last executing test programs:

10.79810122s ago: executing program 2 (id=790):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x3e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8)
r9 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08802, &(0x7f0000000140)=ANY=[], 0x1, 0x67b, &(0x7f0000001540)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)=ANY=[], 0xb2, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
r10 = dup(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xff, 0x9, 0x8f, 0x10, r10, 0xfffface1, '\x00', r7, r10, 0x4, 0x2, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESDEC=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000008300000000000000070200010fffffffb7030000080000e1b60400000000000085000000010000009585d8de5d04cbb1494cd31b6e2229b79d7f309c2564b637dead5e61571dd3042cf01cdea29f3184f6cc38d0a269f498fe06ec413099b7a9c3aab43743f2f3ea8df85400009bef6345ee0d7f0b5a82f60f53977f73015f93aa33f7fd061096cfd3134f916b413f74b0faa88abf0a805bf98083d5d813cb96184ff16d37c98bfc871d12d4fd29602f955861fcdd6acef5a70db4f361c1ea95b18ce8651ab6", @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES8=r9, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES64=r9], 0x5c, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x6}, 0x48)

9.090099976s ago: executing program 2 (id=794):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bind$l2tp(0xffffffffffffffff, 0x0, 0x0)
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40010020, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})

8.009850737s ago: executing program 4 (id=798):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}, @IFLA_BROADCAST={0xffffffffffffffd7, 0x2, @remote}]}, 0x3c}}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)={0x1, 0x40000000000000, 0x0, 0x7})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4015}, 0x40800)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x5}, 0x48)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'vlan0\x00'})
unshare(0x62040200)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000100)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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")
statfs(0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32], 0x28}}, 0x0)
finit_module(r2, 0x0, 0x0)
ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000180)={0x5, 0x1, 0x54fd, 0x9, 0x5})

8.008302148s ago: executing program 0 (id=808):
r0 = io_uring_setup(0x3b4a, &(0x7f0000000ac0))
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x9)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3)
sendmsg(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="e4", 0x1}], 0x1}, 0xc051)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0xd0, 0x19, 0x542c, 0xd0, 0x3200, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xffffffff, 'bond_slave_0\x00', 'wg0\x00'}, 0x32020000, 0x70, 0xd0, 0x6400, {0x500000000000000, 0xffffffffa0028000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0xffff}}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'bridge_slave_0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000180)=0x200, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x3)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7.875573449s ago: executing program 3 (id=799):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe)
read(r1, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x5040, &(0x7f0000000200)={[{@gid={'gid', 0x3d, 0xee01}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78]}}, {@huge_always}, {@inode32}, {@huge_within_size}, {@grpquota}, {@mode={'mode', 0x3d, 0xf7}}, {@huge_within_size}, {@noswap}], [{@uid_gt={'uid>', r2}}]})
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x6}, {0x7120, 0x7, 0x1}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x40, 0xfffffffc, 0x0, 0x2, 0x20, 0x0, 0x32f, 0x0, 0x0, 0x2, 0x3})

7.777602547s ago: executing program 0 (id=800):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r1, 0x6, &(0x7f00000001c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000540)=ANY=[@ANYBLOB="30000000d003d435ce6c1f90cdc82e51dfcb1001045b524839112627", @ANYRES16=r7, @ANYRESHEX=r6], 0x30}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
r10 = socket(0x1e, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000f000300000000002f6613f89c21025635046580bea52ae15f3e", @ANYRES32=r11, @ANYBLOB="080034000000000005003500000000000500330000000000"], 0x34}}, 0x0)
r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000010000"], 0x5c}, 0x1, 0xf000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001", @ANYRES64=r4], 0x50}}, 0x8001)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x1c0)
sendmsg$NFT_MSG_GETCHAIN(r13, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000040a"], 0x3c}}, 0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r14)

7.709518223s ago: executing program 3 (id=802):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000001010400000000000000000a0000003c0002802c00018015000300a0430a11fe8000000000000000000000000000aa1400040000000000000000010c00028005000200000000002200000000000000a5765f4e939920137d9cd686de41f65731cd0057491c4c2cee4e78db3251d37f"], 0x50}}, 0x0)
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000064c0)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x6180, &(0x7f000000df40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0xfffffd01, 0x0, 0xb, 0x201}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r6, @ANYBLOB="00022bbd7000fedbdf250500000008000400070000000800030004000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x48005)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_emit_ethernet(0xc6, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6007000000903afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000180400d414ce8ad48b29bc0ace1fe0ae3b9068bcf462125fca2560c049f6ee8b180aa78ce54406598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8ada48006dd1488b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af19020001005ff92900ddab499202090035ebefb31c7c7f4fcf35cf64bbd9e8dd8c2630822ea3528b55b76957a4b531c5fd3af9af"], 0x0)
write$binfmt_script(r7, &(0x7f0000000380), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r8, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000005d40)='./file0\x00', 0x1004044, &(0x7f0000000700)=ANY=[@ANYRES64=r9], 0xff, 0x5e17, &(0x7f000000c740)="$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")
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1063)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
fdatasync(r7)

6.766787913s ago: executing program 4 (id=804):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x3e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8)
r9 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08802, &(0x7f0000000140)=ANY=[], 0x1, 0x67b, &(0x7f0000001540)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)=ANY=[], 0xb2, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
r10 = dup(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xff, 0x9, 0x8f, 0x10, r10, 0xfffface1, '\x00', r7, r10, 0x4, 0x2, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESDEC=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000008300000000000000070200010fffffffb7030000080000e1b60400000000000085000000010000009585d8de5d04cbb1494cd31b6e2229b79d7f309c2564b637dead5e61571dd3042cf01cdea29f3184f6cc38d0a269f498fe06ec413099b7a9c3aab43743f2f3ea8df85400009bef6345ee0d7f0b5a82f60f53977f73015f93aa33f7fd061096cfd3134f916b413f74b0faa88abf0a805bf98083d5d813cb96184ff16d37c98bfc871d12d4fd29602f955861fcdd6acef5a70db4f361c1ea95b18ce8651ab6", @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES8=r9, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES64=r9], 0x5c, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x6}, 0x48)

4.853787946s ago: executing program 3 (id=806):
syz_clone3(&(0x7f00000011c0)={0x10000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140), &(0x7f0000001180)=[0x0], 0x1}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$mouse(&(0x7f0000001140), 0x9, 0x40800)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001580)={&(0x7f0000000280)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}]}, 0x20}}, 0x8080)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000400)=0x8)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r4 = accept$alg(r2, 0x0, 0x0)
recvmsg(r4, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80000001}], 0x2c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r5, &(0x7f00000007c0), 0x10, 0x80fe, 0x0)

4.850745377s ago: executing program 4 (id=807):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1000000}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x58}}, 0x0)

4.649595924s ago: executing program 4 (id=809):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet6(0xa, 0x2, 0xe)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @private1}, 0x1c)
connect$inet6(r3, &(0x7f0000000340)={0x2, 0x0, 0x0, @dev}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x2)
writev(r4, &(0x7f0000000500)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e207f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x9, &(0x7f00000001c0)}, &(0x7f0000000180)=0x10)
recvfrom$unix(r2, &(0x7f0000000400)=""/84, 0x54, 0x101, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r8)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\a\x00\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0], &(0x7f0000000940), &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000a40)={0x2fa5, 0x0, 0x0, 0xbbbbbbbb})

4.168844515s ago: executing program 2 (id=810):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000200)={[{@block_validity}]}, 0x7, 0x527, &(0x7f0000001600)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$FOU_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x4008001)
sendmmsg$alg(r2, &(0x7f0000003600)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="df", 0x1}], 0x1, &(0x7f0000000300)=[@assoc={0x18}, @iv={0x18}], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x200, 0x9, 0x0, 0x586a, 0x9, 0x7d, 0xaefd, 0x4, <r3=>0x0}, &(0x7f00000000c0)=0x20)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, 0x7, 0x7}, &(0x7f0000000140)=0x14)

4.093884701s ago: executing program 1 (id=811):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0xa07, &(0x7f0000000b00)="$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") (fail_nth: 64)

3.924712856s ago: executing program 1 (id=812):
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @dev}], 0x10)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240)=0x2, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000080))
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000a2da8114a0c26fbc00000003000a1000000000000000000000000000000000000000ffffffff00000000000000000000000a065f18a00f8b822400000000000000007fffffff000000000000020000000000ffffffff0100000003000000000000000000726f736530020000000000000000000069705f767469300000000000000000fc687064647001003800000000000400007465716c30000000000008000000eddcaaaaaaaaaa00fffffff35d6e000005ffffef00020000dd"]}, 0x139)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

3.914684727s ago: executing program 2 (id=813):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0xa07, &(0x7f0000000b00)="$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")

3.773663848s ago: executing program 4 (id=814):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000010c0), r0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000001080), 0x125902, 0x0)
socket$unix(0x1, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3f}, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x40, &(0x7f0000001200)={[{@noacl}, {@notreelog}, {@usebackuproot}, {@notreelog}, {@nodatacow}, {@enospc_debug}, {@space_cache_v2}, {@ssd_spread}, {@skip_balance}, {@noacl}]}, 0x1, 0x55a8, &(0x7f0000005680)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(r8, 0x891c, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xee00})
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x3)
read$dsp(r2, &(0x7f0000000080)=""/4096, 0x1000)
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080002000500000008000700e005000208000800ac1434002c0101"], 0x158}}, 0x0)

3.75402487s ago: executing program 3 (id=815):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = socket$inet6(0xa, 0x806, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, 0x0, 0x0)
listen(r2, 0x3)
socket$inet_dccp(0x2, 0x6, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f0000000680), 0xfe, 0x252, &(0x7f00000003c0)="$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")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MIGRATE(r6, 0x6611)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
fcntl$setown(r7, 0x8, r1)

3.629617691s ago: executing program 2 (id=816):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b00)={[{@umask={'umask', 0x3d, 0x4c14}}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'cp1251'}}, {@umask={'umask', 0x3d, 0x1001f}}, {@part={'part', 0x3d, 0x9}}]}, 0x3, 0x6aa, &(0x7f0000001f80)="$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")
mount$nfs4(0x0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x2005020, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0100001000130100000000000000007f00000100"/64, @ANYRES32=0x0], 0x14c}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc)
r2 = socket(0x10, 0x803, 0x0)
timer_create(0xa, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x400044, &(0x7f0000000040)={[{@creator={'creator', 0x3d, "e8b6d9ad"}}, {}, {@nobarrier}, {@part={'part', 0x3d, 0x1000}}, {@gid}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp865'}}]}, 0x1, 0x632, &(0x7f0000000140)="$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")
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x15b042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0)
ftruncate(r4, 0x6)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0)
ioctl$I2C_TENBIT(r5, 0x704, 0x45)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xccd31c909ac8b96a, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

3.629314621s ago: executing program 0 (id=817):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x3e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8)
r9 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08802, &(0x7f0000000140)=ANY=[], 0x1, 0x67b, &(0x7f0000001540)="$eJzs3c1rHOcdB/DvrFay5IKjJLaTlkBFDGmpqS1ZKK16idtD0SGU4B5CoRdhy7HwWgmSUpRQWvX92kP+gPSgQ6GXFno3pNBT21voTfRQAoVectLNZWZnpZX1kl1Z0lrN52Nm95l5Xue3M89odjET4HNr7mqaD1Nk7urra+X65sZ0a3Nj+lyd3UpSphtJs/2WYikpPkpupr3ki+XGunxxUD8fLM7e+vjTzU/aa816qco3DqvXm/V6yUSSofp9r+EjtXf7wPYON7+dKrb3sAzYlU7gYNAe7bHeT/UnPG+Bp0HRvm7uMZ6cTzJa/x2QenZonO7ojl9fsxwAAACcUc9sZStruTDocQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZUj//v6iXRic9kaLz/P+Relvq9K3GgMf8JB4OegAAAAAAAAAAcAy+vJWtrOVCZ/1R+5f9l6vXi9XrF/JuVrKQ5VzLWuazmtUsZyrJeFdDI2vzq6vLUz3UvLFvzRtHG/8fj1YNAAAAAAAAAP7f/DxzO7//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA06BIhtpv1XKxkx5Po5lkNMlIWW49+UcnfUYU+218ePrjAAAAgCcyeoQ6z2xlK2u50Fl/VFT3/Jer++XRvJulrGYxq2llIXfqe+jyrr+xuTHd2tyYfrC5MV11/MNHbe12vv3fvoZRtZj2dw/79/xiVWIsd7NYbbmW29Vg7qRR1Sy9WI9ne9ndyc/KMY29VutxZHfq97Kz3x70LcJxaPRbYbyqNLwdkcl6bGVDzx4eic/8dJqH9jSVxvY3PxcP6amzS0WfMT/fqZfk14/F/LV///4HPTZzArYj0UgViRtdR9/lw2OefOXPf3jzXmvp/r27K1dP7DA6LY8fE9NdkXjhTEei2Wf5ySoSl7bX5/LdfD9XM5E3spzF/CjzWc1C6pkx8/XxXL6Od0Up2ROpm7vW3viskYzUn0t7Fu1lTBM5V6Xm83JV90IWU+Tt3MlCXq3+3chUvpGZzGS26xO+dOAnXO1bNdM2+jvrr3w1O6f6b8qZurd6yV97Ldi/9iW1jOuzXXHtnnPHq7zuLTtReq6H61Gfc2PzS3Wi7OMXR7lsnJjHIzHVFYnnD4/E76pzY6W1dH/53vw7B7S//tj6K8M76V+d5JW5b+Xx8lxG65lk99FR5j2/PcvsjtdI/YtLO6+xJ+9SlVcUnTP1e/ucqWXEZ6vSl/dt6UaV98LevKF65P/8V1ferr+38vbfBhNPAPp0/mvnR8b+M/b3sQ/Hfjl2b+z10e+c++a5l0Yy/JfhbzUnh15pvFT8KR/mJzv3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNGtvPf+/flWa2F5/0Tj4KzjTRT1g3wOKtPMWE5hGKeZKJL1Y285g9+vHhKdhwg+aTtv3nwqdudMJ4aS1Ft+muwcP/VHdJSHiwJnwvXVB+9cX3nv/a8vPph/a+GthaXhmZnZydmZV6ev311sLUy2Xwc9SuAk7Pw9MOiRAAAAAAAAAAAAAL06jf9p0NXdxAB3FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADij5q6mOZwiU5PXJsv1zY3pVrl00jslm0kajaT4cVJ8lNxMe8l4V3PFQf18sDh76+NPNz/ZaavZKd84rF5v1uslE0mG6vc9Ro7W3u2D2utZsb2HZcCudAIHg/a/AAAA//9FqgbH")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)=ANY=[], 0xb2, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
r10 = dup(r0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xff, 0x9, 0x8f, 0x10, r10, 0xfffface1, '\x00', r7, r10, 0x4, 0x2, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESDEC=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000008300000000000000070200010fffffffb7030000080000e1b60400000000000085000000010000009585d8de5d04cbb1494cd31b6e2229b79d7f309c2564b637dead5e61571dd3042cf01cdea29f3184f6cc38d0a269f498fe06ec413099b7a9c3aab43743f2f3ea8df85400009bef6345ee0d7f0b5a82f60f53977f73015f93aa33f7fd061096cfd3134f916b413f74b0faa88abf0a805bf98083d5d813cb96184ff16d37c98bfc871d12d4fd29602f955861fcdd6acef5a70db4f361c1ea95b18ce8651ab6", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r11, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES8=r9, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES64=r9], 0x5c, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x6}, 0x48)

2.754389795s ago: executing program 1 (id=818):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x3e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8)
r9 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08802, &(0x7f0000000140)=ANY=[], 0x1, 0x67b, &(0x7f0000001540)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)=ANY=[], 0xb2, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
r10 = dup(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xff, 0x9, 0x8f, 0x10, r10, 0xfffface1, '\x00', r7, r10, 0x4, 0x2, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESDEC=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000008300000000000000070200010fffffffb7030000080000e1b60400000000000085000000010000009585d8de5d04cbb1494cd31b6e2229b79d7f309c2564b637dead5e61571dd3042cf01cdea29f3184f6cc38d0a269f498fe06ec413099b7a9c3aab43743f2f3ea8df85400009bef6345ee0d7f0b5a82f60f53977f73015f93aa33f7fd061096cfd3134f916b413f74b0faa88abf0a805bf98083d5d813cb96184ff16d37c98bfc871d12d4fd29602f955861fcdd6acef5a70db4f361c1ea95b18ce8651ab6", @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYRES8=r9, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES64=r9], 0x5c, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x6}, 0x48)

701.527281ms ago: executing program 3 (id=819):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2)
sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x102, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000400)={'ip_vti0\x00', <r7=>0x0, 0x7, 0x10, 0x8, 0x2, {{0x30, 0x4, 0x0, 0x6, 0xc0, 0x68, 0x0, 0xfc, 0x2f, 0x0, @multicast1, @multicast1, {[@lsrr={0x83, 0xb, 0x44, [@loopback, @private=0xa010102]}, @lsrr={0x83, 0x7, 0xbe, [@remote]}, @rr={0x7, 0x27, 0x90, [@loopback, @loopback, @remote, @private=0xa010100, @loopback, @remote, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x31, 0x3, [{0x6, 0x3, "d8"}, {0x0, 0x6, "c420f90e"}, {0x5, 0x11, "79011fc0bf1a81f6c67e89acdc8399"}, {0x0, 0x11, "2a405c6d54ed9174c38abacff1e658"}]}, @generic={0x94, 0xc, "d3278400258d305a7805"}, @ssrr={0x89, 0x7, 0xcf, [@private=0xa010100]}, @timestamp={0x44, 0x2c, 0x4c, 0x0, 0x7, [0x4, 0x0, 0x4, 0x100, 0x5, 0x12c, 0xfffffffe, 0xf, 0xb63, 0xd]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r9=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x14c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008084) (async)
ioctl$FICLONE(r6, 0x40049409, r0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x2020)
move_pages(r11, 0x2, &(0x7f0000002840)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f0000002880)=[0x0], 0x4) (async, rerun: 64)
r12 = openat$full(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) (rerun: 64)
ioctl$VHOST_SET_OWNER(r12, 0xaf01, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002900), 0x22001) (async)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) (async)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r2) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000002c00)=<r15=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000002c40)=<r16=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000002c80)=<r17=>0x0)
sendmsg$NFC_CMD_VENDOR(r13, &(0x7f0000002e80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002cc0)={0x14c, r14, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_VENDOR_DATA={0x2b, 0x1f, "0f33d12df54dde9d40f6105acfb435d1336c78fe0550a8faa46324222b9cac05d2aea7fbfc714d"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x80}, @NFC_ATTR_VENDOR_DATA={0xe3, 0x1f, "10aa8a9ce578091eba071f3606a311f9a7618807e661ce6c20a23bb05c4ee196d6b6c07e887f0cb9bdfce1bccb035d7ebc0d40971ed18e5c3de2aa52e5c4a69ece15810d86e6b5edeb5f140f3759eeca50d4673839ac9e082a6fe735f46ed7bb11109e7eee9ddc7cc2b73eb6776a9c475d16952045a410c09bb8d16c87e7145a1258470086b44ef59852c476489e79794b7c7073567309f136acc1971e254944c239235c08415fc97b7939c3c83159cd08cd80fff0655aa2e7fc338a812ffac0e93065c3ae3c6fe8570443e7894cdfa7c40e676aadd9aaaec1686cd75886b3"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) (async)
fsetxattr(r6, &(0x7f0000002ec0)=@known='com.apple.system.Security\x00', &(0x7f0000002f00)='gre0\x00', 0x5, 0x1)

