last executing test programs:

1m26.81188781s ago: executing program 32 (id=48):
close(0x3)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close(0x3)

1m25.46803656s ago: executing program 33 (id=60):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1)

1m23.602377408s ago: executing program 34 (id=80):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4})

1m17.95496187s ago: executing program 35 (id=103):
socket(0x400000000010, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
syz_genetlink_get_family_id$SEG6(0x0, r0)
sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x80)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2b}, 0x10}, 0x1, 0x7}, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1000, 0x0)

1m17.312210324s ago: executing program 36 (id=106):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@noblock_validity}, {@lazytime}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
semctl$GETPID(0x0, 0x2, 0xb, 0x0)
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

1m15.016017608s ago: executing program 3 (id=115):
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xa)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7, 0x1)

1m15.000762381s ago: executing program 37 (id=115):
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xa)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7, 0x1)

1m13.299992981s ago: executing program 6 (id=126):
mprotect(&(0x7f0000588000/0x3000)=nil, 0x3000, 0x5)
syz_clone3(&(0x7f0000000500)={0x118030080, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/71, 0x47, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58)
clock_adjtime(0x0, &(0x7f000009e180)={0x7f, 0x400000000000a3, 0xa, 0x10001, 0x4219, 0xffffffffffff0001, 0x1, 0x618b91bd, 0x4, 0x7fffffffffffffff, 0x5, 0x6, 0x9, 0x0, 0x9, 0xa, 0x1d7, 0x8000000000000000, 0xb10, 0x8, 0x9, 0x7f, 0x93, 0xf, 0x80, 0xfffffffffffffff9})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000589000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/151, 0x97, 0x0, &(0x7f00000001c0)=""/14, 0xe}, &(0x7f0000000240)=0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c60}, 0x20000000)
r3 = syz_open_dev$video(0x0, 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QBUF(r3, 0xc058560f, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_opts(r4, 0x84, 0xa, 0xfffffffffffffffe, 0x0)
sendmsg$nl_route(r0, 0x0, 0x20000000)

1m13.196017175s ago: executing program 6 (id=127):
r0 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0x0, 0xfffffffb, 0x14}, 0x2c)

1m13.195857115s ago: executing program 6 (id=128):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefa, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x58, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd73}, {0x5, 0x82}}]}, 0x58}}, 0x20000020)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r6)

1m12.023589876s ago: executing program 6 (id=129):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@sb={'sb', 0x3d, 0x1}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nodiscard}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
fanotify_init(0x81, 0x40000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)

1m11.713100296s ago: executing program 6 (id=130):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a30000000000500010007000000080009400000000124000880"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

1m10.081730611s ago: executing program 6 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

1m10.019994484s ago: executing program 38 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

51.775942283s ago: executing program 7 (id=163):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000680)=[@release], 0x0, 0x0, 0x0})

51.770219925s ago: executing program 7 (id=164):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmmsg$inet6(r0, 0x0, 0x0, 0x2000c0d5)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "ff00", "0987ac39eb0000000000000400", "fbbe5d00", "6775c975b6b15e11"}, 0x28)

51.74788521s ago: executing program 7 (id=165):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))

51.683981574s ago: executing program 7 (id=166):
io_setup(0x8, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r0, &(0x7f00000059c0)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000002480)=""/65, 0x41, 0x5)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

51.683825564s ago: executing program 7 (id=167):
r0 = socket$inet(0x2, 0x3, 0x12)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000180)=0x6, 0x4)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008020)

51.668972368s ago: executing program 7 (id=168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

36.688789597s ago: executing program 39 (id=168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

29.583437225s ago: executing program 8 (id=235):
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1402, 0x0, 0x1, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x202f)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffc000, 0x103)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x60080800, 0x0, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df00", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x1003, 0x0, 0x0, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

29.51590633s ago: executing program 4 (id=238):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121341, 0x0)
ioctl$TCSETS(r0, 0x5433, 0x0)

29.462743402s ago: executing program 4 (id=240):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = gettid()
prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x19, 0xfffffffffffffffc}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
tkill(r1, 0x7)
close_range(r0, 0xffffffffffffffff, 0x0)
setitimer(0x1, &(0x7f0000001d80)={{}, {0x0, 0x2710}}, 0x0)

28.341484433s ago: executing program 8 (id=250):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
r0 = socket$inet(0x2, 0x1, 0x6)
chdir(0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100", 0xd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]})
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)

28.247924224s ago: executing program 4 (id=252):
r0 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r0, 0x5)
setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)='127.:.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]})
r1 = accept$inet(r0, 0x0, 0x0)
read(r1, &(0x7f0000000100), 0x4)
read(r1, &(0x7f0000000304), 0x4)
write(r1, &(0x7f0000000300), 0x100)

28.020022904s ago: executing program 8 (id=257):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000680)=[@release], 0x0, 0x0, 0x0})

27.962875617s ago: executing program 4 (id=259):
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000001500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x8, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="38000000000000008400000001"], 0x38}}], 0x2, 0x40000040)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
r1 = socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x7a6, &(0x7f0000000a40)="$eJzs3c9rHFUcAPDvbH6aVhtBsPXSnLRQumlrbBWExpMIFgp6tg2bbYjZZEt2U5qQg0UEQQQtHgS9ePZHvXkT0bN/gxcRaamaFiseZGX2R7Lp5me7+dHm84FJ3pt5O2++Mzvvvd0ZdgLYswbSP5mIQxHxURJxoD4/iYiuaqozYrhW7u7CfC6dkqhU3vgzqZa5szCfi6bXpPbVMwcj4sf3Io5mWustzc5NjBQK+el6frA8eWmwNDt3bHxyZCw/lp86dWJo6OTpF06fal+sf/88t//mx68+983wv+8+ff3Dn5IYjv31Zc1xtMtADNT3SVe6C2u+b3ctu0Oy0xvAfUlPzY7aWR6H4kB0VFMAwKMs7f8rAMAek+j/AWCPaXwPcGdhPteYdvYbie1165WI6K3F37i+WVvSWb9m11u9Dtp3J1l2ZSSJiP421H8wIj7/7q2v0im26DokwEreuRoRF/oHWtv/ZOmehft0fANlBu7Ja/9g+/yQjn9eXGn8l1kc/8QK45+eFc7d+zEQ0V1fXVXr+Z+5sazShjNtqLw+/nu5dm9bGmjT+G/xprX+jnru8TRzOCLGC/m0bXsiIo5EV8/F8UL+xBp1HLn93+3Vlg00jf/+uvb2l2n96f+lEpkbnT3LXzM6Uh55kJib3boa8Uzn0r19d1va/8ZRbx3/nltrxYeXkq+99P5nqxVL40/jbUyt8W+tyhcRz8bK8Tcka96fOJge/uO1vyvX8e2vn/atVn/z8U+ntP7GZ4HtkB7/vrXj70+a79cstbf+9eNffP8vblD6/u9O3qymu+vzroyUy9MnIrqT11vnn1xaWyPfKJ/GX1vxfHcsi3+p/UtWaP/Sz4QXNhhj580/vt58/A86+tqYNP7RTR3/zSeu353o2Hz8DenxH6qmjtTnbKT92+gGPsi+AwAAAAAAAAAAAAAAAAAAAAAAAICNykTE/kgy2cV0JpPN1p7h/VT0ZQrFUvnoxeLM1GhUn5XdH12Zxk9dHqjlk8bvn/Y35U/ek38+Ip6MiE96Hqvms7liYXSngwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAun2rPP8/9XvPTm8dALBlelvmVCqVSnP+dn7NxQDAQ6e1/wcAHnX6fwDYe/T/ALD36P8BYO/R/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDFzp09m06Vfxbmc2l+9PLszETx8rHRfGkiOzmTy+aK05eyY8XiWCGfzRUn11tfoVi8NBRTM1cGy/lSebA0O3d+sjgzVT4/PjlyJs7nu7YlKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYnNLs3MRIoZCffiQSH0TELtiMdRNJ7IrNaE+iK7a6it+O/XJwrTLX1nkbD2+grt76CbFb9uqOJ3a4YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4SPwfAAD//x2oI2o=")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

27.879199986s ago: executing program 8 (id=262):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@sb={'sb', 0x3d, 0x1}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nodiscard}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
fanotify_init(0x81, 0x40000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)

27.784632077s ago: executing program 4 (id=264):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x3, 0x232, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000145000/0xa000)=nil, 0xa000, 0x0, 0x5, 0x20000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x200080c1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

27.590459051s ago: executing program 8 (id=265):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4)

27.096017031s ago: executing program 8 (id=274):
r0 = syz_io_uring_setup(0x141c, &(0x7f00000001c0)={0x0, 0x91c1, 0x3400, 0x1, 0x8}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_io_commit_and_fetch_sqe={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0x104, 0x7acc, 0x0}})
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0)

27.095902171s ago: executing program 40 (id=274):
r0 = syz_io_uring_setup(0x141c, &(0x7f00000001c0)={0x0, 0x91c1, 0x3400, 0x1, 0x8}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_io_commit_and_fetch_sqe={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0x104, 0x7acc, 0x0}})
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0)

26.971707439s ago: executing program 4 (id=280):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x2b, 0x0, @mcast1, @dev}}}}}}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x7)
r4 = memfd_create(0x0, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb}, {0x1ff, 0xffffffffe, 0x4053e6, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0xa, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0xfffffffd}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r4, 0x200000000000000)
fallocate(r4, 0x3, 0x5, 0xffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
rseq(0x0, 0xffffffffffffffc9, 0xfffffffffffffffe, 0x0)

26.825308172s ago: executing program 41 (id=280):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x2b, 0x0, @mcast1, @dev}}}}}}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x7)
r4 = memfd_create(0x0, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb}, {0x1ff, 0xffffffffe, 0x4053e6, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0xa, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0xfffffffd}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r4, 0x200000000000000)
fallocate(r4, 0x3, 0x5, 0xffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
rseq(0x0, 0xffffffffffffffc9, 0xfffffffffffffffe, 0x0)

25.876132154s ago: executing program 9 (id=293):
setuid(0xee01)
r0 = semget$private(0x0, 0x4, 0x29b)
semop(r0, 0x0, 0x0)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x150, 0xd49}, 0x10000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2})
semop(r0, &(0x7f00000001c0)=[{0x1, 0x9, 0x800}], 0x1)

25.823247316s ago: executing program 9 (id=294):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x3, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x9, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0x7, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x9, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0xaf, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x8000004, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0xd, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)

25.736017205s ago: executing program 9 (id=295):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4)
sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="0800090687696fd2", 0x8}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}, 0x4004800)

25.735892415s ago: executing program 9 (id=296):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@sb={'sb', 0x3d, 0x1}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nodiscard}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
fanotify_init(0x81, 0x40000)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

25.524358193s ago: executing program 9 (id=298):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000680)=[@release], 0x0, 0x0, 0x0})

