last executing test programs:

27.064268282s ago: executing program 4 (id=325):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='dctcp', 0x12d)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendto$inet(r0, &(0x7f00000005c0)="89", 0x1, 0x6044800, 0x0, 0x0)

26.070734989s ago: executing program 4 (id=332):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f00000044c0)={[{'addr=127.0.0.1,softerr'}]})

26.03799839s ago: executing program 4 (id=333):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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")
r0 = fanotify_init(0x40, 0x80000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xa880, 0x97)
fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0)
getdents64(r1, &(0x7f0000000100)=""/156, 0x9c)

25.935888901s ago: executing program 4 (id=336):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x200000, &(0x7f0000000400)={[{@test_dummy_encryption_v1}, {@init_itable}, {@dioread_lock}]}, 0x0, 0x471, &(0x7f0000000440)="$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")
chdir(&(0x7f00000008c0)='./bus\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
mount$overlay(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0/file0\x00', 0x800, 0x10)
read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0x2020)

25.787946214s ago: executing program 4 (id=341):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10)

24.159503941s ago: executing program 4 (id=357):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000b80)="05031c00d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000a40)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @multicast}, 0x14)

24.128233452s ago: executing program 32 (id=357):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000b80)="05031c00d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000a40)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @multicast}, 0x14)

3.616766788s ago: executing program 0 (id=584):
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, "d92984bd1c8411e88509de050000000000f2170e65e3f50327e42200000004e7ed000000000a0000000000190000000000000000000400", 0x3f}, 0x60)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60)

3.586945389s ago: executing program 0 (id=585):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e00010000"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064000000000000000000"], 0x20}}, 0x0)

3.086909108s ago: executing program 5 (id=596):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
set_mempolicy(0x2, &(0x7f0000000480)=0x20e, 0x7fffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3818014, &(0x7f00000000c0)={[{@errors_remount}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nombcache}]}, 0x1, 0x52a, &(0x7f0000001200)="$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")
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x7}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000001cc0), 0xa, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000001d40)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001d80)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000001e80), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001f00)=0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002080)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000002740)={0xd, 0x2, 0x0, "bc3d70dde5cabbe40f00f401bb7f00bf170000000200", 0x3136564e})

2.703285944s ago: executing program 0 (id=601):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x2, 0x1}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x100, 0x0, 0x2}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0x7, &(0x7f0000000580), 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000600)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000640)=""/1})

2.041501205s ago: executing program 5 (id=606):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x401, 0x8000, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

1.864126188s ago: executing program 2 (id=608):
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000009c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
keyctl$dh_compute(0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000b00)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b40), 0x10106, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b80)='mountaddr\x00', &(0x7f0000000bc0)='127.0.0.1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt_trace\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000dc0)={0x3, &(0x7f0000000e00)=[{0x40, 0x9, 0xfe, 0xa4}, {0x30, 0x1, 0x1, 0xe406}, {0x6, 0x15, 0x2, 0xb}]}, 0x10)
write$binfmt_aout(r3, 0x0, 0x9ffc)
mount$9p_fd(0x0, &(0x7f0000000e40)='./mnt_trace\x00', &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
sendto$inet(0xffffffffffffffff, &(0x7f0000000f00), 0x0, 0x4040, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@arp={0x8902, @generic={0x101, 0x884c, 0x6, 0x0, 0x2, @random="2daa41df7773", "", @local}}}}, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x4bd, &(0x7f0000000100)="$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")
openat$incfs(0xffffffffffffff9c, &(0x7f00000005c0)='.log\x00', 0x386c2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.80212132s ago: executing program 0 (id=609):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c000180080001"], 0x100}, 0x1, 0x0, 0x0, 0x8894}, 0x0)

1.801577049s ago: executing program 5 (id=611):
r0 = syz_open_dev$dvb_demux(&(0x7f00000007c0), 0x0, 0x700)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x400000002000)

1.80126354s ago: executing program 2 (id=612):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e00010000"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064000000000000000000"], 0x20}}, 0x0)

1.75408895s ago: executing program 1 (id=613):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "5e95fa56c9e4002352c0cbbd526893e7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xd89b}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c800}, 0x40440c0)

1.668161562s ago: executing program 0 (id=614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1f7)
mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write$binfmt_format(r3, &(0x7f0000000340)='0\x00', 0x2)

1.667686162s ago: executing program 1 (id=615):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x532}}, {@shortname_mixed}, {@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=")
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000001100)="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", 0x2000, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
timer_create(0xfffffff9, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000031c0)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000003200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000003240)=0x7)
socket$netlink(0x10, 0x3, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000032c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000003340), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000003380), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000033c0)=0x6)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003400)=[{{&(0x7f0000003440)={0xa, 0x4e23, 0x0, @local, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000003480)=ANY=[], 0x22}}], 0x1, 0x800)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x4}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x48}, [@tfcpad={0x8, 0x16, 0x2}, @algo_aead={0x6a, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xf0, 0x80, "f51441a200eb3e570000000047cf97b2db664faeecc6e029a619a3ad3164"}}, @proto={0x5, 0x19, 0xff}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

1.622347003s ago: executing program 3 (id=616):
syz_open_dev$media(&(0x7f0000000200), 0x2, 0x800)
io_setup(0x8, &(0x7f0000000680)=<r0=>0x0)
r1 = syz_open_procfs(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

1.550822313s ago: executing program 5 (id=617):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
set_mempolicy(0x2, &(0x7f0000000480)=0x20e, 0x7fffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3818014, &(0x7f00000000c0)={[{@errors_remount}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nombcache}]}, 0x1, 0x52a, &(0x7f0000001200)="$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")
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x7}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000001cc0), 0xa, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000001d40)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001d80)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000001e80), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001f00)=0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002080)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000002740)={0xd, 0x2, 0x0, "bc3d70dde5cabbe40f00f401bb7f00bf170000000200", 0x3136564e})

1.18282428s ago: executing program 3 (id=618):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1000040, &(0x7f0000000080)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000000ac0)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.052232802s ago: executing program 3 (id=619):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000380)="05", 0x1, 0x4088, &(0x7f00000003c0)={0x11, 0x86dd, r6, 0x1, 0x3, 0x6, @remote}, 0x14)

925.492384ms ago: executing program 2 (id=620):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x2, 0x1}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x100, 0x0, 0x2}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0x7, &(0x7f0000000580), 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000600)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000640)=""/1})

907.279504ms ago: executing program 2 (id=621):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
connect(r0, &(0x7f0000000e40)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80)
bind$inet(r0, &(0x7f0000000ec0)={0x2a, 0x4e23, @empty=0x1000000}, 0x10)

866.903305ms ago: executing program 3 (id=622):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x401, 0x8000, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

832.607605ms ago: executing program 0 (id=623):
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000009c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000ac0), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000b00)=0x2)
recvmmsg(r1, &(0x7f0000000b40), 0x10106, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b80)='mountaddr\x00', &(0x7f0000000bc0)='127.0.0.1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./mnt_trace\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000dc0)={0x3, &(0x7f0000000e00)=[{0x40, 0x9, 0xfe, 0xa4}, {0x30, 0x1, 0x1, 0xe406}, {0x6, 0x15, 0x2, 0xb}]}, 0x10)
write$binfmt_aout(r5, 0x0, 0x9ffc)
mount$9p_fd(0x0, &(0x7f0000000e40)='./mnt_trace\x00', &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
sendto$inet(0xffffffffffffffff, &(0x7f0000000f00), 0x0, 0x4040, 0x0, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@arp={0x8902, @generic={0x101, 0x884c, 0x6, 0x0, 0x2, @random="2daa41df7773", "", @local}}}}, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x4bd, &(0x7f0000000100)="$eJzs3M9vVNUeAPDvnU4L5cdrH4/3niBKFY0osaUFlYULMZq40MTEDS5rWxAp1LTVCCFaXeDSkLg3Lk38C1zpxqgrE7a4NyTEsAE1JmPuzL3TaecH0zLtWObzSWbmnHtv55wv95yZc+5hbgA9ayR9SiJ2RcT1iBiqZFceMFJ5uXPr8tTvty5PJVEqvfFbUj7u9q3LU/mh+d/tzDNLK7fXWrh46dzk7OzMfJYfWzz/7tjCxUtPnz0/eWbmzMyFiRMnjh8bf+7ZiWeaV76//TjTOt3e/+HcgX2vvHn1talTV9/68eskj39FHO+3/6atjTTY1pcnHu9UKf8Qu8vPg+XnpJhvLXSvQrQlbZDFrCtdj6Hoi+rJi6F4+ZOuVg7YUKVSqbSt6d7h7IhMkr3WbgO2sKTt3tyv38N9JfuiTyKWptI5cO18vhfcPFmZAKVx38kelT3F6uy1vzq/7bx0tnVq6Y8v0kcsX4cY2KDiAADi25OV13zstzz+KxRrj3shWxsajoh/R8SeiPhPROyNiP9GxP8i4v8R8UDN3zRa91lt9SJJ/fizcGNdgbXp5pGI57O1rZXjv+raxXBflttdjr8/OX12duZoRPwrIg5H/7Y0P96ijO9euvZZlqwb143UjP/SR1p+PhbM6nGjuOoC3fTk4uS9xp27+XHE/mKj+JPqSkB6HvdFxP6D6yvj7FNfHWi27+7xt1BcX31qlb6MeKJy/pdiVfy5pPX65Nj2mJ05Opa3ino//Xzl9Wbl31P8HZCe/x0N2381/uGkdr12Ye1lXPnl06Zzyjbb/4p+k7b/gWRlV/pgcnFxfjxiIHm1nB8of2Kl26P+uInl49P4Dx9q3P/3xPK/xIMRkTbihyLi4Yg4mNX9kYh4NCIOtYj/hxcfe2f98W+sNP7pu5//t5+snv+miXxtu25X37nvvynvyU/ZcIv4k2hw/o+XU4ezLe18/rWs6fy9tGYAAADYegoRsSuSwmg1XSiMjlb+v/ze2FGYnVtYPHJ67r0L05XfCAxHfyG/0jVUvR4aS+PZtD6/PjqxKn8su278ed9gOT86NTc73e3gocftbNL/U7/2dbt2wIbrwDoasEWtt/+XSqWPOlwVYJP5/ofepf9D72rQ/wdX5ZvfIwDY0ooNMjUT+7+WfycM3G+ajf+vbXI9gM1n/g+9S/+H3qX/Q0/KfglfjLZ+Lb9BifTzp+kxfRHRrYo1SZRK2+vvcrAZiYEOvuGu1XdJGFrb+0RhjYUmtW1s+xru0VCXiG43gDUm/sxutrkJZaVdaX6weW9qP9HtTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDO+DsAAP//wc7YrA==")
openat$incfs(0xffffffffffffff9c, &(0x7f00000005c0)='.log\x00', 0x386c2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

818.528786ms ago: executing program 1 (id=624):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

772.231917ms ago: executing program 2 (id=625):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000bc0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa927}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

772.020427ms ago: executing program 1 (id=626):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='dctcp', 0x12d)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000005c0)="89", 0x1, 0x6044800, 0x0, 0x0)

718.403478ms ago: executing program 1 (id=627):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="340033008000e100ffffffffffff080211000000505050505050"], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0)

688.989868ms ago: executing program 3 (id=628):
wait4(0x0, 0x0, 0x8, 0x0)

332.663644ms ago: executing program 1 (id=629):
r0 = fsopen(&(0x7f0000000240)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
setresuid(0xee01, 0xee00, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x11)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0)
readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/174, 0xae}], 0x1)

332.478374ms ago: executing program 3 (id=630):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x3ba9bfc6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000300), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x1f6, 0x4)
sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="97", 0x1}], 0x1}}], 0x1, 0x4000800)

332.101614ms ago: executing program 5 (id=631):
mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/cpu/vulnerabilities/retbleed\x00', 0x0, 0x0)
read(r0, &(0x7f0000000540), 0x100)

12.00209ms ago: executing program 5 (id=632):
socket$rxrpc(0x21, 0x2, 0xa)
socket$rxrpc(0x21, 0x2, 0xa)
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0)
r1 = gettid()
get_robust_list(r1, 0x0, &(0x7f0000000580))
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000440)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fchown(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x8, &(0x7f0000000680), 0x4, 0x526, &(0x7f00000006c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0/file0\x00', 0x10b442, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000c40), 0x0, &(0x7f0000000c80), 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file2\x00', 0x42, 0xe)
pwrite64(r5, &(0x7f0000000d00)="95", 0xffaf, 0x10001)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000d40)={0x0, r5, 0x1, 0x3, 0x4, 0x1000000000001})

0s ago: executing program 2 (id=633):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1412, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x8810)

kernel console output (not intermixed with test programs):

miscuous mode
[   31.960956][ T4329] team0: Port device team_slave_0 added
[   31.962913][ T4329] team0: Port device team_slave_1 added
[   31.968090][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.969714][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.974680][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.977426][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.978831][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.981018][ T4328] device bridge_slave_1 entered promiscuous mode
[   31.987074][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.988473][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.990586][ T4335] device bridge_slave_0 entered promiscuous mode
[   31.995746][ T4341] team0: Port device team_slave_0 added
[   32.003051][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.004459][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.010205][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.016482][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.017930][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.020146][ T4335] device bridge_slave_1 entered promiscuous mode
[   32.022259][ T4341] team0: Port device team_slave_1 added
[   32.024169][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.030094][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.034957][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.041798][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.050550][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.051871][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.057276][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.067997][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   32.071043][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.075696][ T4334] team0: Port device team_slave_0 added
[   32.079072][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.080933][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.085680][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.095567][ T4334] team0: Port device team_slave_1 added
[   32.099832][ T4328] team0: Port device team_slave_0 added
[   32.170799][ T4329] device hsr_slave_0 entered promiscuous mode
[   32.209626][ T4329] device hsr_slave_1 entered promiscuous mode
[   32.253143][ T4335] team0: Port device team_slave_0 added
[   32.257204][ T4328] team0: Port device team_slave_1 added
[   32.259458][ T4335] team0: Port device team_slave_1 added
[   32.261286][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.262746][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.267777][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.282631][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.283897][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.289264][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.296453][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.297973][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.303490][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.308225][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.312058][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.317103][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.323399][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.324834][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.330842][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.370583][ T4341] device hsr_slave_0 entered promiscuous mode
[   32.411917][ T4341] device hsr_slave_1 entered promiscuous mode
[   32.449478][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.450856][ T4341] Cannot create hsr debugfs directory
[   32.452188][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.453690][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.458478][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.520481][ T4334] device hsr_slave_0 entered promiscuous mode
[   32.569700][ T4334] device hsr_slave_1 entered promiscuous mode
[   32.609491][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.610962][ T4334] Cannot create hsr debugfs directory
[   32.670535][ T4335] device hsr_slave_0 entered promiscuous mode
[   32.709521][ T4335] device hsr_slave_1 entered promiscuous mode
[   32.749392][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.750841][ T4335] Cannot create hsr debugfs directory
[   32.790647][ T4328] device hsr_slave_0 entered promiscuous mode
[   32.829645][ T4328] device hsr_slave_1 entered promiscuous mode
[   32.869432][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.870943][ T4328] Cannot create hsr debugfs directory
[   32.949060][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   33.014442][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   33.048807][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   33.102478][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   33.174592][ T4341] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   33.231054][ T4341] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   33.273289][ T4341] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   33.312897][ T4341] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   33.366094][ T4334] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   33.401009][ T4334] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   33.455248][ T4334] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   33.501194][ T4334] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   33.553285][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.555168][ T4335] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   33.593681][ T4335] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   33.637332][ T4335] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   33.678860][ T4335] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   33.689632][ T4336] Bluetooth: hci3: command 0x0409 tx timeout
[   33.690925][ T4336] Bluetooth: hci2: command 0x0409 tx timeout
[   33.692098][ T4336] Bluetooth: hci0: command 0x0409 tx timeout
[   33.693411][ T4336] Bluetooth: hci4: command 0x0409 tx timeout
[   33.694622][ T4336] Bluetooth: hci1: command 0x0409 tx timeout
[   33.710984][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.713415][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.717310][ T4329] 8021q: adding VLAN 0 to HW filter on device team0
[   33.721707][ T4328] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   33.773942][ T4328] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   33.821747][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.823439][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.825285][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.826781][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.828863][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   33.834946][ T4328] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   33.889285][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.892657][ T4328] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   33.932791][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.934904][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.936891][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.938352][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.940146][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   33.953973][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   33.962812][ T4341] 8021q: adding VLAN 0 to HW filter on device team0
[   33.965192][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.966877][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.972000][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.974132][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.975947][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   33.986358][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.988464][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.990661][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.991976][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.993628][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.995407][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.997278][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.998769][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.000950][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.002892][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.007562][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.020265][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.025038][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.027095][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.032428][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.034190][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.037966][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.046134][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.051548][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.054128][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.056182][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.076616][ T4341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   34.078827][ T4341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.086501][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.092257][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.094473][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.096247][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.098144][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.103479][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.110713][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.112666][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.118351][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.124688][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0
[   34.128669][ T4334] 8021q: adding VLAN 0 to HW filter on device team0
[   34.132984][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.134600][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.150737][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.152791][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.154653][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.156041][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.157629][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.159239][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.168087][ T4335] 8021q: adding VLAN 0 to HW filter on device team0
[   34.174337][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.176122][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.177709][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.179304][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.182120][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.183930][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.185479][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.187217][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.189892][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.191841][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.193093][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.201960][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.203659][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.205448][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.207464][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.209203][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.210750][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.212971][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.214890][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.216994][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.219151][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.223114][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.225220][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.237278][ T4328] 8021q: adding VLAN 0 to HW filter on device team0
[   34.243842][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.245796][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.247822][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.250484][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.252332][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.254045][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.255803][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.257729][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.259988][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.261403][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.263142][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.264814][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.266765][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.268546][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.272318][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.274074][   T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.282334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.284307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.286254][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.287627][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.290785][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.295536][ T4335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.297952][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.300409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.302909][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.304857][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.306290][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.307938][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.312298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.318829][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.325406][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.327544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.328986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.334398][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.340727][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.342817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.345230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.347047][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.366893][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   34.368974][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.376017][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.377957][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.382783][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.384784][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.390539][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.398122][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.403246][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.405026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.416752][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.418638][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.423216][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.426395][ T4341] device veth0_vlan entered promiscuous mode
[   34.438814][ T4341] device veth1_vlan entered promiscuous mode
[   34.445038][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.447025][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.449124][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.451535][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.453411][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.459936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.463487][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.478580][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.480842][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.482604][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.484404][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.488914][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.490693][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.496357][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.513837][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.515855][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.518148][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.521644][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.523621][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.525457][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.528085][ T4334] device veth0_vlan entered promiscuous mode
[   34.531319][ T4341] device veth0_macvtap entered promiscuous mode
[   34.535395][ T4329] device veth0_vlan entered promiscuous mode
[   34.537573][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.539516][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.541332][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.543044][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.544685][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.551053][ T4341] device veth1_macvtap entered promiscuous mode
[   34.556616][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.558294][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.559758][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.566126][ T4329] device veth1_vlan entered promiscuous mode
[   34.572749][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.579155][ T4334] device veth1_vlan entered promiscuous mode
[   34.584414][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.588850][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.591337][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.593108][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.594772][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.596811][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.605211][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.607175][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.609756][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.615449][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.617189][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.618923][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.622530][ T4329] device veth0_macvtap entered promiscuous mode
[   34.624535][ T4341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.626108][ T4341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.627637][ T4341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.629069][ T4341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.636705][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.638950][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.642201][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.649299][ T4329] device veth1_macvtap entered promiscuous mode
[   34.666435][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.668343][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.670408][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.672313][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.674269][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.676046][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.677864][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.684249][ T4328] device veth0_vlan entered promiscuous mode
[   34.691608][ T4334] device veth0_macvtap entered promiscuous mode
[   34.694305][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.696290][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.698736][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.705330][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.707343][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.709068][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.711691][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.713701][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.727561][ T4334] device veth1_macvtap entered promiscuous mode
[   34.733230][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.734973][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.736767][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.738574][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.741635][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.746216][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.748352][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.750980][ T1613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.752233][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.752570][ T1613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.755962][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.757610][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.760907][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.762678][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.767735][ T4328] device veth1_vlan entered promiscuous mode
[   34.769845][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.771544][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.773106][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.774892][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.777705][ T4335] device veth0_vlan entered promiscuous mode
[   34.783811][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.785680][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.787419][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.789153][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.792486][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.802437][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.803353][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.804039][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.806316][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.808862][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.811947][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   34.824974][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.827627][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.830725][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.832599][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.835009][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.841670][ T4335] device veth1_vlan entered promiscuous mode
[   34.848886][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.851438][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.853195][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.855998][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.857683][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.859259][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.864618][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.887913][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.893912][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.895927][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.903962][ T4328] device veth0_macvtap entered promiscuous mode
[   34.906861][ T4328] device veth1_macvtap entered promiscuous mode
[   34.916625][ T4335] device veth0_macvtap entered promiscuous mode
[   34.926687][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.928408][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.931369][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.933239][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.933407][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.934732][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.938214][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.941415][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.943217][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.944780][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.946324][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.950377][ T4335] device veth1_macvtap entered promiscuous mode
[   34.968591][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.972093][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.974034][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.976220][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.978259][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.981234][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.984094][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.993166][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.997791][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.004761][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.006912][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.008908][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.011243][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.013067][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.014832][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.016467][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   35.018291][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.021221][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0
[   35.025404][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.027432][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.030741][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.034295][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.036144][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.038160][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.040575][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.042577][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.045166][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.163069][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.165174][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.167243][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.168905][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.173717][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.175852][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.177625][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.179284][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.179507][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.181912][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.185853][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.187967][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.195550][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.197577][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.203972][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.206103][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.208239][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.213393][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.215305][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.217182][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.222334][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.230224][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.232318][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.269219][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.274760][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.276548][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.278602][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.284068][ T4416] loop1: detected capacity change from 0 to 512
[   35.288655][ T4416] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[   35.308410][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.310131][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.342724][ T4320] udevd[4320]: incorrect ext4 checksum on /dev/loop1
[   35.348155][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.350750][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.362373][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.364277][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.372324][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.386636][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.391269][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.412485][ T1613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.414097][ T1613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.416831][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   36.368399][ T4429] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET)
[   36.443315][ T4436] device syzkaller1 entered promiscuous mode
[   36.485825][ T4440] binder: 4439:4440 tried to acquire reference to desc 0, got 1 instead
[   36.487845][ T4440] binder_alloc: 4439: binder_alloc_buf, no vma
[   36.489155][ T4440] binder: cannot allocate buffer: vma cleared, target dead or dying
[   36.489189][ T4440] binder: 4439:4440 transaction async to 4439:0 failed 5/29189/-3, size 72-24 line 3247
[   36.494180][ T4375] binder: undelivered TRANSACTION_ERROR: 29189
[   36.497931][ T4332] Bluetooth: hci1: command 0x041b tx timeout
[   36.499256][ T4332] Bluetooth: hci4: command 0x041b tx timeout
[   36.500763][ T4332] Bluetooth: hci0: command 0x041b tx timeout
[   36.501913][ T4332] Bluetooth: hci2: command 0x041b tx timeout
[   36.503038][ T4332] Bluetooth: hci3: command 0x041b tx timeout
[   36.528851][ T4442] binder: 4441:4442 got transaction to invalid handle, 1
[   36.530848][ T4442] binder: 4442:4441 cannot find target node
[   36.532162][ T4442] binder: 4441:4442 transaction async to 0:0 failed 9/29201/-22, size 72-24 line 3062
[   36.534984][ T4442] binder: 4441:4442 DecRefs 0 refcount change on invalid ref 1 ret -22
[   36.536639][ T4442] binder: 4441:4442 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   36.539091][ T4442] binder: 4442 RLIMIT_NICE not set
[   36.587302][ T4446] Bluetooth: MGMT ver 1.22
[   36.625020][ T4450] device syzkaller0 entered promiscuous mode
[   36.952669][ T4491] binder: 4489:4491 tried to acquire reference to desc 0, got 1 instead
[   36.954664][ T4491] binder_alloc: 4489: binder_alloc_buf, no vma
[   36.956477][ T4491] binder: cannot allocate buffer: vma cleared, target dead or dying
[   36.956504][ T4491] binder: 4489:4491 transaction async to 4489:0 failed 14/29189/-3, size 72-24 line 3247
[   36.963547][ T4378] binder: undelivered TRANSACTION_ERROR: 29189
[   37.358058][ T3901] binder: undelivered TRANSACTION_ERROR: 29201
[   37.440855][ T4512] device syzkaller0 entered promiscuous mode
[   37.525949][ T4529] binder: tried to use weak ref as strong ref
[   37.527165][ T4529] binder: 4528:4529 Acquire 1 refcount change on invalid ref 0 ret -22
[   37.529223][ T4529] binder: 4528:4529 got transaction to invalid handle, 1
[   37.532420][ T4529] binder: 4529:4528 cannot find target node
[   37.668354][ T4547] binder: 4546:4547 got transaction to invalid handle, 1
[   38.426932][ T4570] Zero length message leads to an empty skb
[   38.573811][ T4336] Bluetooth: hci3: command 0x040f tx timeout
[   38.573833][ T4332] Bluetooth: hci2: command 0x040f tx timeout
[   38.575237][ T4336] Bluetooth: hci0: command 0x040f tx timeout
[   38.576362][ T4332] Bluetooth: hci4: command 0x040f tx timeout
[   38.577501][ T4336] Bluetooth: hci1: command 0x040f tx timeout
[   38.606971][ T4600] device syzkaller1 entered promiscuous mode
[   39.366930][ T4673] binder: BINDER_SET_CONTEXT_MGR already set
[   39.368775][ T4673] binder: 4672:4673 ioctl 4018620d 20000300 returned -16
[   40.214760][ T4706] binder: BINDER_SET_CONTEXT_MGR already set
[   40.219275][ T4706] binder: 4705:4706 ioctl 4018620d 20000300 returned -16
[   40.229463][ T4710] binder: BINDER_SET_CONTEXT_MGR already set
[   40.230674][ T4710] binder: 4708:4710 ioctl 4018620d 20000300 returned -16
[   40.254586][ T4714] device syzkaller0 entered promiscuous mode
[   40.416638][ T4736] device syzkaller1 entered promiscuous mode
[   40.618925][ T4762] binder: BINDER_SET_CONTEXT_MGR already set
[   40.624330][ T4762] binder: 4760:4762 ioctl 4018620d 20000300 returned -16
[   40.650123][ T4336] Bluetooth: hci4: command 0x0419 tx timeout
[   40.651567][ T4336] Bluetooth: hci0: command 0x0419 tx timeout
[   40.652834][ T4336] Bluetooth: hci2: command 0x0419 tx timeout
[   40.654074][ T4336] Bluetooth: hci3: command 0x0419 tx timeout
[   40.659466][ T4343] Bluetooth: hci1: command 0x0419 tx timeout
[   40.758054][ T4784] device syzkaller0 entered promiscuous mode
[   40.922654][ T4796] device syzkaller1 entered promiscuous mode
[   42.043652][ T4871] loop3: detected capacity change from 0 to 256
[   42.276786][ T4878] loop1: detected capacity change from 0 to 128
[   42.415223][ T4881] loop2: detected capacity change from 0 to 512
[   42.706223][ T4885] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   42.750410][ T4885] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[   43.151804][ T4894] loop4: detected capacity change from 0 to 512
[   43.158276][ T4898] loop3: detected capacity change from 0 to 512
[   43.193744][ T4898] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   43.218137][ T4894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   43.251982][ T4898] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   43.253897][ T4898] EXT4-fs (loop3): orphan cleanup on readonly fs
[   43.257746][ T4898] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5
[   43.263787][ T4894] netlink: 44 bytes leftover after parsing attributes in process `syz.4.129'.
[   43.263788][ T4898] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[   43.267492][ T4898] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.130: Failed to acquire dquot type 1
[   43.272152][ T4898] EXT4-fs (loop3): Remounting filesystem read-only
[   43.275782][ T4898] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.130: corrupted inode contents
[   43.278460][ T4898] EXT4-fs (loop3): Remounting filesystem read-only
[   43.280469][ T4898] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #16: comm syz.3.130: mark_inode_dirty error
[   43.355486][ T4910] 9pnet_fd: Insufficient options for proto=fd
[   43.442839][ T4911] loop1: detected capacity change from 0 to 512
[   43.573264][ T4898] EXT4-fs (loop3): Remounting filesystem read-only
[   43.574771][ T4898] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.130: corrupted inode contents
[   43.578528][ T4898] EXT4-fs (loop3): Remounting filesystem read-only
[   43.579828][ T4898] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.130: mark_inode_dirty error
[   43.582376][ T4898] EXT4-fs (loop3): Remounting filesystem read-only
[   43.583635][ T4898] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.130: corrupted inode contents
[   43.586650][ T4335] EXT4-fs (loop4): unmounting filesystem.
[   43.590511][ T4898] EXT4-fs (loop3): Remounting filesystem read-only
[   43.591931][ T4898] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   43.609594][ T4898] EXT4-fs (loop3): Remounting filesystem read-only
[   43.611168][ T4898] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.130: corrupted inode contents
[   43.619090][ T4898] EXT4-fs (loop3): Remounting filesystem read-only
[   43.620775][ T4898] EXT4-fs error (device loop3): ext4_truncate:4325: inode #16: comm syz.3.130: mark_inode_dirty error
[   43.623277][ T4898] EXT4-fs (loop3): Remounting filesystem read-only
[   43.627485][ T4898] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   43.645428][ T4898] EXT4-fs (loop3): Remounting filesystem read-only
[   43.647249][ T4898] EXT4-fs (loop3): 1 truncate cleaned up
[   43.648841][ T4898] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   44.079283][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   44.185428][ T4935] loop1: detected capacity change from 0 to 256
[   44.688471][ T4940] loop2: detected capacity change from 0 to 128
[   45.155778][ T4947] loop1: detected capacity change from 0 to 512
[   45.267649][ T4947] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   45.278277][ T4947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.145'.
[   45.363832][ T4961] 9pnet_fd: Insufficient options for proto=fd
[   45.378337][ T4961] loop0: detected capacity change from 0 to 512
[   45.667411][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   45.958895][ T4991] 9pnet_fd: Insufficient options for proto=fd
[   46.231619][ T4985] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   46.235708][ T4985] EXT4-fs (loop3): orphan cleanup on readonly fs
[   46.239643][ T4985] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5
[   46.241679][ T4985] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[   46.243997][ T4985] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.151: Failed to acquire dquot type 1
[   46.249143][ T4985] EXT4-fs (loop3): Remounting filesystem read-only
[   46.262208][ T4985] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.151: corrupted inode contents
[   46.272242][ T4985] EXT4-fs (loop3): Remounting filesystem read-only
[   46.278029][ T4985] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #16: comm syz.3.151: mark_inode_dirty error
[   46.293363][ T4985] EXT4-fs (loop3): Remounting filesystem read-only
[   46.302846][ T4985] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.151: corrupted inode contents
[   46.314307][ T4985] EXT4-fs (loop3): Remounting filesystem read-only
[   46.317033][ T4985] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.151: mark_inode_dirty error
[   46.323043][ T4985] EXT4-fs (loop3): Remounting filesystem read-only
[   46.325596][ T4985] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.151: corrupted inode contents
[   46.333858][ T4985] EXT4-fs (loop3): Remounting filesystem read-only
[   46.336302][ T4985] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   46.340175][ T4985] EXT4-fs (loop3): Remounting filesystem read-only
[   46.342600][ T4985] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.151: corrupted inode contents
[   46.347611][ T4985] EXT4-fs (loop3): Remounting filesystem read-only
[   46.352052][ T4985] EXT4-fs error (device loop3): ext4_truncate:4325: inode #16: comm syz.3.151: mark_inode_dirty error
[   46.356775][ T4985] EXT4-fs (loop3): Remounting filesystem read-only
[   46.358359][ T4985] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   46.363729][ T4985] EXT4-fs (loop3): Remounting filesystem read-only
[   46.366395][ T4985] EXT4-fs (loop3): 1 truncate cleaned up
[   46.372724][ T4985] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   46.757063][ T5004] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   46.790471][ T5004] netlink: 44 bytes leftover after parsing attributes in process `syz.1.158'.
[   46.843541][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   46.850910][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   47.665424][ T5046] 9pnet_fd: Insufficient options for proto=fd
[   47.680607][ T5046] set_capacity_and_notify: 5 callbacks suppressed
[   47.680627][ T5046] loop3: detected capacity change from 0 to 512
[   48.182291][ T5057] 9pnet_fd: Insufficient options for proto=fd
[   48.215750][ T5057] loop0: detected capacity change from 0 to 512
[   48.516244][ T5060] loop3: detected capacity change from 0 to 512
[   48.555072][ T5060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   48.559019][ T5060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.170'.
[   48.597928][ T5065] loop4: detected capacity change from 0 to 512
[   48.604287][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   48.614721][ T5065] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   48.621089][ T5065] EXT4-fs (loop4): orphan cleanup on readonly fs
[   48.628532][ T5065] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5
[   48.631776][ T5065] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[   48.633834][ T5065] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.171: Failed to acquire dquot type 1
[   48.645448][ T5065] EXT4-fs (loop4): Remounting filesystem read-only
[   48.654416][ T5065] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.171: corrupted inode contents
[   48.661455][ T5065] EXT4-fs (loop4): Remounting filesystem read-only
[   48.665374][ T5071] loop2: detected capacity change from 0 to 256
[   48.666846][ T5065] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #16: comm syz.4.171: mark_inode_dirty error
[   48.671394][ T5065] EXT4-fs (loop4): Remounting filesystem read-only
[   48.672970][ T5065] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.171: corrupted inode contents
[   48.677855][ T5065] EXT4-fs (loop4): Remounting filesystem read-only
[   48.683911][ T5065] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.171: mark_inode_dirty error
[   48.688063][ T5065] EXT4-fs (loop4): Remounting filesystem read-only
[   48.739716][ T5065] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.171: corrupted inode contents
[   48.750228][ T5065] EXT4-fs (loop4): Remounting filesystem read-only
[   48.752347][ T5065] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   48.754326][ T5065] EXT4-fs (loop4): Remounting filesystem read-only
[   48.755882][ T5065] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.171: corrupted inode contents
[   48.758528][ T5065] EXT4-fs (loop4): Remounting filesystem read-only
[   48.763343][ T5065] EXT4-fs error (device loop4): ext4_truncate:4325: inode #16: comm syz.4.171: mark_inode_dirty error
[   48.766022][ T5065] EXT4-fs (loop4): Remounting filesystem read-only
[   48.767499][ T5065] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   48.770593][ T5065] EXT4-fs (loop4): Remounting filesystem read-only
[   48.772544][ T5065] EXT4-fs (loop4): 1 truncate cleaned up
[   48.774206][ T5065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   49.077121][ T5091] loop0: detected capacity change from 0 to 128
[   49.678263][ T5116] 9pnet_fd: Insufficient options for proto=fd
[   49.693109][ T5116] loop1: detected capacity change from 0 to 512
[   50.032125][ T5121] loop0: detected capacity change from 0 to 512
[   50.036436][ T4335] EXT4-fs (loop4): unmounting filesystem.
[   50.138432][ T5121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   50.159863][ T5121] netlink: 44 bytes leftover after parsing attributes in process `syz.0.183'.
[   50.206770][ T4334] EXT4-fs (loop0): unmounting filesystem.
[   50.411258][ T5141] 9pnet_fd: Insufficient options for proto=fd
[   50.430258][ T5141] loop0: detected capacity change from 0 to 512
[   50.984949][ T5151] device syzkaller0 entered promiscuous mode
[   51.084203][ T5163] loop2: detected capacity change from 0 to 256
[   51.556709][ T5166] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   51.567344][ T5166] EXT4-fs (loop1): orphan cleanup on readonly fs
[   51.577076][ T5166] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5
[   51.594971][ T5166] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[   51.597124][ T5166] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.194: Failed to acquire dquot type 1
[   51.605186][ T5166] EXT4-fs (loop1): Remounting filesystem read-only
[   51.608215][ T5166] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.194: corrupted inode contents
[   51.620959][ T5166] EXT4-fs (loop1): Remounting filesystem read-only
[   51.625600][ T5166] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #16: comm syz.1.194: mark_inode_dirty error
[   51.630725][ T5182] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   51.634025][ T5166] EXT4-fs (loop1): Remounting filesystem read-only
[   51.643643][ T5166] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.194: corrupted inode contents
[   51.649071][ T5182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.196'.
[   51.653848][ T5166] EXT4-fs (loop1): Remounting filesystem read-only
[   51.657411][ T5166] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.194: mark_inode_dirty error
[   51.668827][ T5166] EXT4-fs (loop1): Remounting filesystem read-only
[   51.673555][ T5166] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.194: corrupted inode contents
[   51.684723][ T5166] EXT4-fs (loop1): Remounting filesystem read-only
[   51.689201][ T5166] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   51.697252][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   51.701976][ T5166] EXT4-fs (loop1): Remounting filesystem read-only
[   51.708183][ T5166] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #16: comm syz.1.194: corrupted inode contents
[   51.713534][ T5166] EXT4-fs (loop1): Remounting filesystem read-only
[   51.714919][ T5166] EXT4-fs error (device loop1): ext4_truncate:4325: inode #16: comm syz.1.194: mark_inode_dirty error
[   51.717365][ T5166] EXT4-fs (loop1): Remounting filesystem read-only
[   51.718760][ T5166] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   51.721319][ T5166] EXT4-fs (loop1): Remounting filesystem read-only
[   51.723669][ T5166] EXT4-fs (loop1): 1 truncate cleaned up
[   51.725018][ T5166] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   52.223524][ T5217] 9pnet_fd: Insufficient options for proto=fd
[   52.446603][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   52.647151][ T5242] device syzkaller0 entered promiscuous mode
[   52.808947][ T5250] binder_user_error: 21 callbacks suppressed
[   52.808957][ T5250] binder: 5249:5250 tried to acquire reference to desc 0, got 1 instead
[   52.828647][ T5250] binder: 5249:5250 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   52.833344][ T5250] binder: 5250 RLIMIT_NICE not set
[   52.835669][ T5250] binder_debug: 29 callbacks suppressed
[   52.835681][ T5250] binder: undelivered transaction 52, fd fixups failed
[   52.845823][ T5250] binder: transaction release 52 bad handle 1, ret = -22
[   52.856112][ T5250] binder: 5249:5250 async transaction 52 fd fixups failed 29201/-12, line 4684
[   52.866702][ T4374] binder: undelivered TRANSACTION_COMPLETE
[   52.894822][ T5257] set_capacity_and_notify: 4 callbacks suppressed
[   52.894836][ T5257] loop1: detected capacity change from 0 to 512
[   52.954844][ T5257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   52.962327][ T5257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.208'.
[   53.004238][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   53.191374][ T5269] loop3: detected capacity change from 0 to 128
[   53.860618][ T5285] loop0: detected capacity change from 0 to 512
[   54.202421][ T5290] device syzkaller0 entered promiscuous mode
[   54.327403][ T5298] 9pnet_fd: Insufficient options for proto=fd
[   54.346967][ T5298] loop2: detected capacity change from 0 to 512
[   54.561735][ T5297] loop3: detected capacity change from 0 to 512
[   54.622889][ T5297] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   54.649188][ T5297] netlink: 44 bytes leftover after parsing attributes in process `syz.3.220'.
[   54.683407][ T5303] binder: 5301:5303 tried to acquire reference to desc 0, got 1 instead
[   54.703419][ T5303] binder: 5301:5303 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   54.715023][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   54.726987][ T5303] binder: 5303 RLIMIT_NICE not set
[   54.735631][ T5303] binder: undelivered transaction 61, fd fixups failed
[   54.743821][ T5303] binder: transaction release 61 bad handle 1, ret = -22
[   54.751676][ T5303] binder: 5301:5303 async transaction 61 fd fixups failed 29201/-12, line 4684
[   54.764552][ T4374] binder: undelivered TRANSACTION_COMPLETE
[   54.893251][ T5338] loop3: detected capacity change from 0 to 128
[   54.938478][ T5343] loop1: detected capacity change from 0 to 1024
[   54.949534][ T5343] =======================================================
[   54.949534][ T5343] WARNING: The mand mount option has been deprecated and
[   54.949534][ T5343]          and is ignored by this kernel. Remove the mand
[   54.949534][ T5343]          option from the mount to silence this warning.
[   54.949534][ T5343] =======================================================
[   54.957107][ T5343] EXT4-fs: Ignoring removed oldalloc option
[   54.958491][ T5343] EXT4-fs: Ignoring removed orlov option
[   55.302495][ T5343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   55.328927][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   55.786339][ T5391] binder: 5390:5391 tried to acquire reference to desc 0, got 1 instead
[   55.803425][ T5391] binder: 5390:5391 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   55.805820][ T5391] binder: 5391 RLIMIT_NICE not set
[   55.806891][ T5391] binder: undelivered transaction 70, fd fixups failed
[   55.808380][ T5391] binder: transaction release 70 bad handle 1, ret = -22
[   55.830110][ T5391] binder: 5390:5391 async transaction 70 fd fixups failed 29201/-12, line 4684
[   55.838125][  T113] binder: undelivered TRANSACTION_COMPLETE
[   55.880971][ T5402] loop4: detected capacity change from 0 to 256
[   56.005358][ T5410] loop3: detected capacity change from 0 to 1024
[   56.017474][ T5410] EXT4-fs: Ignoring removed oldalloc option
[   56.018612][ T5410] EXT4-fs: Ignoring removed orlov option
[   56.331956][ T5410] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   56.393487][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   56.448854][ T5419] loop3: detected capacity change from 0 to 512
[   56.496861][ T5419] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   56.498792][ T5419] EXT4-fs (loop3): orphan cleanup on readonly fs
[   56.503323][ T5419] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5
[   56.505091][ T5419] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[   56.507105][ T5419] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.244: Failed to acquire dquot type 1
[   56.509755][ T5419] EXT4-fs (loop3): Remounting filesystem read-only
[   56.517646][ T5419] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.244: corrupted inode contents
[   56.521201][ T5419] EXT4-fs (loop3): Remounting filesystem read-only
[   56.522487][ T5419] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #16: comm syz.3.244: mark_inode_dirty error
[   56.525284][ T5419] EXT4-fs (loop3): Remounting filesystem read-only
[   56.526529][ T5419] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.244: corrupted inode contents
[   56.530112][ T5419] EXT4-fs (loop3): Remounting filesystem read-only
[   56.531495][ T5419] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.244: mark_inode_dirty error
[   56.534042][ T5419] EXT4-fs (loop3): Remounting filesystem read-only
[   56.535475][ T5419] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.244: corrupted inode contents
[   56.538488][ T5419] EXT4-fs (loop3): Remounting filesystem read-only
[   56.540444][ T5419] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[   56.542422][ T5419] EXT4-fs (loop3): Remounting filesystem read-only
[   56.543841][ T5419] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.244: corrupted inode contents
[   56.546505][ T5419] EXT4-fs (loop3): Remounting filesystem read-only
[   56.547831][ T5419] EXT4-fs error (device loop3): ext4_truncate:4325: inode #16: comm syz.3.244: mark_inode_dirty error
[   56.550904][ T5419] EXT4-fs (loop3): Remounting filesystem read-only
[   56.552276][ T5419] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[   56.554224][ T5419] EXT4-fs (loop3): Remounting filesystem read-only
[   56.556090][ T5419] EXT4-fs (loop3): 1 truncate cleaned up
[   56.560198][ T5419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   57.074588][ T5440] binder: 5439:5440 tried to acquire reference to desc 0, got 1 instead
[   57.077027][ T5440] binder: undelivered transaction 79, fd fixups failed
[   57.078707][ T5440] binder: transaction release 79 bad handle 1, ret = -22
[   57.147057][ T5446] EXT4-fs: Ignoring removed oldalloc option
[   57.148750][ T5446] EXT4-fs: Ignoring removed orlov option
[   57.184494][ T5446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   57.198111][ T4335] EXT4-fs (loop4): unmounting filesystem.
[   57.322971][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   57.346867][ T5464] device syzkaller1 entered promiscuous mode
[   57.781584][ T5473] 9pnet_fd: Insufficient options for proto=fd
[   58.185937][ T5481] binder_user_error: 2 callbacks suppressed
[   58.185947][ T5481] binder: tried to use weak ref as strong ref
[   58.188632][ T5481] binder: 5480:5481 Acquire 1 refcount change on invalid ref 0 ret -22
[   58.193807][ T5481] binder: 5480:5481 got transaction to invalid handle, 1
[   58.195476][ T5481] binder_debug: 2 callbacks suppressed
[   58.195488][ T5481] binder: 5481:5480 cannot find target node
[   58.197957][ T5481] binder: 5480:5481 transaction async to 0:0 failed 86/29201/-22, size 72-24 line 3062
[   58.201264][ T5481] binder: 5480:5481 DecRefs 0 refcount change on invalid ref 1 ret -22
[   58.203032][ T5481] binder: 5480:5481 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   58.205417][ T5481] binder: 5481 RLIMIT_NICE not set
[   58.206922][ T4374] binder: undelivered TRANSACTION_ERROR: 29201
[   58.288342][ T5489] set_capacity_and_notify: 4 callbacks suppressed
[   58.288352][ T5489] loop0: detected capacity change from 0 to 1024
[   58.636359][ T5489] EXT4-fs: Ignoring removed oldalloc option
[   58.637553][ T5489] EXT4-fs: Ignoring removed orlov option
[   58.675033][ T5489] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   58.755728][ T5504] loop4: detected capacity change from 0 to 512
[   58.792694][ T5493] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.794774][ T5493] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.802858][ T5504] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   58.804904][ T5504] EXT4-fs (loop4): orphan cleanup on readonly fs
[   58.807363][ T5504] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5
[   58.809666][ T5504] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[   58.811789][ T5504] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.270: Failed to acquire dquot type 1
[   58.814957][ T5504] EXT4-fs (loop4): Remounting filesystem read-only
[   58.817191][ T5504] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.270: corrupted inode contents
[   58.822684][ T5504] EXT4-fs (loop4): Remounting filesystem read-only
[   58.824341][ T5504] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #16: comm syz.4.270: mark_inode_dirty error
[   58.828019][ T5504] EXT4-fs (loop4): Remounting filesystem read-only
[   58.830961][ T5504] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.270: corrupted inode contents
[   58.833892][ T5504] EXT4-fs (loop4): Remounting filesystem read-only
[   58.835414][ T5504] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.270: mark_inode_dirty error
[   58.838243][ T5504] EXT4-fs (loop4): Remounting filesystem read-only
[   58.840189][ T5504] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.270: corrupted inode contents
[   58.842948][ T5504] EXT4-fs (loop4): Remounting filesystem read-only
[   58.844363][ T5504] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[   58.846762][ T5504] EXT4-fs (loop4): Remounting filesystem read-only
[   58.848390][ T5504] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #16: comm syz.4.270: corrupted inode contents
[   58.851283][ T5504] EXT4-fs (loop4): Remounting filesystem read-only
[   58.852620][ T5504] EXT4-fs error (device loop4): ext4_truncate:4325: inode #16: comm syz.4.270: mark_inode_dirty error
[   58.855206][ T5504] EXT4-fs (loop4): Remounting filesystem read-only
[   58.856588][ T5504] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[   58.862904][ T5504] EXT4-fs (loop4): Remounting filesystem read-only
[   58.866711][ T5504] EXT4-fs (loop4): 1 truncate cleaned up
[   58.868101][ T5504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   58.985746][ T4335] EXT4-fs (loop4): unmounting filesystem.
[   59.113165][ T5517] binder: 5516:5517 IncRefs 0 refcount change on invalid ref 0 ret -22
[   59.117607][ T5517] binder: 5516:5517 got transaction to invalid handle, 1
[   59.118995][ T5517] binder: 5517:5516 cannot find target node
[   59.123443][ T5517] binder: 5516:5517 transaction async to 0:0 failed 89/29201/-22, size 72-24 line 3062
[   59.126119][ T3901] binder: undelivered TRANSACTION_ERROR: 29201
[   59.189716][ T5493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.203862][ T5493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.456221][ T5493] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.458123][ T5493] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.459800][ T5493] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.461609][ T5493] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.704346][ T4334] EXT4-fs (loop0): unmounting filesystem.
[   59.724249][ T5528] loop1: detected capacity change from 0 to 256
[   59.769303][ T5534] binder: tried to use weak ref as strong ref
[   59.770963][ T5534] binder: 5533:5534 Acquire 1 refcount change on invalid ref 0 ret -22
[   59.773242][ T5534] binder: 5534:5533 cannot find target node
[   59.774458][ T5534] binder: 5533:5534 transaction async to 0:0 failed 92/29201/-22, size 72-24 line 3062
[   59.777113][ T3901] binder: undelivered TRANSACTION_ERROR: 29201
[   59.839077][ T5538] device syzkaller1 entered promiscuous mode
[   60.121644][ T5545] loop0: detected capacity change from 0 to 512
[   60.607874][ T5556] loop1: detected capacity change from 0 to 1024
[   60.618352][ T5556] EXT4-fs: Ignoring removed oldalloc option
[   60.623080][ T5556] EXT4-fs: Ignoring removed orlov option
[   60.990219][ T5556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   61.011473][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   61.103713][ T5577] binder: 5577:5576 cannot find target node
[   61.300523][ T5586] 9pnet_fd: Insufficient options for proto=fd
[   61.329977][ T5586] loop3: detected capacity change from 0 to 512
[   61.593093][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.594720][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.984384][ T5574] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.997593][ T5574] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.295896][ T5574] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.297810][ T5574] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.299779][ T5574] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.301601][ T5574] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.551105][ T5615] loop1: detected capacity change from 0 to 256
[   62.570150][ T4343] Bluetooth: hci0: command 0x040e tx timeout
[   62.655409][ T5620] loop3: detected capacity change from 0 to 1024
[   62.657216][ T5620] EXT4-fs: Ignoring removed oldalloc option
[   62.658375][ T5620] EXT4-fs: Ignoring removed orlov option
[   63.043368][ T5624] loop0: detected capacity change from 0 to 512
[   63.289015][ T5620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   63.341843][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   63.644246][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready
[   63.656673][ T5656] sl0: compressed packet ignored
[   63.800069][ T5672] FAULT_INJECTION: forcing a failure.
[   63.800069][ T5672] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   63.803024][ T5672] CPU: 1 PID: 5672 Comm: syz.2.309 Not tainted syzkaller #0
[   63.804475][ T5672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   63.806466][ T5672] Call trace:
[   63.807132][ T5672]  dump_backtrace+0x1c4/0x1f0
[   63.808131][ T5672]  show_stack+0x2c/0x3c
[   63.809010][ T5672]  __dump_stack+0x30/0x40
[   63.809936][ T5672]  dump_stack_lvl+0xf4/0x15c
[   63.810904][ T5672]  dump_stack+0x1c/0x5c
[   63.811796][ T5672]  should_fail_ex+0x3cc/0x524
[   63.812750][ T5672]  should_fail+0x14/0x24
[   63.813636][ T5672]  should_fail_usercopy+0x20/0x30
[   63.814694][ T5672]  __copy_siginfo_from_user+0x2e4/0x4fc
[   63.815867][ T5672]  __arm64_sys_rt_tgsigqueueinfo+0x110/0x23c
[   63.817199][ T5672]  invoke_syscall+0x98/0x290
[   63.818104][ T5672]  el0_svc_common+0x13c/0x258
[   63.819057][ T5672]  do_el0_svc+0x5c/0x134
[   63.819905][ T5672]  el0_svc+0x58/0x12c
[   63.820705][ T5672]  el0t_64_sync_handler+0x84/0xf0
[   63.821853][ T5672]  el0t_64_sync+0x18c/0x190
[   63.861945][ T5675] binder_user_error: 10 callbacks suppressed
[   63.861954][ T5675] binder: 5674:5675 IncRefs 0 refcount change on invalid ref 0 ret -22
[   63.866108][ T5675] binder: 5674:5675 got transaction to invalid handle, 1
[   63.867823][ T5675] binder_debug: 2 callbacks suppressed
[   63.867837][ T5675] binder: 5675:5674 cannot find target node
[   63.873180][ T5675] binder: 5674:5675 transaction async to 0:0 failed 97/29201/-22, size 72-24 line 3062
[   63.875824][ T4385] binder: undelivered TRANSACTION_ERROR: 29201
[   64.132201][ T5692] loop2: detected capacity change from 0 to 512
[   64.493069][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[   64.498908][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[   64.786408][ T5706] loop4: detected capacity change from 0 to 8
[   64.843077][ T5712] loop0: detected capacity change from 0 to 256
[   64.845455][ T5712] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿ" or missing value
[   64.860969][ T5706] process 'syz.4.317' launched './file0' with NULL argv: empty string added
[   64.882819][ T4320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   64.902182][ T5718] binder: 5716:5718 IncRefs 0 refcount change on invalid ref 0 ret -22
[   64.905330][ T5718] binder: 5716:5718 got transaction to invalid handle, 1
[   64.906752][ T5718] binder: 5718:5716 cannot find target node
[   64.907937][ T5718] binder: 5716:5718 transaction async to 0:0 failed 99/29201/-22, size 72-24 line 3062
[   64.920683][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[   65.054028][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.056094][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.428079][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.441290][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.702382][ T5725] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.704349][ T5725] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.707119][ T5725] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.710089][ T5725] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.024382][ T5756] loop4: detected capacity change from 0 to 512
[   66.042805][ T5756] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   66.057809][ T5756] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.333: path /59/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[   66.064608][ T5758] binder: 5757:5758 IncRefs 0 refcount change on invalid ref 0 ret -22
[   66.067532][ T5758] binder: 5757:5758 got transaction to invalid handle, 1
[   66.068908][ T5758] binder: 5758:5757 cannot find target node
[   66.088452][ T5758] binder: 5757:5758 transaction async to 0:0 failed 101/29201/-22, size 72-24 line 3062
[   66.096465][  T113] binder: undelivered TRANSACTION_ERROR: 29201
[   66.100766][ T4335] EXT4-fs (loop4): unmounting filesystem.
[   66.128770][ T5764] loop4: detected capacity change from 0 to 512
[   66.153979][ T5764] EXT4-fs (loop4): Test dummy encryption mode enabled
[   66.155350][ T5764] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   66.166688][ T5764] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.336: bad orphan inode 131083
[   66.168802][ T5764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   66.195695][ T5771] loop3: detected capacity change from 0 to 8
[   66.419610][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.421174][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.705300][ T5787] 9pnet_fd: Insufficient options for proto=fd
[   66.729938][ T5787] loop1: detected capacity change from 0 to 512
[   67.055961][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.069702][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.192615][ T5776] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.194592][ T5776] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.196550][ T5776] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.198443][ T5776] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.279530][ T5794] loop3: detected capacity change from 0 to 512
[   67.285753][ T5794] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.349: inode has both inline data and extents flags
[   67.289160][ T5794] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.349: couldn't read orphan inode 15 (err -117)
[   67.300084][ T5794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   67.321621][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   67.342276][ T5799] binder: tried to use weak ref as strong ref
[   67.343392][ T5799] binder: 5798:5799 Acquire 1 refcount change on invalid ref 0 ret -22
[   67.345359][ T5799] binder: 5798:5799 got transaction to invalid handle, 1
[   67.346952][ T5799] binder: 5799:5798 cannot find target node
[   67.797406][ T5790] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   67.799739][ T5790] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   67.802618][ T5790] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   67.804657][ T5790] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   67.806023][ T5790] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   67.807727][ T5790] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   67.810743][ T5790] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   67.812423][ T5790] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   67.814095][ T5790] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   67.817078][ T5790] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   67.818458][ T5790] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   67.820955][ T5790] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   67.856058][ T4335] EXT4-fs (loop4): unmounting filesystem.
[   67.926177][ T5817] device syzkaller1 entered promiscuous mode
[   67.946970][ T5822] loop1: detected capacity change from 0 to 128
[   67.990766][ T5826] loop2: detected capacity change from 0 to 8
[   68.043277][ T4343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.045251][ T4343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.047169][ T4343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.057216][ T4343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.062469][ T4343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   68.064285][ T4343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.420335][ T5833] EXT4-fs: Ignoring removed bh option
[   68.421162][ T5835] binder: 5834:5835 got transaction to invalid handle, 1
[   68.423973][ T5833] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   68.468985][ T5833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   68.506965][ T4341] EXT4-fs (loop2): unmounting filesystem.
[   68.532217][ T5844] device syzkaller0 entered promiscuous mode
[   68.633066][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   68.703906][ T5848] FAULT_INJECTION: forcing a failure.
[   68.703906][ T5848] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   68.706838][ T5848] CPU: 0 PID: 5848 Comm: syz.2.367 Not tainted syzkaller #0
[   68.708501][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   68.710677][ T5848] Call trace:
[   68.711443][ T5848]  dump_backtrace+0x1c4/0x1f0
[   68.712509][ T5848]  show_stack+0x2c/0x3c
[   68.713457][ T5848]  __dump_stack+0x30/0x40
[   68.714368][ T5848]  dump_stack_lvl+0xf4/0x15c
[   68.715356][ T5848]  dump_stack+0x1c/0x5c
[   68.716327][ T5848]  should_fail_ex+0x3cc/0x524
[   68.717329][ T5848]  should_fail+0x14/0x24
[   68.718239][ T5848]  should_fail_usercopy+0x20/0x30
[   68.719336][ T5848]  do_notify_resume+0x1194/0x2c84
[   68.720400][ T5848]  el0_svc+0x9c/0x12c
[   68.721250][ T5848]  el0t_64_sync_handler+0x84/0xf0
[   68.722361][ T5848]  el0t_64_sync+0x18c/0x190
[   68.766077][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.778002][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.788168][ T5828] device bridge_slave_0 entered promiscuous mode
[   68.793457][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.797479][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.818196][ T5828] device bridge_slave_1 entered promiscuous mode
[   68.841757][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.908695][ T5886] binder: BINDER_SET_CONTEXT_MGR already set
[   68.910361][ T5886] binder: 5884:5886 ioctl 4018620d 20000300 returned -16
[   68.927536][ T5888] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   68.933549][ T5888] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.376: path /73/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[   68.950593][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   68.962055][ T5891] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   68.965430][ T5891] EXT4-fs (loop0): invalid journal inode
[   68.966644][ T5891] EXT4-fs (loop0): can't get journal size
[   68.973345][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.989550][ T5891] EXT4-fs (loop0): 1 truncate cleaned up
[   68.992646][ T5891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   68.998329][ T5828] team0: Port device team_slave_0 added
[   69.012285][ T5828] team0: Port device team_slave_1 added
[   69.047025][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.049235][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.171443][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.363043][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[   69.369497][ T4343] Bluetooth: hci0: command 0x0c1a tx timeout
[   69.425125][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.426861][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.435562][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.470871][ T5828] device hsr_slave_0 entered promiscuous mode
[   69.500712][ T5828] device hsr_slave_1 entered promiscuous mode
[   69.532159][ T5922] set_capacity_and_notify: 4 callbacks suppressed
[   69.532168][ T5922] loop3: detected capacity change from 0 to 128
[   69.563709][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.566376][ T5828] Cannot create hsr debugfs directory
[   69.610677][ T3435] cfg80211: failed to load regulatory.db
[   69.899892][ T4336] Bluetooth: hci4: command 0x0c1a tx timeout
[   69.901487][ T4336] Bluetooth: hci2: command 0x0c1a tx timeout
[   69.903041][ T4336] Bluetooth: hci1: command 0x0c1a tx timeout
[   69.944513][ T4334] EXT4-fs (loop0): unmounting filesystem.
[   70.000700][ T5936] binder: BINDER_SET_CONTEXT_MGR already set
[   70.003667][ T5936] binder: 5935:5936 ioctl 4018620d 20000300 returned -16
[   70.047320][ T5940] loop1: detected capacity change from 0 to 512
[   70.055097][ T5940] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   70.099644][ T4343] Bluetooth: hci3: command 0x0409 tx timeout
[   70.624769][ T5828] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   70.645450][ T5974] loop3: detected capacity change from 0 to 512
[   70.651323][ T5828] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   70.654251][ T5971] loop0: detected capacity change from 0 to 512
[   70.664636][ T5971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   70.697105][ T4334] EXT4-fs (loop0): unmounting filesystem.
[   70.714523][ T5974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   70.733262][ T5828] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   70.762396][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'.
[   70.823122][ T5828] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   70.883928][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   70.887802][ T5996] loop0: detected capacity change from 0 to 256
[   70.984809][ T6001] binder: 5999:6001 ioctl c0306201 0 returned -14
[   70.997135][ T6001] binder: 5999:6001 got transaction to invalid handle, 1
[   70.998436][ T6001] binder_debug: 5 callbacks suppressed
[   70.998446][ T6001] binder: 6001:5999 cannot find target node
[   71.004610][ T6001] binder: 5999:6001 transaction async to 0:0 failed 113/29201/-22, size 72-24 line 3062
[   71.010222][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[   71.338534][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.365748][ T6013] loop1: detected capacity change from 0 to 512
[   71.376258][ T6013] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   71.393553][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   71.427854][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   71.432467][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.434401][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.436418][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.438652][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.449615][ T4343] Bluetooth: hci0: command 0x0406 tx timeout
[   71.452332][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.453921][ T5058] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.472441][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.483919][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.492104][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.493744][ T5058] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.499079][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.506379][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.512032][ T6028] loop1: detected capacity change from 0 to 1024
[   71.521314][ T6028] EXT4-fs: Ignoring removed oldalloc option
[   71.523486][ T6028] EXT4-fs: Ignoring removed orlov option
[   71.614958][ T6032] loop3: detected capacity change from 0 to 8
[   71.626591][ T6032] SQUASHFS error: lzo decompression failed, data probably corrupt
[   71.628385][ T6032] SQUASHFS error: Failed to read block 0x91: -5
[   71.629735][ T6032] SQUASHFS error: Unable to read metadata cache entry [8f]
[   71.631257][ T6032] SQUASHFS error: Unable to read inode 0x11f
[   71.908424][ T6028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   71.929631][ T4343] Bluetooth: hci1: command 0x0406 tx timeout
[   71.930830][ T4343] Bluetooth: hci2: command 0x0406 tx timeout
[   71.931987][ T4343] Bluetooth: hci4: command 0x0406 tx timeout
[   71.954650][ T6039] loop2: detected capacity change from 0 to 2048
[   71.971305][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   71.978584][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.996897][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.006155][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.015761][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.021804][ T6039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   72.023084][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.033732][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.036956][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.041735][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.044937][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.047953][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.120229][ T5828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.195217][ T4336] Bluetooth: hci3: command 0x041b tx timeout
[   72.393681][ T5117] device hsr_slave_0 left promiscuous mode
[   72.442465][ T4341] EXT4-fs (loop2): unmounting filesystem.
[   72.450932][ T5117] device hsr_slave_1 left promiscuous mode
[   72.488919][ T6064] binder: 6063:6064 ioctl c0306201 0 returned -14
[   72.500689][ T6064] binder: 6063:6064 got transaction to invalid handle, 1
[   72.503494][ T6064] binder: 6064:6063 cannot find target node
[   72.507186][ T6064] binder: 6063:6064 transaction async to 0:0 failed 117/29201/-22, size 72-24 line 3062
[   72.512545][ T3435] binder: undelivered TRANSACTION_ERROR: 29201
[   72.529733][ T5117] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.532823][ T5117] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.535554][ T5117] device bridge_slave_1 left promiscuous mode
[   72.539210][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.561918][ T5117] device bridge_slave_0 left promiscuous mode
[   72.565096][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.606475][ T6080] loop0: detected capacity change from 0 to 512
[   72.629185][ T6080] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   72.668438][ T4334] EXT4-fs (loop0): unmounting filesystem.
[   73.445110][ T6100] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   73.529377][ T4336] Bluetooth: hci0: command 0x0406 tx timeout
[   74.019372][ T4343] Bluetooth: hci4: command 0x0406 tx timeout
[   74.019544][ T4336] Bluetooth: hci2: command 0x0406 tx timeout
[   74.020725][ T4343] Bluetooth: hci1: command 0x0406 tx timeout
[   74.249397][ T4332] Bluetooth: hci3: command 0x040f tx timeout
[   74.541962][ T6113] binder: BINDER_SET_CONTEXT_MGR already set
[   74.543172][ T6113] binder: 6112:6113 ioctl 4018620d 20000300 returned -16
[   74.544834][ T6113] binder: 6112:6113 got transaction to invalid handle, 1
[   74.546195][ T6113] binder: 6113:6112 cannot find target node
[   74.547309][ T6113] binder: 6112:6113 transaction async to 0:0 failed 120/29201/-22, size 72-24 line 3062
[   74.552282][ T6113] binder: 6112:6113 DecRefs 0 refcount change on invalid ref 1 ret -22
[   74.553648][ T6113] binder: 6112:6113 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   74.555866][ T6113] binder: 6113 RLIMIT_NICE not set
[   74.781467][ T5117] team0 (unregistering): Port device team_slave_1 removed
[   74.940752][ T5117] team0 (unregistering): Port device team_slave_0 removed
[   75.099935][ T5117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.299882][ T5117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.372466][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[   75.584586][ T6119] 9pnet_fd: Insufficient options for proto=fd
[   75.608023][ T6119] set_capacity_and_notify: 2 callbacks suppressed
[   75.608042][ T6119] loop0: detected capacity change from 0 to 512
[   76.329409][ T4343] Bluetooth: hci3: command 0x0419 tx timeout
[   77.002186][ T5117] bond0 (unregistering): Released all slaves
[   77.280020][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[   77.283276][ T6121] ªªªªª»: renamed from dummy0
[   77.284254][ T6121] FAULT_INJECTION: forcing a failure.
[   77.284254][ T6121] name failslab, interval 1, probability 0, space 0, times 1
[   77.287103][ T6121] CPU: 0 PID: 6121 Comm: syz.0.429 Not tainted syzkaller #0
[   77.288613][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   77.290711][ T6121] Call trace:
[   77.291406][ T6121]  dump_backtrace+0x1c4/0x1f0
[   77.292477][ T6121]  show_stack+0x2c/0x3c
[   77.293392][ T6121]  __dump_stack+0x30/0x40
[   77.294248][ T6121]  dump_stack_lvl+0xf4/0x15c
[   77.295165][ T6121]  dump_stack+0x1c/0x5c
[   77.296075][ T6121]  should_fail_ex+0x3cc/0x524
[   77.297172][ T6121]  __should_failslab+0xc0/0x11c
[   77.298318][ T6121]  should_failslab+0x10/0x28
[   77.299351][ T6121]  __kmem_cache_alloc_node+0x7c/0x318
[   77.300497][ T6121]  kmalloc_trace+0x48/0x94
[   77.301409][ T6121]  kobject_uevent_env+0x258/0x88c
[   77.302541][ T6121]  kobject_rename+0x354/0x444
[   77.303588][ T6121]  device_rename+0x154/0x1a8
[   77.304528][ T6121]  dev_change_name+0x2cc/0x86c
[   77.305591][ T6121]  dev_ifsioc+0x370/0xc04
[   77.306575][ T6121]  dev_ioctl+0x298/0xc78
[   77.307494][ T6121]  sock_do_ioctl+0x198/0x258
[   77.308514][ T6121]  sock_ioctl+0x234/0x828
[   77.309453][ T6121]  __arm64_sys_ioctl+0x14c/0x1c8
[   77.310505][ T6121]  invoke_syscall+0x98/0x290
[   77.311604][ T6121]  el0_svc_common+0x13c/0x258
[   77.312645][ T6121]  do_el0_svc+0x5c/0x134
[   77.313522][ T6121]  el0_svc+0x58/0x12c
[   77.314392][ T6121]  el0t_64_sync_handler+0x84/0xf0
[   77.315510][ T6121]  el0t_64_sync+0x18c/0x190
[   77.327073][ T6128] loop2: detected capacity change from 0 to 8
[   77.343296][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   77.482417][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.484143][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.485928][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.525820][ T6142] device syzkaller0 entered promiscuous mode
[   77.647808][ T6151] loop0: detected capacity change from 0 to 512
[   78.070160][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.072748][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.075379][ T6155] device syzkaller0 entered promiscuous mode
[   78.077958][ T3435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.085970][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.088360][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.098409][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.103833][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.106122][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.177377][ T6180] binder: 6178:6180 got transaction to invalid handle, 1
[   78.178895][ T6180] binder: 6180:6178 cannot find target node
[   78.183092][ T6180] binder: 6178:6180 transaction async to 0:0 failed 124/29201/-22, size 72-24 line 3062
[   78.184010][ T5828] device veth0_vlan entered promiscuous mode
[   78.185707][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[   78.191719][ T5828] device veth1_vlan entered promiscuous mode
[   78.207405][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   78.209951][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   78.211648][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.213648][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.224739][ T5828] device veth0_macvtap entered promiscuous mode
[   78.230672][ T5828] device veth1_macvtap entered promiscuous mode
[   78.242005][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.244267][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.246749][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.248389][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.253854][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.255865][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.267585][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.283578][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.286498][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.287129][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.287225][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.287479][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.288967][ T5828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.288989][ T5828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.289002][ T5828] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.289012][ T5828] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.337972][ T6192] binder: 6191:6192 got transaction to invalid handle, 1
[   78.337988][ T6192] binder: 6192:6191 cannot find target node
[   78.337996][ T6192] binder: 6191:6192 transaction async to 0:0 failed 128/29201/-22, size 72-24 line 3062
[   78.338119][ T6192] binder: 6191:6192 DecRefs 0 refcount change on invalid ref 1 ret -22
[   78.338129][ T6192] binder: 6191:6192 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   78.338139][ T6192] binder: 6192 RLIMIT_NICE not set
[   78.363257][ T6194] loop2: detected capacity change from 0 to 512
[   78.384448][ T5058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.400022][ T5058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.420388][ T6194] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   78.434230][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.442815][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'.
[   78.455424][ T5058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.457148][ T5058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.458672][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.494229][ T6209] loop3: detected capacity change from 0 to 8
[   78.506336][ T4341] EXT4-fs (loop2): unmounting filesystem.
[   78.631516][ T6228] binder: 6226:6228 got transaction to invalid handle, 1
[   78.633236][ T6228] binder: 6228:6226 cannot find target node
[   78.634698][ T6228] binder: 6226:6228 transaction async to 0:0 failed 132/29201/-22, size 72-24 line 3062
[   78.664170][ T4376] binder: undelivered TRANSACTION_ERROR: 29201
[   78.700344][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.701970][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.818410][ T6248] loop0: detected capacity change from 0 to 512
[   78.852856][ T6248] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   78.855429][ T6248] EXT4-fs (loop0): orphan cleanup on readonly fs
[   78.857622][ T6248] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[   78.859681][ T6248] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   78.861709][ T6248] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.456: Failed to acquire dquot type 1
[   78.864678][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[   78.867021][ T6248] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.456: corrupted inode contents
[   78.869297][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[   78.870930][ T6248] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #16: comm syz.0.456: mark_inode_dirty error
[   78.873260][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[   78.874783][ T6248] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.456: corrupted inode contents
[   78.877196][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[   78.878391][ T6248] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.456: mark_inode_dirty error
[   78.881752][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[   78.883160][ T6248] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.456: corrupted inode contents
[   78.885824][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[   78.887128][ T6248] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   78.891971][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[   78.893259][ T6248] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.456: corrupted inode contents
[   78.898349][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[   78.899845][ T6248] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.456: mark_inode_dirty error
[   78.905697][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[   78.906788][ T6248] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   78.915162][ T6248] EXT4-fs (loop0): Remounting filesystem read-only
[   78.917165][ T6248] EXT4-fs (loop0): 1 truncate cleaned up
[   78.918381][ T6248] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   79.065704][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.078977][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.139115][ T3435] binder: undelivered TRANSACTION_ERROR: 29201
[   79.169181][ T6260] loop1: detected capacity change from 0 to 512
[   79.183766][ T6260] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   79.337197][ T6212] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.338959][ T6212] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.341097][ T6212] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.342806][ T6212] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.556505][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'.
[   79.590829][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   79.617117][ T6271] loop3: detected capacity change from 0 to 512
[   79.637050][ T6275] loop1: detected capacity change from 0 to 256
[   79.645281][ T6271] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   79.746713][ T4334] EXT4-fs (loop0): unmounting filesystem.
[   80.180604][ T6302] binder: 6301:6302 got transaction to invalid handle, 1
[   80.182135][ T6302] binder: 6302:6301 cannot find target node
[   81.015143][ T6302] binder: 6301:6302 DecRefs 0 refcount change on invalid ref 1 ret -22
[   81.016851][ T6302] binder: 6301:6302 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   81.019177][ T6302] binder: 6302 RLIMIT_NICE not set
[   81.296738][ T6328] loop3: detected capacity change from 0 to 512
[   81.321946][ T6328] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   81.343052][ T6332] loop0: detected capacity change from 0 to 512
[   81.476349][ T6332] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   81.478306][ T6332] EXT4-fs (loop0): orphan cleanup on readonly fs
[   81.484068][ T6332] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[   81.485886][ T6332] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   81.487680][ T6332] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.476: Failed to acquire dquot type 1
[   81.502234][ T6332] EXT4-fs (loop0): Remounting filesystem read-only
[   81.504309][ T6332] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.476: corrupted inode contents
[   81.510852][ T6332] EXT4-fs (loop0): Remounting filesystem read-only
[   81.512204][ T6332] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #16: comm syz.0.476: mark_inode_dirty error
[   81.518576][ T6343] 9pnet_fd: Insufficient options for proto=fd
[   81.523609][ T6343] loop3: detected capacity change from 0 to 512
[   81.524974][ T6332] EXT4-fs (loop0): Remounting filesystem read-only
[   81.535129][ T6332] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.476: corrupted inode contents
[   81.553338][ T6332] EXT4-fs (loop0): Remounting filesystem read-only
[   81.557986][ T6332] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.476: mark_inode_dirty error
[   81.571861][ T6332] EXT4-fs (loop0): Remounting filesystem read-only
[   81.575389][ T6332] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.476: corrupted inode contents
[   81.583430][ T6332] EXT4-fs (loop0): Remounting filesystem read-only
[   81.586908][ T6332] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   81.594428][ T6332] EXT4-fs (loop0): Remounting filesystem read-only
[   81.598961][ T6332] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.476: corrupted inode contents
[   81.614379][ T6332] EXT4-fs (loop0): Remounting filesystem read-only
[   81.618996][ T6332] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.476: mark_inode_dirty error
[   81.629428][ T6332] EXT4-fs (loop0): Remounting filesystem read-only
[   81.633979][ T6332] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   81.643642][ T6332] EXT4-fs (loop0): Remounting filesystem read-only
[   81.647400][ T6332] EXT4-fs (loop0): 1 truncate cleaned up
[   81.651733][ T6332] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   82.129147][ T6378] loop1: detected capacity change from 0 to 512
[   82.232310][ T4334] EXT4-fs (loop0): unmounting filesystem.
[   82.254010][ T6388] loop0: detected capacity change from 0 to 256
[   82.680638][ T6396] device syzkaller0 entered promiscuous mode
[   82.731658][ T3435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.142450][ T6421] loop0: detected capacity change from 0 to 512
[   83.160799][ T6421] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   83.163072][ T6421] EXT4-fs (loop0): orphan cleanup on readonly fs
[   83.165542][ T6421] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[   83.167707][ T6421] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   83.169662][ T6421] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.492: Failed to acquire dquot type 1
[   83.173899][ T6421] EXT4-fs (loop0): Remounting filesystem read-only
[   83.175956][ T6421] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.492: corrupted inode contents
[   83.178664][ T6421] EXT4-fs (loop0): Remounting filesystem read-only
[   83.180412][ T6421] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #16: comm syz.0.492: mark_inode_dirty error
[   83.182683][ T6421] EXT4-fs (loop0): Remounting filesystem read-only
[   83.184053][ T6421] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.492: corrupted inode contents
[   83.186918][ T6421] EXT4-fs (loop0): Remounting filesystem read-only
[   83.188312][ T6421] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.492: mark_inode_dirty error
[   83.192981][ T6421] EXT4-fs (loop0): Remounting filesystem read-only
[   83.194625][ T6421] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.492: corrupted inode contents
[   83.197792][ T6421] EXT4-fs (loop0): Remounting filesystem read-only
[   83.199279][ T6421] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   83.201895][ T6421] EXT4-fs (loop0): Remounting filesystem read-only
[   83.203408][ T6421] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.492: corrupted inode contents
[   83.206357][ T6421] EXT4-fs (loop0): Remounting filesystem read-only
[   83.207831][ T6421] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.492: mark_inode_dirty error
[   83.211689][ T6421] EXT4-fs (loop0): Remounting filesystem read-only
[   83.213175][ T6421] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   83.215408][ T6421] EXT4-fs (loop0): Remounting filesystem read-only
[   83.217079][ T6421] EXT4-fs (loop0): 1 truncate cleaned up
[   83.218533][ T6421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   83.866106][ T6437] device syzkaller0 entered promiscuous mode
[   83.908877][ T6435] 9pnet_fd: Insufficient options for proto=fd
[   83.914711][ T6435] loop3: detected capacity change from 0 to 512
[   84.043944][ T6444] loop5: detected capacity change from 0 to 512
[   84.306431][ T4334] EXT4-fs (loop0): unmounting filesystem.
[   84.429791][ T6454] device syzkaller0 entered promiscuous mode
[   84.435409][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.934995][ T6471] loop0: detected capacity change from 0 to 512
[   85.257419][ T6471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   85.261452][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'.
[   85.278623][ T4334] EXT4-fs (loop0): unmounting filesystem.
[   85.395166][ T6491] loop2: detected capacity change from 0 to 512
[   85.407806][ T6491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   85.449779][ T4341] EXT4-fs (loop2): unmounting filesystem.
[   85.654170][ T6494] 9pnet_fd: Insufficient options for proto=fd
[   85.771133][ T6512] EXT4-fs (loop2): Test dummy encryption mode enabled
[   85.777360][ T6512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[   85.786360][ T6512] System zones: 1-3, 19-19, 35-36
[   85.787970][ T6512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   85.793783][ T6512] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[   85.805816][ T6512] EXT4-fs (loop2): unmounting filesystem.
[   85.823405][ T6515] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   85.835252][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.520'.
[   85.873701][ T5828] EXT4-fs (loop5): unmounting filesystem.
[   86.066259][ T6541] EXT4-fs: Ignoring removed oldalloc option
[   86.067527][ T6541] EXT4-fs: Ignoring removed orlov option
[   86.143669][ T6541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   86.166822][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   86.232653][ T6538] 9pnet_fd: Insufficient options for proto=fd
[   86.238142][ T6549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   86.268175][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'.
[   86.287679][ T6555] capability: warning: `syz.3.535' uses deprecated v2 capabilities in a way that may be insecure
[   86.313307][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   86.320386][ T6558] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[   86.493087][ T6577] set_capacity_and_notify: 5 callbacks suppressed
[   86.493096][ T6577] loop1: detected capacity change from 0 to 1024
[   86.501224][ T6577] EXT4-fs: Ignoring removed oldalloc option
[   86.502716][ T6577] EXT4-fs: Ignoring removed orlov option
[   86.526345][ T6577] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   86.577885][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   86.766550][ T6583] 9pnet_fd: Insufficient options for proto=fd
[   86.958964][ T6617] tc_dump_action: action bad kind
[   86.994249][ T6619] loop0: detected capacity change from 0 to 4096
[   87.006815][ T6619] EXT4-fs: inline encryption not supported
[   87.008096][ T6619] ext4: Unknown parameter 'nouser_xattr'
[   87.548186][ T6644] device syzkaller0 entered promiscuous mode
[   87.703523][ T6649] loop1: detected capacity change from 0 to 1024
[   87.713468][ T6649] EXT4-fs: Ignoring removed oldalloc option
[   87.714762][ T6649] EXT4-fs: Ignoring removed orlov option
[   87.727189][ T6649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   87.745223][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   87.863214][ T6663] binder: 6662:6663 IncRefs 0 refcount change on invalid ref 0 ret -22
[   87.867384][ T6663] binder: 6662:6663 got transaction to invalid handle, 1
[   87.870391][ T6663] binder_debug: 2 callbacks suppressed
[   87.870404][ T6663] binder: 6663:6662 cannot find target node
[   87.873079][ T6663] binder: 6662:6663 transaction async to 0:0 failed 139/29201/-22, size 72-24 line 3062
[   87.875357][ T6663] binder: 6662:6663 DecRefs 0 refcount change on invalid ref 1 ret -22
[   87.877367][ T6663] binder: 6662:6663 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   87.882847][ T6663] binder: 6663 RLIMIT_NICE not set
[   88.375724][ T6681] loop0: detected capacity change from 0 to 1024
[   88.390658][ T6681] EXT4-fs: Ignoring removed oldalloc option
[   88.392681][ T6681] EXT4-fs: Ignoring removed orlov option
[   88.414236][ T6681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   88.429727][ T4334] EXT4-fs (loop0): unmounting filesystem.
[   88.657783][ T6695] FAULT_INJECTION: forcing a failure.
[   88.657783][ T6695] name failslab, interval 1, probability 0, space 0, times 0
[   88.661732][ T6695] CPU: 0 PID: 6695 Comm: syz.1.588 Not tainted syzkaller #0
[   88.663242][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   88.665605][ T6695] Call trace:
[   88.666376][ T6695]  dump_backtrace+0x1c4/0x1f0
[   88.667482][ T6695]  show_stack+0x2c/0x3c
[   88.668363][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[   88.668384][ T6695]  __dump_stack+0x30/0x40
[   88.670618][ T6695]  dump_stack_lvl+0xf4/0x15c
[   88.671654][ T6695]  dump_stack+0x1c/0x5c
[   88.672674][ T6695]  should_fail_ex+0x3cc/0x524
[   88.673796][ T6695]  __should_failslab+0xc0/0x11c
[   88.674990][ T6695]  should_failslab+0x10/0x28
[   88.675958][ T6695]  __kmem_cache_alloc_node+0x7c/0x318
[   88.677208][ T6695]  kmalloc_trace+0x48/0x94
[   88.678220][ T6695]  nf_tables_newchain+0x1720/0x1fe4
[   88.679391][ T6695]  nfnetlink_rcv+0xc7c/0x1c54
[   88.680491][ T6695]  netlink_unicast+0x5fc/0x80c
[   88.681565][ T6695]  netlink_sendmsg+0x6f0/0x9d8
[   88.682682][ T6695]  ____sys_sendmsg+0x588/0x90c
[   88.683621][ T6695]  __sys_sendmsg+0x288/0x374
[   88.684552][ T6695]  __arm64_sys_sendmsg+0x80/0x94
[   88.685578][ T6695]  invoke_syscall+0x98/0x290
[   88.686668][ T6695]  el0_svc_common+0x13c/0x258
[   88.687601][ T6695]  do_el0_svc+0x5c/0x134
[   88.688576][ T6695]  el0_svc+0x58/0x12c
[   88.689479][ T6695]  el0t_64_sync_handler+0x84/0xf0
[   88.690423][ T6695]  el0t_64_sync+0x18c/0x190
[   88.806331][ T6699] loop3: detected capacity change from 0 to 512
[   88.922446][ T6720] loop1: detected capacity change from 0 to 1024
[   88.943672][ T6720] EXT4-fs: Ignoring removed oldalloc option
[   88.945290][ T6720] EXT4-fs: Ignoring removed orlov option
[   88.978629][ T6720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   88.988128][ T6729] loop5: detected capacity change from 0 to 512
[   89.016319][ T6729] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   89.018933][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   89.020088][ T6729] EXT4-fs (loop5): orphan cleanup on readonly fs
[   89.030326][ T6729] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[   89.032647][ T6729] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[   89.036416][ T6729] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.596: Failed to acquire dquot type 1
[   89.039876][ T6729] EXT4-fs (loop5): Remounting filesystem read-only
[   89.042483][ T6729] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.596: corrupted inode contents
[   89.045604][ T6729] EXT4-fs (loop5): Remounting filesystem read-only
[   89.047336][ T6729] EXT4-fs error (device loop5): ext4_dirty_inode:6166: inode #16: comm syz.5.596: mark_inode_dirty error
[   89.059749][ T6729] EXT4-fs (loop5): Remounting filesystem read-only
[   89.061965][ T6729] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.596: corrupted inode contents
[   89.067930][ T6729] EXT4-fs (loop5): Remounting filesystem read-only
[   89.070919][ T6729] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.596: mark_inode_dirty error
[   89.076726][ T6729] EXT4-fs (loop5): Remounting filesystem read-only
[   89.079901][ T6729] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.596: corrupted inode contents
[   89.085614][ T6729] EXT4-fs (loop5): Remounting filesystem read-only
[   89.087948][ T6729] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[   89.092806][ T6729] EXT4-fs (loop5): Remounting filesystem read-only
[   89.095213][ T6729] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.596: corrupted inode contents
[   89.101394][ T6729] EXT4-fs (loop5): Remounting filesystem read-only
[   89.103705][ T6729] EXT4-fs error (device loop5): ext4_truncate:4325: inode #16: comm syz.5.596: mark_inode_dirty error
[   89.108269][ T6729] EXT4-fs (loop5): Remounting filesystem read-only
[   89.111021][ T6729] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[   89.113507][ T6729] EXT4-fs (loop5): Remounting filesystem read-only
[   89.114155][ T6739] Cannot find map_set index 0 as target
[   89.116329][ T6729] EXT4-fs (loop5): 1 truncate cleaned up
[   89.117773][ T6729] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   89.143197][ T6742] loop1: detected capacity change from 0 to 512
[   89.178357][ T6742] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   89.185990][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'.
[   89.207621][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   89.353869][ T6765] binder: 6764:6765 IncRefs 0 refcount change on invalid ref 0 ret -22
[   89.357274][ T6765] binder: 6764:6765 got transaction to invalid handle, 1
[   89.358892][ T6765] binder: 6765:6764 cannot find target node
[   89.360677][ T6765] binder: 6764:6765 transaction async to 0:0 failed 142/29201/-22, size 72-24 line 3062
[   89.363100][ T6765] binder: 6764:6765 DecRefs 0 refcount change on invalid ref 1 ret -22
[   89.364923][ T6765] binder: 6764:6765 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   89.367649][ T6765] binder: 6765 RLIMIT_NICE not set
[   89.553469][ T6769] loop3: detected capacity change from 0 to 256
[   90.003651][ T5828] EXT4-fs (loop5): unmounting filesystem.
[   90.047793][ T6781] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   90.185070][ T3435] binder: undelivered TRANSACTION_ERROR: 29201
[   90.212172][ T6787] 9pnet_fd: Insufficient options for proto=fd
[   90.261999][ T6792] syz.5.611: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0
[   90.265295][ T6792] CPU: 1 PID: 6792 Comm: syz.5.611 Not tainted syzkaller #0
[   90.266783][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   90.268944][ T6792] Call trace:
[   90.269667][ T6792]  dump_backtrace+0x1c4/0x1f0
[   90.270749][ T6792]  show_stack+0x2c/0x3c
[   90.271729][ T6792]  __dump_stack+0x30/0x40
[   90.272745][ T6792]  dump_stack_lvl+0xf4/0x15c
[   90.273694][ T6792]  dump_stack+0x1c/0x5c
[   90.274614][ T6792]  warn_alloc+0x214/0x324
[   90.275547][ T6792]  __vmalloc_node_range+0x118/0xe70
[   90.276748][ T6792]  vmalloc+0x9c/0xd4
[   90.277685][ T6792]  dvb_dmxdev_set_buffer_size+0xc8/0x1b0
[   90.278936][ T6792]  dvb_demux_do_ioctl+0x3fc/0x4d8
[   90.279976][ T6792]  dvb_usercopy+0x248/0x45c
[   90.280852][ T6792]  dvb_demux_ioctl+0x3c/0x54
[   90.281741][ T6792]  __arm64_sys_ioctl+0x14c/0x1c8
[   90.282706][ T6792]  invoke_syscall+0x98/0x290
[   90.283651][ T6792]  el0_svc_common+0x13c/0x258
[   90.284725][ T6792]  do_el0_svc+0x5c/0x134
[   90.285615][ T6792]  el0_svc+0x58/0x12c
[   90.286425][ T6792]  el0t_64_sync_handler+0x84/0xf0
[   90.287404][ T6792]  el0t_64_sync+0x18c/0x190
[   90.297771][ T6792] Mem-Info:
[   90.298402][ T6792] active_anon:8553 inactive_anon:0 isolated_anon:0
[   90.298402][ T6792]  active_file:5034 inactive_file:2105 isolated_file:0
[   90.298402][ T6792]  unevictable:768 dirty:264 writeback:0
[   90.298402][ T6792]  slab_reclaimable:19338 slab_unreclaimable:91828
[   90.298402][ T6792]  mapped:32330 shmem:4009 pagetables:714
[   90.298402][ T6792]  sec_pagetables:0 bounce:0
[   90.298402][ T6792]  kernel_misc_reclaimable:0
[   90.298402][ T6792]  free:1440475 free_pcp:4436 free_cma:7360
[   90.307900][ T6792] Node 0 active_anon:35112kB inactive_anon:0kB active_file:20136kB inactive_file:8420kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:130220kB dirty:1056kB writeback:0kB shmem:16936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8732kB pagetables:2856kB sec_pagetables:0kB all_unreclaimable? no
[   90.315277][ T6792] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB
[   90.321890][ T6792] lowmem_reserve[]: 0 0 3532 3532 3532
[   90.323024][ T6792] Node 0 Normal free:2684028kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:35212kB inactive_anon:0kB active_file:20136kB inactive_file:8420kB unevictable:3072kB writepending:1056kB present:5242880kB managed:3620620kB mlocked:0kB bounce:0kB free_pcp:17908kB local_pcp:14348kB free_cma:0kB
[   90.329621][ T6792] lowmem_reserve[]: 0 0 0 0 0
[   90.330562][ T6792] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB
[   90.333653][ T6792] Node 0 Normal: 122*4kB (UME) 385*8kB (UME) 61*16kB (UE) 52*32kB (UM) 3*64kB (UE) 29*128kB (UME) 24*256kB (M) 18*512kB (UM) 10*1024kB (UME) 9*2048kB (UME) 642*4096kB (M) = 2683776kB
[   90.337048][ T6792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   90.339093][ T6792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[   90.341275][ T6792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   90.350135][ T6792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[   90.352326][ T6792] 11948 total pagecache pages
[   90.354954][ T6792] 0 pages in swap cache
[   90.355752][ T6792] Free swap  = 124996kB
[   90.356850][ T6792] Total swap = 124996kB
[   90.357646][ T6792] 2097152 pages RAM
[   90.358524][ T6792] 0 pages HighMem/MovableOnly
[   90.359456][ T6792] 421949 pages reserved
[   90.361652][ T6792] 8192 pages cma reserved
[   90.365453][ T6792] 0 pages hwpoisoned
[   90.411824][ T6802] loop1: detected capacity change from 0 to 128
[   90.533635][ T6808] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   90.535881][ T6808] EXT4-fs (loop5): orphan cleanup on readonly fs
[   90.538362][ T6808] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[   90.540778][ T6808] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[   90.542615][ T6808] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.617: Failed to acquire dquot type 1
[   90.546042][ T6808] EXT4-fs (loop5): Remounting filesystem read-only
[   90.833108][ T6808] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.617: corrupted inode contents
[   90.836502][ T6808] EXT4-fs (loop5): Remounting filesystem read-only
[   90.838679][ T6808] EXT4-fs error (device loop5): ext4_dirty_inode:6166: inode #16: comm syz.5.617: mark_inode_dirty error
[   90.844011][ T6808] EXT4-fs (loop5): Remounting filesystem read-only
[   90.845519][ T6808] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.617: corrupted inode contents
[   90.848879][ T6808] EXT4-fs (loop5): Remounting filesystem read-only
[   90.851442][ T6808] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.617: mark_inode_dirty error
[   90.853919][ T6808] EXT4-fs (loop5): Remounting filesystem read-only
[   90.855429][ T6808] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.617: corrupted inode contents
[   90.858101][ T6808] EXT4-fs (loop5): Remounting filesystem read-only
[   90.868429][ T6808] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[   90.873691][ T6808] EXT4-fs (loop5): Remounting filesystem read-only
[   90.875950][ T6808] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.617: corrupted inode contents
[   90.880618][ T6808] EXT4-fs (loop5): Remounting filesystem read-only
[   90.881937][ T6808] EXT4-fs error (device loop5): ext4_truncate:4325: inode #16: comm syz.5.617: mark_inode_dirty error
[   90.884572][ T6808] EXT4-fs (loop5): Remounting filesystem read-only
[   90.885787][ T6808] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[   90.890707][ T6808] EXT4-fs (loop5): Remounting filesystem read-only
[   90.893021][ T6808] EXT4-fs (loop5): 1 truncate cleaned up
[   90.894286][ T6808] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   90.903709][ T6815] EXT4-fs: Ignoring removed oldalloc option
[   90.905292][ T6815] EXT4-fs: Ignoring removed orlov option
[   90.925252][ T6815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   90.954133][ T4328] EXT4-fs (loop3): unmounting filesystem.
[   91.001267][ T6820] device syzkaller0 entered promiscuous mode
[   91.194546][ T6827] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   91.433353][ T6846] 9pnet_fd: Insufficient options for proto=fd
[   91.715201][ T5828] EXT4-fs (loop5): unmounting filesystem.
[   92.007772][ T6868] set_capacity_and_notify: 3 callbacks suppressed
[   92.007894][ T6868] loop5: detected capacity change from 0 to 512
[   92.054170][ T6868] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   92.059668][ T6867] 
[   92.060135][ T6867] ======================================================
[   92.061599][ T6867] WARNING: possible circular locking dependency detected
[   92.062983][ T6867] syzkaller #0 Not tainted
[   92.063888][ T6867] ------------------------------------------------------
[   92.065190][ T6867] syz.5.632/6867 is trying to acquire lock:
[   92.066340][ T6867] ffff0000f7270288 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x720/0x160c
[   92.068458][ T6867] 
[   92.068458][ T6867] but task is already holding lock:
[   92.070191][ T6867] ffff0000dc682208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x114/0x180
[   92.072341][ T6867] 
[   92.072341][ T6867] which lock already depends on the new lock.
[   92.072341][ T6867] 
[   92.074539][ T6867] 
[   92.074539][ T6867] the existing dependency chain (in reverse order) is:
[   92.076369][ T6867] 
[   92.076369][ T6867] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[   92.077924][ T6867]        down_read+0x64/0x300
[   92.078953][ T6867]        v2_read_dquot+0x4c/0x118
[   92.079910][ T6867]        dquot_acquire+0x108/0x4b8
[   92.080998][ T6867]        ext4_acquire_dquot+0x270/0x420
[   92.082229][ T6867]        dqget+0x638/0xa98
[   92.083214][ T6867]        __dquot_initialize+0x2e4/0xb30
[   92.084463][ T6867]        dquot_initialize+0x24/0x34
[   92.085517][ T6867]        ext4_process_orphan+0x5c/0x2c0
[   92.086812][ T6867]        ext4_orphan_cleanup+0xabc/0x1204
[   92.087988][ T6867]        ext4_fill_super+0x5afc/0x63bc
[   92.089097][ T6867]        get_tree_bdev+0x35c/0x54c
[   92.090228][ T6867]        ext4_get_tree+0x28/0x38
[   92.090248][ T6867]        vfs_get_tree+0x90/0x278
[   92.090256][ T6867]        do_new_mount+0x228/0x804
[   92.090264][ T6867]        path_mount+0x5ac/0xe6c
[   92.094497][ T6867]        __arm64_sys_mount+0x4a0/0x5a0
[   92.095754][ T6867]        invoke_syscall+0x98/0x290
[   92.096939][ T6867]        el0_svc_common+0x13c/0x258
[   92.098131][ T6867]        do_el0_svc+0x5c/0x134
[   92.099178][ T6867]        el0_svc+0x58/0x12c
[   92.100232][ T6867]        el0t_64_sync_handler+0x84/0xf0
[   92.101490][ T6867]        el0t_64_sync+0x18c/0x190
[   92.102705][ T6867] 
[   92.102705][ T6867] -> #1 (&dquot->dq_lock){+.+.}-{3:3}:
[   92.104408][ T6867]        __mutex_lock_common+0x1a0/0x1f3c
[   92.105748][ T6867]        mutex_lock_nested+0x38/0x44
[   92.106910][ T6867]        dquot_commit+0x54/0x1c8
[   92.107969][ T6867]        ext4_write_dquot+0x1b4/0x320
[   92.109112][ T6867]        ext4_mark_dquot_dirty+0xe8/0x150
[   92.110346][ T6867]        mark_all_dquot_dirty+0x108/0x424
[   92.111578][ T6867]        __dquot_alloc_space+0x564/0xcfc
[   92.112865][ T6867]        ext4_mb_new_blocks+0xd40/0x4244
[   92.114103][ T6867]        ext4_ext_map_blocks+0x1330/0x563c
[   92.115284][ T6867]        ext4_map_blocks+0x7b0/0x160c
[   92.116469][ T6867]        _ext4_get_block+0x198/0x4dc
[   92.117686][ T6867]        ext4_get_block_unwritten+0x3c/0x110
[   92.119055][ T6867]        __block_write_begin_int+0x3d8/0x13c0
[   92.120459][ T6867]        block_page_mkwrite+0x290/0x33c
[   92.121758][ T6867]        ext4_page_mkwrite+0x364/0x10b0
[   92.123061][ T6867]        do_page_mkwrite+0x140/0x35c
[   92.124291][ T6867]        wp_page_shared+0x14c/0x544
[   92.125337][ T6867]        do_wp_page+0xc88/0xed4
[   92.126414][ T6867]        handle_mm_fault+0x1520/0x3018
[   92.127595][ T6867]        do_page_fault+0x310/0x99c
[   92.128624][ T6867]        do_mem_abort+0x70/0x198
[   92.129640][ T6867]        el0_da+0x74/0x14c
[   92.130490][ T6867]        el0t_64_sync_handler+0x90/0xf0
[   92.131713][ T6867]        el0t_64_sync+0x18c/0x190
[   92.132806][ T6867] 
[   92.132806][ T6867] -> #0 (&ei->i_data_sem/2){++++}-{3:3}:
[   92.134629][ T6867]        __lock_acquire+0x3504/0x7280
[   92.135803][ T6867]        lock_acquire+0x210/0x63c
[   92.136833][ T6867]        down_write+0x5c/0x88
[   92.137863][ T6867]        ext4_map_blocks+0x720/0x160c
[   92.139069][ T6867]        ext4_getblk+0x178/0x680
[   92.140168][ T6867]        ext4_bread+0x3c/0x1a8
[   92.141263][ T6867]        ext4_quota_write+0x200/0x544
[   92.142430][ T6867]        get_free_dqblk+0x27c/0x570
[   92.143541][ T6867]        do_insert_tree+0x1ec/0xc68
[   92.144581][ T6867]        do_insert_tree+0x7dc/0xc68
[   92.145665][ T6867]        do_insert_tree+0x7b0/0xc68
[   92.146660][ T6867]        qtree_write_dquot+0x3d4/0x4e4
[   92.147730][ T6867]        v2_write_dquot+0xf0/0x180
[   92.148803][ T6867]        dquot_acquire+0x280/0x4b8
[   92.149831][ T6867]        ext4_acquire_dquot+0x270/0x420
[   92.151032][ T6867]        dqget+0x638/0xa98
[   92.151860][ T6867]        __dquot_initialize+0x280/0xb30
[   92.152985][ T6867]        dquot_initialize+0x24/0x34
[   92.154015][ T6867]        ext4_create+0x9c/0x410
[   92.154999][ T6867]        path_openat+0xda8/0x27a0
[   92.156128][ T6867]        do_filp_open+0x198/0x38c
[   92.157229][ T6867]        do_sys_openat2+0x134/0x3fc
[   92.158200][ T6867]        __arm64_sys_openat+0x11c/0x150
[   92.159244][ T6867]        invoke_syscall+0x98/0x290
[   92.160307][ T6867]        el0_svc_common+0x13c/0x258
[   92.161405][ T6867]        do_el0_svc+0x5c/0x134
[   92.162485][ T6867]        el0_svc+0x58/0x12c
[   92.163519][ T6867]        el0t_64_sync_handler+0x84/0xf0
[   92.164706][ T6867]        el0t_64_sync+0x18c/0x190
[   92.165710][ T6867] 
[   92.165710][ T6867] other info that might help us debug this:
[   92.165710][ T6867] 
[   92.167891][ T6867] Chain exists of:
[   92.167891][ T6867]   &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem
[   92.167891][ T6867] 
[   92.170592][ T6867]  Possible unsafe locking scenario:
[   92.170592][ T6867] 
[   92.172066][ T6867]        CPU0                    CPU1
[   92.173130][ T6867]        ----                    ----
[   92.174227][ T6867]   lock(&s->s_dquot.dqio_sem);
[   92.175239][ T6867]                                lock(&dquot->dq_lock);
[   92.176721][ T6867]                                lock(&s->s_dquot.dqio_sem);
[   92.178210][ T6867]   lock(&ei->i_data_sem/2);
[   92.179154][ T6867] 
[   92.179154][ T6867]  *** DEADLOCK ***
[   92.179154][ T6867] 
[   92.180916][ T6867] 4 locks held by syz.5.632/6867:
[   92.182007][ T6867]  #0: ffff0000dc682460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[   92.183875][ T6867]  #1: ffff0000f7275440 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: path_openat+0x5dc/0x27a0
[   92.185951][ T6867]  #2: ffff0000f72b87a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x60/0x4b8
[   92.187977][ T6867]  #3: ffff0000dc682208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x114/0x180
[   92.190209][ T6867] 
[   92.190209][ T6867] stack backtrace:
[   92.191475][ T6867] CPU: 0 PID: 6867 Comm: syz.5.632 Not tainted syzkaller #0
[   92.192860][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
[   92.194831][ T6867] Call trace:
[   92.195471][ T6867]  dump_backtrace+0x1c4/0x1f0
[   92.196401][ T6867]  show_stack+0x2c/0x3c
[   92.197233][ T6867]  __dump_stack+0x30/0x40
[   92.198172][ T6867]  dump_stack_lvl+0xf4/0x15c
[   92.199165][ T6867]  dump_stack+0x1c/0x5c
[   92.200001][ T6867]  print_circular_bug+0x148/0x1b0
[   92.201147][ T6867]  check_noncircular+0x290/0x370
[   92.202265][ T6867]  __lock_acquire+0x3504/0x7280
[   92.203206][ T6867]  lock_acquire+0x210/0x63c
[   92.204107][ T6867]  down_write+0x5c/0x88
[   92.204940][ T6867]  ext4_map_blocks+0x720/0x160c
[   92.206080][ T6867]  ext4_getblk+0x178/0x680
[   92.206943][ T6867]  ext4_bread+0x3c/0x1a8
[   92.207831][ T6867]  ext4_quota_write+0x200/0x544
[   92.208804][ T6867]  get_free_dqblk+0x27c/0x570
[   92.209788][ T6867]  do_insert_tree+0x1ec/0xc68
[   92.210646][ T6867]  do_insert_tree+0x7dc/0xc68
[   92.211664][ T6867]  do_insert_tree+0x7b0/0xc68
[   92.212570][ T6867]  qtree_write_dquot+0x3d4/0x4e4
[   92.213590][ T6867]  v2_write_dquot+0xf0/0x180
[   92.214553][ T6867]  dquot_acquire+0x280/0x4b8
[   92.215496][ T6867]  ext4_acquire_dquot+0x270/0x420
[   92.216559][ T6867]  dqget+0x638/0xa98
[   92.217379][ T6867]  __dquot_initialize+0x280/0xb30
[   92.218338][ T6867]  dquot_initialize+0x24/0x34
[   92.219262][ T6867]  ext4_create+0x9c/0x410
[   92.220160][ T6867]  path_openat+0xda8/0x27a0
[   92.221079][ T6867]  do_filp_open+0x198/0x38c
[   92.222015][ T6867]  do_sys_openat2+0x134/0x3fc
[   92.222973][ T6867]  __arm64_sys_openat+0x11c/0x150
[   92.223976][ T6867]  invoke_syscall+0x98/0x290
[   92.225024][ T6867]  el0_svc_common+0x13c/0x258
[   92.226105][ T6867]  do_el0_svc+0x5c/0x134
[   92.227006][ T6867]  el0_svc+0x58/0x12c
[   92.227808][ T6867]  el0t_64_sync_handler+0x84/0xf0
[   92.228789][ T6867]  el0t_64_sync+0x18c/0x190
[   92.611333][ T5828] EXT4-fs (loop5): unmounting filesystem.