537.577024ms ago: executing program 4 (id=820):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bind$l2tp(0xffffffffffffffff, 0x0, 0x0)
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40010020, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})

496.278958ms ago: executing program 1 (id=821):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000069102200000000009500040000000000"], 0x0}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

443.436623ms ago: executing program 0 (id=822):
syz_emit_ethernet(0xbe, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x640101fc, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x20, 0x0, {0x25, 0x4, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x38, 0x0, [{0x0, 0x5, "4b6cef"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "39cc93610bf85e1d"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x5, "02a209"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x80000]}]}}}}}}}, 0x0)

397.479357ms ago: executing program 3 (id=823):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x1000410, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_win95}]}, 0x5, 0x228, &(0x7f0000000440)="$eJzs3T9rU10cB/BfnqZ/KDykg1AUwRQXp9BW3CuiIBYUJINOFtuiNLFgIKBD6+ab0Lego6vgIK7OgghSBRe7dRCuNDc2piT2UppcsZ/P0l9Pzveecy6HXDLk5M7p+tryemN1e3srJiYKUVyIhdgpxFT8FyORehIAwL9kJ0nie5LKey4AwHB4/gPA8ZPx+X9jiFMCAAbM538AOH5u3rp9rfNf/Wmz2qymf9OWi6txP2qxErNRih8RyZ60vnJ18fJsedeXqajWN9v5zWZ1pDs/F6WY6p3/UE5150djsp3/OBkrMR+lONE7P98zPxbnzv42fiVK8f5urEctlmM328lvzJXLl64v7suPt/oBAAAAAAAAAAAAAAAAAAAAAMAgVMp7ep7fU6n0ez3NZz8faP/5PMU4Vcx37QAAAAAAAAAAAAAAAAAAAPC3aDx6vLZUq608/FPx4N2LNwf16V9EFFpDtVoK7XEPcZ0jLv6f+fysX5/07IOYyXh/MhRJkrnz6zP53ZaxrFvi7da9k+cb0xdym+rorx3V1RJR7L2xv5UiBjSfl4dKJeNHM/poe70Hdp5+vrD0auPT16xXHvY7EQAAAAAAAAAAAAAAAAAA0PnSb94zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8dH7/f3BF3msEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICfAQAA//+d/ZaS")
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = syz_io_uring_setup(0x231b, &(0x7f0000000440), &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0)
readv(r6, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1)
signalfd4(r6, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000300)=0xa, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed, 0x5}})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
syz_io_uring_setup(0x6549, &(0x7f0000000140)={0x0, 0xb8b6, 0x100, 0x1, 0x12, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000240))
renameat2(r0, &(0x7f0000000100)='./file0\x00', r7, &(0x7f0000000000)='./bus\x00', 0x0)

339.971472ms ago: executing program 0 (id=824):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000800000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a"], 0x34}}, 0x0)

293.876466ms ago: executing program 1 (id=825):
syz_clone3(&(0x7f00000011c0)={0x10000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140), &(0x7f0000001180)=[0x0], 0x1}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$mouse(&(0x7f0000001140), 0x9, 0x40800)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001580)={&(0x7f0000000280)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}]}, 0x20}}, 0x8080)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000400)=0x8)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r4 = accept$alg(r2, 0x0, 0x0)
recvmsg(r4, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80000001}], 0x2c)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000580)={0x3f}, 0xe)
recvmmsg(r5, &(0x7f00000007c0), 0x10, 0x80fe, 0x0)

177.488235ms ago: executing program 0 (id=826):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @loopback}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={<r1=>0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @loopback}]}, &(0x7f00000004c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdd46c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x8) (fail_nth: 1)

24.450898ms ago: executing program 1 (id=827):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @loopback}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={<r1=>0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @loopback}]}, &(0x7f00000004c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000100)='./file0\x00', 0x2008410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0], 0xfd, 0x5562, &(0x7f0000005a80)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdd46c000)
r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x101)
ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000500)=""/228)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x3c, &(0x7f0000000100)=[@in6={0xa, 0x3, 0x0, @private0, 0x9}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @local}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x74, &(0x7f00000000c0)={r9, 0x0, 0x20}, &(0x7f0000000080)=0x18)
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x8)

0s ago: executing program 2 (id=828):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