24.979513204s ago: executing program 9 (id=309):
capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200004, 0x3, 0x6, 0x9, 0x7ffd})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101001, 0x12)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000)

24.854299452s ago: executing program 42 (id=309):
capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200004, 0x3, 0x6, 0x9, 0x7ffd})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101001, 0x12)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000)

2.877845126s ago: executing program 2 (id=398):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0, &(0x7f00000004c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0)

1.945947794s ago: executing program 2 (id=401):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r2, r0, 0x12, 0x6}, 0x10)

1.898387005s ago: executing program 3 (id=310):
r0 = getpid()
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000100)={0x19980330, r0}, &(0x7f0000000080)={0x80000000, 0x9, 0xfffffffb, 0x200, 0x1, 0x7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0xffa4, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x668, &(0x7f0000000e00)="$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")
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000040)={0x23, 0x3, 0x0, {0x4, 0x2, 0x0, '!!'}}, 0x23)

1.751989137s ago: executing program 2 (id=402):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
r4 = socket(0x400000000010, 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd2d, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080)

1.29478485s ago: executing program 1 (id=407):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1, &(0x7f0000000900)=ANY=[], 0x2b0}}], 0x1, 0x2000c0d5)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "ff00", "0987ac39eb0000000000000400", "fbbe5d00", "6775c975b6b15e11"}, 0x28)

1.231028734s ago: executing program 1 (id=409):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
setregid(0xee01, 0x0)

1.131559886s ago: executing program 1 (id=411):
open$dir(0x0, 0xd4002, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mb_optimize_scan}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)
r6 = syz_io_uring_setup(0x5f93, &(0x7f00000001c0)={0x0, 0x8956, 0x40, 0x4, 0x1b0}, &(0x7f00000004c0), 0x0, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
userfaultfd(0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001240)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@fat=@debug}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$eJzs3cuKI1UYAOC/0pXuRIVk4UoEC3ThKszME3SQFgazUmqhGx2cHpAkDHQg4AUzs3IvuPId3PkAPoAb38CFS8WdsxBLkkrl3jMdSffI8H2b+lPn/HUunL4QyJ9PXh/27z8cPXj81a/RaCRRO43TeJJEO2pReRQAwIvkSVHEn0XpWX2P116lteucFwBwfa789//oxqYEAFyzDz786L1ur3f2fpY1IobfjPMkymvZ3n0Qn8UgzuNWtOLviGKhjF+52zuLNMuqNwPGzcgjhh//PH/d/T1iln87WtHezK/eUchm4q3hZJxPR55e6/FSEtEtkrLLnWjFqxFFPeYPKS/v3u2d3cm28yM/jrff/H4+/3/OoxOt+OXTeBiDuD97xDL/69tZ9k7x3V9flivII5LJOD+Z9Vsq/AcEAAAAAAAAAAAAAAAAAAAAAMDBdLKF9mr9nKoaYKez2Z7mEX8Mq/xlfaDTmNUHmlf4mazU17mVZVlVxmec16Os75PGa2mkz2vdAAAAAAAAAAAAAAAAAAAA8H8y+vyL/r3B4PxiLfipmAbNp/bZDNKVO9XH+p+dtTvo/xCxf9ZVgjiaT22QbA2RVE17PPDHS5pO9plYc9egUbtsD9NBlJP/dv9NeGPfBV49aC+nWp2u/r0kFjv/aL6761mN3Ydk5dRVx/BilOxxIIsdW3d0adbxgTbh+OX/mt6MXU3TFdcXm7me1djYzPqBf1I2JIf9xQMAAAAAAAAAAAAAAAAAAGxZfug3fttqfPxcpgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN275/f+LINqbdzaDyTx5dqf29M4nF6Mdw7ZveJkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC84P4NAAD//14lUFg=")
preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000017, 0x8)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
io_uring_register$IORING_REGISTER_CLOCK(r6, 0x1d, 0x0, 0x0)

1.131458616s ago: executing program 2 (id=412):
setuid(0xee01)
r0 = semget$private(0x0, 0x4, 0x29b)
semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x150, 0xd49}, 0x10000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2})
semop(r0, 0x0, 0x0)

1.011483233s ago: executing program 3 (id=414):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
futex$unlock_wake_list32(&(0x7f0000000080)=0x4, 0x60a, 0xfffffffd, 0x0, 0x0, 0x101)

598.584986ms ago: executing program 5 (id=416):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000680)=[@release], 0x0, 0x0, 0x0})

486.58528ms ago: executing program 3 (id=418):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000900)=ANY=[], 0x2b0}}], 0x1, 0x2000c0d5)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "ff00", "0987ac39eb0000000000000400", "fbbe5d00", "6775c975b6b15e11"}, 0x28)

486.18681ms ago: executing program 5 (id=419):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

415.891606ms ago: executing program 5 (id=421):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))

402.750269ms ago: executing program 0 (id=422):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x13, 0xfa00, {0x2, &(0x7f0000002100)={<r1=>0xffffffffffffffff}, 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x5, @local, 0xff}, r1, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

394.155671ms ago: executing program 3 (id=423):
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]})
close_range(r0, 0xffffffffffffffff, 0x0)

327.969346ms ago: executing program 5 (id=424):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000fb)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01", @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4)

327.853366ms ago: executing program 0 (id=425):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-ram0/size\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)="3130637654eace3a9373b0ad18541e59aae36c0dcb81278399945fc6c362a4acdc400a8c7446756f380184d3eced50972ab7de7fafaf75476d66a3a10e2dc03b738d206d0a47e95017fc3c661414ac6013535f2279", 0x55)

295.586733ms ago: executing program 3 (id=426):
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

254.556492ms ago: executing program 0 (id=427):
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

254.185043ms ago: executing program 1 (id=428):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010001fff0f0000008d70000000000000", @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x40040)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

254.110252ms ago: executing program 5 (id=429):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000", @ANYRESDEC=0x0], 0xe)

203.987803ms ago: executing program 2 (id=430):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000680)=[@release], 0x0, 0x0, 0x0})

175.15658ms ago: executing program 5 (id=431):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100, 0x7}, 'syz1\x00', 0x9})
ioctl$UI_DEV_CREATE(r5, 0x5501)

152.743265ms ago: executing program 0 (id=432):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xbe1, &(0x7f0000001880)=ANY=[], 0x0)

71.486633ms ago: executing program 0 (id=433):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000900)=ANY=[], 0x2b0}}], 0x1, 0x2000c0d5)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "ff00", "0987ac39eb0000000000000400", "fbbe5d00", "6775c975b6b15e11"}, 0x28)

71.345793ms ago: executing program 1 (id=434):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000100))

71.055393ms ago: executing program 0 (id=435):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x100000000000000}, {0xffffffff, 0x0, 0x9, 0xa, 0x0, 0x8ed4}]})

51.985748ms ago: executing program 2 (id=436):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@quota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbef, &(0x7f0000004100)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x1840088, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
chdir(&(0x7f00000001c0)='./bus\x00')
symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000001300)=""/4096, 0x1000)

0s ago: executing program 1 (id=437):
openat$rtc(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000006c0)=@multiplanar_userptr={0x7, 0x3, 0x4, 0x0, 0xd, {}, {0x5, 0xc, 0xcb, 0xfd, 0x0, 0x6, 'r# ]'}, 0x8, 0x2, {0x0}, 0x8})

kernel console output (not intermixed with test programs):

m netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.197564][ T4730] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.206442][ T4730] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.208436][ T4730] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.239620][ T1690] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.283641][ T4845] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.292682][ T4972] team0: Port device team_slave_0 added
[   50.294841][ T4972] team0: Port device team_slave_1 added
[   50.309192][ T5028] loop6: detected capacity change from 0 to 1024
[   50.310770][ T5028] EXT4-fs: Ignoring removed orlov option
[   50.324751][ T5028] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   50.329881][ T4336] Bluetooth: hci1: command 0x041b tx timeout
[   50.350464][ T1690] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.364320][ T4845] 8021q: adding VLAN 0 to HW filter on device team0
[   50.376732][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   50.387324][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.404310][ T4889] netdevsim netdevsim9 netdevsim0: renamed from eth0
[   50.453951][ T4617] EXT4-fs (loop6): unmounting filesystem.
[   50.497311][ T4972] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.523680][ T4972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.536176][ T4972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.540239][ T4972] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.541530][ T4972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.546050][ T4972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.594287][ T1690] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.604110][ T4889] netdevsim netdevsim9 netdevsim1: renamed from eth1
[   50.639074][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   50.641033][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.642656][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.643981][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.646289][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   50.670232][ T5056] FAULT_INJECTION: forcing a failure.
[   50.670232][ T5056] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   50.672784][ T5056] CPU: 1 PID: 5056 Comm: syz.6.123 Not tainted syzkaller #0
[   50.674023][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   50.675755][ T5056] Call trace:
[   50.676351][ T5056]  dump_backtrace+0x1c4/0x1f0
[   50.677293][ T5056]  show_stack+0x2c/0x3c
[   50.678077][ T5056]  __dump_stack+0x30/0x40
[   50.678986][ T5056]  dump_stack_lvl+0xf4/0x15c
[   50.679859][ T5056]  dump_stack+0x1c/0x5c
[   50.680656][ T5056]  should_fail_ex+0x3cc/0x524
[   50.681578][ T5056]  should_fail_alloc_page+0x74/0xb8
[   50.682583][ T5056]  prepare_alloc_pages+0x1b8/0x4f0
[   50.683596][ T5056]  __alloc_pages+0x134/0x544
[   50.684470][ T5056]  __folio_alloc+0x1c/0x44
[   50.685331][ T5056]  vma_alloc_folio+0x37c/0x8ac
[   50.686258][ T5056]  new_page+0x394/0x4c8
[   50.687077][ T5056]  migrate_pages+0x1cec/0x3de0
[   50.688005][ T5056]  __arm64_sys_mbind+0x6bc/0x854
[   50.688923][ T5056]  invoke_syscall+0x98/0x290
[   50.689774][ T5056]  el0_svc_common+0x13c/0x258
[   50.690648][ T5056]  do_el0_svc+0x5c/0x134
[   50.691489][ T5056]  el0_svc+0x58/0x128
[   50.692226][ T5056]  el0t_64_sync_handler+0x84/0xf0
[   50.693149][ T5056]  el0t_64_sync+0x18c/0x190
[   50.709224][ T1690] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.718559][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   50.720289][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.721918][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.723386][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.744375][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   50.746257][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   50.748301][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   50.750436][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   50.752109][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   50.753741][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   50.755987][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   50.766605][ T4889] netdevsim netdevsim9 netdevsim2: renamed from eth2
[   50.771217][ T5059] binder: BINDER_SET_CONTEXT_MGR already set
[   50.772248][ T5059] binder: 5058:5059 ioctl 4018620d 20004a80 returned -16
[   50.773949][ T5059] binder: 5058:5059 Release 1 refcount change on invalid ref 0 ret -22
[   50.790326][ T4889] netdevsim netdevsim9 netdevsim3: renamed from eth3
[   50.848763][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.850204][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.880251][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.885845][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   50.887570][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.939352][ T4972] device hsr_slave_0 entered promiscuous mode
[   50.968153][ T4336] Bluetooth: hci3: command 0x041b tx timeout
[   51.009519][ T4972] device hsr_slave_1 entered promiscuous mode
[   51.095830][ T5070] netlink: 36 bytes leftover after parsing attributes in process `syz.6.128'.
[   51.236887][ T4972] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   51.246792][ T4972] Cannot create hsr debugfs directory
[   51.327398][ T4331] Bluetooth: hci0: command 0x0409 tx timeout
[   52.078132][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.080093][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.097389][ T5072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.098882][ T5072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.117307][ T4889] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.122329][ T4889] 8021q: adding VLAN 0 to HW filter on device team0
[   52.150982][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.183604][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   52.185390][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.186863][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.254715][ T5078] loop6: detected capacity change from 0 to 1024
[   52.260467][ T5078] EXT4-fs: Ignoring removed orlov option
[   52.271454][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.273434][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.274999][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.276261][ T5052] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.278609][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   52.288717][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.290424][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.292081][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.293393][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.331312][ T5078] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   52.336795][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.347247][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.371410][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.376358][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.381953][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.402601][ T4336] Bluetooth: hci1: command 0x040f tx timeout
[   52.408626][ T5101] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.81'.
[   52.457874][ T4617] EXT4-fs (loop6): unmounting filesystem.
[   52.506868][ T5108] binder: 5107:5108 ioctl c0306201 0 returned -14
[   52.510017][ T5108] binder: 5107:5108 got transaction to invalid handle, 1
[   52.511272][ T5108] binder: 5108:5107 cannot find target node
[   52.512583][ T5108] binder: 5107:5108 transaction call to 0:0 failed 17/29201/-22, size 72-24 line 3062
[   52.514526][ T5108] binder: 5107:5108 Release 1 refcount change on invalid ref 0 ret -22
[   52.516227][  T113] binder: undelivered TRANSACTION_ERROR: 29201
[   53.040165][ T4331] Bluetooth: hci3: command 0x040f tx timeout
[   53.369423][ T4331] Bluetooth: hci0: command 0x041b tx timeout
[   53.779892][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.781894][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.845599][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.847944][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.849733][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.851479][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.853624][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.020005][ T4845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.023339][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   54.024867][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   54.146374][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   54.148749][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   54.150358][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   54.152151][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   54.154771][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   54.156661][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   54.474889][ T4336] Bluetooth: hci1: command 0x0419 tx timeout
[   55.123023][ T4331] Bluetooth: hci3: command 0x0419 tx timeout
[   55.431085][ T4331] Bluetooth: hci0: command 0x040f tx timeout
[   56.238073][ T4331] Bluetooth: hci4: command 0x0409 tx timeout
[   57.503421][ T4331] Bluetooth: hci0: command 0x0419 tx timeout
[   58.300291][ T4331] Bluetooth: hci4: command 0x041b tx timeout
[   60.372705][ T4331] Bluetooth: hci4: command 0x040f tx timeout
[   62.445212][ T4331] Bluetooth: hci4: command 0x0419 tx timeout
[   64.449073][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[   64.450430][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[   65.048618][ T5167] loop7: detected capacity change from 0 to 1024
[   65.052057][ T5167] EXT4-fs: Ignoring removed orlov option
[   65.092818][ T5167] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   65.188081][ T4730] EXT4-fs (loop7): unmounting filesystem.
[   65.581706][ T4889] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.585653][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.587085][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.588388][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.593796][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.595963][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.139'.
[   65.834943][ T5200] binder: 5199:5200 ioctl c0306201 0 returned -14
[   65.837465][ T5200] binder: 5199:5200 got transaction to invalid handle, 1
[   65.838664][ T5200] binder: 5200:5199 cannot find target node
[   65.839707][ T5200] binder: 5199:5200 transaction call to 0:0 failed 21/29201/-22, size 72-24 line 3062
[   65.841449][ T5200] binder: 5199:5200 Release 1 refcount change on invalid ref 0 ret -22
[   65.844742][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[   65.861137][ T4845] device veth0_vlan entered promiscuous mode
[   65.979789][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.981768][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.165825][ T4845] device veth1_vlan entered promiscuous mode
[   66.171002][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.175070][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.178758][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.182176][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.187127][ T5149] chnl_net:caif_netlink_parms(): no params data found
[   66.375471][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.377634][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.387091][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.388902][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.409766][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.411556][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.573644][ T4889] device veth0_vlan entered promiscuous mode
[   66.577216][ T4889] device veth1_vlan entered promiscuous mode
[   66.583534][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.585274][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.587067][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.595553][ T4845] device veth0_macvtap entered promiscuous mode
[   66.598860][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.600340][ T5149] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.602388][ T5149] device bridge_slave_0 entered promiscuous mode
[   66.605355][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.606974][ T5149] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.609322][ T5149] device bridge_slave_1 entered promiscuous mode
[   66.779004][ T4845] device veth1_macvtap entered promiscuous mode
[   66.807182][ T5149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.811915][ T5149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.828636][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.840370][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.842285][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.844097][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.845824][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.847656][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.849285][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.860087][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.862051][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.863747][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.865677][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.867423][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.869309][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.871995][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.874579][ T4845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.877186][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.879411][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.881976][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.883899][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.885780][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.887892][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.889931][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.891856][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.893735][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.895614][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.897294][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.899079][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.901329][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.903248][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.905921][ T4845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.235337][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.237145][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.239331][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.241760][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.243367][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.244982][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.246711][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.255385][ T5149] team0: Port device team_slave_0 added
[   67.266233][ T5149] team0: Port device team_slave_1 added
[   67.269088][ T4845] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.270587][ T4845] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.272090][ T4845] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.273622][ T4845] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.284601][ T5149] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.285990][ T5149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.292208][ T5149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.296898][ T4889] device veth0_macvtap entered promiscuous mode
[   67.302688][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.304533][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.306314][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.340305][ T5149] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.341549][ T5149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.346415][ T5149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.650729][ T4889] device veth1_macvtap entered promiscuous mode
[   67.668205][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.698047][ T5149] device hsr_slave_0 entered promiscuous mode
[   67.727276][ T5149] device hsr_slave_1 entered promiscuous mode
[   67.786492][ T5149] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.787867][ T5149] Cannot create hsr debugfs directory
[   67.832629][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.834489][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.836133][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.838521][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.840114][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.841822][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.843443][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.845242][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.847077][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.848879][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.850558][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.852424][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.854095][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.855795][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.857712][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.859415][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.861918][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.873078][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.874899][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.211371][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.213252][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.215228][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.217156][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.218923][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.220875][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.222708][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.224604][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.226784][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.228698][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.230547][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.232502][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.234079][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.236351][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.238332][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.240182][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.242722][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.302213][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.304157][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.307645][ T4889] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.309157][ T4889] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.310605][ T4889] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.312376][ T4889] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.543129][   T24] cfg80211: failed to load regulatory.db
