf8/0x160 [ 387.083359][ C1] print_address_description+0x88/0x220 [ 387.084946][ C1] print_report+0x50/0x68 [ 387.086214][ C1] kasan_report+0xa8/0x100 [ 387.087394][ C1] __asan_report_load2_noabort+0x2c/0x38 [ 387.088897][ C1] rose_timer_expiry+0x404/0x45c [ 387.090315][ C1] call_timer_fn+0x1b8/0x964 [ 387.091671][ C1] __run_timers+0x460/0x6bc [ 387.092892][ C1] run_timer_softirq+0x7c/0x114 [ 387.094266][ C1] handle_softirqs+0x318/0xc6c [ 387.095567][ C1] __do_softirq+0x14/0x20 [ 387.096851][ C1] ____do_softirq+0x14/0x20 [ 387.098088][ C1] call_on_irq_stack+0x24/0x30 [ 387.099461][ C1] do_softirq_own_stack+0x20/0x2c [ 387.100916][ C1] __irq_exit_rcu+0x23c/0x43c [ 387.102218][ C1] irq_exit_rcu+0x14/0x84 [ 387.103405][ C1] el1_interrupt+0x38/0x54 [ 387.104755][ C1] el1h_64_irq_handler+0x18/0x24 [ 387.106176][ C1] el1h_64_irq+0x64/0x68 [ 387.107373][ C1] pfn_valid+0x14c/0x3cc [ 387.108599][ C1] page_table_check_set+0x3c/0x420 [ 387.110013][ C1] __page_table_check_pte_set+0x110/0x134 [ 387.111609][ C1] copy_page_range+0x1dec/0x292c [ 387.112969][ C1] copy_mm+0xabc/0x11d4 [ 387.114138][ C1] copy_process+0x1618/0x3670 [ 387.115446][ C1] kernel_clone+0x1d8/0x8fc [ 387.116776][ C1] __arm64_sys_clone+0x140/0x19c [ 387.118240][ C1] invoke_syscall+0x98/0x2bc [ 387.119523][ C1] el0_svc_common+0x138/0x258 [ 387.120781][ C1] do_el0_svc+0x58/0x13c [ 387.122038][ C1] el0_svc+0x58/0x138 [ 387.123140][ C1] el0t_64_sync_handler+0x84/0xf0 [ 387.124610][ C1] el0t_64_sync+0x18c/0x190 [ 387.125934][ C1] [ 387.126578][ C1] Allocated by task 6023: [ 387.127913][ C1] kasan_set_track+0x4c/0x80 [ 387.129282][ C1] kasan_save_alloc_info+0x28/0x34 [ 387.130853][ C1] __kasan_kmalloc+0xa0/0xb8 [ 387.132139][ C1] kmalloc_trace+0x7c/0x94 [ 387.133380][ C1] rose_add_node+0x1f4/0xba4 [ 387.134765][ C1] rose_rt_ioctl+0xa04/0xde4 [ 387.136123][ C1] rose_ioctl+0x378/0xb80 [ 387.137399][ C1] sock_do_ioctl+0xf8/0x240 [ 387.138719][ C1] sock_ioctl+0x5c4/0x840 [ 387.139976][ C1] __arm64_sys_ioctl+0x14c/0x1c8 [ 387.141402][ C1] invoke_syscall+0x98/0x2bc [ 387.142629][ C1] el0_svc_common+0x138/0x258 [ 387.143919][ C1] do_el0_svc+0x58/0x13c [ 387.145075][ C1] el0_svc+0x58/0x138 [ 387.146245][ C1] el0t_64_sync_handler+0x84/0xf0 [ 387.147657][ C1] el0t_64_sync+0x18c/0x190 [ 387.148917][ C1] [ 387.149562][ C1] Freed by task 8549: [ 387.150746][ C1] kasan_set_track+0x4c/0x80 [ 387.152027][ C1] kasan_save_free_info+0x3c/0x60 [ 387.153444][ C1] ____kasan_slab_free+0x148/0x1b0 [ 387.154947][ C1] __kasan_slab_free+0x18/0x28 [ 387.156278][ C1] slab_free_freelist_hook+0x16c/0x1ec [ 387.157822][ C1] __kmem_cache_free+0xc0/0x224 [ 387.159190][ C1] kfree+0xd0/0x1ac [ 387.160215][ C1] rose_remove_neigh+0x23c/0x2b8 [ 387.161651][ C1] rose_rt_device_down+0x2d4/0x330 [ 387.163077][ C1] rose_device_event+0x5d8/0x68c [ 387.164487][ C1] raw_notifier_call_chain+0xd4/0x164 [ 387.166031][ C1] __dev_notify_flags+0x250/0x46c [ 387.167519][ C1] dev_change_flags+0xc8/0x154 [ 387.168882][ C1] dev_ifsioc+0x524/0xed0 [ 387.170105][ C1] dev_ioctl+0x4c8/0xc8c [ 387.171323][ C1] sock_do_ioctl+0x18c/0x240 [ 387.172657][ C1] sock_ioctl+0x5c4/0x840 [ 387.173943][ C1] __arm64_sys_ioctl+0x14c/0x1c8 [ 387.175297][ C1] invoke_syscall+0x98/0x2bc [ 387.176603][ C1] el0_svc_common+0x138/0x258 [ 387.177999][ C1] do_el0_svc+0x58/0x13c [ 387.179227][ C1] el0_svc+0x58/0x138 [ 387.180311][ C1] el0t_64_sync_handler+0x84/0xf0 [ 387.181803][ C1] el0t_64_sync+0x18c/0x190 [ 387.183027][ C1] [ 387.183689][ C1] The buggy address belongs to the object at ffff0000f3018800 [ 387.183689][ C1] which belongs to the cache kmalloc-512 of size 512 [ 387.187790][ C1] The buggy address is located 42 bytes inside of [ 387.187790][ C1] 512-byte region [ffff0000f3018800, ffff0000f3018a00) [ 387.191559][ C1] [ 387.192236][ C1] The buggy address belongs to the physical page: [ 387.194042][ C1] page:000000009a8e364c refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000f301b800 pfn:0x133018 [ 387.197243][ C1] head:000000009a8e364c order:2 compound_mapcount:0 compound_pincount:0 [ 387.199708][ C1] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 387.201929][ C1] raw: 05ffc00000010200 fffffc0003d3cf08 fffffc0003509208 ffff0000c0002600 [ 387.204358][ C1] raw: ffff0000f301b800 0000000000100006 00000001ffffffff 0000000000000000 [ 387.206770][ C1] page dumped because: kasan: bad access detected [ 387.208589][ C1] [ 387.209259][ C1] Memory state around the buggy address: [ 387.210815][ C1] ffff0000f3018700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 387.213065][ C1] ffff0000f3018780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 387.215400][ C1] >ffff0000f3018800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 387.217653][ C1] ^ [ 387.219208][ C1] ffff0000f3018880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 387.221557][ C1] ffff0000f3018900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 387.223832][ C1] ================================================================== [ 387.226194][ C1] Disabling lock debugging due to kernel taint [ 387.528083][ T8580] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1019'.