109.828067][ T4895] tipc: Started in network mode
[  109.829439][ T4895] tipc: Node identity fe254d88ff5b, cluster identity 4711
[  109.831535][ T4895] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  109.833861][ T4893] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  109.869741][ T4893] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  109.872756][ T4893] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  109.875451][ T4893] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.207: Corrupt directory, running e2fsck is recommended
[  109.976425][ T4094] hfsplus: b-tree write err: -5, ino 4
[  110.038083][ T4903] loop4: detected capacity change from 0 to 256
[  110.181791][ T4903] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  110.192208][ T4904] FAULT_INJECTION: forcing a failure.
[  110.192208][ T4904] name failslab, interval 1, probability 0, space 0, times 0
[  110.195661][ T4904] CPU: 1 PID: 4904 Comm: syz.2.212 Not tainted 5.15.165-syzkaller #0
[  110.197852][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  110.200703][ T4904] Call trace:
[  110.201574][ T4904]  dump_backtrace+0x0/0x530
[  110.202803][ T4904]  show_stack+0x2c/0x3c
[  110.203959][ T4904]  dump_stack_lvl+0x108/0x170
[  110.205258][ T4904]  dump_stack+0x1c/0x58
[  110.206394][ T4904]  should_fail+0x3b8/0x514
[  110.207551][ T4904]  __should_failslab+0xbc/0x110
[  110.208926][ T4904]  should_failslab+0x10/0x28
[  110.210173][ T4904]  slab_pre_alloc_hook+0x64/0xe8
[  110.211567][ T4904]  __kmalloc_node_track_caller+0x74/0x448
[  110.213189][ T4904]  kmalloc_reserve+0xe8/0x270
[  110.214430][ T4904]  __alloc_skb+0x1a4/0x584
[  110.215678][ T4904]  netlink_sendmsg+0x644/0xb38
[  110.217116][ T4904]  sock_write_iter+0x2b0/0x3f8
[  110.218590][ T4904]  do_iter_readv_writev+0x420/0x5f8
[  110.220034][ T4904]  do_iter_write+0x1b8/0x66c
[  110.221351][ T4904]  do_writev+0x220/0x3ec
[  110.222536][ T4904]  __arm64_sys_writev+0x80/0x94
[  110.223902][ T4904]  invoke_syscall+0x98/0x2b8
[  110.225245][ T4904]  el0_svc_common+0x138/0x258
[  110.226514][ T4904]  do_el0_svc+0x58/0x14c
[  110.227755][ T4904]  el0_svc+0x7c/0x1f0
[  110.228816][ T4904]  el0t_64_sync_handler+0x84/0xe4
[  110.230415][ T4904]  el0t_64_sync+0x1a0/0x1a4
[  110.532703][ T4910] FAULT_INJECTION: forcing a failure.
[  110.532703][ T4910] name failslab, interval 1, probability 0, space 0, times 0
[  110.549051][ T4910] CPU: 0 PID: 4910 Comm: syz.0.214 Not tainted 5.15.165-syzkaller #0
[  110.551272][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  110.554038][ T4910] Call trace:
[  110.554989][ T4910]  dump_backtrace+0x0/0x530
[  110.556262][ T4910]  show_stack+0x2c/0x3c
[  110.557427][ T4910]  dump_stack_lvl+0x108/0x170
[  110.558723][ T4910]  dump_stack+0x1c/0x58
[  110.559833][ T4910]  should_fail+0x3b8/0x514
[  110.561055][ T4910]  __should_failslab+0xbc/0x110
[  110.562443][ T4910]  should_failslab+0x10/0x28
[  110.563718][ T4910]  slab_pre_alloc_hook+0x64/0xe8
[  110.565031][ T4910]  kmem_cache_alloc_node+0x9c/0x49c
[  110.566464][ T4910]  alloc_vmap_area+0x158/0x16a8
[  110.567781][ T4910]  __get_vm_area_node+0x18c/0x2f4
[  110.569162][ T4910]  __vmalloc_node_range+0xe4/0x8e4
[  110.570635][ T4910]  __vmalloc+0x130/0x1a8
[  110.571882][ T4910]  bpf_prog_alloc_no_stats+0x50/0x2bc
[  110.573342][ T4910]  bpf_prog_alloc+0x34/0x200
[  110.574573][ T4910]  bpf_prog_load+0x6b0/0x15c8
[  110.575819][ T4910]  __sys_bpf+0x2e8/0x610
[  110.576952][ T4910]  __arm64_sys_bpf+0x80/0x98
[  110.578172][ T4910]  invoke_syscall+0x98/0x2b8
[  110.579375][ T4910]  el0_svc_common+0x138/0x258
[  110.580650][ T4910]  do_el0_svc+0x58/0x14c
[  110.581828][ T4910]  el0_svc+0x7c/0x1f0
[  110.582934][ T4910]  el0t_64_sync_handler+0x84/0xe4
[  110.584326][ T4910]  el0t_64_sync+0x1a0/0x1a4
[  110.585628][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.849039][ T4910] syz.0.214: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0
[  110.853352][ T4910] CPU: 1 PID: 4910 Comm: syz.0.214 Not tainted 5.15.165-syzkaller #0
[  110.855534][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  110.858227][ T4910] Call trace:
[  110.859078][ T4910]  dump_backtrace+0x0/0x530
[  110.860257][ T4910]  show_stack+0x2c/0x3c
[  110.861365][ T4910]  dump_stack_lvl+0x108/0x170
[  110.862531][ T4910]  dump_stack+0x1c/0x58
[  110.863636][ T4910]  warn_alloc+0x220/0x37c
[  110.864730][ T4910]  __vmalloc_node_range+0x290/0x8e4
[  110.866110][ T4910]  __vmalloc+0x130/0x1a8
[  110.867230][ T4910]  bpf_prog_alloc_no_stats+0x50/0x2bc
[  110.868736][ T4910]  bpf_prog_alloc+0x34/0x200
[  110.869960][ T4910]  bpf_prog_load+0x6b0/0x15c8
[  110.871268][ T4910]  __sys_bpf+0x2e8/0x610
[  110.872373][ T4910]  __arm64_sys_bpf+0x80/0x98
[  110.873587][ T4910]  invoke_syscall+0x98/0x2b8
[  110.874815][ T4910]  el0_svc_common+0x138/0x258
[  110.876136][ T4910]  do_el0_svc+0x58/0x14c
[  110.877272][ T4910]  el0_svc+0x7c/0x1f0
[  110.878387][ T4910]  el0t_64_sync_handler+0x84/0xe4
[  110.879682][ T4910]  el0t_64_sync+0x1a0/0x1a4
[  110.885297][ T4064] tipc: Node number set to 25054600
[  110.926019][ T4910] Mem-Info:
[  110.926873][ T4910] active_anon:3019 inactive_anon:8330 isolated_anon:0
[  110.926873][ T4910]  active_file:2546 inactive_file:3882 isolated_file:0
[  110.926873][ T4910]  unevictable:768 dirty:92 writeback:0
[  110.926873][ T4910]  slab_reclaimable:18083 slab_unreclaimable:91896
[  110.926873][ T4910]  mapped:24057 shmem:7929 pagetables:615 bounce:0
[  110.926873][ T4910]  kernel_misc_reclaimable:0
[  110.926873][ T4910]  free:1511582 free_pcp:7554 free_cma:7360
[  110.964845][ T4910] Node 0 active_anon:12076kB inactive_anon:31020kB active_file:10184kB inactive_file:15528kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:96228kB dirty:368kB writeback:0kB shmem:29316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8344kB pagetables:2560kB all_unreclaimable? no
[  111.039032][ T4899] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  111.072234][ T4910] Node 0 DMA free:3076864kB min:20432kB low:25540kB high:30648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:29440kB
[  111.098427][ T4899] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  111.101350][ T4899] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.207: Corrupt directory, running e2fsck is recommended
[  111.181645][ T4910] lowmem_reserve[]: 0 0 3624 3624 3624
[  111.183204][ T4910] Node 0 Normal free:2972920kB min:24620kB low:30772kB high:36924kB reserved_highatomic:0KB active_anon:12024kB inactive_anon:45884kB active_file:10256kB inactive_file:15496kB unevictable:3072kB writepending:396kB present:5242880kB managed:3715096kB mlocked:0kB bounce:0kB free_pcp:13548kB local_pcp:3672kB free_cma:0kB
[  111.272275][ T4926] loop1: detected capacity change from 0 to 1024
[  112.237069][ T4899] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  112.240020][ T4899] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  112.242597][ T4899] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.207: Corrupt directory, running e2fsck is recommended
[  112.300489][ T4910] lowmem_reserve[]: 0 0 0 0 0
[  112.301945][ T4910] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB
[  112.323684][ T4910] Node 0 Normal: 312*4kB (UME) 197*8kB (UME) 175*16kB (UME) 254*32kB (UME) 46*64kB (UME) 12*128kB (UME) 24*256kB (UM) 10*512kB (UME) 2*1024kB (M) 0*2048kB 718*4096kB (M) = 2972472kB
[  112.333836][ T4910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  112.345035][ T4910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[  112.355201][ T4910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  112.372118][ T4910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[  112.384131][ T4910] 19146 total pagecache pages
[  112.385433][ T4910] 0 pages in swap cache
[  112.471906][ T4910] Swap cache stats: add 5, delete 5, find 0/1
[  112.473639][ T4910] Free swap  = 124740kB
[  112.474727][ T4910] Total swap = 124996kB
[  112.482002][ T4899] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #2: block 3: comm syz.3.207: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  112.487145][ T4910] 2097152 pages RAM
[  112.488129][ T4910] 0 pages HighMem/MovableOnly
[  112.489347][ T4910] 398330 pages reserved
[  112.490412][ T4910] 8192 pages cma reserved
[  112.491554][ T4910] 0 pages hwpoisoned
[  112.547156][ T4893] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #2: block 3: comm syz.3.207: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  112.630343][ T4899] sctp: failed to load transform for md5: -2
[  112.773564][ T4938] FAULT_INJECTION: forcing a failure.
[  112.773564][ T4938] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.777184][ T4938] CPU: 1 PID: 4938 Comm: syz.2.222 Not tainted 5.15.165-syzkaller #0
[  112.779406][ T4938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  112.782299][ T4938] Call trace:
[  112.783169][ T4938]  dump_backtrace+0x0/0x530
[  112.784398][ T4938]  show_stack+0x2c/0x3c
[  112.785476][ T4938]  dump_stack_lvl+0x108/0x170
[  112.786773][ T4938]  dump_stack+0x1c/0x58
[  112.787940][ T4938]  should_fail+0x3b8/0x514
[  112.789131][ T4938]  should_fail_usercopy+0x20/0x30
[  112.790547][ T4938]  copy_page_from_iter_atomic+0x3c8/0xffc
[  112.792072][ T4938]  generic_perform_write+0x2d0/0x520
[  112.793497][ T4938]  __generic_file_write_iter+0x230/0x454
[  112.795022][ T4938]  generic_file_write_iter+0xb4/0x1b8
[  112.796453][ T4938]  vfs_write+0x884/0xb44
[  112.797602][ T4938]  ksys_write+0x15c/0x26c
[  112.798737][ T4938]  __arm64_sys_write+0x7c/0x90
[  112.800011][ T4938]  invoke_syscall+0x98/0x2b8
[  112.801338][ T4938]  el0_svc_common+0x138/0x258
[  112.802631][ T4938]  do_el0_svc+0x58/0x14c
[  112.803856][ T4938]  el0_svc+0x7c/0x1f0
[  112.804906][ T4938]  el0t_64_sync_handler+0x84/0xe4
[  112.806365][ T4938]  el0t_64_sync+0x1a0/0x1a4
[  112.967297][ T4938] loop2: detected capacity change from 0 to 2048
[  113.687573][ T4938] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  113.692142][ T4938] NILFS (loop2): invalid segment: Inconsistency found
[  113.694139][ T4938] NILFS (loop2): unable to fall back to spare super block
[  113.698374][ T4938] NILFS (loop2): error -22 while searching super root
[  115.096831][ T4956] loop2: detected capacity change from 0 to 1024
[  115.210486][ T4956] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  115.213425][ T4956] EXT4-fs error (device loop2): ext4_get_journal_inode:5159: comm syz.2.226: inode #1: comm syz.2.226: iget: illegal inode #
[  115.231281][ T4956] EXT4-fs (loop2): no journal found
[  115.236184][ T4956] EXT4-fs (loop2): can't get journal size
[  115.264045][ T4956] EXT4-fs (loop2): failed to initialize system zone (-22)
[  115.268497][ T4956] EXT4-fs (loop2): mount failed
[  115.298718][ T4965] netlink: 68 bytes leftover after parsing attributes in process `syz.0.229'.
[  115.393476][ T4942] loop1: detected capacity change from 0 to 40427
[  115.421352][ T4942] F2FS-fs (loop1): Unrecognized mount option "00000000000000000003" or missing value
[  115.831985][ T4977] loop0: detected capacity change from 0 to 1024
[  116.472329][ T4983] fuse: Bad value for 'fd'
[  118.046017][ T4988] loop1: detected capacity change from 0 to 2048
[  118.111764][ T4988] NILFS (loop1): invalid segment: Inconsistency found
[  118.113651][ T4988] NILFS (loop1): trying rollback from an earlier position
[  118.141685][ T5005] loop2: detected capacity change from 0 to 256
[  118.155323][ T4988] NILFS (loop1): invalid segment: Inconsistency found
[  118.159419][ T4988] NILFS (loop1): error -22 while searching super root
[  118.327491][ T5005] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  120.124095][ T5021] loop3: detected capacity change from 0 to 2048
[  120.128590][ T5022] loop1: detected capacity change from 0 to 1024
[  121.308534][ T5023] loop0: detected capacity change from 0 to 1024
[  121.490380][ T5022] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  121.492377][ T5022] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  121.494839][ T5022] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  121.509383][ T5021] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.538091][ T5022] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003]
[  121.545440][ T5022] System zones: 0-1, 3-36
[  121.551975][ T5022] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,noauto_da_alloc,nomblk_io_submit,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  121.894360][ T5032] loop4: detected capacity change from 0 to 1024
[  122.963305][ T5045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.253'.
[  122.969139][ T5042] binder: 5041:5042 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  122.971781][ T5042] binder: 5041:5042 got transaction to invalid handle, 1
[  122.973741][ T5042] binder: 5041:5042 transaction failed 29201/-22, size 0-0 line 2917
[  122.976105][ T5042] binder: 5041:5042 ioctl c0306201 200001c0 returned -14
[  122.978362][ T4053] binder: undelivered TRANSACTION_ERROR: 29201
[  124.498546][ T5051] loop2: detected capacity change from 0 to 512
[  125.512538][ T5059] loop0: detected capacity change from 0 to 4096
[  125.512751][ T5075] loop3: detected capacity change from 0 to 256
[  125.525070][ T5051] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  125.561046][ T5075] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  125.714211][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  126.708506][ T5086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[  127.726392][ T5102] loop1: detected capacity change from 0 to 1024
[  127.933493][ T5096] loop3: detected capacity change from 0 to 2048
[  127.940908][ T5099] loop2: detected capacity change from 0 to 512
[  129.592141][ T5099] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  129.609389][ T5096] NILFS (loop3): invalid segment: Checksum error in segment payload
[  129.621065][ T5099] EXT4-fs: failed to create workqueue
[  129.628107][ T5096] NILFS (loop3): trying rollback from an earlier position
[  129.631186][ T5099] EXT4-fs (loop2): mount failed
[  129.714194][ T5096] NILFS (loop3): recovery complete
[  129.735774][ T5112] loop0: detected capacity change from 0 to 2048
[  129.767459][ T5114] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.787275][   T26] audit: type=1326 audit(129.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5115 comm="syz.4.272" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9a3bea8 code=0x0
[  129.831374][ T5112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.985622][ T5121] loop1: detected capacity change from 0 to 4096
[  130.002272][ T5128] loop3: detected capacity change from 0 to 256
[  130.045733][ T5130] loop2: detected capacity change from 0 to 256
[  130.086825][ T5128] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  130.161024][ T5121] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  130.280081][ T5130] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  131.852119][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  131.853876][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  131.893995][ T5121] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  132.553341][ T5121] ntfs3: loop1: Failed to load $Extend.
[  132.946809][ T5139] loop1: detected capacity change from 0 to 512
[  134.933896][ T5155] loop0: detected capacity change from 0 to 1024
[  134.966808][ T5156] loop4: detected capacity change from 0 to 2048
[  135.294993][ T5139] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  135.362830][ T5162] loop3: detected capacity change from 0 to 512
[  135.365458][ T5156] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  135.369223][ T5139] EXT4-fs (loop1): orphan cleanup on readonly fs
[  135.371455][ T5139] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #3: comm syz.1.278: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  135.378954][ T5139] EXT4-fs error (device loop1): ext4_quota_enable:6390: comm syz.1.278: Bad quota inode: 3, type: 0
[  135.385046][ T5139] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  135.391858][ T5156] EXT4-fs (loop4): shut down requested (2)
[  135.404745][ T5139] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  135.406946][ T5139] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  135.530813][ T5162] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.284: bad orphan inode 768
[  135.534451][ T5162] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.703948][ T5171] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present
[  135.736307][ T5171] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  135.738872][ T5171] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.284: Failed to acquire dquot type 0
[  135.773108][ T5162] netlink: 100 bytes leftover after parsing attributes in process `syz.3.284'.
[  136.919413][ T5179] netlink: 'syz.0.287': attribute type 29 has an invalid length.
[  136.936372][    C1] vxcan0: j1939_tp_rxtimer: 0x00000000b4b64ff6: rx timeout, send abort
[  136.940168][    C1] vxcan0: j1939_xtp_rx_abort_one: 0x00000000b4b64ff6: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  136.962486][ T5179] netlink: 'syz.0.287': attribute type 29 has an invalid length.
[  136.965068][ T5180] netlink: 'syz.0.287': attribute type 29 has an invalid length.
[  136.990481][ T5179] netlink: 'syz.0.287': attribute type 29 has an invalid length.
[  137.029384][ T5182] loop4: detected capacity change from 0 to 256
[  137.033185][ T5179] netlink: 'syz.0.287': attribute type 29 has an invalid length.
[  137.050340][ T5184] FAULT_INJECTION: forcing a failure.
[  137.050340][ T5184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.084447][ T5184] CPU: 1 PID: 5184 Comm: syz.1.288 Not tainted 5.15.165-syzkaller #0
[  137.086713][ T5184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  137.089505][ T5184] Call trace:
[  137.090409][ T5184]  dump_backtrace+0x0/0x530
[  137.091682][ T5184]  show_stack+0x2c/0x3c
[  137.092813][ T5184]  dump_stack_lvl+0x108/0x170
[  137.094097][ T5184]  dump_stack+0x1c/0x58
[  137.095232][ T5184]  should_fail+0x3b8/0x514
[  137.096382][ T5184]  should_fail_usercopy+0x20/0x30
[  137.097789][ T5184]  simple_read_from_buffer+0xd8/0x26c
[  137.099246][ T5184]  proc_fail_nth_read+0x1a0/0x248
[  137.100649][ T5184]  vfs_read+0x278/0xb18
[  137.101823][ T5184]  ksys_read+0x15c/0x26c
[  137.103000][ T5184]  __arm64_sys_read+0x7c/0x90
[  137.104315][ T5184]  invoke_syscall+0x98/0x2b8
[  137.105588][ T5184]  el0_svc_common+0x138/0x258
[  137.106871][ T5184]  do_el0_svc+0x58/0x14c
[  137.108067][ T5184]  el0_svc+0x7c/0x1f0
[  137.109125][ T5184]  el0t_64_sync_handler+0x84/0xe4
[  137.110437][ T5184]  el0t_64_sync+0x1a0/0x1a4
[  137.117216][ T5182] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  138.664634][ T5197] loop3: detected capacity change from 0 to 256
[  138.812081][ T5197] FAT-fs (loop3): Directory bread(block 64) failed
[  138.813896][ T5197] FAT-fs (loop3): Directory bread(block 65) failed
[  138.815722][ T5197] FAT-fs (loop3): Directory bread(block 66) failed
[  138.928241][ T5197] FAT-fs (loop3): Directory bread(block 67) failed
[  138.933516][ T5197] FAT-fs (loop3): Directory bread(block 68) failed
[  139.125486][ T5197] FAT-fs (loop3): Directory bread(block 69) failed
[  139.133931][ T5197] FAT-fs (loop3): Directory bread(block 70) failed
[  139.146206][ T5197] FAT-fs (loop3): Directory bread(block 71) failed
[  139.149488][ T5197] FAT-fs (loop3): Directory bread(block 72) failed
[  139.151170][ T5197] FAT-fs (loop3): Directory bread(block 73) failed
[  140.083667][ T5212] loop3: detected capacity change from 0 to 1024
[  140.890082][ T5216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.298'.
[  140.903406][ T5217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.298'.
[  141.006389][ T5217] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.298'.
[  141.009120][ T5217] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.298'.
[  141.652543][ T5234] loop3: detected capacity change from 0 to 512
[  141.715283][ T5234] udc-core: couldn't find an available UDC or it's busy
[  141.717282][ T5234] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  142.194412][ T5222] loop1: detected capacity change from 0 to 32768
[  142.333392][ T5222] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  142.336478][ T5222] BTRFS info (device loop1): setting nodatacow, compression disabled
[  142.369212][ T5222] BTRFS info (device loop1): max_inline at 0
[  142.372708][ T5222] BTRFS info (device loop1): enabling disk space caching
[  142.377146][ T5222] BTRFS info (device loop1): turning off barriers
[  142.385014][ T5222] BTRFS info (device loop1): turning on flush-on-commit
[  142.390724][ T5222] BTRFS info (device loop1): doing ref verification