[   69.830008][ T5244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.880928][ T4972] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   69.962162][ T4972] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   70.006185][ T5266] loop7: detected capacity change from 0 to 1024
[   70.010304][ T4972] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   70.010779][ T5266] EXT4-fs: Ignoring removed orlov option
[   70.031597][ T5266] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   70.056728][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.058179][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.065863][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.069099][ T4972] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   70.111814][ T5072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.113587][ T4730] EXT4-fs (loop7): unmounting filesystem.
[   70.113638][ T5072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.270155][ T5279] binder: 5278:5279 ioctl c0306201 0 returned -14
[   70.272775][ T5279] binder: 5278:5279 got transaction to invalid handle, 1
[   70.274214][ T5279] binder: 5279:5278 cannot find target node
[   70.275313][ T5279] binder: 5278:5279 transaction call to 0:0 failed 25/29201/-22, size 72-24 line 3062
[   70.277125][ T5279] binder: 5278:5279 Release 1 refcount change on invalid ref 0 ret -22
[   70.279604][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[   70.323270][ T5283] loop7: detected capacity change from 0 to 256
[   70.326893][ T5283] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   70.413028][ T5149] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.448396][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.450227][ T5149] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.489135][ T5149] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.520283][ T5149] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.615333][ T1690] device hsr_slave_0 left promiscuous mode
[   70.637609][ T1690] device hsr_slave_1 left promiscuous mode
[   70.690055][ T5288] loop7: detected capacity change from 0 to 1024
[   70.691610][ T5288] EXT4-fs: Ignoring removed orlov option
[   70.715079][ T5288] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   70.731032][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.732515][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.737603][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.738915][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.740400][ T1690] device bridge_slave_1 left promiscuous mode
[   70.741552][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.785333][ T1690] device bridge_slave_0 left promiscuous mode
[   70.786647][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.805761][ T4730] EXT4-fs (loop7): unmounting filesystem.
[   70.830929][ T5294] loop7: detected capacity change from 0 to 512
[   70.832470][ T1690] device hsr_slave_0 left promiscuous mode
[   70.847079][ T5294] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.154: missing EA_INODE flag
[   70.863148][ T1690] device hsr_slave_1 left promiscuous mode
[   70.864567][ T5294] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.154: error while reading EA inode 2 err=-117
[   70.867396][ T5294] EXT4-fs (loop7): 1 orphan inode deleted
[   70.868354][ T5294] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   70.887082][ T4730] EXT4-fs (loop7): unmounting filesystem.
[   70.904475][ T5297] loop7: detected capacity change from 0 to 256
[   70.916525][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.917981][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.924763][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.926581][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.928465][ T1690] device bridge_slave_1 left promiscuous mode
[   70.929668][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.962206][ T5299] binder: 5298:5299 got transaction to invalid handle, 1
[   70.963529][ T5299] binder: 5299:5298 cannot find target node
[   70.964849][ T5299] binder: 5298:5299 transaction call to 0:0 failed 29/29201/-22, size 72-24 line 3062
[   70.967577][ T5299] binder: 5298:5299 Release 1 refcount change on invalid ref 0 ret -22
[   70.975177][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[   70.986508][ T1690] device bridge_slave_0 left promiscuous mode
[   70.987656][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.022635][ T1690] device hsr_slave_0 left promiscuous mode
[   71.090236][ T1690] device hsr_slave_1 left promiscuous mode
[   71.098302][ T5307] loop7: detected capacity change from 0 to 512
[   71.116624][ T5307] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   71.225048][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.226430][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.228236][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.229486][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.233426][ T1690] device bridge_slave_1 left promiscuous mode
[   71.256448][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.322849][ T1690] device bridge_slave_0 left promiscuous mode
[   71.329098][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.433149][ T1690] device hsr_slave_0 left promiscuous mode
[   71.494125][ T1690] device hsr_slave_1 left promiscuous mode
[   71.573629][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.575073][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.577533][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.578784][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.580282][ T1690] device bridge_slave_1 left promiscuous mode
[   71.581482][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.615296][ T1690] device bridge_slave_0 left promiscuous mode
[   71.616605][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.763053][ T1690] device veth1_macvtap left promiscuous mode
[   71.764213][ T1690] device veth0_macvtap left promiscuous mode
[   71.765333][ T1690] device veth1_vlan left promiscuous mode
[   71.767132][ T1690] device veth0_vlan left promiscuous mode
[   71.842931][ T1690] device veth1_macvtap left promiscuous mode
[   71.844073][ T1690] device veth0_macvtap left promiscuous mode
[   71.845267][ T1690] device veth1_vlan left promiscuous mode
[   71.846386][ T1690] device veth0_vlan left promiscuous mode
[   71.950021][ T1690] device veth1_macvtap left promiscuous mode
[   71.951118][ T1690] device veth0_macvtap left promiscuous mode
[   71.951730][ T4730] EXT4-fs (loop7): unmounting filesystem.
[   71.952154][ T1690] device veth1_vlan left promiscuous mode
[   71.954883][ T1690] device veth0_vlan left promiscuous mode
[   72.043581][ T1690] device veth1_macvtap left promiscuous mode
[   72.044819][ T1690] device veth0_macvtap left promiscuous mode
[   72.046100][ T1690] device veth1_vlan left promiscuous mode
[   72.047220][ T1690] device veth0_vlan left promiscuous mode
[   72.055924][ T5313] loop7: detected capacity change from 0 to 1024
[   72.059177][ T5313] EXT4-fs: Ignoring removed orlov option
[   72.108799][ T5313] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   72.229349][ T4730] EXT4-fs (loop7): unmounting filesystem.
[   72.259395][ T5320] loop7: detected capacity change from 0 to 512
[   72.264204][ T5320] EXT4-fs: Ignoring removed nobh option
[   72.266905][ T5320] EXT4-fs (loop7): orphan cleanup on readonly fs
[   72.268603][ T5320] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.162: corrupted inode contents
[   72.274134][ T5320] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[   72.275810][ T5320] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #15: comm syz.7.162: corrupted inode contents
[   72.278082][ T5320] EXT4-fs error (device loop7): ext4_evict_inode:329: inode #15: comm syz.7.162: mark_inode_dirty error
[   72.280274][ T5320] EXT4-fs (loop7): 1 orphan inode deleted
[   72.281766][ T5320] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   72.298615][ T4730] EXT4-fs (loop7): unmounting filesystem.
[   72.321686][ T5323] binder: 5322:5323 got transaction to invalid handle, 1
[   72.323021][ T5323] binder: 5323:5322 cannot find target node
[   72.324132][ T5323] binder: 5322:5323 transaction call to 0:0 failed 33/29201/-22, size 72-24 line 3062
[   72.326200][ T5323] binder: 5322:5323 Release 1 refcount change on invalid ref 0 ret -22
[   72.328678][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[   74.426404][ T1690] team0 (unregistering): Port device team_slave_1 removed
[   74.584974][ T1690] team0 (unregistering): Port device team_slave_0 removed
[   74.754075][ T1690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.953041][ T1690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.449959][ T1690] bond0 (unregistering): Released all slaves
[   78.812663][ T1690] team0 (unregistering): Port device team_slave_1 removed
[   78.980795][ T1690] team0 (unregistering): Port device team_slave_0 removed
[   79.139523][ T1690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.350109][ T1690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.865786][ T1690] bond0 (unregistering): Released all slaves
[   83.238280][ T1690] team0 (unregistering): Port device team_slave_1 removed
[   83.406858][ T1690] team0 (unregistering): Port device team_slave_0 removed
[   83.575994][ T1690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.795137][ T1690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.341684][ T1690] bond0 (unregistering): Released all slaves
[   87.463872][ T4336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.465982][ T4336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.467721][ T4336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.469443][ T4336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.471046][ T4336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   87.472471][ T4336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.685368][ T1690] team0 (unregistering): Port device team_slave_1 removed
[   87.853861][ T1690] team0 (unregistering): Port device team_slave_0 removed
[   88.022970][ T1690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.236481][ T1690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.557654][ T4331] Bluetooth: hci5: command 0x0409 tx timeout
[   89.758579][ T1690] bond0 (unregistering): Released all slaves
[   90.051053][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.054562][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.062788][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.127867][ T5072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.129505][ T5072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.131271][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.379424][ T4972] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.411315][ T5366] binder: 5365:5366 got transaction to invalid handle, 1
[   90.412699][ T5366] binder: 5366:5365 cannot find target node
[   90.413814][ T5366] binder: 5365:5366 transaction call to 0:0 failed 37/29201/-22, size 72-24 line 3062
[   90.422825][ T5149] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.448333][ T5366] binder: 5365:5366 Release 1 refcount change on invalid ref 0 ret -22
[   90.450268][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   90.451812][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.466850][ T4454] binder: undelivered TRANSACTION_ERROR: 29201
[   90.475240][ T4972] 8021q: adding VLAN 0 to HW filter on device team0
[   90.488664][ T5336] chnl_net:caif_netlink_parms(): no params data found
[   90.553018][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   90.554992][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.556514][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.557858][ T5072] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.559547][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   90.561339][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.562993][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.564200][ T5072] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.580820][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   90.599757][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   90.601840][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   90.605133][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   90.608220][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   90.617648][ T5149] 8021q: adding VLAN 0 to HW filter on device team0
[   90.648672][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   90.648945][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.649083][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.649134][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.649313][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   90.649636][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   90.649888][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.650133][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   90.650378][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   90.650559][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.651954][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   90.652256][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.703983][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   90.706233][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.707732][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.709041][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.710586][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.712262][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.758132][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.760187][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.761728][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.783602][ T5336] device bridge_slave_0 entered promiscuous mode
[   90.786104][ T5410] binder: 5409:5410 got transaction to invalid handle, 1
[   90.787479][ T5410] binder: 5410:5409 cannot find target node
[   90.788752][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   90.790545][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   90.792336][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.793658][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.798902][ T5336] device bridge_slave_1 entered promiscuous mode
[   90.804690][ T5410] binder: 5409:5410 transaction call to 0:0 failed 41/29201/-22, size 72-24 line 3062
[   90.807244][ T5410] binder: 5409:5410 Release 1 refcount change on invalid ref 0 ret -22
[   90.812747][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[   90.820987][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   90.823693][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   90.826922][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.828836][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   90.835358][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.845287][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   90.847195][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.850856][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.857041][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.871701][ T5336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.895295][ T5149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.899697][ T5336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.936283][ T5336] team0: Port device team_slave_0 added
[   90.938300][ T5336] team0: Port device team_slave_1 added
[   90.971777][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.982038][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.007440][ T5336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.016540][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.017752][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.022176][ T5336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.185743][ T5336] device hsr_slave_0 entered promiscuous mode
[   91.274006][ T5336] device hsr_slave_1 entered promiscuous mode
[   91.313417][ T5336] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.315205][ T5336] Cannot create hsr debugfs directory
[   91.324750][ T4972] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.327219][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.328647][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.334298][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.335744][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   91.360331][ T5149] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.386496][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   91.388427][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   91.428554][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   91.430767][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   91.433324][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   91.436067][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   91.443245][ T5149] device veth0_vlan entered promiscuous mode