[  142.406032][ T5222] BTRFS info (device loop1): force clearing of disk cache
[  142.436097][ T5222] BTRFS info (device loop1): enabling ssd optimizations
[  142.442829][ T5222] BTRFS info (device loop1): max_inline at 4096
[  142.447785][ T5222] BTRFS info (device loop1): disk space caching is enabled
[  142.450189][ T5222] BTRFS info (device loop1): has skinny extents
[  143.709500][ T5222] BTRFS info (device loop1): clearing free space tree
[  143.711551][ T5222] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  143.714121][ T5222] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  144.507636][ T5269] loop2: detected capacity change from 0 to 1024
[  145.099551][ T5274] loop4: detected capacity change from 0 to 256
[  145.201827][ T4692] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop1 scanned by udevd (4692)
[  145.202401][ T5274] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  146.422722][ T5264] loop3: detected capacity change from 0 to 32768
[  146.436563][ T5264] XFS: ikeep mount option is deprecated.
[  146.438023][ T5264] XFS: noikeep mount option is deprecated.
[  146.579803][ T5264] XFS (loop3): Mounting V5 Filesystem
[  146.726956][ T5264] XFS (loop3): Ending clean mount
[  146.743417][ T5264] XFS (loop3): Quotacheck needed: Please wait.
[  146.818837][ T5264] XFS (loop3): Quotacheck: Done.
[  146.846401][ T4031] XFS (loop3): Unmounting Filesystem
[  146.898661][ T5278] loop1: detected capacity change from 0 to 32768
[  146.939597][ T5278] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.310 (5278)
[  146.994313][ T5278] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  147.006332][ T5278] BTRFS info (device loop1): using free space tree
[  147.008148][ T5278] BTRFS info (device loop1): has skinny extents
[  147.012437][ T5284] loop2: detected capacity change from 0 to 32768
[  147.099518][ T5284] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.313 (5284)
[  147.139508][ T5297] loop0: detected capacity change from 0 to 32768
[  147.174175][ T4012] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4012)
[  147.246804][ T5297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.315 (5297)
[  147.258890][ T5297] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  147.263409][ T5297] BTRFS info (device loop0): using free space tree
[  147.268484][ T5297] BTRFS info (device loop0): has skinny extents
[  147.270991][ T5278] BTRFS info (device loop1): enabling ssd optimizations
[  148.121122][ T5297] BTRFS info (device loop0): enabling ssd optimizations
[  148.307250][ T5349] loop2: detected capacity change from 0 to 256
[  148.344773][ T5349] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  149.844736][ T5364] loop3: detected capacity change from 0 to 1024
[  152.124215][ T5395] loop0: detected capacity change from 0 to 256
[  152.196523][ T5395] exfat: Deprecated parameter 'utf8'
[  152.197937][ T5395] exfat: Deprecated parameter 'namecase'
[  152.207903][ T5395] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  152.310510][ T5374] loop1: detected capacity change from 0 to 32768
[  152.371767][ T5374] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.327 (5374)
[  152.414760][ T5374] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  152.419711][ T5374] BTRFS info (device loop1): turning off barriers
[  152.421363][ T5374] BTRFS info (device loop1): enabling auto defrag
[  152.433709][ T5374] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  152.445266][ T5374] BTRFS info (device loop1): use lzo compression, level 0
[  152.453937][ T5374] BTRFS info (device loop1): using free space tree
[  152.455711][ T5374] BTRFS info (device loop1): has skinny extents
[  152.845849][ T5419] loop0: detected capacity change from 0 to 1024
[  153.555415][ T5429] loop3: detected capacity change from 0 to 256
[  153.641049][ T5429] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  153.800156][ T5374] BTRFS error (device loop1): open_ctree failed
[  156.349649][ T5458] xt_CT: You must specify a L4 protocol and not use inversions on it
[  156.400705][ T5442] loop0: detected capacity change from 0 to 32768
[  156.591712][ T5442] XFS (loop0): Mounting V5 Filesystem
[  156.694797][ T5442] XFS (loop0): Ending clean mount
[  156.698572][ T5442] XFS (loop0): Quotacheck needed: Please wait.
[  156.741092][ T5442] XFS (loop0): Quotacheck: Done.
[  157.164857][ T5481] loop3: detected capacity change from 0 to 1024
[  157.985204][ T5449] loop1: detected capacity change from 0 to 40427
[  158.349339][ T5488] FAULT_INJECTION: forcing a failure.
[  158.349339][ T5488] name failslab, interval 1, probability 0, space 0, times 0
[  158.364144][ T5488] CPU: 1 PID: 5488 Comm: syz.2.355 Not tainted 5.15.165-syzkaller #0
[  158.366365][ T5488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  158.368994][ T5488] Call trace:
[  158.369843][ T5488]  dump_backtrace+0x0/0x530
[  158.371052][ T5488]  show_stack+0x2c/0x3c
[  158.372229][ T5488]  dump_stack_lvl+0x108/0x170
[  158.373488][ T5488]  dump_stack+0x1c/0x58
[  158.374572][ T5488]  should_fail+0x3b8/0x514
[  158.375882][ T5488]  __should_failslab+0xbc/0x110
[  158.377199][ T5488]  should_failslab+0x10/0x28
[  158.378444][ T5488]  slab_pre_alloc_hook+0x64/0xe8
[  158.379780][ T5488]  kmem_cache_alloc+0x98/0x45c
[  158.381104][ T5488]  __d_alloc+0x3c/0x6a8
[  158.382238][ T5488]  d_alloc_pseudo+0x28/0x8c
[  158.383439][ T5488]  alloc_file_pseudo+0x110/0x278
[  158.384810][ T5488]  __shmem_file_setup+0x19c/0x26c
[  158.386143][ T5488]  shmem_file_setup+0x40/0x54
[  158.387441][ T5488]  __arm64_sys_memfd_create+0x374/0x610
[  158.389011][ T5488]  invoke_syscall+0x98/0x2b8
[  158.390221][ T5488]  el0_svc_common+0x138/0x258
[  158.391469][ T5488]  do_el0_svc+0x58/0x14c
[  158.392673][ T5488]  el0_svc+0x7c/0x1f0
[  158.393733][ T5488]  el0t_64_sync_handler+0x84/0xe4
[  158.395106][ T5488]  el0t_64_sync+0x1a0/0x1a4
[  158.403440][ T4024] XFS (loop0): Unmounting Filesystem
[  159.058280][ T5496] loop3: detected capacity change from 0 to 4096
[  159.076893][ T5496] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  159.223145][ T5496] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  159.307741][ T5502] loop0: detected capacity change from 0 to 256
[  159.334833][ T5502] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  159.366303][ T4428] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22.
[  159.370061][ T4031] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  159.807210][ T5508] loop2: detected capacity change from 0 to 4096
[  159.814602][ T5507] loop1: detected capacity change from 0 to 4096
[  159.870736][ T5504] loop3: detected capacity change from 0 to 32768
[  159.895466][ T5504] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.361 (5504)
[  159.895642][ T5508] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  159.905920][ T5507] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  159.959445][ T5504] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  159.961769][ T5504] BTRFS info (device loop3): using free space tree
[  159.962318][ T5507] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  159.963569][ T5504] BTRFS info (device loop3): has skinny extents
[  159.966015][ T5508] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  160.002393][ T5508] FAULT_INJECTION: forcing a failure.
[  160.002393][ T5508] name failslab, interval 1, probability 0, space 0, times 0
[  160.005574][ T5508] CPU: 0 PID: 5508 Comm: syz.2.363 Not tainted 5.15.165-syzkaller #0
[  160.007746][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  160.010453][ T5508] Call trace:
[  160.011333][ T5508]  dump_backtrace+0x0/0x530
[  160.012546][ T5508]  show_stack+0x2c/0x3c
[  160.013642][ T5508]  dump_stack_lvl+0x108/0x170
[  160.014961][ T5508]  dump_stack+0x1c/0x58
[  160.016074][ T5508]  should_fail+0x3b8/0x514
[  160.017269][ T5508]  __should_failslab+0xbc/0x110
[  160.018524][ T5508]  should_failslab+0x10/0x28
[  160.019681][ T5508]  slab_pre_alloc_hook+0x64/0xe8
[  160.021063][ T5508]  kmem_cache_alloc+0x98/0x45c
[  160.022341][ T5508]  security_file_alloc+0x30/0x124
[  160.023736][ T5508]  __alloc_file+0xb0/0x240
[  160.024839][ T5508]  alloc_empty_file+0xa8/0x198
[  160.026124][ T5508]  path_openat+0xdc/0x26cc
[  160.027309][ T5508]  do_filp_open+0x1a8/0x3b4
[  160.028529][ T5508]  do_sys_openat2+0x128/0x3e0
[  160.029822][ T5508]  __arm64_sys_openat+0x1f0/0x240
[  160.031210][ T5508]  invoke_syscall+0x98/0x2b8
[  160.032462][ T5508]  el0_svc_common+0x138/0x258
[  160.033755][ T5508]  do_el0_svc+0x58/0x14c
[  160.034843][ T5508]  el0_svc+0x7c/0x1f0
[  160.035924][ T5508]  el0t_64_sync_handler+0x84/0xe4
[  160.037336][ T5508]  el0t_64_sync+0x1a0/0x1a4
[  160.086037][ T4026] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  160.123950][ T4020] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  160.190315][ T5528] loop2: detected capacity change from 0 to 512
[  160.198152][ T5528] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  160.410721][ T5504] BTRFS info (device loop3): enabling ssd optimizations
[  161.618720][ T5551] FAULT_INJECTION: forcing a failure.
[  161.618720][ T5551] name failslab, interval 1, probability 0, space 0, times 0
[  161.622272][ T5551] CPU: 0 PID: 5551 Comm: syz.3.368 Not tainted 5.15.165-syzkaller #0
[  161.624325][ T5551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  161.626864][ T5551] Call trace:
[  161.627740][ T5551]  dump_backtrace+0x0/0x530
[  161.628996][ T5551]  show_stack+0x2c/0x3c
[  161.630085][ T5551]  dump_stack_lvl+0x108/0x170
[  161.631416][ T5551]  dump_stack+0x1c/0x58
[  161.632672][ T5551]  should_fail+0x3b8/0x514
[  161.633926][ T5551]  __should_failslab+0xbc/0x110
[  161.635381][ T5551]  should_failslab+0x10/0x28
[  161.636692][ T5551]  slab_pre_alloc_hook+0x64/0xe8
[  161.638105][ T5551]  __kmalloc+0xc0/0x4c8
[  161.639216][ T5551]  tomoyo_encode+0x270/0x4b0
[  161.640480][ T5551]  tomoyo_realpath_from_path+0x4b4/0x508
[  161.642153][ T5551]  tomoyo_path_number_perm+0x1f8/0x6b0
[  161.643569][ T5551]  tomoyo_file_ioctl+0x2c/0x3c
[  161.644904][ T5551]  security_file_ioctl+0x80/0xbc
[  161.646345][ T5551]  __arm64_sys_ioctl+0xa8/0x1c8
[  161.647665][ T5551]  invoke_syscall+0x98/0x2b8
[  161.648899][ T5551]  el0_svc_common+0x138/0x258
[  161.650230][ T5551]  do_el0_svc+0x58/0x14c
[  161.651385][ T5551]  el0_svc+0x7c/0x1f0
[  161.652447][ T5551]  el0t_64_sync_handler+0x84/0xe4
[  161.653801][ T5551]  el0t_64_sync+0x1a0/0x1a4
[  161.737308][ T5551] ERROR: Out of memory at tomoyo_realpath_from_path.
[  162.064650][ T5558] loop2: detected capacity change from 0 to 1024
[  162.859285][ T5564] loop4: detected capacity change from 0 to 256
[  163.056898][ T5564] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  164.134642][ T5566] loop3: detected capacity change from 0 to 8192
[  164.240089][ T5566] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  164.243486][ T5566] REISERFS (device loop3): using ordered data mode
[  164.245529][ T5566] reiserfs: using flush barriers
[  164.295135][ T5566] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  164.330252][ T5566] REISERFS (device loop3): checking transaction log (loop3)
[  164.367023][ T5566] REISERFS (device loop3): Using r5 hash to sort names
[  164.393250][ T5566] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  164.427992][ T5566] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  164.494571][ T5566] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  164.714949][ T5576] loop4: detected capacity change from 0 to 32768
[  164.783398][ T5576] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz.4.377 (5576)
[  164.823092][ T5576] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[  164.825520][ T5576] BTRFS error (device loop4): superblock checksum mismatch
[  164.845496][ T5583] netlink: 'syz.3.378': attribute type 20 has an invalid length.
[  164.883128][ T5576] BTRFS error (device loop4): open_ctree failed
[  166.049763][ T5580] loop2: detected capacity change from 0 to 32768
[  166.170343][ T5593] loop0: detected capacity change from 0 to 256
[  166.210868][ T5603] loop4: detected capacity change from 0 to 64
[  166.217814][ T5580] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.379 (5580)
[  166.378429][ T5604] loop3: detected capacity change from 0 to 1024
[  166.941807][ T5593] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  166.974968][ T5580] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  167.004520][ T5580] BTRFS error (device loop2): superblock checksum mismatch
[  167.051058][ T5580] BTRFS error (device loop2): open_ctree failed
[  167.117027][ T5593] exFAT-fs (loop0): hint_cluster is invalid (17)
[  167.134214][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'.
[  167.296362][ T5610] loop3: detected capacity change from 0 to 512
[  167.464450][ T5617] loop2: detected capacity change from 0 to 64
[  167.542240][ T5618] loop3: detected capacity change from 0 to 256
[  167.559638][ T5618] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  167.614371][ T5617] hfs: keylen 94 too large
[  168.092704][   T26] audit: type=1326 audit(168.060:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5621 comm="X" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2e70ea8 code=0x0
[  168.452645][ T5628] loop0: detected capacity change from 0 to 22
[  168.476394][ T5628] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  168.491875][ T5628] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  168.982951][ T3320] Bluetooth: hci0: command 0x0406 tx timeout
[  169.663259][ T5640] loop1: detected capacity change from 0 to 1024
[  170.359597][ T3320] Bluetooth: hci1: command 0x0406 tx timeout
[  170.361279][ T3320] Bluetooth: hci2: command 0x0406 tx timeout
[  170.363035][ T3320] Bluetooth: hci3: command 0x0406 tx timeout
[  170.364860][ T4011] Bluetooth: hci4: command 0x0406 tx timeout
[  170.462640][ T5637] loop2: detected capacity change from 0 to 1024
[  170.618548][ T5642] loop0: detected capacity change from 0 to 512
[  170.644989][  T148] hfsplus: b-tree write err: -5, ino 4
[  170.820814][ T5642] EXT4-fs error (device loop0): __ext4_iget:4872: inode #15: block 1803188595: comm syz.0.397: invalid block
[  170.837430][ T5642] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.397: couldn't read orphan inode 15 (err -117)
[  170.841525][ T5642] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,journal_dev=0x0000000000007ffc,debug_want_extra_isize=0x000000000000005c,usrquota,user_xattr,delalloc,usrjquota=,,errors=continue. Quota mode: writeback.
[  170.866993][ T5651] loop3: detected capacity change from 0 to 1024
[  171.015084][ T5660] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.397: invalid indirect mapped block 234881024 (level 0)
[  171.040660][ T5656] FAULT_INJECTION: forcing a failure.
[  171.040660][ T5656] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  171.044204][ T5656] CPU: 1 PID: 5656 Comm: syz.2.398 Not tainted 5.15.165-syzkaller #0
[  171.046630][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  171.049417][ T5656] Call trace:
[  171.050288][ T5656]  dump_backtrace+0x0/0x530
[  171.051481][ T5656]  show_stack+0x2c/0x3c
[  171.052586][ T5656]  dump_stack_lvl+0x108/0x170
[  171.053858][ T5656]  dump_stack+0x1c/0x58
[  171.055016][ T5656]  should_fail+0x3b8/0x514
[  171.056197][ T5656]  should_fail_usercopy+0x20/0x30
[  171.057631][ T5656]  _copy_from_iter+0x1f0/0xcf0
[  171.058929][ T5656]  netlink_sendmsg+0x70c/0xb38
[  171.060183][ T5656]  sock_write_iter+0x2b0/0x3f8
[  171.061520][ T5656]  do_iter_readv_writev+0x420/0x5f8
[  171.062924][ T5656]  do_iter_write+0x1b8/0x66c
[  171.064131][ T5656]  do_writev+0x220/0x3ec
[  171.065270][ T5656]  __arm64_sys_writev+0x80/0x94
[  171.066632][ T5656]  invoke_syscall+0x98/0x2b8
[  171.067866][ T5656]  el0_svc_common+0x138/0x258
[  171.069191][ T5656]  do_el0_svc+0x58/0x14c
[  171.070297][ T5656]  el0_svc+0x7c/0x1f0
[  171.071357][ T5656]  el0t_64_sync_handler+0x84/0xe4
[  171.072803][ T5656]  el0t_64_sync+0x1a0/0x1a4
[  171.074230][    C1] vkms_vblank_simulate: vblank timer overrun
[  171.077329][ T5657] loop1: detected capacity change from 0 to 512
[  171.086999][ T5651] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  171.118373][ T5657] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  171.118373][ T5657] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  171.118373][ T5657] 
[  171.139275][ T5657] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  171.156832][ T5657] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  172.891441][ T5675] FAULT_INJECTION: forcing a failure.
[  172.891441][ T5675] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  173.009869][ T5675] CPU: 0 PID: 5675 Comm: syz.2.406 Not tainted 5.15.165-syzkaller #0
[  173.012043][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  173.014714][ T5675] Call trace:
[  173.015562][ T5675]  dump_backtrace+0x0/0x530
[  173.016795][ T5675]  show_stack+0x2c/0x3c
[  173.017954][ T5675]  dump_stack_lvl+0x108/0x170
[  173.019250][ T5675]  dump_stack+0x1c/0x58
[  173.020516][ T5675]  should_fail+0x3b8/0x514
[  173.021725][ T5675]  should_fail_alloc_page+0x74/0xa8
[  173.023198][ T5675]  prepare_alloc_pages+0x160/0x460
[  173.024673][ T5675]  __alloc_pages+0x138/0x674
[  173.026052][ T5675]  alloc_pages_vma+0x294/0x7c0
[  173.027355][ T5675]  shmem_alloc_and_acct_page+0x5bc/0xca0
[  173.028889][ T5675]  shmem_getpage_gfp+0x1144/0x20e4
[  173.030273][ T5675]  shmem_write_begin+0xe0/0x29c
[  173.031591][ T5675]  generic_perform_write+0x24c/0x520
[  173.032985][ T5675]  __generic_file_write_iter+0x230/0x454
[  173.034553][ T5675]  generic_file_write_iter+0xb4/0x1b8
[  173.036014][ T5675]  vfs_write+0x884/0xb44
[  173.037097][ T5675]  ksys_write+0x15c/0x26c
[  173.038326][ T5675]  __arm64_sys_write+0x7c/0x90
[  173.039581][ T5675]  invoke_syscall+0x98/0x2b8
[  173.040789][ T5675]  el0_svc_common+0x138/0x258
[  173.042119][ T5675]  do_el0_svc+0x58/0x14c
[  173.043196][ T5675]  el0_svc+0x7c/0x1f0
[  173.044256][ T5675]  el0t_64_sync_handler+0x84/0xe4
[  173.045554][ T5675]  el0t_64_sync+0x1a0/0x1a4
[  174.221899][ T5671] loop1: detected capacity change from 0 to 262144
[  174.272981][ T5671] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.404 (5671)
[  174.315966][ T5687] libceph: resolve '00.' (ret=-3): failed
[  174.363621][ T5671] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  174.366382][ T5671] BTRFS info (device loop1): using free space tree
[  174.368167][ T5671] BTRFS info (device loop1): has skinny extents
[  174.369891][ T5671] BTRFS info (device loop1): flagging fs with big metadata feature
[  174.467453][ T5705] loop4: detected capacity change from 0 to 256
[  174.529012][ T5705] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  174.609992][ T5671] BTRFS error (device loop1): open_ctree failed
[  174.907232][ T5725] loop3: detected capacity change from 0 to 1024
[  175.721399][ T4692] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by udevd (4692)
[  177.646649][ T5750] loop3: detected capacity change from 0 to 512
[  177.704503][ T5752] loop4: detected capacity change from 0 to 2048
[  177.733939][ T5750] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.420: attempt to clear invalid blocks 2 len 1
[  177.749647][ T5752] NILFS (loop4): invalid segment: Inconsistency found
[  177.751431][ T5752] NILFS (loop4): trying rollback from an earlier position
[  177.759853][ T5752] NILFS (loop4): invalid segment: Inconsistency found
[  177.760494][ T5750] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  177.761682][ T5752] NILFS (loop4): error -22 while searching super root
[  177.821176][ T5750] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.420: invalid indirect mapped block 1819239214 (level 0)
[  177.842707][ T5750] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.420: invalid indirect mapped block 1819239214 (level 1)
[  177.902018][ T5750] EXT4-fs (loop3): 1 truncate cleaned up
[  177.903655][ T5750] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none.
[  177.936390][ T5750] EXT4-fs (loop3): shut down requested (2)
[  177.968473][ T5760] loop4: detected capacity change from 0 to 512
[  178.398361][ T5765] loop2: detected capacity change from 0 to 32768
[  178.802553][ T5760] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  179.297857][ T5750] x_tables: ip6_tables: udp match: only valid for protocol 17
[  179.362352][ T5760] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  180.028522][ T5774] loop2: detected capacity change from 0 to 1024
[  180.731986][ T5776] bridge_slave_0: default FDB implementation only supports local addresses
[  181.128733][ T5788] loop4: detected capacity change from 0 to 1024
[  181.730994][ T5787] loop2: detected capacity change from 0 to 256
[  181.910615][ T5787] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  182.895974][ T5803] binder: 5802:5803 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  182.898555][ T5803] binder: 5802:5803 got transaction to invalid handle, 1
[  182.900431][ T5803] binder: 5802:5803 transaction failed 29201/-22, size 0-0 line 2917
[  183.110219][ T3320] binder: undelivered TRANSACTION_ERROR: 29201
[  183.330969][ T5811] loop4: detected capacity change from 0 to 2048
[  183.704699][ T5813] loop1: detected capacity change from 0 to 4096
[  183.890947][ T5816] loop0: detected capacity change from 0 to 512
[  184.022124][ T5811] UDF-fs: bad mount option "Uovrs" or missing value
[  184.213365][ T5822] loop3: detected capacity change from 0 to 1024
[  184.619349][ T5816] EXT2-fs (loop0): error: ext2_check_descriptors: Inode table for group 0 not in group (block 65570)!
[  184.623933][ T5816] EXT2-fs (loop0): group descriptors corrupted
[  184.935349][ T5820] loop2: detected capacity change from 0 to 4096
[  185.130500][ T5820] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (131072) exceeds the PAGE_SIZE on your system (4096).  This is not supported.  Sorry.
[  185.134710][ T5820] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem.
[  186.555973][   T26] audit: type=1400 audit(186.510:4): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5819 comm="syz.2.440"
[  186.610997][ T5820] loop2: detected capacity change from 0 to 1024
[  186.710865][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'.
[  186.792540][ T5846] loop0: detected capacity change from 0 to 512
[  186.812484][ T5820] EXT4-fs (loop2): Unrecognized mount option "obj_role=[xt2" or missing value
[  186.835962][ T5846] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  186.990626][ T5846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002]
[  186.993487][ T5846] EXT4-fs (loop0): orphan cleanup on readonly fs
[  187.001077][ T5846] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.446: bg 0: block 361: padding at end of block bitmap is not set
[  187.017709][ T5821] loop2: detected capacity change from 0 to 512
[  187.032192][ T5846] EXT4-fs (loop0): Remounting filesystem read-only
[  187.037423][ T5846] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem
[  187.057812][ T5846] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.446: attempt to clear invalid blocks 33619980 len 1
[  187.073248][ T5846] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.446: invalid indirect mapped block 1811939328 (level 0)
[  187.117375][ T5820] loop2: detected capacity change from 0 to 512
[  187.122503][ T5846] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.446: invalid indirect mapped block 2185560079 (level 1)
[  187.139845][ T5846] EXT4-fs (loop0): 1 truncate cleaned up
[  187.146547][ T5846] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none.
[  187.498215][ T5839] loop3: detected capacity change from 0 to 32768
[  187.554165][ T5839] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.445 (5839)
[  187.615249][ T5854] loop2: detected capacity change from 0 to 2048
[  187.619322][ T5839] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  187.622082][ T5839] BTRFS info (device loop3): setting nodatacow, compression disabled
[  187.652160][ T5839] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  187.654643][ T5839] BTRFS info (device loop3): force zstd compression, level 3
[  187.678017][ T5839] BTRFS info (device loop3): metadata ratio 65535
[  187.691516][ T5839] BTRFS info (device loop3): force zlib compression, level 3
[  187.693436][ T5839] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  187.700928][ T5856] loop0: detected capacity change from 0 to 256
[  187.716741][ T5839] BTRFS info (device loop3): trying to use backup root at mount time
[  187.719005][ T5839] BTRFS info (device loop3): max_inline at 0
[  187.721001][ T5854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.731241][ T5856] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  187.742716][ T5839] BTRFS info (device loop3): turning on flush-on-commit
[  187.744537][ T5839] BTRFS info (device loop3): doing ref verification
[  187.832140][ T5839] BTRFS info (device loop3): enabling ssd optimizations
[  187.833995][ T5839] BTRFS info (device loop3): using spread ssd allocation scheme
[  187.852164][ T5839] BTRFS info (device loop3): not using ssd optimizations
[  187.876563][ T5839] BTRFS info (device loop3): not using spread ssd allocation scheme
[  187.878912][ T5839] BTRFS error (device loop3): unrecognized mount option 'fragment=all'
[  187.917366][ T5839] BTRFS error (device loop3): open_ctree failed
[  188.832622][ T5839] process 'syz.3.445' launched './file2' with NULL argv: empty string added
[  189.142245][ T5871] ODEBUG: Out of memory. ODEBUG disabled
[  189.667306][ T5883] loop2: detected capacity change from 0 to 1024
[  190.040678][ T5875] loop0: detected capacity change from 0 to 4096
[  190.095444][ T5875] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  190.118990][ T5888] loop3: detected capacity change from 0 to 256
[  190.132108][ T5875] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  190.146421][ T5875] ntfs3: loop0: Failed to load $Extend.
[  190.180797][ T5888] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  190.190377][ T5875] device geneve2 entered promiscuous mode
[  190.357668][ T5891] loop2: detected capacity change from 0 to 2048
[  192.498504][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  192.500208][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  192.644489][ T5891] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  192.817673][ T5891] EXT4-fs (loop2): shut down requested (2)
[  193.179062][ T5912] loop2: detected capacity change from 0 to 256
[  193.299928][ T5912] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  196.465328][ T5939] loop3: detected capacity change from 0 to 64
[  196.533926][ T5944] loop1: detected capacity change from 0 to 1024
[  196.637360][ T5939] hfs: keylen 94 too large
[  197.486329][ T5953] loop0: detected capacity change from 0 to 1024
[  198.063884][ T5937] loop4: detected capacity change from 0 to 40427
[  198.098468][ T5943] loop2: detected capacity change from 0 to 32768
[  198.119837][ T5937] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  198.121993][ T5937] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  198.129334][ T5943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.473 (5943)
[  198.179868][ T5937] F2FS-fs (loop4): Found nat_bits in checkpoint
[  198.197836][ T5943] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  198.200105][ T5943] BTRFS info (device loop2): using free space tree
[  198.201792][ T5943] BTRFS info (device loop2): has skinny extents
[  198.261263][ T5937] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  198.263433][ T5937] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  198.635906][ T5943] BTRFS info (device loop2): enabling ssd optimizations
[  199.841942][   T26] audit: type=1326 audit(199.810:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.0.480" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff871fdea8 code=0x0
[  201.099867][ T6000] loop4: detected capacity change from 0 to 512
[  201.487802][ T6002] loop0: detected capacity change from 0 to 1024
[  202.189366][ T6000] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2
[  202.191573][ T6000] EXT2-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  202.375085][ T6006] loop2: detected capacity change from 0 to 256
[  202.518711][ T6006] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  202.572541][ T6009] loop1: detected capacity change from 0 to 64
[  202.957105][ T6009] hfs: keylen 94 too large
[  203.335091][ T6018] loop4: detected capacity change from 0 to 2048
[  203.441055][ T6018] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.793963][ T6030] loop0: detected capacity change from 0 to 256
[  203.890295][ T6030] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  205.425983][   T26] audit: type=1326 audit(205.390:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.1.493" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b2eea8 code=0x0
[  205.683794][ T6048] loop4: detected capacity change from 0 to 512
[  205.692198][ T6048] EXT2-fs (loop4): error: ext2_check_descriptors: Inode table for group 0 not in group (block 65570)!
[  205.706009][ T6048] EXT2-fs (loop4): group descriptors corrupted
[  205.718752][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[  205.730370][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[  205.735115][ T6050] device gtp0 entered promiscuous mode
[  205.964939][ T6054] loop2: detected capacity change from 0 to 512
[  206.177858][ T6056] loop4: detected capacity change from 0 to 1024
[  206.747005][ T6054] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2
[  206.749170][ T6054] EXT2-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  208.644263][ T6081] loop1: detected capacity change from 0 to 256
[  208.706136][ T6081] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  208.782846][ T6084] loop3: detected capacity change from 0 to 256
[  210.229937][ T6091] loop2: detected capacity change from 0 to 512
[  210.330738][ T6091] EXT2-fs (loop2): error: ext2_check_descriptors: Inode table for group 0 not in group (block 65570)!
[  210.334011][ T6091] EXT2-fs (loop2): group descriptors corrupted
[  210.516873][ T6096] loop1: detected capacity change from 0 to 1024
[  211.395399][ T6106] loop4: detected capacity change from 0 to 256
[  211.537444][ T6106] exfat: Deprecated parameter 'utf8'
[  211.538914][ T6106] exfat: Deprecated parameter 'namecase'
[  211.568160][ T6106] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  211.849522][ T6115] loop4: detected capacity change from 0 to 256
[  212.096087][ T6115] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  212.132033][ T6102] loop1: detected capacity change from 0 to 32768
[  212.421899][ T6102] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.512 (6102)
[  213.365497][ T6102] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  213.368068][ T6102] BTRFS info (device loop1): using free space tree
[  213.369734][ T6102] BTRFS info (device loop1): has skinny extents
[  213.384582][ T6125] loop0: detected capacity change from 0 to 64
[  213.491317][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'.
[  213.631034][ T6102] BTRFS info (device loop1): enabling ssd optimizations
[  214.418119][ T6160] loop0: detected capacity change from 0 to 1024
[  215.302747][ T6166] loop0: detected capacity change from 0 to 16
[  215.346376][ T6166] cramfs: Unknown parameter ''
[  215.795934][ T5719] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  216.136409][ T5719] usb 1-1: device descriptor read/64, error -71
[  216.342696][ T6175] loop1: detected capacity change from 0 to 32768
[  216.397077][ T6175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.526 (6175)
[  216.415988][ T5719] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  216.605987][ T5719] usb 1-1: device descriptor read/64, error -71
[  216.672246][ T6185] loop3: detected capacity change from 0 to 256
[  216.697638][ T6175] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  216.699980][ T6175] BTRFS info (device loop1): turning off barriers
[  216.701775][ T6175] BTRFS info (device loop1): enabling auto defrag
[  216.703489][ T6175] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  216.726364][ T5719] usb usb1-port1: attempt power cycle
[  216.746310][ T6175] BTRFS info (device loop1): use lzo compression, level 0
[  216.748246][ T6175] BTRFS info (device loop1): using free space tree
[  216.750100][ T6175] BTRFS info (device loop1): has skinny extents
[  216.759857][ T6185] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  216.774460][ T6198] xt_CT: You must specify a L4 protocol and not use inversions on it
[  217.166320][ T6210] loop4: detected capacity change from 0 to 1024
[  218.364768][ T6175] BTRFS info (device loop1): balance: start -s
[  218.372035][ T6175] BTRFS info (device loop1): left=0, need=98304, flags=2
[  218.374974][ T6175] BTRFS info (device loop1): space_info 2 has 0 free, is not full
[  218.377477][ T6175] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  218.381247][ T6175] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968
[  218.383855][ T6175] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  218.386181][ T6175] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  218.388298][ T6175] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  218.390452][ T6175] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0
[  218.410722][ T6175] BTRFS info (device loop1): relocating block group 1048576 flags system
[  218.472849][ T6175] BTRFS info (device loop1): balance: ended with status: 0
[  218.675995][ T5719] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  218.956201][ T6241] xt_l2tp: v2 doesn't support IP mode
[  219.033079][ T5719] usb 1-1: device not accepting address 8, error -71
[  219.324060][ T6241] loop1: detected capacity change from 0 to 4096
[  219.842192][ T6241] ntfs3: Unknown parameter ''
[  220.335918][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'.
[  220.360940][ T6257] loop1: detected capacity change from 0 to 256
[  221.137829][ T6234] loop3: detected capacity change from 0 to 40427
[  221.166352][ T6259] loop2: detected capacity change from 0 to 512
[  221.191759][ T6257] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  221.204700][ T6234] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (67108865, 24)
[  221.216607][ T6234] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  221.222651][ T6259] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  221.232658][ T6234] F2FS-fs (loop3): invalid crc value
[  221.259852][ T6234] F2FS-fs (loop3): Found nat_bits in checkpoint
[  221.274274][ T6261] loop0: detected capacity change from 0 to 512
[  221.279092][ T6259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002]
[  221.281820][ T6259] EXT4-fs (loop2): orphan cleanup on readonly fs
[  221.284873][ T6259] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.543: bg 0: block 361: padding at end of block bitmap is not set
[  221.327788][ T6259] EXT4-fs (loop2): Remounting filesystem read-only
[  221.329641][ T6259] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6185: Corrupt filesystem
[  221.361000][ T6259] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.543: attempt to clear invalid blocks 33619980 len 1
[  221.377347][ T6259] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.543: invalid indirect mapped block 1811939328 (level 0)
[  221.394125][ T6234] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  221.397610][ T6234] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  221.398986][ T6261] EXT4-fs (loop0): Ignoring removed nobh option
[  221.403223][ T6259] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.543: invalid indirect mapped block 2185560079 (level 1)
[  221.405418][ T6261] EXT4-fs (loop0): Unrecognized mount option "i_version"errors=continue" or missing value
[  221.416506][ T6259] EXT4-fs (loop2): 1 truncate cleaned up
[  221.417948][ T6259] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none.
[  222.636082][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.547'.
[  222.638700][ T6270] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511)
[  222.641057][ T6270] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  222.649167][ T6273] loop1: detected capacity change from 0 to 256
[  222.712420][ T6273] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  224.159302][ T6285] loop3: detected capacity change from 0 to 1024
[  224.681455][ T6277] loop2: detected capacity change from 0 to 4096
[  224.777870][ T6281] loop0: detected capacity change from 0 to 4096
[  224.946165][ T6281] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  224.949066][ T6277] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  225.007809][ T6277] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  225.011008][ T6281] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  225.179777][ T6281] FAULT_INJECTION: forcing a failure.
[  225.179777][ T6281] name failslab, interval 1, probability 0, space 0, times 0
[  225.191678][ T4187] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22.
[  225.198091][ T4026] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  225.206250][ T6281] CPU: 1 PID: 6281 Comm: syz.0.551 Not tainted 5.15.165-syzkaller #0
[  225.208486][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  225.211194][ T6281] Call trace:
[  225.212090][ T6281]  dump_backtrace+0x0/0x530
[  225.213347][ T6281]  show_stack+0x2c/0x3c
[  225.214461][ T6281]  dump_stack_lvl+0x108/0x170
[  225.215868][ T6281]  dump_stack+0x1c/0x58
[  225.216997][ T6281]  should_fail+0x3b8/0x514
[  225.218218][ T6281]  __should_failslab+0xbc/0x110
[  225.219572][ T6281]  should_failslab+0x10/0x28
[  225.220837][ T6281]  slab_pre_alloc_hook+0x64/0xe8
[  225.222202][ T6281]  kmem_cache_alloc+0x98/0x45c
[  225.223471][ T6281]  __d_alloc+0x3c/0x6a8
[  225.224672][ T6281]  d_alloc_parallel+0xb8/0x11bc
[  225.226079][ T6281]  path_openat+0x73c/0x26cc
[  225.227343][ T6281]  do_filp_open+0x1a8/0x3b4
[  225.228523][ T6281]  do_sys_openat2+0x128/0x3e0
[  225.229805][ T6281]  __arm64_sys_openat+0x1f0/0x240
[  225.231274][ T6281]  invoke_syscall+0x98/0x2b8
[  225.232519][ T6281]  el0_svc_common+0x138/0x258
[  225.233782][ T6281]  do_el0_svc+0x58/0x14c
[  225.234901][ T6281]  el0_svc+0x7c/0x1f0
[  225.236232][ T6281]  el0t_64_sync_handler+0x84/0xe4
[  225.237540][ T6281]  el0t_64_sync+0x1a0/0x1a4
[  225.346215][ T6294] loop2: detected capacity change from 0 to 512
[  225.372425][ T6294] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  225.427070][ T4024] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  225.430932][ T6290] netlink: 104 bytes leftover after parsing attributes in process `syz.3.554'.
[  225.505121][ T6294] EXT4-fs (loop2): 1 truncate cleaned up
[  225.506854][ T6294] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  226.304847][ T6304] FAULT_INJECTION: forcing a failure.
[  226.304847][ T6304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.330834][ T6304] CPU: 1 PID: 6304 Comm: syz.0.557 Not tainted 5.15.165-syzkaller #0
[  226.333063][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  226.335658][ T6304] Call trace:
[  226.336558][ T6304]  dump_backtrace+0x0/0x530
[  226.337859][ T6304]  show_stack+0x2c/0x3c
[  226.339041][ T6304]  dump_stack_lvl+0x108/0x170
[  226.340341][ T6304]  dump_stack+0x1c/0x58
[  226.341501][ T6304]  should_fail+0x3b8/0x514
[  226.342701][ T6304]  should_fail_usercopy+0x20/0x30
[  226.344132][ T6304]  do_fb_ioctl+0x240/0xf9c
[  226.345337][ T6304]  fb_ioctl+0xec/0x134
[  226.346481][ T6304]  __arm64_sys_ioctl+0x14c/0x1c8
[  226.347829][ T6304]  invoke_syscall+0x98/0x2b8
[  226.349059][ T6304]  el0_svc_common+0x138/0x258
[  226.350360][ T6304]  do_el0_svc+0x58/0x14c
[  226.351497][ T6304]  el0_svc+0x7c/0x1f0
[  226.352578][ T6304]  el0t_64_sync_handler+0x84/0xe4
[  226.353964][ T6304]  el0t_64_sync+0x1a0/0x1a4
[  226.521183][ T6316] loop0: detected capacity change from 0 to 256
[  226.625043][ T6318] loop2: detected capacity change from 0 to 256
[  226.714946][ T6318] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  226.796587][ T6316] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  227.418521][ T6308] loop3: detected capacity change from 0 to 4096
[  227.488396][ T6321] loop2: detected capacity change from 0 to 256
[  227.629147][ T6308] ntfs: volume version 3.1.
[  227.631015][ T6321] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  227.786850][ T6326] loop1: detected capacity change from 0 to 1024
[  228.427944][ T6329] netlink: 104 bytes leftover after parsing attributes in process `syz.4.568'.
[  230.012541][ T6357] loop3: detected capacity change from 0 to 1024
[  230.080154][ T6354] loop1: detected capacity change from 0 to 4096
[  230.130979][ T6354] ntfs3: Unknown parameter 'nocase'
[  230.150122][ T6357] hfsplus: failed to load root directory
[  231.063132][ T6381] loop0: detected capacity change from 0 to 1024
[  231.585072][ T6378] loop1: detected capacity change from 0 to 64
[  231.620939][ T6378] hfs: keylen 94 too large
[  231.888826][ T6361] loop2: detected capacity change from 0 to 32768
[  231.960678][ T6385] loop1: detected capacity change from 0 to 22
[  231.973919][ T6385] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  231.984447][ T6385] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  232.339810][ T6397] loop3: detected capacity change from 0 to 256