[   91.446836][ T5149] device veth1_vlan entered promiscuous mode
[   91.499943][ T5460] binder: 5459:5460 got transaction to invalid handle, 1
[   91.501375][ T5460] binder: 5460:5459 cannot find target node
[   91.506045][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   91.506540][ T5460] binder: 5459:5460 transaction call to 0:0 failed 45/29201/-22, size 72-24 line 3062
[   91.507943][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   91.509952][ T5460] binder: 5459:5460 Release 1 refcount change on invalid ref 0 ret -22
[   91.513311][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.516605][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.518877][ T4454] binder: undelivered TRANSACTION_ERROR: 29201
[   91.524353][ T5149] device veth0_macvtap entered promiscuous mode
[   91.536121][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   91.537962][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   91.539579][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   91.542442][ T5149] device veth1_macvtap entered promiscuous mode
[   91.567775][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   91.569761][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   91.573562][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   91.577231][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   91.583396][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   91.597995][ T4972] device veth0_vlan entered promiscuous mode
[   91.609672][ T5149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.614563][ T5149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.616272][ T5149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.628348][ T5149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.630068][ T5149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.631738][ T4331] Bluetooth: hci5: command 0x041b tx timeout
[   91.633906][ T5149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.635678][ T5149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.637477][ T5149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.645285][ T5149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.647043][ T5149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.657046][ T5149] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.660636][ T5149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.666331][ T5149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.668310][ T5149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.670349][ T5149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.672290][ T5149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.674621][ T5149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.676791][ T5149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.679077][ T5149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.680885][ T5149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.683265][ T5149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.685945][ T5149] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.688485][ T4972] device veth1_vlan entered promiscuous mode
[   91.787669][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   91.789688][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   91.791823][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   91.795921][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   91.799933][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   91.834872][ T5149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.836631][ T5149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.838135][ T5149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.839651][ T5149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.916969][ T4972] device veth0_macvtap entered promiscuous mode
[   91.972144][ T5483] loop9: detected capacity change from 0 to 128
[   91.980175][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   91.982907][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.985340][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.988489][ T4972] device veth1_macvtap entered promiscuous mode
[   92.005619][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   92.019999][ T5483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[   92.022558][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   92.028879][ T5483] System zones: 1-3, 19-19, 35-36
[   92.042249][ T5052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.044044][ T5052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.046571][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.057385][ T5052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.063147][ T5052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.068919][ T5483] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   92.079614][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   92.104412][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.106195][ T5483] EXT4-fs warning (device loop9): verify_group_input:151: Cannot add at group 609091585 (only 1 groups)
[   92.107205][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.111692][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.113563][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.115476][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.117377][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.119379][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.121564][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.123230][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.124998][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.127029][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.128912][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.131834][ T4972] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.134917][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   92.137230][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   92.145427][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.147304][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.149250][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.151376][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.153323][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.155231][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.157021][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.158807][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.170512][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.176741][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.180875][ T5489] loop2: detected capacity change from 0 to 1024
[   92.183154][ T5489] EXT4-fs: Ignoring removed orlov option
[   92.183784][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.192729][ T5489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   92.195755][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.198818][ T5489] Zero length message leads to an empty skb
[   92.211967][ T4889] EXT4-fs (loop9): unmounting filesystem.
[   92.212981][ T4972] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.220348][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   92.223581][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.255713][ T5149] EXT4-fs (loop2): unmounting filesystem.
[   92.277087][ T4972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.281723][ T4972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.283661][ T4972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.289516][ T4972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.325036][ T5336] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.375743][ T5336] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.423475][ T5336] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.473256][ T5336] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.589203][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.591350][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.594970][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.641386][ T5502] binder: 5501:5502 got transaction to invalid handle, 1
[   92.642066][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.644805][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.646744][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   92.648398][ T5502] binder: 5502:5501 cannot find target node
[   92.650637][ T5502] binder: 5501:5502 Release 1 refcount change on invalid ref 0 ret -22
[   92.743449][ T5336] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.750386][ T5506] loop8: detected capacity change from 0 to 256
[   92.759772][ T5336] 8021q: adding VLAN 0 to HW filter on device team0
[   92.781889][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.783743][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.792996][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'.
[   92.796332][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.798147][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.804901][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.806277][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.814870][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   92.834240][ T5508] FAULT_INJECTION: forcing a failure.
[   92.834240][ T5508] name fail_futex, interval 1, probability 0, space 0, times 1
[   92.837478][ T5508] CPU: 0 PID: 5508 Comm: syz.4.116 Not tainted syzkaller #0
[   92.838824][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   92.840660][ T5508] Call trace:
[   92.841268][ T5508]  dump_backtrace+0x1c4/0x1f0
[   92.842197][ T5508]  show_stack+0x2c/0x3c
[   92.843028][ T5508]  __dump_stack+0x30/0x40
[   92.843877][ T5508]  dump_stack_lvl+0xf4/0x15c
[   92.844737][ T5508]  dump_stack+0x1c/0x5c
[   92.845501][ T5508]  should_fail_ex+0x3cc/0x524
[   92.846367][ T5508]  should_fail+0x14/0x24
[   92.847165][ T5508]  get_futex_key+0x904/0xfb0
[   92.848031][ T5508]  futex_wake+0x10c/0x458
[   92.848854][ T5508]  do_futex+0x2c4/0x340
[   92.849646][ T5508]  __arm64_sys_futex+0x390/0x414
[   92.850587][ T5508]  invoke_syscall+0x98/0x290
[   92.851506][ T5508]  el0_svc_common+0x13c/0x258
[   92.852467][ T5508]  do_el0_svc+0x5c/0x134
[   92.853326][ T5508]  el0_svc+0x58/0x128
[   92.854104][ T5508]  el0t_64_sync_handler+0x84/0xf0
[   92.855085][ T5508]  el0t_64_sync+0x18c/0x190
[   92.859700][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   92.861564][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.863133][  T263] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.864356][  T263] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.865828][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   92.869403][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   92.873814][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   92.876394][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   92.891860][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   92.896448][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   92.903257][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   92.909388][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   92.914040][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   92.921480][ T5336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.928199][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   92.935465][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   92.937472][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.045281][ T5527] binder: tried to use weak ref as strong ref
[   93.046442][ T5527] binder: 5526:5527 Acquire 1 refcount change on invalid ref 0 ret -22
[   93.166842][ T5336] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.172330][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   93.173850][  T263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.211324][ T5543] FAULT_INJECTION: forcing a failure.
[   93.211324][ T5543] name failslab, interval 1, probability 0, space 0, times 0
[   93.214416][ T5543] CPU: 1 PID: 5543 Comm: syz.2.215 Not tainted syzkaller #0
[   93.215581][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   93.217348][ T5543] Call trace:
[   93.217985][ T5543]  dump_backtrace+0x1c4/0x1f0
[   93.218925][ T5543]  show_stack+0x2c/0x3c
[   93.219748][ T5543]  __dump_stack+0x30/0x40
[   93.220601][ T5543]  dump_stack_lvl+0xf4/0x15c
[   93.221458][ T5543]  dump_stack+0x1c/0x5c
[   93.222283][ T5543]  should_fail_ex+0x3cc/0x524
[   93.223306][ T5543]  __should_failslab+0xc0/0x11c
[   93.224317][ T5543]  should_failslab+0x10/0x28
[   93.225357][ T5543]  __kmem_cache_alloc_node+0x7c/0x318
[   93.226566][ T5543]  __kmalloc_node_track_caller+0xb8/0x174
[   93.227825][ T5543]  kmemdup+0x5c/0x98
[   93.228688][ T5543]  key_alloc+0x2b0/0xdec
[   93.229592][ T5543]  key_create_or_update+0x714/0x868
[   93.230703][ T5543]  __arm64_sys_add_key+0x40c/0x520
[   93.231765][ T5543]  invoke_syscall+0x98/0x290
[   93.232713][ T5543]  el0_svc_common+0x13c/0x258
[   93.233672][ T5543]  do_el0_svc+0x5c/0x134
[   93.234561][ T5543]  el0_svc+0x58/0x128
[   93.235369][ T5543]  el0t_64_sync_handler+0x84/0xf0
[   93.236370][ T5543]  el0t_64_sync+0x18c/0x190
[   93.705834][ T4331] Bluetooth: hci5: command 0x040f tx timeout
[   93.731088][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.733254][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.751619][ T5336] device veth0_vlan entered promiscuous mode
[   93.760034][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.762836][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.770456][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.779572][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.793401][ T5336] device veth1_vlan entered promiscuous mode
[   93.810573][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   93.812472][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   93.814116][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.821254][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.829274][ T5336] device veth0_macvtap entered promiscuous mode
[   93.831876][ T5336] device veth1_macvtap entered promiscuous mode
[   93.850308][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.852482][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.854452][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.856993][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.858679][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.863062][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.865029][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.868246][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.879536][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.883600][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.889026][ T5561] process 'syz.4.219' launched './file0' with NULL argv: empty string added
[   93.892288][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.894218][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.896250][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.901807][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.905114][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.910428][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   93.912360][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   93.914380][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   93.921755][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   93.969160][ T5569] loop4: detected capacity change from 0 to 256
[   94.074547][ T5581] capability: warning: `syz.4.224' uses deprecated v2 capabilities in a way that may be insecure
[   94.174225][ T5593] loop2: detected capacity change from 0 to 256
[   94.182381][ T5593] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.200460][ T5596] loop4: detected capacity change from 0 to 256
[   94.242591][ T5599] FAULT_INJECTION: forcing a failure.
[   94.242591][ T5599] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   94.255947][ T5599] CPU: 1 PID: 5599 Comm: syz.2.228 Not tainted syzkaller #0
[   94.257173][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   94.258859][ T5599] Call trace:
[   94.259371][ T5599]  dump_backtrace+0x1c4/0x1f0
[   94.260182][ T5599]  show_stack+0x2c/0x3c
[   94.260883][ T5599]  __dump_stack+0x30/0x40
[   94.261633][ T5599]  dump_stack_lvl+0xf4/0x15c
[   94.262383][ T5599]  dump_stack+0x1c/0x5c
[   94.263115][ T5599]  should_fail_ex+0x3cc/0x524
[   94.263898][ T5599]  should_fail+0x14/0x24
[   94.264690][ T5599]  should_fail_usercopy+0x20/0x30
[   94.265702][ T5599]  do_fcntl+0x174/0x15f0
[   94.266579][ T5599]  __arm64_sys_fcntl+0x110/0x1e4
[   94.267486][ T5599]  invoke_syscall+0x98/0x290
[   94.268352][ T5599]  el0_svc_common+0x13c/0x258
[   94.269268][ T5599]  do_el0_svc+0x5c/0x134
[   94.270119][ T5599]  el0_svc+0x58/0x128
[   94.270935][ T5599]  el0t_64_sync_handler+0x84/0xf0
[   94.271948][ T5599]  el0t_64_sync+0x18c/0x190
[   94.318269][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.320622][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.322521][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.325762][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.332898][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.337496][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.340476][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.343838][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.346354][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.348201][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.349955][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.351862][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.353618][ T5336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.356193][ T5336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.359893][ T5606] loop4: detected capacity change from 0 to 2048