[  232.542251][ T6400] loop1: detected capacity change from 0 to 1024
[  232.987207][ T6397] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  233.889797][ T6403] loop2: detected capacity change from 0 to 2048
[  234.994319][ T6411] loop1: detected capacity change from 0 to 256
[  235.041032][ T6411] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  235.267688][ T6419] FAULT_INJECTION: forcing a failure.
[  235.267688][ T6419] name failslab, interval 1, probability 0, space 0, times 0
[  235.271151][ T6419] CPU: 1 PID: 6419 Comm: syz.3.589 Not tainted 5.15.165-syzkaller #0
[  235.273240][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  235.275865][ T6419] Call trace:
[  235.276728][ T6419]  dump_backtrace+0x0/0x530
[  235.277971][ T6419]  show_stack+0x2c/0x3c
[  235.279130][ T6419]  dump_stack_lvl+0x108/0x170
[  235.280391][ T6419]  dump_stack+0x1c/0x58
[  235.281488][ T6419]  should_fail+0x3b8/0x514
[  235.282674][ T6419]  __should_failslab+0xbc/0x110
[  235.283978][ T6419]  should_failslab+0x10/0x28
[  235.285177][ T6419]  slab_pre_alloc_hook+0x64/0xe8
[  235.286479][ T6419]  kmem_cache_alloc+0x98/0x45c
[  235.287706][ T6419]  skb_clone+0x180/0x304
[  235.288783][ T6419]  __netlink_deliver_tap+0x360/0x714
[  235.290237][ T6419]  netlink_deliver_tap+0x1ac/0x1b0
[  235.291624][ T6419]  netlink_unicast+0x648/0x938
[  235.292892][ T6419]  netlink_sendmsg+0x844/0xb38
[  235.294206][ T6419]  sock_write_iter+0x2b0/0x3f8
[  235.295458][ T6419]  do_iter_readv_writev+0x420/0x5f8
[  235.296814][ T6419]  do_iter_write+0x1b8/0x66c
[  235.298070][ T6419]  do_writev+0x220/0x3ec
[  235.299201][ T6419]  __arm64_sys_writev+0x80/0x94
[  235.300501][ T6419]  invoke_syscall+0x98/0x2b8
[  235.301753][ T6419]  el0_svc_common+0x138/0x258
[  235.303025][ T6419]  do_el0_svc+0x58/0x14c
[  235.304170][ T6419]  el0_svc+0x7c/0x1f0
[  235.305253][ T6419]  el0t_64_sync_handler+0x84/0xe4
[  235.306586][ T6419]  el0t_64_sync+0x1a0/0x1a4
[  235.326610][ T6423] loop2: detected capacity change from 0 to 8
[  236.273370][ T6435] loop2: detected capacity change from 0 to 1024
[  237.216013][ T6443] loop2: detected capacity change from 0 to 512
[  237.221967][ T6443] EXT4-fs (loop2): Ignoring removed nobh option
[  237.232297][ T6443] EXT4-fs (loop2): Unrecognized mount option "i_version"errors=continue" or missing value
[  238.682525][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'.
[  238.910239][ T6473] loop3: detected capacity change from 0 to 1024
[  239.037956][ T6475] loop0: detected capacity change from 0 to 1024
[  239.793360][ T6473] hfsplus: unable to parse mount options
[  239.883567][ T6472] loop2: detected capacity change from 0 to 4096
[  240.192572][ T6479] loop4: detected capacity change from 0 to 1024
[  241.001664][ T6481] loop0: detected capacity change from 0 to 512
[  241.050625][ T6481] EXT4-fs (loop0): Ignoring removed nobh option
[  241.053120][ T6481] EXT4-fs (loop0): Unrecognized mount option "i_version"errors=continue" or missing value
[  241.233416][ T6494] loop0: detected capacity change from 0 to 512
[  241.640437][ T6500] loop4: detected capacity change from 0 to 256
[  241.774197][ T6500] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  243.657072][ T6513] loop3: detected capacity change from 0 to 1024
[  244.495321][ T6518] loop4: detected capacity change from 0 to 256
[  244.509955][ T6518] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  244.911476][ T6519] loop0: detected capacity change from 0 to 4096
[  244.917247][ T6531] loop4: detected capacity change from 0 to 512
[  245.008683][ T6531] EXT4-fs (loop4): Ignoring removed nobh option
[  245.010554][ T6531] EXT4-fs (loop4): Unrecognized mount option "i_version"errors=continue" or missing value
[  245.150501][ T6547] loop3: detected capacity change from 0 to 256
[  245.221391][ T6547] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  246.792380][ T6522] loop1: detected capacity change from 0 to 32768
[  246.810565][ T6557] loop0: detected capacity change from 0 to 1024
[  246.828700][ T6522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.621 (6522)
[  246.875119][ T6522] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  246.880380][ T6522] BTRFS info (device loop1): using free space tree
[  246.883006][ T6522] BTRFS info (device loop1): has skinny extents
[  247.060566][ T6575] xt_CT: You must specify a L4 protocol and not use inversions on it
[  247.135312][ T6584] loop4: detected capacity change from 0 to 512
[  247.171463][ T6522] BTRFS info (device loop1): enabling ssd optimizations
[  247.199150][ T6584] EXT4-fs (loop4): Ignoring removed nobh option
[  247.200881][ T6584] EXT4-fs (loop4): Unrecognized mount option "i_version"errors=continue" or missing value
[  247.303869][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'.
[  247.910075][ T6588] loop2: detected capacity change from 0 to 32768
[  248.047303][ T6588] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.639 (6588)
[  248.201774][ T6603] loop4: detected capacity change from 0 to 32768
[  248.267091][ T6603] XFS: ikeep mount option is deprecated.
[  248.274993][ T6603] XFS: noikeep mount option is deprecated.
[  248.331082][ T6603] XFS (loop4): Mounting V5 Filesystem
[  248.436228][ T6588] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  248.451770][ T6588] BTRFS info (device loop2): turning off barriers
[  248.453494][ T6588] BTRFS info (device loop2): enabling auto defrag
[  248.455244][ T6588] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  248.471660][ T6603] XFS (loop4): Ending clean mount
[  248.480067][ T6603] XFS (loop4): Quotacheck needed: Please wait.
[  248.547217][ T6588] BTRFS info (device loop2): use lzo compression, level 0
[  248.549228][ T6588] BTRFS info (device loop2): using free space tree
[  248.551319][ T6588] BTRFS info (device loop2): has skinny extents
[  248.612953][ T6603] XFS (loop4): Quotacheck: Done.
[  248.620750][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'.
[  248.799877][ T6625] loop0: detected capacity change from 0 to 4096
[  248.848766][ T6625] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  248.860707][ T6633] loop1: detected capacity change from 0 to 4096
[  248.863263][ T6625] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  248.894040][ T6625] FAULT_INJECTION: forcing a failure.
[  248.894040][ T6625] name failslab, interval 1, probability 0, space 0, times 0
[  248.903769][ T6625] CPU: 1 PID: 6625 Comm: syz.0.646 Not tainted 5.15.165-syzkaller #0
[  248.906062][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  248.908865][ T6625] Call trace:
[  248.909774][ T6625]  dump_backtrace+0x0/0x530
[  248.911017][ T6625]  show_stack+0x2c/0x3c
[  248.912151][ T6625]  dump_stack_lvl+0x108/0x170
[  248.913433][ T6625]  dump_stack+0x1c/0x58
[  248.914578][ T6625]  should_fail+0x3b8/0x514
[  248.915896][ T6625]  __should_failslab+0xbc/0x110
[  248.917255][ T6625]  should_failslab+0x10/0x28
[  248.918520][ T6625]  slab_pre_alloc_hook+0x64/0xe8
[  248.919768][ T6625]  __kmalloc+0xc0/0x4c8
[  248.920902][ T6625]  tomoyo_realpath_from_path+0xd0/0x508
[  248.922420][ T6625]  tomoyo_path_number_perm+0x1f8/0x6b0
[  248.923888][ T6625]  tomoyo_path_mknod+0x168/0x1b0
[  248.925221][ T6625]  security_path_mknod+0xf8/0x14c
[  248.926515][ T6625]  path_openat+0x9c0/0x26cc
[  248.927688][ T6625]  do_filp_open+0x1a8/0x3b4
[  248.928843][ T6625]  do_sys_openat2+0x128/0x3e0
[  248.930104][ T6625]  __arm64_sys_openat+0x1f0/0x240
[  248.931420][ T6625]  invoke_syscall+0x98/0x2b8
[  248.932648][ T6625]  el0_svc_common+0x138/0x258
[  248.933906][ T6625]  do_el0_svc+0x58/0x14c
[  248.935021][ T6625]  el0_svc+0x7c/0x1f0
[  248.936081][ T6625]  el0t_64_sync_handler+0x84/0xe4
[  248.937453][ T6625]  el0t_64_sync+0x1a0/0x1a4
[  248.946034][ T6625] ERROR: Out of memory at tomoyo_realpath_from_path.
[  248.959817][ T6633] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  248.982850][ T6633] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  249.023984][ T4518] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22.
[  249.030467][ T4028] XFS (loop4): Unmounting Filesystem
[  249.033653][ T4024] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  249.127893][ T4094] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22.
[  249.130975][ T4020] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  249.137277][ T6229] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  249.139690][ T6229] Bluetooth: hci1: Injecting HCI hardware error event
[  249.142774][ T4023] Bluetooth: hci1: hardware error 0x00
[  249.157156][ T6588] BTRFS info (device loop2): balance: start -s
[  249.158975][ T6588] BTRFS info (device loop2): left=0, need=98304, flags=2
[  249.164420][ T6588] BTRFS info (device loop2): space_info 2 has 0 free, is not full
[  249.166914][ T6588] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  249.170730][ T6588] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968
[  249.172885][ T6588] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[  249.174843][ T6588] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[  249.176354][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.647'.
[  249.176828][ T6588] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[  249.181248][ T6588] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0
[  249.211857][ T6588] BTRFS info (device loop2): relocating block group 1048576 flags system
[  249.257777][ T6588] BTRFS info (device loop2): balance: ended with status: 0
[  249.596035][ T6657] loop1: detected capacity change from 0 to 1024
[  250.283440][ T6659] loop3: detected capacity change from 0 to 4096
[  250.320509][ T6659] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  250.347131][ T6663] FAULT_INJECTION: forcing a failure.
[  250.347131][ T6663] name failslab, interval 1, probability 0, space 0, times 0
[  250.347217][ T6663] CPU: 1 PID: 6663 Comm: syz.1.652 Not tainted 5.15.165-syzkaller #0
[  250.347230][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  250.347237][ T6663] Call trace:
[  250.347241][ T6663]  dump_backtrace+0x0/0x530
[  250.347255][ T6663]  show_stack+0x2c/0x3c
[  250.347264][ T6663]  dump_stack_lvl+0x108/0x170
[  250.347275][ T6663]  dump_stack+0x1c/0x58
[  250.347284][ T6663]  should_fail+0x3b8/0x514
[  250.347293][ T6663]  __should_failslab+0xbc/0x110
[  250.347304][ T6663]  should_failslab+0x10/0x28
[  250.347314][ T6663]  slab_pre_alloc_hook+0x64/0xe8
[  250.347324][ T6663]  kmem_cache_alloc_trace+0x9c/0x47c
[  250.347333][ T6663]  drm_atomic_state_alloc+0xc4/0x110
[  250.347346][ T6663]  drm_client_modeset_commit_atomic+0xd8/0x730
[  250.347357][ T6663]  drm_client_modeset_commit_locked+0xd0/0x4a8
[  250.347368][ T6663]  drm_fb_helper_pan_display+0x334/0xa90
[  250.347379][ T6663]  fb_pan_display+0x2fc/0x574
[  250.347390][ T6663]  bit_update_start+0x4c/0x1e4
[  250.347400][ T6663]  fbcon_modechanged+0x93c/0xf98
[  250.347409][ T6663]  fbcon_update_vcs+0x3c/0x4c
[  250.347419][ T6663]  do_fb_ioctl+0xc4c/0xf9c
[  250.347427][ T6663]  fb_ioctl+0xec/0x134
[  250.347435][ T6663]  __arm64_sys_ioctl+0x14c/0x1c8
[  250.347447][ T6663]  invoke_syscall+0x98/0x2b8
[  250.347457][ T6663]  el0_svc_common+0x138/0x258
[  250.347467][ T6663]  do_el0_svc+0x58/0x14c
[  250.347477][ T6663]  el0_svc+0x7c/0x1f0
[  250.347486][ T6663]  el0t_64_sync_handler+0x84/0xe4
[  250.347496][ T6663]  el0t_64_sync+0x1a0/0x1a4
[  250.354602][ T6659] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  250.467301][ T4187] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22.
[  250.492380][ T4031] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  250.710801][ T6683] loop3: detected capacity change from 0 to 256
[  250.746606][ T6683] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  251.192251][ T6687] loop4: detected capacity change from 0 to 1024
[  252.348041][ T6689] netlink: 104 bytes leftover after parsing attributes in process `syz.2.657'.
[  252.535521][ T6695] loop2: detected capacity change from 0 to 256
[  252.624541][ T6695] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  252.643612][ T6681] loop1: detected capacity change from 0 to 32768
[  252.692859][ T6681] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  252.707960][ T6681] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  252.741131][ T6701] loop0: detected capacity change from 0 to 512
[  252.773726][ T6681] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  252.784707][ T5546] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  252.786876][ T5546] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  252.808227][ T6701] EXT4-fs (loop0): Ignoring removed nobh option
[  252.810046][ T6701] EXT4-fs (loop0): Unrecognized mount option "i_version"errors=continue" or missing value
[  252.908526][ T5546] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms
[  252.911163][ T5546] gfs2: fsid=syz:syz.0: jid=0: Done
[  252.913497][ T6681] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  253.554142][ T6711] loop0: detected capacity change from 0 to 1024
[  253.764091][ T6703] loop4: detected capacity change from 0 to 32768
[  253.892769][ T4518] hfsplus: b-tree write err: -5, ino 4
[  253.938120][ T2055] ieee802154 phy0 wpan0: encryption failed: -22
[  253.939823][ T2055] ieee802154 phy1 wpan1: encryption failed: -22
[  253.999148][ T6703] XFS (loop4): Mounting V5 Filesystem
[  254.090506][ T6703] XFS (loop4): Ending clean mount
[  254.169146][ T6732] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  254.212619][ T6732] loop0: detected capacity change from 0 to 128
[  254.242846][ T6709] loop1: detected capacity change from 0 to 32768
[  254.478919][ T6734] loop3: detected capacity change from 0 to 1024
[  255.048635][ T6709] XFS: attr2 mount option is deprecated.
[  255.050152][ T6709] XFS: ikeep mount option is deprecated.
[  255.053622][ T6709] XFS: noikeep mount option is deprecated.
[  255.272758][ T6709] XFS (loop1): Mounting V5 Filesystem
[  255.279129][ T6739] FAULT_INJECTION: forcing a failure.
[  255.279129][ T6739] name failslab, interval 1, probability 0, space 0, times 0
[  255.282612][ T6739] CPU: 0 PID: 6739 Comm: syz.2.671 Not tainted 5.15.165-syzkaller #0
[  255.284797][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  255.287635][ T6739] Call trace:
[  255.288502][ T6739]  dump_backtrace+0x0/0x530
[  255.289730][ T6739]  show_stack+0x2c/0x3c
[  255.290920][ T6739]  dump_stack_lvl+0x108/0x170
[  255.292248][ T6739]  dump_stack+0x1c/0x58
[  255.293372][ T6739]  should_fail+0x3b8/0x514
[  255.294582][ T6739]  __should_failslab+0xbc/0x110
[  255.295950][ T6739]  should_failslab+0x10/0x28
[  255.297190][ T6739]  slab_pre_alloc_hook+0x64/0xe8
[  255.298492][ T6739]  kmem_cache_alloc_node+0x9c/0x49c
[  255.299857][ T6739]  __alloc_skb+0x174/0x584
[  255.301065][ T6739]  netlink_ack+0x2ec/0x9c0
[  255.302299][ T6739]  netlink_rcv_skb+0x1ec/0x3b8
[  255.303638][ T6739]  sock_diag_rcv+0x3c/0x54
[  255.304837][ T6739]  netlink_unicast+0x664/0x938
[  255.306157][ T6739]  netlink_sendmsg+0x844/0xb38
[  255.307412][ T6739]  sock_write_iter+0x2b0/0x3f8
[  255.308771][ T6739]  do_iter_readv_writev+0x420/0x5f8
[  255.310224][ T6739]  do_iter_write+0x1b8/0x66c
[  255.311445][ T6739]  do_writev+0x220/0x3ec
[  255.312690][ T6739]  __arm64_sys_writev+0x80/0x94
[  255.314086][ T6739]  invoke_syscall+0x98/0x2b8
[  255.315273][ T6739]  el0_svc_common+0x138/0x258
[  255.316613][ T6739]  do_el0_svc+0x58/0x14c
[  255.317729][ T6739]  el0_svc+0x7c/0x1f0
[  255.318790][ T6739]  el0t_64_sync_handler+0x84/0xe4
[  255.320207][ T6739]  el0t_64_sync+0x1a0/0x1a4
[  255.407765][ T6748] loop3: detected capacity change from 0 to 256
[  255.443674][ T6748] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  255.454037][ T6709] XFS (loop1): Ending clean mount
[  255.456790][ T6709] XFS (loop1): Quotacheck needed: Please wait.
[  255.505710][ T6709] XFS (loop1): Quotacheck: Done.
[  255.814830][ T4028] XFS (loop4): Unmounting Filesystem
[  256.213318][ T6752] loop2: detected capacity change from 0 to 512
[  256.227713][ T6752] EXT4-fs (loop2): Ignoring removed nobh option
[  256.229556][ T6752] EXT4-fs (loop2): Unrecognized mount option "i_version"errors=continue" or missing value
[  256.462165][ T4020] XFS (loop1): Unmounting Filesystem
[  256.521452][ T6754] loop3: detected capacity change from 0 to 2048
[  256.556117][ T6756] binder: 6755:6756 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  256.558593][ T6756] binder: 6755:6756 got transaction to invalid handle, 1
[  256.560515][ T6756] binder: 6755:6756 transaction failed 29201/-22, size 0-0 line 2917
[  256.563130][ T5276] binder: undelivered TRANSACTION_ERROR: 29201
[  256.588944][ T6754] NILFS (loop3): invalid segment: Inconsistency found
[  256.590757][ T6754] NILFS (loop3): trying rollback from an earlier position
[  256.594963][ T6754] NILFS (loop3): invalid segment: Inconsistency found
[  256.597028][ T6754] NILFS (loop3): error -22 while searching super root
[  256.790287][ T6766] netlink: 104 bytes leftover after parsing attributes in process `syz.3.682'.
[  257.332661][ T6772] loop3: detected capacity change from 0 to 1024
[  258.218259][ T6781] loop1: detected capacity change from 0 to 256
[  258.229355][ T6779] netlink: 104 bytes leftover after parsing attributes in process `syz.4.685'.
[  258.271828][ T6781] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  258.651728][ T6790] loop4: detected capacity change from 0 to 1024
[  259.293297][ T6777] loop2: detected capacity change from 0 to 32768
[  259.337902][ T6777] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.684 (6777)
[  259.372200][ T6793] loop4: detected capacity change from 0 to 512
[  259.391511][ T6793] EXT4-fs (loop4): Ignoring removed nobh option
[  259.393272][ T6793] EXT4-fs (loop4): Unrecognized mount option "i_version"errors=continue" or missing value
[  259.398807][ T6777] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  259.401146][ T6777] BTRFS error (device loop2): superblock checksum mismatch
[  259.411496][ T6777] BTRFS error (device loop2): open_ctree failed
[  259.423380][ T4012] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by udevd (4012)
[  259.554456][ T6795] loop3: detected capacity change from 0 to 4096
[  261.000206][ T6825] netlink: 104 bytes leftover after parsing attributes in process `syz.2.697'.
[  261.164930][ T6826] loop4: detected capacity change from 0 to 1024
[  261.872181][ T6828] binder: 6827:6828 tried to acquire reference to desc 0, got 1 instead
[  261.932587][ T6834] loop3: detected capacity change from 0 to 512
[  261.941216][ T6831] loop2: detected capacity change from 0 to 512
[  261.995923][ T6831] EXT4-fs (loop2): Ignoring removed nobh option
[  261.997684][ T6831] EXT4-fs (loop2): Unrecognized mount option "i_version"errors=continue" or missing value
[  262.013216][ T6834] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  262.025688][ T6834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  262.030408][ T6834] System zones: 0-2, 18-18, 34-34
[  262.034280][ T6834] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.698: bad orphan inode 15
[  262.048541][ T6834] ext4_test_bit(bit=14, block=18) = 1
[  262.049966][ T6834] is_bad_inode(inode)=0
[  262.051255][ T6834] NEXT_ORPHAN(inode)=2264924160
[  262.052543][ T6834] max_ino=32
[  262.053439][ T6834] i_nlink=0
[  262.065305][ T6834] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  262.079475][ T6834] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.698: bg 0: block 80: padding at end of block bitmap is not set
[  262.106279][ T6834] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6185: Corrupt filesystem
[  262.127015][ T6834] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  262.158298][  T331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.283091][ T6841] loop2: detected capacity change from 0 to 256
[  262.326025][ T6841] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  262.337510][  T331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.542002][ T6843] loop3: detected capacity change from 0 to 4096
[  262.607316][ T6843] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,min_batch_time=0x0000000000000003,i_version,user_xattr,delalloc,,errors=continue. Quota mode: writeback.
[  262.687831][  T331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.828498][ T6854] netlink: 104 bytes leftover after parsing attributes in process `syz.2.705'.
[  262.831737][  T331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.850008][ T6838] chnl_net:caif_netlink_parms(): no params data found
[  262.858229][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.704'.
[  263.118880][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.121607][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.125104][ T6838] device bridge_slave_0 entered promiscuous mode
[  263.287204][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.289403][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.292145][ T6838] device bridge_slave_1 entered promiscuous mode
[  264.364951][ T5545] Bluetooth: hci1: command 0x0409 tx timeout
[  264.378353][ T6838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.399108][ T6838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.444905][ T6870] loop2: detected capacity change from 0 to 512
[  264.491542][ T6838] team0: Port device team_slave_0 added
[  264.502270][ T6838] team0: Port device team_slave_1 added
[  264.518242][ T6870] EXT4-fs (loop2): unsupported inode size: 264
[  264.519888][ T6870] EXT4-fs (loop2): blocksize: 1024
[  264.569820][ T6871] loop3: detected capacity change from 0 to 4096
[  264.752658][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.756370][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.773201][ T6871] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  264.821158][ T6838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.917859][ T6884] capability: warning: `syz.2.709' uses 32-bit capabilities (legacy support in use)
[  265.346559][ T6871] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  265.432155][ T6871] FAULT_INJECTION: forcing a failure.
[  265.432155][ T6871] name failslab, interval 1, probability 0, space 0, times 0
[  265.435392][ T6871] CPU: 0 PID: 6871 Comm: syz.3.710 Not tainted 5.15.165-syzkaller #0
[  265.437543][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  265.440295][ T6871] Call trace:
[  265.441256][ T6871]  dump_backtrace+0x0/0x530
[  265.442485][ T6871]  show_stack+0x2c/0x3c
[  265.443604][ T6871]  dump_stack_lvl+0x108/0x170
[  265.444860][ T6871]  dump_stack+0x1c/0x58
[  265.446008][ T6871]  should_fail+0x3b8/0x514
[  265.447175][ T6871]  __should_failslab+0xbc/0x110
[  265.448500][ T6871]  should_failslab+0x10/0x28
[  265.449784][ T6871]  slab_pre_alloc_hook+0x64/0xe8
[  265.451148][ T6871]  __kmalloc+0xc0/0x4c8
[  265.452292][ T6871]  tomoyo_encode+0x270/0x4b0
[  265.453524][ T6871]  tomoyo_realpath_from_path+0x4b4/0x508
[  265.455108][ T6871]  tomoyo_path_number_perm+0x1f8/0x6b0
[  265.456596][ T6871]  tomoyo_path_mknod+0x168/0x1b0
[  265.457975][ T6871]  security_path_mknod+0xf8/0x14c
[  265.459297][ T6871]  path_openat+0x9c0/0x26cc
[  265.460480][ T6871]  do_filp_open+0x1a8/0x3b4
[  265.461715][ T6871]  do_sys_openat2+0x128/0x3e0
[  265.462966][ T6871]  __arm64_sys_openat+0x1f0/0x240
[  265.464344][ T6871]  invoke_syscall+0x98/0x2b8
[  265.465542][ T6871]  el0_svc_common+0x138/0x258
[  265.466768][ T6871]  do_el0_svc+0x58/0x14c
[  265.468011][ T6871]  el0_svc+0x7c/0x1f0
[  265.469075][ T6871]  el0t_64_sync_handler+0x84/0xe4
[  265.470507][ T6871]  el0t_64_sync+0x1a0/0x1a4
[  265.522854][ T6871] ERROR: Out of memory at tomoyo_realpath_from_path.
[  265.532697][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.534654][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.550117][ T6838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.560560][ T4094] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22.
[  265.565040][ T4031] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  265.668782][ T6889] loop2: detected capacity change from 0 to 512
[  265.686095][ T6889] EXT4-fs (loop2): Ignoring removed nobh option
[  265.687789][ T6889] EXT4-fs (loop2): Unrecognized mount option "i_version"errors=continue" or missing value
[  265.742992][ T6894] loop3: detected capacity change from 0 to 512
[  265.938138][ T6897] loop1: detected capacity change from 0 to 1024
[  266.606477][ T6228] Bluetooth: hci1: command 0x041b tx timeout
[  266.644411][ T6894] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  266.661389][ T6894] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  266.683194][ T6894] EXT4-fs (loop3): 1 truncate cleaned up
[  266.684751][ T6894] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[  266.687843][ T6838] device hsr_slave_0 entered promiscuous mode
[  266.731217][ T6910] netlink: 104 bytes leftover after parsing attributes in process `syz.1.715'.
[  266.786184][ T6838] device hsr_slave_1 entered promiscuous mode
[  266.811052][ T6913] loop1: detected capacity change from 0 to 256
[  266.826854][ T6838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.828955][ T6838] Cannot create hsr debugfs directory
[  266.831579][ T6894] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[  266.867399][ T6913] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  267.053233][ T6915] loop2: detected capacity change from 0 to 4096
[  267.228799][ T6915] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  268.111793][ T6915] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  268.167601][ T6925] loop3: detected capacity change from 0 to 1024
[  268.201474][ T4346] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22.
[  268.216644][ T4026] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  268.236695][ T6925] hfsplus: unable to parse mount options
[  268.465459][ T6944] loop3: detected capacity change from 0 to 22
[  268.517671][ T6944] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  268.532256][ T6944] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  268.656238][ T5545] Bluetooth: hci1: command 0x040f tx timeout
[  268.660291][ T6949] loop3: detected capacity change from 0 to 512
[  268.714453][ T6949] EXT4-fs (loop3): Ignoring removed nobh option
[  268.716208][ T6949] EXT4-fs (loop3): Unrecognized mount option "i_version"errors=continue" or missing value
[  268.762851][ T6838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  268.812518][ T6838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  268.986368][ T6838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  269.027752][ T6838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  269.189195][ T6956] loop3: detected capacity change from 0 to 1024
[  270.107521][ T6965] netlink: 104 bytes leftover after parsing attributes in process `syz.3.727'.
[  270.205645][ T6838] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.309467][  T331] device hsr_slave_0 left promiscuous mode
[  270.337638][ T6952] loop4: detected capacity change from 0 to 32768
[  270.340807][  T331] device hsr_slave_1 left promiscuous mode
[  270.477047][ T6952] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.724 (6952)
[  270.517767][  T331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.519746][  T331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.527778][ T6952] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  270.530030][ T6952] BTRFS info (device loop4): using free space tree
[  270.531722][ T6952] BTRFS info (device loop4): has skinny extents
[  270.736137][ T6226] Bluetooth: hci1: command 0x0419 tx timeout
[  270.892231][  T331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.028267][  T331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.294193][  T331] device bridge_slave_1 left promiscuous mode
[  271.297864][  T331] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.350167][ T6995] loop3: detected capacity change from 0 to 512
[  271.364881][  T331] device bridge_slave_0 left promiscuous mode
[  271.366877][  T331] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.505038][ T6952] BTRFS info (device loop4): enabling ssd optimizations
[  271.648274][  T331] device veth1_macvtap left promiscuous mode
[  271.650712][  T331] device veth0_macvtap left promiscuous mode
[  271.652443][  T331] device veth1_vlan left promiscuous mode
[  271.654133][  T331] device veth0_vlan left promiscuous mode
[  273.835195][ T7029] loop4: detected capacity change from 0 to 512
[  273.915494][ T7029] EXT4-fs (loop4): Ignoring removed nobh option
[  273.917546][ T7029] EXT4-fs (loop4): Unrecognized mount option "i_version"errors=continue" or missing value
[  274.444268][  T331] team0 (unregistering): Port device team_slave_1 removed
[  274.472881][ T7018] loop1: detected capacity change from 0 to 32768
[  274.482489][  T331] team0 (unregistering): Port device team_slave_0 removed
[  274.492517][  T331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  274.571807][ T7018] ERROR: (device loop1): diRead: i_ino != di_number
[  274.571807][ T7018] 
[  274.578985][ T7018] ERROR: (device loop1): remounting filesystem as read-only
[  274.593137][  T331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  274.803524][ T7037] loop3: detected capacity change from 0 to 1024
[  275.565109][  T331] bond0 (unregistering): Released all slaves
[  275.674674][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  275.677579][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  275.696716][ T6838] 8021q: adding VLAN 0 to HW filter on device team0
[  275.708089][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  275.711020][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  275.714344][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.716644][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.719585][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  275.722438][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  275.725064][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.727199][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.744854][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  275.750015][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  275.774818][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  275.806857][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  275.817239][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  275.833163][ T7043] netlink: 104 bytes leftover after parsing attributes in process `syz.4.738'.
[  275.837409][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  275.848848][ T7044] FAULT_INJECTION: forcing a failure.
[  275.848848][ T7044] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.852448][ T7044] CPU: 1 PID: 7044 Comm: syz.2.739 Not tainted 5.15.165-syzkaller #0
[  275.854706][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  275.857554][ T7044] Call trace:
[  275.858429][ T7044]  dump_backtrace+0x0/0x530
[  275.859708][ T7044]  show_stack+0x2c/0x3c
[  275.860874][ T7044]  dump_stack_lvl+0x108/0x170
[  275.862202][ T7044]  dump_stack+0x1c/0x58
[  275.863364][ T7044]  should_fail+0x3b8/0x514
[  275.864607][ T7044]  should_fail_usercopy+0x20/0x30
[  275.866028][ T7044]  copy_page_from_iter_atomic+0x3c8/0xffc
[  275.867677][ T7044]  generic_perform_write+0x2d0/0x520
[  275.869059][ T7044]  __generic_file_write_iter+0x230/0x454
[  275.870577][ T7044]  generic_file_write_iter+0xb4/0x1b8
[  275.872088][ T7044]  vfs_write+0x884/0xb44
[  275.873309][ T7044]  ksys_write+0x15c/0x26c
[  275.874458][ T7044]  __arm64_sys_write+0x7c/0x90
[  275.875808][ T7044]  invoke_syscall+0x98/0x2b8
[  275.877028][ T7044]  el0_svc_common+0x138/0x258
[  275.878367][ T7044]  do_el0_svc+0x58/0x14c
[  275.879585][ T7044]  el0_svc+0x7c/0x1f0
[  275.880699][ T7044]  el0t_64_sync_handler+0x84/0xe4
[  275.882096][ T7044]  el0t_64_sync+0x1a0/0x1a4
[  275.885006][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  275.894174][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  275.906340][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  275.918296][ T6838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  275.921632][ T6838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  275.938188][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  275.944707][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  275.954042][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  276.043920][ T7044] loop2: detected capacity change from 0 to 2048
[  276.088042][ T7044] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  276.101193][ T4692] udevd[4692]: incorrect nilfs2 checksum on /dev/loop2
[  276.108900][ T7044] NILFS (loop2): invalid segment: Inconsistency found
[  276.120983][ T7044] NILFS (loop2): unable to fall back to spare super block
[  276.134366][ T7044] NILFS (loop2): error -22 while searching super root
[  276.944994][ T7039] loop3: detected capacity change from 0 to 32768
[  277.008073][ T7071] loop2: detected capacity change from 0 to 256
[  277.009221][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'.
[  277.046981][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  277.049391][ T4094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  277.052052][ T7071] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  277.058445][ T6838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.099493][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  277.102484][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  277.129183][ T7077] loop1: detected capacity change from 0 to 512
[  277.141592][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  277.144693][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  277.147736][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  277.150530][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  277.159840][ T6838] device veth0_vlan entered promiscuous mode
[  277.205270][ T6838] device veth1_vlan entered promiscuous mode
[  277.276982][ T7077] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  277.281295][ T7039] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[  277.283794][ T7039] BTRFS error (device loop3): superblock checksum mismatch
[  277.288769][ T7039] BTRFS error (device loop3): open_ctree failed
[  277.879338][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  277.882076][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  277.909728][ T7077] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.741: invalid indirect mapped block 4294967295 (level 1)
[  277.914900][ T7077] EXT4-fs (loop1): Remounting filesystem read-only
[  277.916685][ T7077] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.741: invalid indirect mapped block 4294967295 (level 1)
[  277.929172][ T7077] EXT4-fs (loop1): 2 truncates cleaned up
[  277.930794][ T7077] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback.
[  278.009651][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  278.012621][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  278.025690][ T6838] device veth0_macvtap entered promiscuous mode
[  278.079585][ T6838] device veth1_macvtap entered promiscuous mode
[  278.152053][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.154832][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.177377][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.180362][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.188546][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.191458][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.194176][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.215882][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.219598][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.236237][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.239164][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.241829][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.244457][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.272948][ T7095] loop2: detected capacity change from 0 to 512
[  278.318918][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.321703][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.362059][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.375227][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.389394][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.419215][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  278.440684][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  279.300900][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  279.303670][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  279.306455][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  279.309100][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  279.343421][ T7095] EXT4-fs (loop2): Ignoring removed nobh option
[  279.345523][ T7095] EXT4-fs (loop2): Unrecognized mount option "i_version"errors=continue" or missing value
[  279.623774][ T7148] loop1: detected capacity change from 0 to 1024
[  280.271303][ T6838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.273818][ T6838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.327592][ T6838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.329960][ T6838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.770136][ T7177] loop2: detected capacity change from 0 to 2048
[  280.951123][ T7182] loop3: detected capacity change from 0 to 1024
[  281.660752][ T7177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  281.766065][ T4518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.768426][ T4518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.794870][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  281.961491][ T7197] loop3: detected capacity change from 0 to 512
[  282.077172][ T7197] EXT4-fs (loop3): Ignoring removed nobh option
[  282.079132][ T7197] EXT4-fs (loop3): Unrecognized mount option "i_version"errors=continue" or missing value
[  282.794307][ T4518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.797687][ T4518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.803545][ T4104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  282.909846][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'.
[  282.922952][ T7204] loop1: detected capacity change from 0 to 256
[  282.924710][ T7202] loop2: detected capacity change from 0 to 512
[  282.969112][ T7202] EXT4-fs (loop2): Ignoring removed nobh option
[  282.970891][ T7202] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  283.011397][ T7209] loop3: detected capacity change from 0 to 512
[  283.027348][ T7204] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  283.048220][ T7206] loop4: detected capacity change from 0 to 2048
[  283.211165][ T7209] EXT4-fs (loop3): Ignoring removed nobh option
[  283.215409][ T7209] EXT4-fs (loop3): Unrecognized mount option "i_version"errors=continue" or missing value
[  283.218996][ T7206] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  283.225589][ T7202] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback.
[  283.237722][ T7206] EXT4-fs (loop4): shut down requested (2)
[  283.885196][ T7202] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.757: bg 0: block 224: padding at end of block bitmap is not set
[  283.907093][ T7202] EXT4-fs (loop2): Remounting filesystem read-only
[  284.364528][ T7225] loop4: detected capacity change from 0 to 1024
[  285.101754][ T7202] Invalid ELF header len 10
[  285.192072][ T7147] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  285.200327][ T7227] netlink: 44 bytes leftover after parsing attributes in process `syz.3.763'.
[  285.202000][ T7147] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  285.203033][ T7227] netlink: 43 bytes leftover after parsing attributes in process `syz.3.763'.
[  285.221447][ T7227] netlink: 'syz.3.763': attribute type 6 has an invalid length.
[  285.223826][ T7227] netlink: 'syz.3.763': attribute type 5 has an invalid length.
[  285.230994][ T7227] netlink: 43 bytes leftover after parsing attributes in process `syz.3.763'.
[  285.231137][ T7147] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  285.237770][ T7231] netlink: 44 bytes leftover after parsing attributes in process `syz.3.763'.
[  285.240117][ T7231] netlink: 43 bytes leftover after parsing attributes in process `syz.3.763'.
[  285.242438][ T7231] netlink: 'syz.3.763': attribute type 6 has an invalid length.
[  285.244399][ T7231] netlink: 'syz.3.763': attribute type 5 has an invalid length.
[  285.249403][ T7147] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  285.275994][ T7231] netlink: 43 bytes leftover after parsing attributes in process `syz.3.763'.
[  285.418995][ T7239] xt_CT: You must specify a L4 protocol and not use inversions on it
[  286.268438][ T7245] loop2: detected capacity change from 0 to 1024
[  286.380167][ T7243] loop4: detected capacity change from 0 to 512
[  286.470016][ T7243] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.767: casefold flag without casefold feature
[  286.474349][ T7243] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.767: missing EA_INODE flag
[  286.488502][ T7243] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.767: error while reading EA inode 12 err=-117
[  286.572558][ T7250] loop1: detected capacity change from 0 to 512
[  286.574575][ T7243] EXT4-fs (loop4): 1 orphan inode deleted
[  286.586665][ T7243] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  287.296409][ T7250] EXT4-fs (loop1): Ignoring removed nobh option
[  287.298149][ T7250] EXT4-fs (loop1): Unrecognized mount option "i_version"errors=continue" or missing value
[  287.327689][ T7243] autofs4:pid:7243:autofs_fill_super: called with bogus options
[  287.431070][ T7254] loop0: detected capacity change from 0 to 512
[  287.501374][ T7254] EXT4-fs (loop0): Ignoring removed nobh option
[  287.503335][ T7254] EXT4-fs (loop0): Unrecognized mount option "i_version"errors=continue" or missing value
[  287.725055][ T7261] netlink: 36 bytes leftover after parsing attributes in process `syz.1.773'.
[  287.781614][   T26] audit: type=1326 audit(287.750:7): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95b2eea8 code=0x7fc00000
[  287.804340][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.778'.
[  287.998946][ T7275] loop3: detected capacity change from 0 to 1024
[  288.655633][ T7276] loop0: detected capacity change from 0 to 512
[  288.722171][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.777'.
[  288.753644][ T7276] EXT4-fs (loop0): Ignoring removed nobh option
[  288.755433][ T7276] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  288.770628][ T7270] loop2: detected capacity change from 0 to 1024
[  288.795563][ T7283] xt_CT: You must specify a L4 protocol and not use inversions on it
[  288.808729][ T7270] EXT4-fs: Invalid sb specification: sb=0x0000000000000001"delalloc,resuid=0x0000000000000000,journal_checksum,journal_async_commit,sb=0x0000000000000001,nomblk_io_submit,noauto_da_alloc,bsdgroups,journal_dev=0x0000000000209003,smackfshat=nfc,errors=continue
[  288.828061][ T7270] EXT4-fs (loop2): Unrecognized mount option "sb=0x0000000000000001"delalloc" or missing value
[  288.858349][ T7276] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback.
[  288.934257][ T7273] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.777: bg 0: block 224: padding at end of block bitmap is not set
[  288.949903][ T7273] EXT4-fs (loop0): Remounting filesystem read-only
[  289.998312][ T7273] Invalid ELF header len 10
[  290.072158][ T7159] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  290.075504][ T7159] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  290.086902][ T7159] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  290.094745][ T7159] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  290.175365][ T7305] loop1: detected capacity change from 0 to 256
[  290.225584][ T7308] loop0: detected capacity change from 0 to 512
[  290.263732][ T7288] loop3: detected capacity change from 0 to 32768
[  290.279835][ T7305] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  290.687702][ T7313] loop2: detected capacity change from 0 to 1024
[  291.603322][ T7319] loop4: detected capacity change from 0 to 32768
[  291.614273][ T7288] XFS (loop3): Mounting V5 Filesystem
[  291.665610][ T7288] XFS (loop3): Ending clean mount
[  291.693280][ T7308] EXT4-fs (loop0): Ignoring removed nobh option
[  291.695558][ T7308] EXT4-fs (loop0): Unrecognized mount option "i_version"errors=continue" or missing value
[  291.719420][ T7319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.791 (7319)
[  291.772266][ T7319] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  291.774573][ T7319] BTRFS info (device loop4): using free space tree
[  291.777447][ T7319] BTRFS info (device loop4): has skinny extents
[  291.835683][ T7319] BTRFS info (device loop4): enabling ssd optimizations
[  291.941998][ T5276] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x54/0x434, xfs_rmapbt block 0x14 
[  291.945446][ T5276] XFS (loop3): Unmount and run xfs_repair
[  291.947565][ T5276] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  291.952547][ T7351] XFS (loop3): User initiated shutdown received.
[  291.954711][ T7351] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe0/0x15c (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  291.959119][ T5276] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  291.961569][ T5276] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  291.963923][ T5276] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  291.974142][ T7351] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  291.977458][ T5276] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  291.979919][ T5276] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  291.982594][ T5276] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  291.985161][ T5276] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  292.008494][ T5276] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  292.131791][ T4031] XFS (loop3): Unmounting Filesystem
[  292.895495][ T7349] loop1: detected capacity change from 0 to 40427
[  293.081955][ T7349] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (67108865, 24)
[  293.084188][ T7349] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  293.095509][ T7365] ipt_CLUSTERIP: bad num_local_nodes 65535
[  293.103505][ T7349] F2FS-fs (loop1): invalid crc value
[  293.137432][ T7349] F2FS-fs (loop1): Found nat_bits in checkpoint
[  293.211271][ T7349] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  293.211319][ T7349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  293.364408][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.798'.
[  293.446675][ T7379] loop4: detected capacity change from 0 to 512
[  293.562177][ T7379] EXT4-fs (loop4): Ignoring removed nobh option
[  293.563956][ T7379] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  293.655654][ T7379] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback.
[  293.772528][ T7379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.798: bg 0: block 224: padding at end of block bitmap is not set
[  293.806379][ T7379] EXT4-fs (loop4): Remounting filesystem read-only
[  293.892244][ T7381] loop1: detected capacity change from 0 to 4096
[  293.912871][ T7381] ntfs3: Unknown parameter 'nocase'
[  294.004406][ T7387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.800'.
[  294.019989][ T7379] Invalid ELF header len 10
[  294.038947][ T7387] netlink: 72 bytes leftover after parsing attributes in process `syz.0.800'.
[  294.077646][ T7387] netlink: 40 bytes leftover after parsing attributes in process `syz.0.800'.
[  294.231163][ T4104] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  294.238420][ T4104] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  294.241192][ T4104] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  294.243603][ T4104] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  294.273162][ T7377] loop3: detected capacity change from 0 to 32768
[  295.064993][ T7391] loop1: detected capacity change from 0 to 1024
[  295.168147][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'.
[  295.496947][ T7396] loop4: detected capacity change from 0 to 1024
[  296.880249][ T7412] loop2: detected capacity change from 0 to 512
[  296.932188][ T7414] FAULT_INJECTION: forcing a failure.
[  296.932188][ T7414] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  296.940912][ T7412] EXT4-fs (loop2): filesystem is read-only
[  296.950038][ T7412] EXT4-fs (loop2): filesystem is read-only
[  296.951615][ T7412] EXT4-fs (loop2): orphan cleanup on readonly fs
[  296.953583][ T7412] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.810: bad orphan inode 16
[  296.964854][ T7414] CPU: 0 PID: 7414 Comm: syz.1.811 Not tainted 5.15.165-syzkaller #0
[  296.966988][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  296.969753][ T7414] Call trace:
[  296.970677][ T7414]  dump_backtrace+0x0/0x530
[  296.971873][ T7414]  show_stack+0x2c/0x3c
[  296.972959][ T7414]  dump_stack_lvl+0x108/0x170
[  296.974195][ T7414]  dump_stack+0x1c/0x58
[  296.975319][ T7414]  should_fail+0x3b8/0x514
[  296.976497][ T7414]  should_fail_alloc_page+0x74/0xa8
[  296.977909][ T7414]  prepare_alloc_pages+0x160/0x460
[  296.979291][ T7414]  __alloc_pages+0x138/0x674
[  296.980599][ T7414]  alloc_pages_vma+0x294/0x7c0
[  296.981965][ T7414]  shmem_alloc_and_acct_page+0x5bc/0xca0
[  296.983509][ T7414]  shmem_getpage_gfp+0x1144/0x20e4
[  296.984903][ T7414]  shmem_write_begin+0xe0/0x29c
[  296.986182][ T7414]  generic_perform_write+0x24c/0x520
[  296.987685][ T7414]  __generic_file_write_iter+0x230/0x454
[  296.988589][ T7412] ext4_test_bit(bit=15, block=3) = 0
[  296.989243][ T7414]  generic_file_write_iter+0xb4/0x1b8
[  296.989280][ T7414]  vfs_write+0x884/0xb44
[  296.990675][ T7412] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.
[  296.992121][ T7414]  ksys_write+0x15c/0x26c
[  296.997543][ T7414]  __arm64_sys_write+0x7c/0x90
[  296.998848][ T7414]  invoke_syscall+0x98/0x2b8
[  297.000107][ T7414]  el0_svc_common+0x138/0x258
[  297.001392][ T7414]  do_el0_svc+0x58/0x14c
[  297.002504][ T7414]  el0_svc+0x7c/0x1f0
[  297.003588][ T7414]  el0t_64_sync_handler+0x84/0xe4
[  297.005007][ T7414]  el0t_64_sync+0x1a0/0x1a4
[  297.006323][    C0] vkms_vblank_simulate: vblank timer overrun
[  297.177369][ T7422] loop2: detected capacity change from 0 to 2048
[  297.253007][ T7422] NILFS (loop2): invalid segment: Inconsistency found
[  297.254940][ T7422] NILFS (loop2): trying rollback from an earlier position
[  297.265127][ T7422] NILFS (loop2): invalid segment: Inconsistency found
[  297.275219][ T7422] NILFS (loop2): error -22 while searching super root
[  297.383345][ T7430] loop2: detected capacity change from 0 to 1024
[  297.473563][ T7434] loop3: detected capacity change from 0 to 128
[  298.362633][ T7434] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  298.405762][ T7430] udc-core: couldn't find an available UDC or it's busy
[  298.427089][ T7430] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  298.447406][ T7430] netlink: 92 bytes leftover after parsing attributes in process `syz.2.816'.
[  298.614452][ T7440] loop0: detected capacity change from 0 to 1024
[  299.540247][ T7442] loop1: detected capacity change from 0 to 1024
[  300.297097][ T7443] netlink: 'syz.2.816': attribute type 7 has an invalid length.
[  300.314027][ T7443] netlink: 'syz.2.816': attribute type 39 has an invalid length.
[  300.582258][ T7455] loop3: detected capacity change from 0 to 256
[  300.676157][ T7459] netlink: 104 bytes leftover after parsing attributes in process `syz.1.821'.
[  301.000517][ T4104] hfsplus: b-tree write err: -5, ino 4
[  301.247368][ T7472] loop1: detected capacity change from 0 to 40427
[  301.252484][ T7473] FAULT_INJECTION: forcing a failure.
[  301.252484][ T7473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.256055][ T7473] CPU: 0 PID: 7473 Comm: syz.0.826 Not tainted 5.15.165-syzkaller #0
[  301.258252][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  301.260912][ T7473] Call trace:
[  301.261713][ T7473]  dump_backtrace+0x0/0x530
[  301.262856][ T7473]  show_stack+0x2c/0x3c
[  301.263893][ T7473]  dump_stack_lvl+0x108/0x170
[  301.265198][ T7473]  dump_stack+0x1c/0x58
[  301.266314][ T7473]  should_fail+0x3b8/0x514
[  301.267500][ T7473]  should_fail_usercopy+0x20/0x30
[  301.268846][ T7473]  sctp_getsockopt_peeloff+0x104/0x554
[  301.270293][ T7473]  sctp_getsockopt+0x7c4/0x9bc
[  301.271580][ T7473]  sock_common_getsockopt+0xa8/0xc4
[  301.272967][ T7473]  __sys_getsockopt+0x1e8/0x460
[  301.274243][ T7473]  __arm64_sys_getsockopt+0xb8/0xd4
[  301.275626][ T7473]  invoke_syscall+0x98/0x2b8
[  301.276848][ T7473]  el0_svc_common+0x138/0x258
[  301.278116][ T7473]  do_el0_svc+0x58/0x14c
[  301.279199][ T7473]  el0_svc+0x7c/0x1f0
[  301.280257][ T7473]  el0t_64_sync_handler+0x84/0xe4
[  301.281531][ T7473]  el0t_64_sync+0x1a0/0x1a4
[  301.311459][ T7472] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  301.313656][ T7472] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  301.375624][ T7472] F2FS-fs (loop1): Found nat_bits in checkpoint
[  301.425570][ T7472] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  301.427681][ T7472] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  301.516502][ T4064] 
[  301.517166][ T4064] ======================================================
[  301.519006][ T4064] WARNING: possible circular locking dependency detected
[  301.520866][ T4064] 5.15.165-syzkaller #0 Not tainted
[  301.522232][ T4064] ------------------------------------------------------
[  301.524234][ T4064] kworker/1:5/4064 is trying to acquire lock:
[  301.525843][ T4064] ffff0000e525e120 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x60/0x2c8
[  301.529029][ T4064] 
[  301.529029][ T4064] but task is already holding lock:
[  301.531045][ T4064] ffff0000e3f77128 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x200/0x634
[  301.533424][ T4064] 
[  301.533424][ T4064] which lock already depends on the new lock.
[  301.533424][ T4064] 
[  301.536290][ T4064] 
[  301.536290][ T4064] the existing dependency chain (in reverse order) is:
[  301.538697][ T4064] 
[  301.538697][ T4064] -> #3 (&d->lock){+.+.}-{3:3}:
[  301.540614][ T4064]        __mutex_lock_common+0x194/0x2154
[  301.542214][ T4064]        mutex_lock_nested+0xa4/0xf8
[  301.543643][ T4064]        __rfcomm_dlc_close+0x200/0x634
[  301.545270][ T4064]        rfcomm_dlc_close+0x100/0x194
[  301.546696][ T4064]        __rfcomm_sock_close+0x138/0x258
[  301.548223][ T4064]        rfcomm_sock_shutdown+0xa8/0x214
[  301.549750][ T4064]        rfcomm_sock_release+0x58/0x114
[  301.551219][ T4064]        sock_close+0xb8/0x1fc
[  301.552457][ T4064]        __fput+0x1c4/0x800
[  301.553678][ T4064]        delayed_fput+0x78/0xa8
[  301.554976][ T4064]        process_one_work+0x790/0x11b8
[  301.556475][ T4064]        worker_thread+0x910/0x1034
[  301.557839][ T4064]        kthread+0x37c/0x45c
[  301.559054][ T4064]        ret_from_fork+0x10/0x20
[  301.560396][ T4064] 
[  301.560396][ T4064] -> #2 (rfcomm_mutex){+.+.}-{3:3}:
[  301.562390][ T4064]        __mutex_lock_common+0x194/0x2154
[  301.563898][ T4064]        mutex_lock_nested+0xa4/0xf8
[  301.565285][ T4064]        rfcomm_dlc_exists+0xb0/0x32c
[  301.566718][ T4064]        rfcomm_dev_ioctl+0x938/0x2434
[  301.568170][ T4064]        rfcomm_sock_ioctl+0x98/0xf0
[  301.569374][ T4064]        sock_do_ioctl+0x134/0x2dc
[  301.570526][ T4064]        sock_ioctl+0x4f0/0x8ac
[  301.571624][ T4064]        __arm64_sys_ioctl+0x14c/0x1c8
[  301.572977][ T4064]        invoke_syscall+0x98/0x2b8
[  301.574363][ T4064]        el0_svc_common+0x138/0x258
[  301.575791][ T4064]        do_el0_svc+0x58/0x14c
[  301.577072][ T4064]        el0_svc+0x7c/0x1f0
[  301.578324][ T4064]        el0t_64_sync_handler+0x84/0xe4
[  301.579849][ T4064]        el0t_64_sync+0x1a0/0x1a4
[  301.581197][ T4064] 
[  301.581197][ T4064] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}:
[  301.583332][ T4064]        __mutex_lock_common+0x194/0x2154
[  301.584895][ T4064]        mutex_lock_nested+0xa4/0xf8
[  301.586312][ T4064]        rfcomm_dev_ioctl+0x258/0x2434
[  301.587848][ T4064]        rfcomm_sock_ioctl+0x98/0xf0
[  301.589292][ T4064]        sock_do_ioctl+0x134/0x2dc
[  301.590666][ T4064]        sock_ioctl+0x4f0/0x8ac
[  301.591982][ T4064]        __arm64_sys_ioctl+0x14c/0x1c8
[  301.593405][ T4064]        invoke_syscall+0x98/0x2b8
[  301.594759][ T4064]        el0_svc_common+0x138/0x258
[  301.596179][ T4064]        do_el0_svc+0x58/0x14c
[  301.597479][ T4064]        el0_svc+0x7c/0x1f0
[  301.598742][ T4064]        el0t_64_sync_handler+0x84/0xe4
[  301.600304][ T4064]        el0t_64_sync+0x1a0/0x1a4
[  301.601622][ T4064] 
[  301.601622][ T4064] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}:
[  301.604059][ T4064]        __lock_acquire+0x32d4/0x7638
[  301.605533][ T4064]        lock_acquire+0x240/0x77c
[  301.606865][ T4064]        lock_sock_nested+0xec/0x1ec
[  301.608309][ T4064]        rfcomm_sk_state_change+0x60/0x2c8
[  301.609924][ T4064]        __rfcomm_dlc_close+0x23c/0x634
[  301.611510][ T4064]        rfcomm_dlc_close+0x100/0x194
[  301.612974][ T4064]        __rfcomm_sock_close+0x138/0x258
[  301.614492][ T4064]        rfcomm_sock_shutdown+0xa8/0x214
[  301.615992][ T4064]        rfcomm_sock_release+0x58/0x114
[  301.617364][ T4064]        sock_close+0xb8/0x1fc
[  301.618638][ T4064]        __fput+0x1c4/0x800
[  301.619827][ T4064]        delayed_fput+0x78/0xa8
[  301.621114][ T4064]        process_one_work+0x790/0x11b8
[  301.622545][ T4064]        worker_thread+0x910/0x1034
[  301.623913][ T4064]        kthread+0x37c/0x45c
[  301.625162][ T4064]        ret_from_fork+0x10/0x20
[  301.626459][ T4064] 
[  301.626459][ T4064] other info that might help us debug this:
[  301.626459][ T4064] 
[  301.629213][ T4064] Chain exists of:
[  301.629213][ T4064]   sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock
[  301.629213][ T4064] 
[  301.632990][ T4064]  Possible unsafe locking scenario:
[  301.632990][ T4064] 
[  301.635020][ T4064]        CPU0                    CPU1
[  301.636446][ T4064]        ----                    ----
[  301.637910][ T4064]   lock(&d->lock);
[  301.638954][ T4064]                                lock(rfcomm_mutex);
[  301.640702][ T4064]                                lock(&d->lock);
[  301.642410][ T4064]   lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM);
[  301.644091][ T4064] 
[  301.644091][ T4064]  *** DEADLOCK ***
[  301.644091][ T4064] 
[  301.646393][ T4064] 5 locks held by kworker/1:5/4064:
[  301.647802][ T4064]  #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8
[  301.650646][ T4064]  #1: ffff80001ccf7c00 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8
[  301.653579][ T4064]  #2: ffff0000dd7f4a10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc
[  301.656284][ T4064]  #3: ffff800016d57ae8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x44/0x194
[  301.658881][ T4064]  #4: ffff0000e3f77128 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x200/0x634
[  301.661497][ T4064] 
[  301.661497][ T4064] stack backtrace:
[  301.663132][ T4064] CPU: 1 PID: 4064 Comm: kworker/1:5 Not tainted 5.15.165-syzkaller #0
[  301.665319][ T4064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  301.668078][ T4064] Workqueue: events delayed_fput
[  301.669404][ T4064] Call trace:
[  301.670372][ T4064]  dump_backtrace+0x0/0x530
[  301.671558][ T4064]  show_stack+0x2c/0x3c
[  301.672706][ T4064]  dump_stack_lvl+0x108/0x170
[  301.673973][ T4064]  dump_stack+0x1c/0x58
[  301.675100][ T4064]  print_circular_bug+0x150/0x1b8
[  301.676433][ T4064]  check_noncircular+0x2cc/0x378
[  301.677823][ T4064]  __lock_acquire+0x32d4/0x7638
[  301.679151][ T4064]  lock_acquire+0x240/0x77c
[  301.680317][ T4064]  lock_sock_nested+0xec/0x1ec
[  301.681610][ T4064]  rfcomm_sk_state_change+0x60/0x2c8
[  301.683002][ T4064]  __rfcomm_dlc_close+0x23c/0x634
[  301.684385][ T4064]  rfcomm_dlc_close+0x100/0x194
[  301.685680][ T4064]  __rfcomm_sock_close+0x138/0x258
[  301.687108][ T4064]  rfcomm_sock_shutdown+0xa8/0x214
[  301.688506][ T4064]  rfcomm_sock_release+0x58/0x114
[  301.689809][ T4064]  sock_close+0xb8/0x1fc
[  301.691046][ T4064]  __fput+0x1c4/0x800
[  301.692122][ T4064]  delayed_fput+0x78/0xa8
[  301.693294][ T4064]  process_one_work+0x790/0x11b8
[  301.694561][ T4064]  worker_thread+0x910/0x1034
[  301.695876][ T4064]  kthread+0x37c/0x45c
[  301.697015][ T4064]  ret_from_fork+0x10/0x20
[  301.742544][ T7482] FAULT_INJECTION: forcing a failure.
[  301.742544][ T7482] name failslab, interval 1, probability 0, space 0, times 0
[  301.756396][ T7482] CPU: 0 PID: 7482 Comm: syz.2.829 Not tainted 5.15.165-syzkaller #0
[  301.758648][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  301.761312][ T7482] Call trace:
[  301.762178][ T7482]  dump_backtrace+0x0/0x530
[  301.763421][ T7482]  show_stack+0x2c/0x3c
[  301.764526][ T7482]  dump_stack_lvl+0x108/0x170
[  301.765707][ T7482]  dump_stack+0x1c/0x58
[  301.766881][ T7482]  should_fail+0x3b8/0x514
[  301.768055][ T7482]  __should_failslab+0xbc/0x110
[  301.769349][ T7482]  should_failslab+0x10/0x28
[  301.770554][ T7482]  slab_pre_alloc_hook+0x64/0xe8
[  301.771881][ T7482]  kmem_cache_alloc_node+0x9c/0x49c
[  301.773331][ T7482]  __alloc_skb+0x174/0x584
[  301.774525][ T7482]  sock_wmalloc+0xac/0x134
[  301.775716][ T7482]  l2tp_ip_sendmsg+0x19c/0x1238
[  301.776998][ T7482]  inet_sendmsg+0x15c/0x290
[  301.778154][ T7482]  __sys_sendto+0x388/0x4d0
[  301.779390][ T7482]  __arm64_sys_sendto+0xd8/0xf8
[  301.780622][ T7482]  invoke_syscall+0x98/0x2b8
[  301.781906][ T7482]  el0_svc_common+0x138/0x258
[  301.783159][ T7482]  do_el0_svc+0x58/0x14c
[  301.784250][ T7482]  el0_svc+0x7c/0x1f0
[  301.785372][ T7482]  el0t_64_sync_handler+0x84/0xe4
[  301.786715][ T7482]  el0t_64_sync+0x1a0/0x1a4
[  302.816038][ T6228] Bluetooth: hci1: command 0x0405 tx timeout