[   94.361557][ T5606] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.367244][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.372827][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.391847][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.405237][ T5606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   94.410057][ T5606] EXT4-fs (loop4): shut down requested (2)
[   94.438466][ T5617] loop8: detected capacity change from 0 to 128
[   94.452819][ T5617] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   94.471262][ T4972] EXT4-fs (loop4): unmounting filesystem.
[   94.536819][ T4845] EXT4-fs (loop8): unmounting filesystem.
[   94.612653][ T5336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.615184][ T5336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.616786][ T5336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.620654][ T5336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.675168][ T1690] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.894360][ T1690] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.902996][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.904424][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.905837][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   94.943963][ T5073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.945659][ T5073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.949449][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.004936][ T1690] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.027142][ T5664] fuse: Bad value for 'user_id'
[   95.113869][ T1690] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.161090][ T5681] binder: 5680:5681 ioctl 4018620d 0 returned -22
[   95.271258][ T5671] loop0: detected capacity change from 0 to 1024
[   95.277676][ T5671] EXT4-fs: Ignoring removed orlov option
[   95.304287][ T5671] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   95.762814][ T1690] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.780329][ T4331] Bluetooth: hci5: command 0x0419 tx timeout
[   95.871907][ T1690] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.891336][ T5336] EXT4-fs (loop0): unmounting filesystem.
[   95.983580][ T1690] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.996437][ T5723] loop9: detected capacity change from 0 to 256
[   96.062892][ T5701] mount: server 127.0.0.1 not responding, timed out
[   96.084066][ T1690] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.109748][ T5704] mount: server 127. not responding, timed out
[   96.169326][ T5734] binder: 5733:5734 ioctl 4018620d 0 returned -22
[   96.170770][ T5734] binder_user_error: 11 callbacks suppressed
[   96.170776][ T5734] binder: tried to use weak ref as strong ref
[   96.172978][ T5734] binder: 5733:5734 Acquire 1 refcount change on invalid ref 0 ret -22
[   96.183070][ T5736] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.185066][ T5734] binder: 5733:5734 got transaction to invalid handle, 1
[   96.186429][ T5734] binder_debug: 14 callbacks suppressed
[   96.186441][ T5734] binder: 5734:5733 cannot find target node
[   96.188592][ T5734] binder: 5733:5734 transaction call to 0:0 failed 64/29201/-22, size 72-24 line 3062
[   96.192344][ T5734] binder: 5733:5734 Release 1 refcount change on invalid ref 0 ret -22
[   96.194103][ T4374] binder: undelivered TRANSACTION_ERROR: 29201
[   96.253114][ T5749] tmpfs: Unknown parameter ''
[   96.254652][ T5736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   96.255804][ T5749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.260603][ T5749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.263021][ T5749] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   96.333862][ T4972] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz-executor: bg 0: block 2: invalid block bitmap
[   96.354226][ T4972] EXT4-fs (loop4): Remounting filesystem read-only
[   96.366094][ T4972] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   96.374869][ T4972] EXT4-fs (loop4): Remounting filesystem read-only
[   96.392255][ T1690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.403630][ T4972] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 5: comm syz-executor: path /18/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[   96.407418][ T5751] EXT4-fs: Ignoring removed orlov option
[   96.409330][ T4972] EXT4-fs (loop4): Remounting filesystem read-only
[   96.411016][ T4972] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 5: comm syz-executor: path /18/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[   96.422716][ T4972] EXT4-fs (loop4): Remounting filesystem read-only
[   96.424004][ T4972] EXT4-fs error (device loop4): empty_inline_dir:1912: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0
[   96.434085][ T4972] EXT4-fs (loop4): Remounting filesystem read-only
[   96.435548][ T4972] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   96.438559][ T4972] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 5: comm syz-executor: path /18/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[   96.442594][ T4972] EXT4-fs (loop4): Remounting filesystem read-only
[   96.443840][ T4972] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 5: comm syz-executor: path /18/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[   96.443975][ T5751] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[   96.462346][ T4972] EXT4-fs (loop4): Remounting filesystem read-only
[   96.465392][ T4972] EXT4-fs error (device loop4): empty_inline_dir:1912: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0
[   96.470352][ T1690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.472590][ T4972] EXT4-fs (loop4): Remounting filesystem read-only
[   96.473767][ T4972] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   96.478770][ T4972] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 5: comm syz-executor: path /18/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[   96.486317][ T4972] EXT4-fs (loop4): Remounting filesystem read-only
[   96.487764][ T4972] EXT4-fs error (device loop4): ext4_read_inline_dir:1628: inode #12: block 5: comm syz-executor: path /18/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=60 fake=0
[   96.501121][ T4972] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   96.507163][ T4972] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   96.517838][ T4972] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   96.535439][ T4972] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   96.543472][ T4972] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   96.552470][ T4972] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   96.555968][ T4972] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   96.560496][ T4972] EXT4-fs warning (device loop4): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[   96.573611][ T1690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.587067][ T5766] EXT4-fs (loop8): unmounting filesystem.
[   96.639396][ T1690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.893948][ T5795] binder: 5794:5795 ioctl 4018620d 0 returned -22
[   96.895395][ T5795] binder: tried to use weak ref as strong ref
[   96.896480][ T5795] binder: 5794:5795 Acquire 1 refcount change on invalid ref 0 ret -22
[   96.904166][ T5795] binder: 5794:5795 got transaction to invalid handle, 1
[   96.905482][ T5795] binder: 5795:5794 cannot find target node
[   96.906622][ T5795] binder: 5794:5795 transaction call to 0:0 failed 67/29201/-22, size 72-24 line 3062
[   96.914627][ T5795] binder: 5794:5795 Release 1 refcount change on invalid ref 0 ret -22
[   96.916383][ T5089] binder: undelivered TRANSACTION_ERROR: 29201
[   96.923642][ T5799] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b
[   97.182012][ T5823] set_capacity_and_notify: 2 callbacks suppressed
[   97.182023][ T5823] loop9: detected capacity change from 0 to 512
[   97.184807][ T5823] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   97.203086][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   97.210467][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   97.216969][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   97.220202][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   97.240321][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   97.241961][ T5808] loop0: detected capacity change from 0 to 1024
[   97.243492][ T5808] EXT4-fs: Ignoring removed orlov option
[   97.261946][ T5808] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   97.264283][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   97.343584][ T4331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   97.346287][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   97.347904][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   97.349797][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   97.352092][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   97.353445][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   97.454436][ T5336] EXT4-fs (loop0): unmounting filesystem.
[   97.521509][ T5850] binder: 5847:5850 ioctl c0306201 0 returned -14
[   97.523230][ T5850] binder: 5847:5850 got transaction to invalid handle, 1
[   97.524809][ T5850] binder: 5850:5847 cannot find target node
[   97.531194][ T5850] binder: 5847:5850 transaction call to 0:0 failed 71/29201/-22, size 72-24 line 3062
[   97.533201][ T5850] binder: 5847:5850 Release 1 refcount change on invalid ref 0 ret -22
[   97.535915][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[   98.082862][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   98.284860][ T5896] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   98.284860][ T5896] The task syz.2.292 (5896) triggered the difference, watch for misbehavior.
[   98.395361][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.396701][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.398365][ T5824] device bridge_slave_0 entered promiscuous mode
[   98.401014][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.407350][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.411903][ T5824] device bridge_slave_1 entered promiscuous mode
[   98.433111][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.436006][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   98.477044][ T5908] loop9: detected capacity change from 0 to 1024
[   98.478957][ T5908] EXT4-fs: Ignoring removed orlov option
[   98.541209][ T5908] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[   98.639832][ T5919] EXT4-fs (loop9): unmounting filesystem.
[   98.640292][ T5922] loop0: detected capacity change from 0 to 256
[   98.685990][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.889637][ T5947] dlm: plock device version mismatch: kernel (1.2.0), user (2.0.0)
[   98.907503][ T5824] team0: Port device team_slave_0 added
[   99.114885][ T5957] loop0: detected capacity change from 0 to 1024
[   99.116554][ T5957] EXT4-fs: Ignoring removed orlov option
[   99.141918][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.143374][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.147173][ T5835] device bridge_slave_0 entered promiscuous mode
[   99.152239][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.153593][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.155428][ T5835] device bridge_slave_1 entered promiscuous mode
[   99.180280][ T5957] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   99.197101][ T5824] team0: Port device team_slave_1 added
[   99.304453][ T4331] Bluetooth: hci0: command 0x0409 tx timeout
[   99.308350][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.311419][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.313767][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.315427][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.332516][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   99.334026][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.359559][ T5336] EXT4-fs (loop0): unmounting filesystem.
[   99.372131][ T4331] Bluetooth: hci1: command 0x0409 tx timeout
[   99.390037][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.421142][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.425458][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.431242][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.432495][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.436852][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.496101][ T5982] md: pers->run() failed ...
[   99.568515][ T5990] binder: 5989:5990 ioctl c0306201 0 returned -14
[   99.571411][ T5990] binder: 5990:5989 cannot find target node
[   99.586471][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.595261][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.769135][ T5999] loop2: detected capacity change from 0 to 1024
[   99.781619][ T5835] team0: Port device team_slave_0 added
[   99.783709][ T5999] EXT4-fs: Ignoring removed orlov option
[   99.796366][ T5999] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   99.831015][ T5824] device hsr_slave_0 entered promiscuous mode
[   99.859336][ T5824] device hsr_slave_1 entered promiscuous mode
[   99.866164][ T5149] EXT4-fs (loop2): unmounting filesystem.
[   99.869529][ T6011] loop0: detected capacity change from 0 to 1024
[   99.873413][ T6011] EXT4-fs: inline encryption not supported
[   99.889552][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.890927][ T5824] Cannot create hsr debugfs directory
[   99.901298][ T5835] team0: Port device team_slave_1 added
[   99.918565][ T6011] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   99.935697][ T6011] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.325: lblock 2 mapped to illegal pblock 2 (length 1)
[   99.941359][ T6011] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   99.942887][ T6011] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.325: Invalid inode table block 1 in block_group 0
[   99.960706][ T6011] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[   99.974664][ T6011] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.325: mark_inode_dirty error
[   99.977028][ T6011] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   99.979349][ T6011] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.325: Failed to acquire dquot type 0
[   99.981952][ T6011] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[   99.982116][ T6021] Illegal XDP return value 4294967294 on prog  (id 8) dev N/A, expect packet loss!
[   99.985450][ T6011] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.325: mark_inode_dirty error
[   99.987498][ T6011] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[   99.989569][ T6011] EXT4-fs (loop0): 1 orphan inode deleted
[   99.990563][ T6011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  100.000720][ T6011] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #3: block 48: comm syz.0.325: lblock 0 mapped to illegal pblock 48 (length 1)
[  100.014991][ T5550] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1)
[  100.018119][ T5550] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  100.024626][ T5550] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0
[  100.027581][ T6011] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  100.043413][ T5336] EXT4-fs (loop0): unmounting filesystem.
[  100.044753][ T5336] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  100.048399][ T5336] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  100.055522][ T5336] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  100.490457][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.491707][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.496064][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.498998][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.500164][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.504314][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.907532][ T5835] device hsr_slave_0 entered promiscuous mode
[  100.947473][ T5835] device hsr_slave_1 entered promiscuous mode
[  101.006215][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.007594][ T5835] Cannot create hsr debugfs directory
[  101.076644][ T6057] loop2: detected capacity change from 0 to 4096
[  101.095933][ T6057] ext4: Unknown parameter 'smackfsdef'
[  101.173459][ T6065] binder_user_error: 6 callbacks suppressed
[  101.173469][ T6065] binder: 6064:6065 got transaction to invalid handle, 1
[  101.190002][ T6065] binder_debug: 8 callbacks suppressed
[  101.190017][ T6065] binder: 6065:6064 cannot find target node
[  101.192065][ T6065] binder: 6064:6065 transaction call to 0:0 failed 87/29201/-22, size 72-24 line 3062
[  101.193906][ T6065] binder: 6064:6065 Release 1 refcount change on invalid ref 0 ret -22
[  101.196960][ T4379] binder: undelivered TRANSACTION_ERROR: 29201
[  101.341037][ T5972] chnl_net:caif_netlink_parms(): no params data found
[  101.356948][ T6080] netlink: 232 bytes leftover after parsing attributes in process `syz.0.352'.
[  101.365410][ T4335] Bluetooth: hci2: command 0x0409 tx timeout
[  101.366707][ T4335] Bluetooth: hci0: command 0x041b tx timeout
[  101.444939][ T4331] Bluetooth: hci1: command 0x041b tx timeout
[  101.540126][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.544223][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.546658][ T5972] device bridge_slave_0 entered promiscuous mode
[  101.569309][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.570643][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.572378][ T5972] device bridge_slave_1 entered promiscuous mode
[  101.891047][ T6107] binder: 6106:6107 got transaction to invalid handle, 1
[  101.892504][ T6107] binder: 6107:6106 cannot find target node
[  101.894612][ T6107] binder: 6106:6107 transaction call to 0:0 failed 91/29201/-22, size 72-24 line 3062
[  101.896812][ T6107] binder: 6106:6107 Release 1 refcount change on invalid ref 0 ret -22
[  101.898607][ T4454] binder: undelivered TRANSACTION_ERROR: 29201
[  102.131819][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.135428][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.230873][ T5972] team0: Port device team_slave_0 added
[  102.244178][ T5972] team0: Port device team_slave_1 added
[  102.496641][ T6142] binder: 6141:6142 got transaction to invalid handle, 1
[  102.498127][ T6142] binder: 6142:6141 cannot find target node
[  102.499385][ T6142] binder: 6141:6142 transaction call to 0:0 failed 95/29201/-22, size 72-24 line 3062
[  102.501466][ T6142] binder: 6141:6142 Release 1 refcount change on invalid ref 0 ret -22
[  102.504155][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[  102.692389][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.693965][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.703294][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.943827][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.945188][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.949940][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.073085][ T1690] device hsr_slave_0 left promiscuous mode
[  103.115802][ T1690] device hsr_slave_1 left promiscuous mode
[  103.142842][ T6180] syz.2.368 uses obsolete (PF_INET,SOCK_PACKET)
[  103.200334][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.202001][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.207133][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.208383][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.209977][ T1690] device bridge_slave_1 left promiscuous mode
[  103.212158][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.231248][ T1690] device bridge_slave_0 left promiscuous mode
[  103.232438][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.272891][ T1690] device hsr_slave_0 left promiscuous mode
[  103.310047][ T1690] device hsr_slave_1 left promiscuous mode
[  103.389876][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.391306][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.392958][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.394324][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.395915][ T1690] device bridge_slave_1 left promiscuous mode
[  103.397056][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.430224][ T1690] device bridge_slave_0 left promiscuous mode
[  103.431512][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.439722][ T4335] Bluetooth: hci0: command 0x040f tx timeout
[  103.439743][ T4331] Bluetooth: hci2: command 0x041b tx timeout
[  103.472731][ T1690] device hsr_slave_0 left promiscuous mode
[  103.509979][ T1690] device hsr_slave_1 left promiscuous mode
[  103.519490][ T4336] Bluetooth: hci1: command 0x040f tx timeout
[  103.589176][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.590746][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.592429][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.593814][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.595487][ T1690] device bridge_slave_1 left promiscuous mode
[  103.596667][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.629936][ T1690] device bridge_slave_0 left promiscuous mode
[  103.631105][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.768881][ T1690] device veth1_macvtap left promiscuous mode
[  103.770051][ T1690] device veth0_macvtap left promiscuous mode
[  103.771134][ T1690] device veth1_vlan left promiscuous mode
[  103.772190][ T1690] device veth0_vlan left promiscuous mode
[  103.848588][ T1690] device veth1_macvtap left promiscuous mode
[  103.849703][ T1690] device veth0_macvtap left promiscuous mode
[  103.850839][ T1690] device veth1_vlan left promiscuous mode
[  103.851836][ T1690] device veth0_vlan left promiscuous mode
[  103.938386][ T1690] device veth1_macvtap left promiscuous mode
[  103.939596][ T1690] device veth0_macvtap left promiscuous mode
[  103.940802][ T1690] device veth1_vlan left promiscuous mode
[  103.941973][ T1690] device veth0_vlan left promiscuous mode
[  105.514232][ T4336] Bluetooth: hci2: command 0x040f tx timeout
[  105.514344][ T4331] Bluetooth: hci0: command 0x0419 tx timeout
[  105.594051][ T4335] Bluetooth: hci1: command 0x0419 tx timeout
[  106.055723][ T1690] team0 (unregistering): Port device team_slave_1 removed
[  106.214829][ T1690] team0 (unregistering): Port device team_slave_0 removed
[  106.383069][ T1690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.622270][ T1690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.589002][ T4331] Bluetooth: hci2: command 0x0419 tx timeout
[  108.155606][ T1690] bond0 (unregistering): Released all slaves
[  110.534718][ T1690] team0 (unregistering): Port device team_slave_1 removed
[  110.693816][ T1690] team0 (unregistering): Port device team_slave_0 removed
[  110.852368][ T1690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.050933][ T1690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.568779][ T1690] bond0 (unregistering): Released all slaves
[  114.903600][ T1690] team0 (unregistering): Port device team_slave_1 removed
[  115.061962][ T1690] team0 (unregistering): Port device team_slave_0 removed
[  115.225689][ T1690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.430744][ T1690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.937898][ T1690] bond0 (unregistering): Released all slaves
[  117.272597][ T5972] device hsr_slave_0 entered promiscuous mode
[  117.306012][ T5972] device hsr_slave_1 entered promiscuous mode
[  117.500701][ T6214] binder: 6213:6214 got transaction to invalid handle, 1
[  117.502131][ T6214] binder: 6214:6213 cannot find target node
[  117.503453][ T6214] binder: 6213:6214 transaction call to 0:0 failed 99/29201/-22, size 72-24 line 3062
[  117.508157][ T6214] binder: 6213:6214 Release 1 refcount change on invalid ref 0 ret -22
[  117.509823][ T4454] binder: undelivered TRANSACTION_ERROR: 29201
[  118.347020][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  118.409564][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  118.450982][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  118.501474][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  118.655943][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.661040][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.662796][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.670619][ T6307] binder: 6306:6307 tried to acquire reference to desc 0, got 1 instead
[  118.672033][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[  118.677552][ T6307] binder: 6306:6307 ioctl c0306201 0 returned -14
[  118.679148][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.680814][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.693271][ T5550] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.694559][ T5550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.696141][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.697701][ T6307] binder: 6306:6307 Release 1 refcount change on invalid ref 0 ret -22
[  118.708493][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.710207][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.714631][ T5550] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.715859][ T5550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.739781][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  118.741653][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  118.815244][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  118.817875][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  118.819790][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  118.821544][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  118.826739][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  118.828504][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  118.833480][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  118.835130][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  118.837026][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  118.838672][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  118.840326][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  118.859645][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  118.950294][ T6314] loop2: detected capacity change from 0 to 256
[  119.152539][ T5972] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  119.193798][ T5972] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  119.238284][ T5972] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  119.332059][ T5972] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  119.369563][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.371711][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  119.373257][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  119.378466][ T5835] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  119.426897][ T5835] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  119.467368][ T5835] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  119.528498][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  119.533682][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  119.535399][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  119.537714][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.550757][ T5835] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  119.584603][ T5824] device veth0_vlan entered promiscuous mode
[  119.587019][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  119.588595][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  119.598152][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.606072][ T5972] 8021q: adding VLAN 0 to HW filter on device team0
[  119.619900][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  119.623380][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  119.625203][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  119.627167][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  119.631917][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.633238][ T6029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.656206][ T6351] device bridge0 entered promiscuous mode
[  119.658517][ T6351] bridge0: port 3(macvlan2) entered blocking state
[  119.659724][ T6351] bridge0: port 3(macvlan2) entered disabled state
[  119.663198][ T6351] device bridge0 left promiscuous mode
[  119.714927][ T5824] device veth1_vlan entered promiscuous mode
[  119.717340][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  119.738481][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  119.745055][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  119.746959][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.748312][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.871038][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  119.875240][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  119.878533][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  119.883278][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  119.885265][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  119.887121][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  119.915875][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  119.917651][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  119.924772][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  119.928405][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  119.934555][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.942342][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  119.945486][ T5824] device veth0_macvtap entered promiscuous mode
[  119.952714][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.954760][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  119.956701][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  119.961929][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  119.975517][ T5824] device veth1_macvtap entered promiscuous mode
[  119.996905][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  119.998645][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  120.005092][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.022271][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[  120.027604][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.031006][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.032836][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.035924][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.039043][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.045286][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.047086][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.048980][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.051808][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.053941][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.056978][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.060794][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.062866][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.064886][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.066958][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.068916][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.075650][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.077553][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.080313][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.082177][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.084475][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.087490][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.089555][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  120.091968][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  120.093742][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  120.095497][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  120.323900][ T6398] loop0: detected capacity change from 0 to 8
[  120.521088][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.522699][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.524441][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.525945][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.654664][ T6410] binder: 6409:6410 tried to acquire reference to desc 0, got 1 instead
[  120.659081][ T6410] binder: 6409:6410 ioctl c0306201 0 returned -14
[  120.660386][ T6410] binder: 6409:6410 Release 1 refcount change on invalid ref 0 ret -22
[  120.773063][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  120.776135][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.793743][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.795066][ T6029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.809750][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  121.053789][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  121.056522][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.058589][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.060037][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.099385][ T1690] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.117676][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  121.119677][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  121.121325][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  121.123274][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  121.124834][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  121.126456][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  121.132482][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  121.134073][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  121.135494][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  121.198385][ T1690] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.210455][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.220921][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  121.222742][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  121.224439][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  121.226133][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.241410][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  121.243494][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  121.245826][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  121.287786][ T1690] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.304513][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.308360][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.311562][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  121.320087][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  121.321953][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  121.323961][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.325643][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.368345][ T1690] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.375345][ T5972] device veth0_vlan entered promiscuous mode
[  121.382934][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.384599][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.391881][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  121.400604][ T5972] device veth1_vlan entered promiscuous mode
[  121.422442][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  121.424834][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  121.427984][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.429977][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.433917][ T5972] device veth0_macvtap entered promiscuous mode
[  121.439192][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  121.441003][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  121.442339][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  121.445234][ T5972] device veth1_macvtap entered promiscuous mode
[  121.454045][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.462040][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.463820][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.472537][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.474359][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.493513][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.495377][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.511933][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.513822][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.515531][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.520181][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.521832][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.523689][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.527446][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.528779][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  121.537039][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  121.541124][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  121.568053][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.570017][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.571685][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.573433][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.574994][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.578871][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.583253][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.585008][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.586941][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.588605][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.590252][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.593309][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.656500][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.667463][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  121.669290][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  121.683663][ T5972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.685248][ T5972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.687744][ T5972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.689292][ T5972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.019873][ T1690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.066148][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.069902][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.073917][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  122.126810][ T1690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.139576][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.141048][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.142493][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  122.171652][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.173441][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.216518][ T1690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.228057][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.230408][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.235441][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.239608][ T6494] capability: warning: `syz.3.310' uses 32-bit capabilities (legacy support in use)
[  122.242882][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  122.245589][ T5835] device veth0_vlan entered promiscuous mode
[  122.249086][ T5835] device veth1_vlan entered promiscuous mode
[  122.340116][ T1690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.346738][ T5835] device veth0_macvtap entered promiscuous mode
[  122.349223][ T5835] device veth1_macvtap entered promiscuous mode
[  122.353809][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.438537][ T6505] loop3: detected capacity change from 0 to 1024
[  122.645301][ T6505] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  122.681708][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.683678][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.685452][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.687113][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.688816][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.690729][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.692500][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.703792][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.705865][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.707592][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.709335][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.710907][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.712672][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.724599][ T6510] binder: 6509:6510 tried to acquire reference to desc 0, got 1 instead
[  122.732203][ T6510] binder: 6509:6510 ioctl c0306201 0 returned -14
[  122.746689][ T6510] binder: 6509:6510 Release 1 refcount change on invalid ref 0 ret -22
[  122.757236][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.765537][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  122.767345][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  122.768863][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  122.770585][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  122.772287][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  122.782092][ T6474] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  122.807407][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.811711][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.818161][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.820081][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.821859][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.831543][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.847473][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.849357][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.851010][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.852685][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.859285][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.861014][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.862673][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.867641][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.869354][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.871071][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.876402][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.911184][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  122.913749][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.915346][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.920065][ T5835] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.921513][ T5835] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.923637][ T5835] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.925100][ T5835] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.059331][ T6029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.060770][ T6029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.061520][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.063096][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  123.065811][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.084913][ T6538] FAULT_INJECTION: forcing a failure.
[  123.084913][ T6538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.091857][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  123.178823][ T6542] loop1: detected capacity change from 0 to 1024
[  123.393978][ T6538] CPU: 0 PID: 6538 Comm: syz.0.413 Not tainted syzkaller #0
[  123.395330][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  123.397205][ T6538] Call trace:
[  123.397863][ T6538]  dump_backtrace+0x1c4/0x1f0
[  123.398806][ T6538]  show_stack+0x2c/0x3c
[  123.399646][ T6538]  __dump_stack+0x30/0x40
[  123.400511][ T6538]  dump_stack_lvl+0xf4/0x15c
[  123.401468][ T6538]  dump_stack+0x1c/0x5c
[  123.402329][ T6538]  should_fail_ex+0x3cc/0x524
[  123.403255][ T6538]  should_fail+0x14/0x24
[  123.404109][ T6538]  should_fail_usercopy+0x20/0x30
[  123.405059][ T6538]  kstrtouint_from_user+0xe0/0x260
[  123.406100][ T6538]  proc_fail_nth_write+0x9c/0x234
[  123.407057][ T6538]  vfs_write+0x2a8/0x7c8
[  123.407919][ T6538]  ksys_write+0x12c/0x228
[  123.408746][ T6538]  __arm64_sys_write+0x7c/0x90
[  123.409671][ T6538]  invoke_syscall+0x98/0x290
[  123.410539][ T6538]  el0_svc_common+0x13c/0x258
[  123.411424][ T6538]  do_el0_svc+0x5c/0x134
[  123.412197][ T6538]  el0_svc+0x58/0x128
[  123.412909][ T6538]  el0t_64_sync_handler+0x84/0xf0
[  123.413821][ T6538]  el0t_64_sync+0x18c/0x190
[  123.452335][ T6547] loop3: detected capacity change from 0 to 1024
[  123.456283][ T6547] EXT4-fs: Ignoring removed oldalloc option
[  123.457710][ T6542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  123.460810][ T6547] EXT4-fs: Ignoring removed orlov option
[  123.483263][ T6539] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.411: lblock 3 mapped to illegal pblock 3 (length 3)
[  123.488775][ T6539] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  123.491415][ T6539] EXT4-fs (loop1): This should not happen!! Data will be lost
[  123.491415][ T6539] 
[  123.491669][ T6545] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  123.500609][ T1690] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.537807][ T6562] binder: 6560:6562 tried to acquire reference to desc 0, got 1 instead
[  123.547520][ T6562] binder: 6560:6562 Release 1 refcount change on invalid ref 0 ret -22
[  123.553403][ T6547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  123.623194][ T1690] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.630365][ T5972] EXT4-fs (loop3): unmounting filesystem.
[  123.714539][ T1690] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.803095][ T1690] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.884030][ T5072] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:10: lblock 8 mapped to illegal pblock 8 (length 8)
[  123.890697][ T5072] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  123.892928][ T5072] EXT4-fs (loop1): This should not happen!! Data will be lost
[  123.892928][ T5072] 
[  123.911659][ T5824] EXT4-fs (loop1): unmounting filesystem.
[  123.942123][ T6596] binder: 6592:6596 tried to acquire reference to desc 0, got 1 instead
[  123.955969][ T6596] binder: 6592:6596 Release 1 refcount change on invalid ref 0 ret -22
[  123.957598][ T6601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.428'.
[  124.178398][ T6620] input: syz1 as /devices/virtual/input/input4
[  124.382622][ T6617] loop0: detected capacity change from 0 to 512
[  124.416368][ T6617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a026c018, mo2=0002]
[  124.418066][ T6617] System zones: 1-12
[  124.418935][ T6614] loop2: detected capacity change from 0 to 4096
[  124.421474][ T6617] ------------[ cut here ]------------
[  124.422650][ T6617] EA inode 11 i_nlink=0
[  124.423126][ T6617] WARNING: CPU: 1 PID: 6617 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x454/0x498
[  124.425761][ T6617] Modules linked in:
[  124.426595][ T6617] CPU: 1 PID: 6617 Comm: syz.0.435 Not tainted syzkaller #0
[  124.427963][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  124.429991][ T6617] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  124.431446][ T6614] EXT4-fs: inline encryption not supported
[  124.431475][ T6617] pc : ext4_xattr_inode_update_ref+0x454/0x498
[  124.433831][ T6617] lr : ext4_xattr_inode_update_ref+0x454/0x498
[  124.434958][ T6617] sp : ffff800021167000
[  124.435844][ T6617] x29: ffff8000211670a0 x28: 0000000000000000 x27: 1fffe0001c2cc81b
[  124.437415][ T6617] x26: ffff0000e1663f20 x25: dfff800000000000 x24: ffff800021167020
[  124.438995][ T6617] x23: ffff70000422ce04 x22: ffff800017d98000 x21: 0000000000000000
[  124.440540][ T6617] x20: 0000000000000001 x19: ffff0000e1663ee0 x18: 1fffe00033e6db7e
[  124.442069][ T6617] x17: ffff8000153bd000 x16: ffff8000082dd284 x15: 0000000040000000
[  124.443606][ T6617] x14: 0000000000000001 x13: 1fffe00033e70270 x12: 0000000000000000
[  124.445094][ T6617] x11: ff0080000a97ca20 x10: 0000000000000003 x9 : e35d4bdde811c200
[  124.446647][ T6617] x8 : e35d4bdde811c200 x7 : ffff80000825ab20 x6 : 0000000000000000
[  124.448248][ T6617] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  124.449811][ T6617] x2 : 0000000000000006 x1 : ffff800011d1dc80 x0 : ffff80018a057000
[  124.451422][ T6617] Call trace:
[  124.452070][ T6617]  ext4_xattr_inode_update_ref+0x454/0x498
[  124.453149][ T6617]  ext4_xattr_inode_dec_ref_all+0x854/0xe20
[  124.454247][ T6617]  ext4_xattr_delete_inode+0x890/0xa20
[  124.455336][ T6617]  ext4_evict_inode+0xc70/0x1264
[  124.456267][ T6617]  evict+0x3d8/0x824
[  124.456991][ T6617]  iput+0x728/0x7e8
[  124.457707][ T6617]  ext4_process_orphan+0x24c/0x2c0
[  124.458649][ T6617]  ext4_orphan_cleanup+0xabc/0x1204
[  124.459628][ T6617]  ext4_fill_super+0x5afc/0x63bc
[  124.460520][ T6617]  get_tree_bdev+0x35c/0x54c
[  124.461382][ T6617]  ext4_get_tree+0x28/0x38
[  124.462217][ T6617]  vfs_get_tree+0x90/0x278
[  124.463058][ T6617]  do_new_mount+0x228/0x804
[  124.463919][ T6617]  path_mount+0x5ac/0xe6c
[  124.464742][ T6617]  __arm64_sys_mount+0x4a0/0x5a0
[  124.465637][ T6617]  invoke_syscall+0x98/0x290
[  124.466513][ T6617]  el0_svc_common+0x13c/0x258
[  124.467397][ T6617]  do_el0_svc+0x5c/0x134
[  124.468228][ T6617]  el0_svc+0x58/0x128
[  124.469008][ T6617]  el0t_64_sync_handler+0x84/0xf0
[  124.469935][ T6617]  el0t_64_sync+0x18c/0x190
[  124.470775][ T6617] irq event stamp: 3420
[  124.471544][ T6617] hardirqs last  enabled at (3419): [<ffff80000825abb4>] finish_lock_switch+0xb0/0x1c8
[  124.473342][ T6617] hardirqs last disabled at (3420): [<ffff800011bb2834>] el1_dbg+0x24/0x80
[  124.474962][ T6617] softirqs last  enabled at (1116): [<ffff800008031254>] local_bh_enable+0x10/0x34
[  124.476675][ T6617] softirqs last disabled at (1114): [<ffff800008031220>] local_bh_disable+0x10/0x34
[  124.478519][ T6617] ---[ end trace 0000000000000000 ]---
[  124.482403][ T6614] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  124.486424][ T6614] EXT4-fs (loop2): Test dummy encryption mode enabled
[  124.500179][ T6614] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003]
[  124.501997][ T6614] System zones: 0-5
[  124.505244][ T6614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  124.519677][ T6617] EXT4-fs (loop0): 1 orphan inode deleted
[  124.520749][ T6617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  124.523486][ T6614] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[  124.556338][ T5149] EXT4-fs (loop2): unmounting filesystem.
[  124.610955][ T5336] EXT4-fs (loop0): unmounting filesystem.
[  125.707893][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  125.709208][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  129.368246][ T1690] device hsr_slave_0 left promiscuous mode
[  129.412554][ T1690] device hsr_slave_1 left promiscuous mode
[  129.478597][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.480074][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.481715][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.482989][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.484426][ T1690] device bridge_slave_1 left promiscuous mode
[  129.485936][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.528906][ T1690] device bridge_slave_0 left promiscuous mode
[  129.530192][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.570713][ T1690] device hsr_slave_0 left promiscuous mode
[  129.608240][ T1690] device hsr_slave_1 left promiscuous mode
[  129.688054][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.689738][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.691512][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.692858][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.694348][ T1690] device bridge_slave_1 left promiscuous mode
[  129.695501][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.728859][ T1690] device bridge_slave_0 left promiscuous mode
[  129.730038][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.772230][ T1690] device hsr_slave_0 left promiscuous mode
[  129.807817][ T1690] device hsr_slave_1 left promiscuous mode
[  129.887545][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.889042][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.891143][ T1690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.892492][ T1690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.893942][ T1690] device bridge_slave_1 left promiscuous mode
[  129.895117][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.931894][ T1690] device bridge_slave_0 left promiscuous mode
[  129.933175][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.067360][ T1690] device veth1_macvtap left promiscuous mode
[  130.068413][ T1690] device veth0_macvtap left promiscuous mode
[  130.069434][ T1690] device veth1_vlan left promiscuous mode
[  130.070486][ T1690] device veth0_vlan left promiscuous mode
[  130.167064][ T1690] device veth1_macvtap left promiscuous mode
[  130.168296][ T1690] device veth0_macvtap left promiscuous mode
[  130.169327][ T1690] device veth1_vlan left promiscuous mode
[  130.170379][ T1690] device veth0_vlan left promiscuous mode
[  130.256924][ T1690] device veth1_macvtap left promiscuous mode
[  130.258194][ T1690] device veth0_macvtap left promiscuous mode
[  130.259345][ T1690] device veth1_vlan left promiscuous mode
[  130.260496][ T1690] device veth0_vlan left promiscuous mode
[  132.424138][ T1690] team0 (unregistering): Port device team_slave_1 removed
[  132.613997][ T1690] team0 (unregistering): Port device team_slave_0 removed
[  132.784067][ T1690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.991813][ T1690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface