last executing test programs:

52.258940293s ago: executing program 1 (id=134):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
prlimit64(r0, 0x3, &(0x7f0000000040)={0x1, 0x5}, &(0x7f0000000100))
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x3})
connect$netlink(r1, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc)
chdir(&(0x7f0000000380)='./file0\x00')
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000800)=0x1e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x1db)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x100, 0x1403, 0x10, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4001}, 0x44040)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x0, 0x0, 0x100000})

51.886804728s ago: executing program 1 (id=138):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x80000000101, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@empty, @multicast1}, 0x8)
r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000003c0)=0x1000, 0x12)
r4 = openat$cgroup_procs(r1, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
write$cgroup_int(r3, &(0x7f0000000100), 0x12)
r5 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0)
ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000000)={0x8, {0xa, 0x5, 0x8, 0x4000}})
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb38845cf6f2e168f59e5c708b4cddb9f54e0bd29a8afaea3096d9061a2df0c1", 0x3, 0x1, 0x1000000, 0x0, 0x1000, 0xc, 0x400009, 0x8, [0x5, 0x2, 0x4, 0xe]})

51.472075983s ago: executing program 1 (id=142):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_clone3(&(0x7f0000000480)={0x1100, &(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000400)=<r3=>0x0, {0x8}, &(0x7f0000000580)=""/227, 0xe3, &(0x7f0000000680)=""/219, &(0x7f0000000440)=[0x0, r0, r0], 0x3}, 0x58)
syz_clone3(&(0x7f00000007c0)={0x20100000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x41}, &(0x7f0000000180)=""/2, 0x2, &(0x7f0000000300)=""/136, &(0x7f0000000780)=[r0, r3, r0], 0x3}, 0x58)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000840)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000880)=0x10, 0x0)
recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/22, 0x16}, {&(0x7f0000000900)=""/61, 0x3d}, {&(0x7f0000000940)=""/247, 0xf7}], 0x3, &(0x7f0000000a80)=""/161, 0xa1}, 0x2}], 0x1, 0x40014041, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x1f4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

50.528178455s ago: executing program 1 (id=146):
r0 = socket(0x1, 0x3, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fd02000200020000", 0x1c)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='decompose,nobarrier,barrier,nobarrier,part=0x0000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d6b6f69382d722c00c21250cad8f823e24e4c490d525c88545e09dee659b17067e9f50f6192f1cb9db1c810950fd8ee49814be397f3943ed071f9e69ea9410a0e48ce0d8d832175d176b083b59dc831f46f6edd4013d86813e69719e385c4859f40407ca65d608bcee3db0e94f74f77cb2a084c49dfb6b1899e92e46c823cf81194259ccdf621b5a37f6f5d739e8fd26162036bcb7ea8cb647e7c6fb0c2bd437f50187e5832880ee906001a56ea41f53ace0d"], 0x40, 0x70c, &(0x7f0000000d40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0)
mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408)
fchmodat(r1, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100)
r2 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa8c8e9, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=r2])

50.095153969s ago: executing program 1 (id=150):
socket$netlink(0x10, 0x3, 0xb)
socket$tipc(0x1e, 0x2, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f0000002280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c000927ef269377351d90aeb50529825f700786beb0826da0bf9d36620d87d004d56ca63f2e70957efda4662ca0eab69a6221732d7cbdd8f6c022eb6c842004c94d39a0aa81d68ad1cca39fa8ddbb70aa75c886c11149d401ffcdab20fb3aed07ec97390337828e6bfa896e5875ceb3a020461d98fc2a61ac4685346c0fac3e0114e8bf33c9c8d36d9e451b5fb0b94421daa4e5142e192401bec01a9dbeba53d105f78b91bc6e07d984c1071ac746a483083a8c2eb0ed62057c9c4b4ec5bf54162a901e9c1f3f8b4e8c813e2a061482a7ca495b2f7c5ba527fbbd320d96e977145ed6152b9ce4ccef88a3"], 0x1, 0xc32, &(0x7f0000009100)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x30c802c, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file3\x00', 0x1400)
getdents64(r0, &(0x7f0000000340)=""/4096, 0x1000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="6a73437b7c4fe924e16f14472c134e94c9acdcd4eb0b245e8fdbb25b25ff2d8a1b0a519ab64321f96f044d7ece19315109bfac73f259b34c478da124b06944857a8cca76f23ff5ce9c7f7e665ce6f9ccc8a365386c6b23587baa2459329ccdd23952d366f9776518a3e687280c873f7435aa03bb6d5545d0540bebf2e0f78a6eb1ddc6851d53a544586befbdc44f69a76b8dccccf2bcd93a79a47bd59945b1dd1c1ed648add9a222c3c6397d6c32619db6ff2515a8b4", 0xb6}, {&(0x7f0000000200)="3eb0f683f0827927429b0d4bbd8931d1ab3110dfc04081587776c7ed652f266e4830fc22afc96e5f5cc36d02c6de43bc008637b22509c1458aaff3ef7217911afe9592f7bf49cf5f6051c48939a4fbcd7248f8def9619dd9ac9909b07e6a77f39168de67390148f48b749b58d6994d4353fcf744d5e1739e0b25fdbf68dc87da02d0931d3c04c0c06866fdbc82d0447cfd79832ff2", 0x95}], 0x2)

49.452146678s ago: executing program 1 (id=152):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1402, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4000801}, 0x0)

49.2562548s ago: executing program 32 (id=152):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1402, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4000801}, 0x0)

23.055161525s ago: executing program 3 (id=255):
r0 = socket(0x28, 0x1, 0x0)
connect$packet(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x1, 0x44}, 0x14)
connect$packet(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x403, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x351e, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xf)

22.835153978s ago: executing program 3 (id=257):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000007000000440472dd01000000"], 0x40}, 0x0)
read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef)

21.504803754s ago: executing program 3 (id=265):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x40], [0x0, 0x8, 0xffff, 0xff, 0x0, 0x0, 0x6, 0xa041, 0x16a, 0x0, 0x0, 0x0, 0x6a]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xff}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) (fail_nth: 3)

20.859969532s ago: executing program 3 (id=267):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1008000, &(0x7f0000000040), 0x1, 0x5db, &(0x7f0000000680)="$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")
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x16132, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1)
sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil)
brk(0x400000ffc000)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x2000)

20.19212632s ago: executing program 3 (id=272):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f00000029c0)=ANY=[@ANYBLOB='debug,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,errors=continue,showexec,dots,dots,codepage=860,dots,nocase,codepage=936,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,uid=', @ANYRESDEC, @ANYBLOB="2c646f74732c646f74732c66736d616769633d3078303030303000303030303030303066622c7063723d3030303030303030303030303034303030300f562c7569643e", @ANYRESDEC=0x0, @ANYBLOB=',context=system_u,ro,audit,subj_role=,hash,\x00'], 0x1, 0x1cc, &(0x7f0000002b40)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

19.332924521s ago: executing program 3 (id=274):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x40], [0x0, 0x8, 0xffff, 0xff, 0x0, 0x0, 0x6, 0xa041, 0x16a, 0x0, 0x0, 0x0, 0x6a]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xff}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x24000014}, 0x0)

19.156227363s ago: executing program 33 (id=274):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x40], [0x0, 0x8, 0xffff, 0xff, 0x0, 0x0, 0x6, 0xa041, 0x16a, 0x0, 0x0, 0x0, 0x6a]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xff}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x24000014}, 0x0)

3.848041173s ago: executing program 4 (id=336):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000540)='$[{+)\x00')
syz_emit_ethernet(0xa4, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x7, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, '5*d', 0x66, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[@srh={0x32, 0x4, 0x4, 0x2, 0x60, 0x8, 0xf, [@dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x81}]}, @routing={0x3c, 0x2, 0x0, 0x7, 0x0, [@mcast1]}], @payload_direct={{{{0x26, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x2, 0xa, 0x0, 0x1, 0x4, 0x1, 0x3, 0xa1ab, 0x4, 0xfffffffc, 0x4e24, 0x4e24}, 0x1, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0)
fstat(0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x202402, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@orlov}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x0, 0x45d, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvbl59/pJfKY8+gEBBRDySJi3QAxcQSL0gVYJDOYY0rUrdBjVBolVFA0LliPoXAEck/gJOcEHACcQV7qhShXqhcECL1l67xrHTOHbqtP58pE1mdsee+Xp37NkZO4C+NZ7/SSJ2RMSvETEaEQONBcYr/27euDT3141Lc0lk2Rt/JPnD4s8bl+aqRZPi//YiM5FGpB8nsa9JvYsXLp6ZLZXmzxf5qaWz704tXrj43Omzs6fmT82fmzly5PCh6RdfmHm+K3HuzNu694OF/XuOvnX19bnjV9/+4au8vTuK4/VxVIx1XOd4jNdek0ZPdvzsm8vOunQy2MOG0Ja8r+ena6jc/0djIG6dvNF47aOeNg7YUFmWZSMr9tZGAMsZcA9LotctAHqj+kGf3/9Wtzs4/Oi56y9XboDyuG8WW+XIYKRFmaGG+9tuGo+I48t/f5Zv0XQeAgCgu77Jxz/PNhv/pfFAXbn/FWtDYxHx/4jYFRH3RcTuiLg/olz2wYh4qM36xxvyK8c/P29dV2BrlI//XirWtv47/quO/mJsoMjtLMc/lJw8XZo/WLwmEzE0kuenV6nj21d/+bTVsfrxX77l9VfHghExHJFeG2yYoDsxuzTbYdg11z8szwFeXhl/UlsJSCJiT0TsXcfzb4mI009/ub/V8dvEv7ourDNlX0Q8VTn/y9EQf1Wy+vrk1JYozR+cql4VK/3405VjrervKP4uyM//tqbXfy3+saR+vXax/Tqu/PZJy3ua28ff/PofTt4sp4eLfe/PLi2dn44YTpZX7p+59dhqvlo+j3/iQPP+vyvin8+Lx+2LiPwifjgiHomIR4u2PxYRj0fEgVXi//6VJ95Zf/wbK4//RFvnv/3EwJnvvm5V/+3jP3ZtcORwOTVR7FnL+99aG9jJawcAAAB3i7T8Hfgknayl03RysvId/t2xLS0tLC49c3LhvXMnKt+VH4uhtDrTNVo3HzpdzA1X8zMN+UPleeMsy7Kt5fzk3EJpo9bUgbXZ3qL/534f6HXrgA3X1jpaq1+0AXclv9eE/qX/Q//S/6F/6f/Qv5r1/8sRN3vQFOAO8/kP/Uv/h/6l/0P/0v+hL3Xyu/7VEruObtQz32uJgc3RjLYTkW6KZqwvkW6OZlQSIxGx1sKX4041rNfvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//XrbsjQ==")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e23, 0x757, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, r1}}, 0x38)

3.489687987s ago: executing program 6 (id=275):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000007000000440472dd01000000"], 0x40}, 0x0)
read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef)

3.311039769s ago: executing program 4 (id=341):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r2, 0x0)
ftruncate(r2, 0x796c)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

3.088827692s ago: executing program 4 (id=344):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000000"])

2.940032774s ago: executing program 2 (id=346):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
lseek(r0, 0x7, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)

2.884360314s ago: executing program 2 (id=347):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x12, &(0x7f0000000100)={[{@discard_sync}, {@datacow}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz0\x00', {0x0, 0x3, 0x2, 0xa}, 0x25, [0xf5, 0xffff1aa8, 0xff, 0x2, 0x200, 0x8d, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x8, 0x7, 0x1, 0x71c, 0x38, 0xffffff7f, 0xfffffff9, 0x5, 0x3ff, 0x0, 0x8001, 0xfffffffd, 0x9be4bf38, 0x0, 0x2, 0xc, 0x0, 0x8, 0x5, 0x84, 0xc, 0x8001, 0x3, 0x10000001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8002, 0x1, 0x5, 0x8, 0x7f, 0x9, 0xf2b, 0x401, 0xa33e, 0xfffffffa, 0xffff, 0x8, 0x9, 0x6, 0xffffff80, 0x100, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x1], [0x8, 0x2, 0xd91, 0x5, 0x8, 0xfffffff0, 0x5, 0x95a6, 0xcc, 0xa8a, 0x8cbe, 0xffffff4c, 0x1, 0x2, 0x0, 0x0, 0x8, 0x401, 0x0, 0x405, 0x2, 0x9, 0x5, 0x9, 0xd, 0x7, 0x209, 0x8, 0x8, 0x5, 0xc, 0xb2d1, 0x1, 0x200, 0x10001, 0x9, 0xe22, 0x401, 0x80000e, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x1, 0x4, 0x3, 0x29e3, 0xf7f, 0x2, 0x0, 0x200, 0x6e99, 0x6e6, 0xff, 0x9, 0x1d, 0xfffffffc, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x0, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x9, 0xcb03, 0xfffffff9, 0x5, 0x33, 0x5, 0x80003, 0xc5, 0x8, 0x8000, 0x6, 0x3, 0x40000001, 0x8, 0xf9f, 0x3, 0x7, 0x3fe, 0x8, 0x0, 0x2, 0x1, 0x4, 0x40001, 0x0, 0x4, 0x911, 0x6, 0x8000, 0x40, 0x8, 0xb, 0xc0000000, 0x3, 0xc55a, 0x1, 0x3, 0x9, 0x8, 0x7, 0x4, 0x9, 0x89d, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0xb, 0x1], [0x27b, 0x5, 0xef, 0x10, 0x0, 0x4, 0x8, 0x3b, 0x7fffffff, 0xe011, 0xfffffff8, 0x6, 0xffff7bfb, 0x0, 0x401, 0x10401, 0x401, 0x0, 0xa, 0x8, 0x3, 0x11f9, 0xfffffc00, 0x1, 0x89, 0x4, 0x28000002, 0x2, 0x9, 0x27, 0x400, 0x70, 0x2, 0xa, 0x400002, 0xc, 0x0, 0x9, 0x80089, 0x10, 0xfff, 0x9a2, 0x81, 0x2, 0x1, 0x4, 0x8, 0x400005, 0x4, 0x0, 0xb, 0x1, 0xc3, 0x9, 0x7ff, 0x1, 0x4, 0xfffffbff, 0x1, 0xb, 0x5, 0x4, 0x4a, 0xfffffff7]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000600)={@remote, @empty}, 0x8)
io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
socket(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)

2.652156017s ago: executing program 0 (id=349):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

2.302886482s ago: executing program 0 (id=351):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x10000})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00007c2667eb01b44e8015dc7561b5bda264c0980000000000000000002100000500050002000000050001000700000005000400030000000011000300686173683a6e65742c50657400"/89], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000906f90f0000000000000000030000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c001480080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x24000041}, 0x4000050)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="507f6a50", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="11000700ab6ff90824f653128b053dad60000000110007004433f943c7e5dc633878512d6d0000000800370001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c020)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x800)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r7, 0x10d, 0xcd, &(0x7f0000000000), &(0x7f0000000080)=0x4)
fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)=ANY=[@ANYRES64=0x0, @ANYRES16=r2, @ANYBLOB="100003000000000020"], 0x2c, 0x1)
setreuid(0xffffffffffffffff, 0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r9)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r10, 0x0, 0x22)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', <r11=>0x0})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mincore(&(0x7f0000607000/0x2000)=nil, 0x2000, 0xfffffffffffffffe)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010426bd700000c6cb0000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800c0001006d6163766c616e000c000280080007000100000008000500", @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x2004c050}, 0x0)

2.107918274s ago: executing program 0 (id=353):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
lseek(r0, 0x7, 0x1)

1.885732727s ago: executing program 4 (id=354):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010426bd700000c6cb0000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800c0001006d6163766c616e000c000280080007000100000008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004c050}, 0x0) (fail_nth: 3)

1.866115667s ago: executing program 0 (id=355):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b1be7a082f826014791", 0x69}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb5", 0x83}, {0x0}], 0x3}}], 0x2, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000380)={0x3a, "ab4b4c3cf0d4d0f212cde7d67245170d22816e88a3e9fa6be0080ea599f0b0d1c5a53a7d2d2905b7c177702ed9a4131745fd38c99cbefab71029603e64636c46b430ac9620f569d18dab242f2bf497186c32fc83b5186a83a182b85d2939d1b7d72efefbf076e3e1bd16f49381ff3b62bce39e99d9300e7cdd530c93520c88f4"})
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = getpid()
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
kcmp(r2, r2, 0x0, r1, r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$inet6(0xa, 0x6, 0x0) (async)
r6 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r6, 0x90101) (async)
listen(r6, 0x90101)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) (async)
setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
sendto$inet(r7, &(0x7f0000000180)="09268a927f1f6588b96741ba7860fcfaf65ac618d8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae551000ecf90b1a7511bf746bec66ba0000", 0x20c8, 0x11, 0x0, 0x38) (async)
sendto$inet(r7, &(0x7f0000000180)="09268a927f1f6588b96741ba7860fcfaf65ac618d8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae551000ecf90b1a7511bf746bec66ba0000", 0x20c8, 0x11, 0x0, 0x38)

1.784082148s ago: executing program 5 (id=356):
socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.674167039s ago: executing program 5 (id=357):
socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 3)

1.65385939s ago: executing program 4 (id=358):
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000980)={0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50, 0x14}, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000240)='./file1/file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRES64, @ANYRES16, @ANYRES64], 0x1, 0x620f, &(0x7f000000cb40)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}}, 0x20000841)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x82)
chdir(&(0x7f0000000140)='./file0\x00')
truncate(&(0x7f0000000000)='./file1\x00', 0x1104)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r0}, './file2\x00'})
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000003c0)=0x6, 0x8)

1.532126652s ago: executing program 5 (id=359):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.154556936s ago: executing program 6 (id=360):
socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', <r4=>0x0})
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r5, 0x8004af7a, &(0x7f00000004c0))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028008000300810000000800050000000000080004000000000008000f"], 0x64}}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x90)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005100)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x7ff, 0x43c, 0x0, 0x2, 0x7f, 0xfffffff8, 0x6, 0x2831, r10}, 0x20)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf924}, @NL80211_ATTR_MAC={0xa, 0x6, @random="351f8c94a6ca"}, @NL80211_ATTR_IE={0x22, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mic={0x8c, 0x10, {0x9c5, "edac5516b351", @short="06a6b9e4b330c327"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x1, 0x7}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="840fc150c01f"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r11=>0x0})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r13, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendmsg$inet(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="9e121f05ebcc3146fed4d69afdb4c1b9b86d446d36223b7b3e07da1e3e2f980a80d8d60140f8443817f1bcb30e891bf171aba70d25e37d361e81c45a7711d1b8958bee9590363ea89f40182307314c4439c08f1237801220", 0x58}], 0x1}, 0x4000030)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r11, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.135313427s ago: executing program 2 (id=361):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

984.356278ms ago: executing program 5 (id=362):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0x1a18c14, &(0x7f0000000840)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69a17707e859d35af809cabc3e7b83736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d313235352c757466383d302c636f6465706167653d3836332c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c726f6469722c726f6469722c696f636861727365743d6b6f69382d72752c00", @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="d42184e7536f8334664d8a1366979a4ce592af94824b33891dbfb3f9b7dd812db7ee53466615968608a745682c1af481a043a10e87e9e6dee379613d787f8f64047c6fec292c6d107491a8227b1fc329e86bba5b205a0fd9a0cc9d0fd01b107fc6ef7355fe0e081b3adbc1627a4a073234508028c58a82fa5b82a55c8cec57366a104379954f29bf3643d6800db34c27ec0398c0046d3f454f9e3b2537f4d16d1735288e68b6956a0236369cde68cc87427385ac43f035f94c8a34ea32b0d7f5e6850c71bafde794f197ea2460402a5efdf08044726d919f2cb2c39c9703d095f8289347ca8f6084b8f03c59b86f7c1cd809b99b7bd3f08bff", @ANYRESHEX], 0x81, 0x2b9, &(0x7f0000000580)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$ax25(0x3, 0x5, 0xcd)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000080)={0x0, 0x34325842, 0x281, 0x168, 0x0, @discrete={0x7d7e, 0x1}})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x38, 0x1e, 0x1, 0xfffffffc, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_PORT={0x6, 0x6, 0x4e22}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x44010)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

604.503203ms ago: executing program 2 (id=363):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (fail_nth: 3)

524.177784ms ago: executing program 6 (id=364):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000000"])

511.920124ms ago: executing program 0 (id=365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 3)

511.002284ms ago: executing program 5 (id=366):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r2, 0x84, 0x74, 0xfffffffffffffffe, &(0x7f0000000040)=0x41)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfb, 0x69d, &(0x7f0000000640)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
fsetxattr$security_capability(r3, &(0x7f0000000140), &(0x7f0000000280)=@v2={0x2000000, [{0x6, 0x220}, {0x1000, 0x40}]}, 0x14, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149882, 0x0) (async)
timer_settime(0x0, 0x0, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0xa) (async)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000180)=""/197)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000895}, 0x4000004) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) (async)
clock_gettime(0x0, &(0x7f00000003c0)={<r8=>0x0, <r9=>0x0})
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x70}, 0x20) (async)
pselect6(0x40, &(0x7f0000000300)={0x7, 0x7, 0x6, 0xdbe, 0x80, 0xf5f, 0x7, 0xc}, &(0x7f0000000340)={0x6, 0xcd6, 0x8, 0x0, 0xffffffffffffffff, 0x100, 0xfff, 0x4}, &(0x7f0000000380)={0x5, 0x3ff, 0x9, 0x5, 0x2f7, 0x10d, 0x81, 0x8}, &(0x7f0000000440)={r8, r9+60000000}, &(0x7f0000000500)={&(0x7f0000000480)={[0x1]}, 0x8}) (async)
close(r7) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))

478.029664ms ago: executing program 2 (id=367):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

308.129957ms ago: executing program 4 (id=368):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000480)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030302f30303030303030303030303337372c73686f72746e616d653d6d697865642c696f636861727365743d6b6f69382d752c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c696f636861727365743d63703935302c636f6465706167653d3836342c757466383d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c00f69028958633fcfaadddedb027fd11e3d18099d0835558db55e819"], 0x80, 0x350, &(0x7f0000000580)="$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")
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2775}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

253.379788ms ago: executing program 5 (id=369):
syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x82040, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000300)={0x40, 0x5, 0x0, 0x7c50, 0x3, "e2941a45724dbcaa"})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [], 0xa, "2b8a80bfbdab4c58a2c1c5e3"}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
pwritev(r2, &(0x7f0000001a40)=[{&(0x7f0000000580)="3222f3989b4b80c8f514009a29126ffc5ca0075b342e3d94113aaf0e37c7d60a6830809b0304b34c5eab33b47b8c03905235383ca268c3314206d0014fb7c48ec3f593fb41c86672cba1831a954fd518ab5bf248d47354842f89d7f275f35576f47f0855d4b5a94ba0ab33c99edf799be56e77c45890f5c618c57749a5c6a9a659290f1f976e4f5653bc4bf267a0", 0x8e}, {&(0x7f0000000640)="a8ab03b56296cc51754a94afddee314f690ea0b326fc7a3f01f772caa9ff7c5276f7e425d670578b95c89c71bbe3e8760c344a4c697d23ebfb4bdd401bcb1f49c4ed0a02b54e7ef009c7b46ef0da545f22463b0dfe86f032adee248e63e4fe53dcedca0e92359fb9519bd021cd4709071385fab019438fe3c0c5b8edefd71a74855d80f6402d719c5b15a439e8ca2397b7ed60256b6636cedc5691c657cbc45da0af1a0e3d59169affc95db44d74f5d003023b6ce4ff5b", 0xb7}, {&(0x7f0000000340)="a12557f9d7a726e634f7ede46100455b9178883cc5f0d6c8957fe1c5f7a59cd9a3d5fe323ce5118202917b8c39ad7e4bbe6931a4fa", 0x35}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="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", 0xfb}, {&(0x7f0000001800)="d8ec32b791310a06541375838ecfde04f27a72521c98cf302e06b4df18b2b648cb5b79ac52b0aab1aceb0cbf0eb751eedca7e0963e63e62b81cff5ab0b3f2e667b1fda68a710f87283bff4a4c860faf64123738d38d21d64a595c5d93957695559df23c774726d3b0e2e70a7a6a2e9b23b710ca1684303691327a1ebe8ca5ebcf5deb72fe60b142e6f686e7d77054b6e", 0x90}, {&(0x7f0000000380)="42f5849974d9abb0b2d5437715f9f42f241f017d79b9", 0x16}, {&(0x7f00000018c0)="02a799eb7b4e4635369739dd1fc1f84f8fd225ce01a1a5c5399b9a14ac6b333f85b1bc8b84ec45f01bb9abe4b688b77db20e03d780f6581448270d8ec5fe9174f4ba2b13e9ac74f67312542077d38f83fe49d31e87e89af6c9cc054e2446e4e82e8ff2a9f819e3a4fc36a496051b6f788fcf2875d9fe96e71786382d3cc4761a1a45b507ac16f2f6e1e2", 0x8a}, {&(0x7f0000000400)="120ec872db1d1243bad086d21c14829ebc6f6f5347d2dd", 0x17}, {&(0x7f0000001980)="2abce810eb7b26285ed311f111f1473794299e8400edbe47169473ca83faf9f5dc2d08bdaccf9be9ac72a0e1865ad5b6669d8711e2777c0f0a00f7f1cf42d746cf30266e35ae59535b7d4822f788ac3fa1bbc984120190bb8eefbf6936d8b693563f7a178f9eec6215acdeb9b187b68cd3ac286ffdde179ef491fcc39723ca8f0bba91f2a24dbced06ce0bb9d5cc02ca1dbfe11f004a538d27543364b888307f763164f6", 0xa4}], 0xa, 0x8, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001b80)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000121000026006c09000008000c006400000008000d00000000000a00340002020202020200000800350000000000040005019c4b0ac7a19a44df4c4b8d1a4531c0821729837d2c0526b5b57f73156209d359bf43e9d76e56dc59483c6717f4692d42b492f9c620818927e29aa99bdf1f17d1082d231919852c65f377eef38068924b1ee3d81e365915eeead94ba32d942782d132f4"], 0x74}}, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000001b40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000500)={0x38, r3, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x35}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x44000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc0ff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r9, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r9, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000014002101000000000100000002009100", @ANYRES32=r14, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001500da4f4fff14010000000000000000", @ANYRES32=r14], 0x18}}, 0x0)
fdatasync(r1)

241.834218ms ago: executing program 2 (id=370):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000007000000440472dd01000000"], 0x40}, 0x0)
read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef)

0s ago: executing program 0 (id=371):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x12, &(0x7f0000000100)={[{@discard_sync}, {@datacow}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz0\x00', {0x0, 0x3, 0x2, 0xa}, 0x25, [0xf5, 0xffff1aa8, 0xff, 0x2, 0x200, 0x8d, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x8, 0x7, 0x1, 0x71c, 0x38, 0xffffff7f, 0xfffffff9, 0x5, 0x3ff, 0x0, 0x8001, 0xfffffffd, 0x9be4bf38, 0x0, 0x2, 0xc, 0x0, 0x8, 0x5, 0x84, 0xc, 0x8001, 0x3, 0x10000001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8002, 0x1, 0x5, 0x8, 0x7f, 0x9, 0xf2b, 0x401, 0xa33e, 0xfffffffa, 0xffff, 0x8, 0x9, 0x6, 0xffffff80, 0x100, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x1], [0x8, 0x2, 0xd91, 0x5, 0x8, 0xfffffff0, 0x5, 0x95a6, 0xcc, 0xa8a, 0x8cbe, 0xffffff4c, 0x1, 0x2, 0x0, 0x0, 0x8, 0x401, 0x0, 0x405, 0x2, 0x9, 0x5, 0x9, 0xd, 0x7, 0x209, 0x8, 0x8, 0x5, 0xc, 0xb2d1, 0x1, 0x200, 0x10001, 0x9, 0xe22, 0x401, 0x80000e, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x1, 0x4, 0x3, 0x29e3, 0xf7f, 0x2, 0x0, 0x200, 0x6e99, 0x6e6, 0xff, 0x9, 0x1d, 0xfffffffc, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x0, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x9, 0xcb03, 0xfffffff9, 0x5, 0x33, 0x5, 0x80003, 0xc5, 0x8, 0x8000, 0x6, 0x3, 0x40000001, 0x8, 0xf9f, 0x3, 0x7, 0x3fe, 0x8, 0x0, 0x2, 0x1, 0x4, 0x40001, 0x0, 0x4, 0x911, 0x6, 0x8000, 0x40, 0x8, 0xb, 0xc0000000, 0x3, 0xc55a, 0x1, 0x3, 0x9, 0x8, 0x7, 0x4, 0x9, 0x89d, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0xb, 0x1], [0x27b, 0x5, 0xef, 0x10, 0x0, 0x4, 0x8, 0x3b, 0x7fffffff, 0xe011, 0xfffffff8, 0x6, 0xffff7bfb, 0x0, 0x401, 0x10401, 0x401, 0x0, 0xa, 0x8, 0x3, 0x11f9, 0xfffffc00, 0x1, 0x89, 0x4, 0x28000002, 0x2, 0x9, 0x27, 0x400, 0x70, 0x2, 0xa, 0x400002, 0xc, 0x0, 0x9, 0x80089, 0x10, 0xfff, 0x9a2, 0x81, 0x2, 0x1, 0x4, 0x8, 0x400005, 0x4, 0x0, 0xb, 0x1, 0xc3, 0x9, 0x7ff, 0x1, 0x4, 0xfffffbff, 0x1, 0xb, 0x5, 0x4, 0x4a, 0xfffffff7]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000600)={@remote, @empty}, 0x8)
io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
socket(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

or at page 42 @ nid 36
[   44.982866][ T4383] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   44.986565][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36
[   44.988736][ T4383] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   44.990876][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36
[   44.994089][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.996297][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.000562][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   45.011379][  T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.013862][  T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.033119][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36
[   45.033402][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   45.075862][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36
[   45.121295][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 36 @ nid 36
[   45.127336][ T4383] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   45.129572][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36
[   45.131667][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36
[   45.153441][ T4385] loop0: detected capacity change from 0 to 4096
[   45.155813][ T4387] loop1: detected capacity change from 0 to 4096
[   45.156402][ T4385] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   45.162346][ T4387] ntfs3: Unknown parameter '00000000000000000000000'
[   45.175582][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36
[   45.177784][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36
[   45.190761][ T4383] syz.3.4: attempt to access beyond end of device
[   45.190761][ T4383] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16
[   45.200789][ T4383] syz.3.4: attempt to access beyond end of device
[   45.200789][ T4383] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[   45.203850][ T4385] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[   45.230971][ T4385] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[   45.237691][ T4385] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[   45.240549][ T4385] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[   45.257325][ T4383] syz.3.4: attempt to access beyond end of device
[   45.257325][ T4383] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[   45.261339][ T4383] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639]
[   45.266771][ T4385] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[   45.276446][ T4385] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[   45.279255][ T4385] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[   45.316906][ T4380] loop2: detected capacity change from 0 to 32768
[   45.321012][ T4385] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr.
[   45.322944][ T4385] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[   45.329021][ T4383] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   45.331166][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36
[   45.339409][ T4383] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   45.341686][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36
[   45.354276][ T4383] erofs: (device loop3): z_erofs_readahead: readahead error at page 45 @ nid 36
[   45.356464][ T4383] syz.3.4: attempt to access beyond end of device
[   45.356464][ T4383] loop3: rw=524288, sector=24, nr_sectors = 8 limit=16
[   45.378450][ T4383] syz.3.4: attempt to access beyond end of device
[   45.378450][ T4383] loop3: rw=524288, sector=16, nr_sectors = 8 limit=16
[   45.391392][ T4385] ntfs: volume version 3.1.
[   45.457102][ T4383] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537]
[   45.571663][ T4380] XFS (loop2): Mounting V5 Filesystem
[   45.580206][ T4385] can0: slcan on ttyS3.
[   45.663477][ T4380] XFS (loop2): Ending clean mount
[   45.669057][ T4387] loop1: detected capacity change from 0 to 65536
[   45.694803][   T47] Bluetooth: hci1: command 0x040f tx timeout
[   45.696885][ T4297] Bluetooth: hci0: command 0x040f tx timeout
[   45.726962][ T4410] xt_hashlimit: overflow, rate too high: 0
[   45.774191][ T4302] Bluetooth: hci4: command 0x040f tx timeout
[   45.775608][ T4302] Bluetooth: hci2: command 0x040f tx timeout
[   45.777051][ T4302] Bluetooth: hci3: command 0x040f tx timeout
[   45.796891][ T4387] XFS (loop1): Mounting V5 Filesystem
[   45.804142][ T4385] can0 (unregistered): slcan off ttyS3.
[   45.878458][ T4418] loop4: detected capacity change from 0 to 1024
[   45.880658][ T4418] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.911042][ T4387] XFS (loop1): Ending clean mount
[   45.915802][ T4387] XFS (loop1): Quotacheck needed: Please wait.
[   45.933319][ T4387] XFS (loop1): Quotacheck: Done.
[   45.957569][ T4387] XFS (loop1): EXPERIMENTAL online shrink feature in use. Use at your own risk!
[   46.127217][ T4307] XFS (loop2): Unmounting Filesystem
[   46.142894][ T4418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   46.302037][ T4430] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   46.308681][ T4430] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   47.074774][ T4296] XFS (loop1): Unmounting Filesystem
[   47.346257][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   47.373774][ T4301] EXT4-fs (loop4): unmounting filesystem.
[   47.775019][ T4448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   47.775170][   T47] Bluetooth: hci1: command 0x0419 tx timeout
[   47.778889][   T47] Bluetooth: hci0: command 0x0419 tx timeout
[   47.812358][ T4448] loop4: detected capacity change from 0 to 512
[   47.854261][ T4302] Bluetooth: hci3: command 0x0419 tx timeout
[   47.856646][   T47] Bluetooth: hci2: command 0x0419 tx timeout
[   47.857534][ T4448] EXT2-fs (loop4): (no)acl options not supported
[   47.858626][ T4297] Bluetooth: hci4: command 0x0419 tx timeout
[   47.890522][ T4429] loop0: detected capacity change from 0 to 32768
[   47.976395][ T4429] XFS (loop0): Mounting V5 Filesystem
[   48.087930][ T4429] XFS (loop0): Ending clean mount
[   48.361755][ T4300] XFS (loop0): Unmounting Filesystem
[   48.597958][ T4457] loop3: detected capacity change from 0 to 32768
[   48.631957][ T4457] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.13 (4457)
[   48.637748][ T4456] loop2: detected capacity change from 0 to 32768
[   48.651003][ T4479] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16'.
[   48.666527][ T4456] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.10 (4456)
[   48.686871][ T4457] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   48.689667][ T4457] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   48.698380][ T4457] BTRFS info (device loop3): turning on sync discard
[   48.700282][ T4457] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   48.708885][ T4457] BTRFS info (device loop3): use zstd compression, level 3
[   48.710666][ T4457] BTRFS info (device loop3): using free space tree
[   48.845249][ T4457] BTRFS info (device loop3): enabling ssd optimizations
[   49.095364][ T4510] IPVS: Unknown mcast interface: pim6reg
[   49.102969][ T4510] capability: warning: `syz.0.15' uses deprecated v2 capabilities in a way that may be insecure
[   49.208485][ T4477] loop4: detected capacity change from 0 to 32768
[   49.211891][ T4306] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   49.228543][ T4477] =======================================================
[   49.228543][ T4477] WARNING: The mand mount option has been deprecated and
[   49.228543][ T4477]          and is ignored by this kernel. Remove the mand
[   49.228543][ T4477]          option from the mount to silence this warning.
[   49.228543][ T4477] =======================================================
[   49.322714][ T4477] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[   49.331558][ T4288] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4288)
[   49.409433][ T4477] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   49.530143][ T4513] loop2: detected capacity change from 0 to 32768
[   49.533126][ T4513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.18 (4513)
[   49.557978][ T4513] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   49.560717][ T4513] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   49.562981][ T4513] BTRFS info (device loop2): turning on sync discard
[   49.568860][ T4513] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   49.571257][ T4513] BTRFS info (device loop2): use zstd compression, level 3
[   49.573144][ T4513] BTRFS info (device loop2): using free space tree
[   49.752752][ T4301] ocfs2: Unmounting device (7,4) on (node local)
[   50.683551][ T4513] BTRFS info (device loop2): enabling ssd optimizations
[   50.898988][ T4515] loop1: detected capacity change from 0 to 40427
[   50.930186][ T4515] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff
[   50.976498][ T4515] F2FS-fs (loop1): invalid crc value
[   51.005476][ T4515] F2FS-fs (loop1): Found nat_bits in checkpoint
[   51.072349][ T4515] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   51.154647][ T4307] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   51.262077][ T4547] loop3: detected capacity change from 0 to 40427
[   51.303970][ T4547] F2FS-fs (loop3): invalid crc value
[   51.327941][ T4547] F2FS-fs (loop3): Found nat_bits in checkpoint
[   51.414765][ T4547] F2FS-fs (loop3): Start checkpoint disabled!
[   51.431981][ T4547] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   51.526859][ T4526] loop0: detected capacity change from 0 to 40427
[   51.531888][ T4296] syz-executor: attempt to access beyond end of device
[   51.531888][ T4296] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   51.554377][ T4351] kworker/u4:5: attempt to access beyond end of device
[   51.554377][ T4351] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   51.558383][ T4526] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[   51.577710][ T4526] F2FS-fs (loop0): invalid crc value
[   51.601456][ T4526] F2FS-fs (loop0): Found nat_bits in checkpoint
[   51.631484][ T4567] loop4: detected capacity change from 0 to 4096
[   51.653602][ T4526] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   51.712332][ T4574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.733214][ T4567] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   51.736555][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'.
[   51.902613][ T4526] overlayfs: unrecognized mount option "subj_role=" or missing value
[   51.928903][ T4288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4288)
[   51.960124][ T4578] can0: slcan on ttyS3.
[   52.062903][ T4300] syz-executor: attempt to access beyond end of device
[   52.062903][ T4300] loop0: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[   52.087525][ T4582] netlink: 56 bytes leftover after parsing attributes in process `syz.3.30'.
[   52.113761][ T4578] can0 (unregistered): slcan off ttyS3.
[   52.232932][ T4592] IPVS: Unknown mcast interface: pim6reg
[   52.240310][ T4593] xt_hashlimit: overflow, rate too high: 0
[   52.900205][ T4604] loop1: detected capacity change from 0 to 32768
[   52.939509][ T4604] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[   53.454292][ T4598] loop2: detected capacity change from 0 to 32768
[   53.483202][ T4603] loop0: detected capacity change from 0 to 32768
[   53.516594][ T4603] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[   53.519872][ T4598] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   53.585889][ T4598] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   53.741551][ T4307] ocfs2: Unmounting device (7,2) on (node local)
[   54.168341][ T4618] loop3: detected capacity change from 0 to 32768
[   54.247060][ T4618] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[   54.465175][ T4631] loop4: detected capacity change from 0 to 4096
[   54.467541][ T4631] __ntfs_warning: 10 callbacks suppressed
[   54.467551][ T4631] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   54.485744][ T4621] loop1: detected capacity change from 0 to 32768
[   54.491404][ T4631] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[   54.508812][ T4631] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[   54.522058][ T4631] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[   54.525412][ T4636] xt_hashlimit: overflow, rate too high: 0
[   54.542337][ T4631] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[   54.560823][ T4621] XFS (loop1): Mounting V5 Filesystem
[   54.572723][ T4631] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[   54.582330][ T4631] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[   54.603522][ T4631] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[   54.608708][ T4631] ntfs: (device loop4): check_mft_mirror(): Failed to read $MFTMirr.
[   54.610663][ T4631] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[   54.685082][ T4631] ntfs: volume version 3.1.
[   54.719399][ T4621] XFS (loop1): Ending clean mount
[   54.809077][ T4628] loop0: detected capacity change from 0 to 32768
[   54.814216][ T4631] can0: slcan on ttyS3.
[   54.842012][ T4628] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   54.853003][ T4628] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   54.982675][ T4390] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[   55.124478][ T4648] IPVS: Unknown mcast interface: pim6reg
[   55.255036][ T4300] ocfs2: Unmounting device (7,0) on (node local)
[   55.337324][ T4644] loop3: detected capacity change from 0 to 65536
[   55.350732][ T4631] can0 (unregistered): slcan off ttyS3.
[   55.362954][ T4654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.400367][ T4296] XFS (loop1): Unmounting Filesystem
[   55.588411][ T4644] XFS (loop3): Mounting V5 Filesystem
[   55.673221][ T4644] XFS (loop3): Ending clean mount
[   55.675579][ T4644] XFS (loop3): Quotacheck needed: Please wait.
[   55.692169][ T4644] XFS (loop3): Quotacheck: Done.
[   55.724474][ T4644] XFS (loop3): EXPERIMENTAL online shrink feature in use. Use at your own risk!
[   55.843944][ T4669] netlink: 56 bytes leftover after parsing attributes in process `syz.4.47'.
[   56.045198][ T4674] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   56.713440][ T4306] XFS (loop3): Unmounting Filesystem
[   56.907776][ T4680] loop0: detected capacity change from 0 to 4096
[   56.909884][ T4680] ntfs3: Unknown parameter '00000000000000000000000'
[   57.341073][ T4680] loop0: detected capacity change from 0 to 65536
[   57.522615][ T4683] loop2: detected capacity change from 0 to 32768
[   57.553161][ T4680] XFS (loop0): Mounting V5 Filesystem
[   57.583785][ T4683] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   57.591788][ T4683] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   57.603539][ T4683] BTRFS info (device loop2): turning on sync discard
[   57.605172][ T4683] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   57.610747][ T4684] loop4: detected capacity change from 0 to 32768
[   57.628933][ T4683] BTRFS info (device loop2): use zstd compression, level 3
[   57.630799][ T4683] BTRFS info (device loop2): using free space tree
[   57.643950][ T4684] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.55 (4684)
[   57.668303][ T4680] XFS (loop0): Ending clean mount
[   57.671333][ T4680] XFS (loop0): Quotacheck needed: Please wait.
[   57.700907][ T4680] XFS (loop0): Quotacheck: Done.
[   57.702993][ T4390] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   57.724767][ T4680] XFS (loop0): EXPERIMENTAL online shrink feature in use. Use at your own risk!
[   57.760755][ T4688] loop1: detected capacity change from 0 to 32768
[   57.771551][ T4688] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.48 (4688)
[   58.059384][ T4716] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   58.823941][ T4683] BTRFS info (device loop2): enabling ssd optimizations
[   58.882446][ T4300] XFS (loop0): Unmounting Filesystem
[   59.091775][ T4728] loop1: detected capacity change from 0 to 1024
[   59.112284][ T4728] EXT4-fs: Ignoring removed nomblk_io_submit option
[   59.179864][ T4307] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   59.209912][ T4728] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   59.265605][ T4723] loop3: detected capacity change from 0 to 32768
[   59.400718][ T4723] XFS (loop3): Mounting V5 Filesystem
[   59.499756][ T4726] loop4: detected capacity change from 0 to 32768
[   59.573038][ T4723] XFS (loop3): Ending clean mount
[   59.698618][ T4726] XFS (loop4): Mounting V5 Filesystem
[   59.810799][ T4726] XFS (loop4): Ending clean mount
[   59.850069][ T4296] EXT4-fs (loop1): unmounting filesystem.
[   59.960855][ T4306] XFS (loop3): Unmounting Filesystem
[   60.056334][ T4301] XFS (loop4): Unmounting Filesystem
[   60.077578][ T4756] loop2: detected capacity change from 0 to 40427
[   60.093509][ T4756] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1)
[   60.095442][ T4756] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   60.198822][ T4288] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   60.380360][ T4752] loop0: detected capacity change from 0 to 32768
[   60.390812][ T4767] loop1: detected capacity change from 0 to 8192
[   60.424630][ T4767] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   60.428050][ T4767] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   60.430827][ T4767] REISERFS (device loop1): using ordered data mode
[   60.432405][ T4767] reiserfs: using flush barriers
[   60.453504][ T4767] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   60.457772][ T4767] REISERFS (device loop1): checking transaction log (loop1)
[   60.472404][ T4752] XFS (loop0): Mounting V5 Filesystem
[   60.536025][ T4752] XFS (loop0): Ending clean mount
[   60.650431][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'.
[   60.719789][ T4767] REISERFS (device loop1): Using tea hash to sort names
[   60.722845][ T4767] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   60.859389][ T4300] XFS (loop0): Unmounting Filesystem
[   60.950638][ T4788] loop2: detected capacity change from 0 to 4096
[   60.955656][ T4788] ntfs3: Unknown parameter '00000000000000000000000'
[   61.008704][ T4290] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   61.300883][ T4783] loop4: detected capacity change from 0 to 32768
[   61.403564][ T4795] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20000
[   61.431175][ T4788] loop2: detected capacity change from 0 to 65536
[   61.515498][ T4788] XFS (loop2): Mounting V5 Filesystem
[   61.597872][ T4788] XFS (loop2): Ending clean mount
[   61.602182][ T4788] XFS (loop2): Quotacheck needed: Please wait.
[   61.615310][ T4791] loop3: detected capacity change from 0 to 32768
[   61.618710][ T4791] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.70 (4791)
[   61.627585][ T4791] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   61.630333][ T4791] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   61.650497][ T4788] XFS (loop2): Quotacheck: Done.
[   61.650588][ T4791] BTRFS info (device loop3): turning on sync discard
[   61.665830][ T4805] loop1: detected capacity change from 0 to 512
[   61.681890][ T4805] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   61.683832][ T4791] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   61.685145][ T4788] XFS (loop2): EXPERIMENTAL online shrink feature in use. Use at your own risk!
[   61.687337][ T4791] BTRFS info (device loop3): use zstd compression, level 3
[   61.703185][ T4791] BTRFS info (device loop3): using free space tree
[   61.817236][ T4805] EXT4-fs (loop1): 1 orphan inode deleted
[   61.818704][ T4805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   61.886413][ T4805] FAULT_INJECTION: forcing a failure.
[   61.886413][ T4805] name failslab, interval 1, probability 0, space 0, times 1
[   61.889615][ T4805] CPU: 0 PID: 4805 Comm: syz.1.75 Not tainted 6.1.140-syzkaller #0
[   61.891542][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   61.893996][ T4805] Call trace:
[   61.894863][ T4805]  dump_backtrace+0x1c8/0x1f4
[   61.895963][ T4805]  show_stack+0x2c/0x3c
[   61.897040][ T4805]  __dump_stack+0x30/0x40
[   61.898059][ T4805]  dump_stack_lvl+0xf8/0x160
[   61.899112][ T4805]  dump_stack+0x1c/0x5c
[   61.900169][ T4805]  should_fail_ex+0x3c4/0x520
[   61.901337][ T4805]  __should_failslab+0xc0/0x120
[   61.902624][ T4805]  should_failslab+0x10/0x28
[   61.903733][ T4805]  __kmem_cache_alloc_node+0x7c/0x320
[   61.905090][ T4805]  __kmalloc+0xd8/0x178
[   61.906136][ T4805]  tomoyo_realpath_from_path+0xc4/0x4d4
[   61.907564][ T4805]  tomoyo_path_number_perm+0x190/0x4dc
[   61.908899][ T4805]  tomoyo_file_ioctl+0x2c/0x3c
[   61.910083][ T4805]  security_file_ioctl+0x80/0xbc
[   61.911345][ T4805]  __arm64_sys_ioctl+0xa8/0x1c8
[   61.912623][ T4805]  invoke_syscall+0x98/0x2bc
[   61.913830][ T4805]  el0_svc_common+0x138/0x258
[   61.914975][ T4805]  do_el0_svc+0x58/0x13c
[   61.916031][ T4805]  el0_svc+0x58/0x138
[   61.917077][ T4805]  el0t_64_sync_handler+0x84/0xf0
[   61.918398][ T4805]  el0t_64_sync+0x18c/0x190
[   62.042413][ T4815] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   62.725687][ T4805] ERROR: Out of memory at tomoyo_realpath_from_path.
[   62.938548][ T4307] XFS (loop2): Unmounting Filesystem
[   62.962250][ T4296] EXT4-fs (loop1): unmounting filesystem.
[   63.055427][ T4830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.79'.
[   63.107228][ T4791] BTRFS info (device loop3): enabling ssd optimizations
[   63.185570][ T4813] loop4: detected capacity change from 0 to 32768
[   63.268141][ T4813] XFS (loop4): Mounting V5 Filesystem
[   63.270152][ T4306] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   63.330377][ T4813] XFS (loop4): Ending clean mount
[   63.489404][ T4853] FAULT_INJECTION: forcing a failure.
[   63.489404][ T4853] name failslab, interval 1, probability 0, space 0, times 0
[   63.492400][ T4853] CPU: 1 PID: 4853 Comm: syz.1.83 Not tainted 6.1.140-syzkaller #0
[   63.494262][ T4853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   63.496528][ T4853] Call trace:
[   63.497257][ T4853]  dump_backtrace+0x1c8/0x1f4
[   63.498335][ T4853]  show_stack+0x2c/0x3c
[   63.499327][ T4853]  __dump_stack+0x30/0x40
[   63.500302][ T4853]  dump_stack_lvl+0xf8/0x160
[   63.501354][ T4853]  dump_stack+0x1c/0x5c
[   63.502299][ T4853]  should_fail_ex+0x3c4/0x520
[   63.503375][ T4853]  __should_failslab+0xc0/0x120
[   63.504556][ T4853]  should_failslab+0x10/0x28
[   63.505659][ T4853]  __kmem_cache_alloc_node+0x7c/0x320
[   63.506917][ T4853]  kmalloc_trace+0x48/0x94
[   63.507956][ T4853]  legacy_init_fs_context+0x5c/0xc8
[   63.509124][ T4853]  alloc_fs_context+0x53c/0x790
[   63.510297][ T4853]  fs_context_for_reconfigure+0x7c/0x94
[   63.511673][ T4853]  path_mount+0xadc/0xe78
[   63.512680][ T4853]  __arm64_sys_mount+0x49c/0x584
[   63.513859][ T4853]  invoke_syscall+0x98/0x2bc
[   63.514850][ T4853]  el0_svc_common+0x138/0x258
[   63.515988][ T4853]  do_el0_svc+0x58/0x13c
[   63.516994][ T4853]  el0_svc+0x58/0x138
[   63.517989][ T4853]  el0t_64_sync_handler+0x84/0xf0
[   63.519170][ T4853]  el0t_64_sync+0x18c/0x190
[   63.537850][ T4301] XFS (loop4): Unmounting Filesystem
[   63.565361][ T4855] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET)
[   63.609357][ T4288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4288)
[   63.816913][ T4862] ALSA: mixer_oss: invalid OSS volume 'u'
[   63.937895][ T4838] loop0: detected capacity change from 0 to 40427
[   63.944517][   T27] kauditd_printk_skb: 10 callbacks suppressed
[   63.944528][   T27] audit: type=1326 audit(63.930:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f5a768 code=0x7ffc0000
[   63.951897][   T27] audit: type=1326 audit(63.930:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff82f5a768 code=0x7ffc0000
[   63.963013][ T4838] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1)
[   63.965318][ T4838] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   64.003919][   T27] audit: type=1326 audit(63.930:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f5a768 code=0x7ffc0000
[   64.009299][   T27] audit: type=1326 audit(63.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f5a768 code=0x7ffc0000
[   64.036127][   T27] audit: type=1326 audit(63.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f5a768 code=0x7ffc0000
[   64.054733][   T27] audit: type=1326 audit(63.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff82f5a768 code=0x7ffc0000
[   64.076310][   T27] audit: type=1326 audit(63.960:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f5a768 code=0x7ffc0000
[   64.096695][   T27] audit: type=1326 audit(63.960:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f5a768 code=0x7ffc0000
[   64.116948][   T27] audit: type=1326 audit(63.960:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f5a768 code=0x7ffc0000
[   64.127072][   T27] audit: type=1326 audit(63.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.1.86" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=73 compat=0 ip=0xffff82f5a768 code=0x7ffc0000
[   64.292911][ T4857] FAULT_INJECTION: forcing a failure.
[   64.292911][ T4857] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   64.309171][ T4857] CPU: 0 PID: 4857 Comm: syz.3.82 Not tainted 6.1.140-syzkaller #0
[   64.311201][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   64.313721][ T4857] Call trace:
[   64.314532][ T4857]  dump_backtrace+0x1c8/0x1f4
[   64.315720][ T4857]  show_stack+0x2c/0x3c
[   64.316752][ T4857]  __dump_stack+0x30/0x40
[   64.317846][ T4857]  dump_stack_lvl+0xf8/0x160
[   64.318995][ T4857]  dump_stack+0x1c/0x5c
[   64.320032][ T4857]  should_fail_ex+0x3c4/0x520
[   64.321213][ T4857]  should_fail+0x14/0x24
[   64.322261][ T4857]  should_fail_usercopy+0x20/0x30
[   64.323579][ T4857]  kstrtouint_from_user+0xd0/0x244
[   64.324860][ T4857]  proc_fail_nth_write+0x94/0x228
[   64.326080][ T4857]  vfs_write+0x29c/0x7c4
[   64.327141][ T4857]  ksys_write+0x120/0x210
[   64.328293][ T4857]  __arm64_sys_write+0x7c/0x90
[   64.329438][ T4857]  invoke_syscall+0x98/0x2bc
[   64.330508][ T4857]  el0_svc_common+0x138/0x258
[   64.331620][ T4857]  do_el0_svc+0x58/0x13c
[   64.332676][ T4857]  el0_svc+0x58/0x138
[   64.333732][ T4857]  el0t_64_sync_handler+0x84/0xf0
[   64.335012][ T4857]  el0t_64_sync+0x18c/0x190
[   64.495918][ T2058] ieee802154 phy0 wpan0: encryption failed: -22
[   64.497570][ T2058] ieee802154 phy1 wpan1: encryption failed: -22
[   64.814899][ T4866] loop4: detected capacity change from 0 to 32768
[   64.902869][ T4866] XFS (loop4): Mounting V5 Filesystem
[   65.151683][ T4866] XFS (loop4): Ending clean mount
[   65.257054][ T4895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'.
[   65.264103][ T4870] loop0: detected capacity change from 0 to 32768
[   65.286122][ T4870] (syz.0.87,4870,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   65.303701][ T4870] (syz.0.87,4870,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   65.331114][ T4870] (syz.0.87,4870,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[   65.351637][ T4870] JBD2: Ignoring recovery information on journal
[   65.436667][ T4870] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   65.491492][ T4301] XFS (loop4): Unmounting Filesystem
[   65.521014][ T4893] loop3: detected capacity change from 0 to 32768
[   65.533173][ T4893] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   65.543657][ T4893] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   65.546530][ T4893] BTRFS info (device loop3): turning on sync discard
[   65.548279][ T4893] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   65.553930][ T4893] BTRFS info (device loop3): use zstd compression, level 3
[   65.560296][ T4893] BTRFS info (device loop3): using free space tree
[   65.565961][ T4300] ocfs2: Unmounting device (7,0) on (node local)
[   65.607096][ T4892] loop2: detected capacity change from 0 to 32768
[   65.622847][ T4892] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   65.637499][ T4892] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   65.799402][ T4307] ocfs2: Unmounting device (7,2) on (node local)
[   65.818946][ T4893] BTRFS info (device loop3): enabling ssd optimizations
[   65.954380][ T4306] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   66.010056][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   66.069045][ T4929] process 'syz.2.100' launched './file2' with NULL argv: empty string added
[   66.107353][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   66.322309][ T4945] Zero length message leads to an empty skb
[   66.348382][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   66.614437][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   66.847002][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   66.967908][ T4290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4290)
[   67.252739][ T4931] loop4: detected capacity change from 0 to 32768
[   67.302284][ T4955] loop2: detected capacity change from 0 to 32768
[   67.344623][ T4931] XFS (loop4): Mounting V5 Filesystem
[   67.418199][ T4953] loop1: detected capacity change from 0 to 32768
[   67.425702][ T4931] XFS (loop4): Ending clean mount
[   67.450611][ T4953] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   67.460476][ T4301] XFS (loop4): Unmounting Filesystem
[   67.470229][ T4953] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   67.546539][ T4296] ocfs2: Unmounting device (7,1) on (node local)
[   67.611204][ T4982] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20000
[   67.896224][ T4988] 9pnet_fd: Insufficient options for proto=fd
[   68.241045][ T5001] netlink: 52 bytes leftover after parsing attributes in process `syz.0.119'.
[   68.509122][ T5003] loop1: detected capacity change from 0 to 64
[   68.576174][ T4984] loop3: detected capacity change from 0 to 40427
[   68.583033][ T5008] FAULT_INJECTION: forcing a failure.
[   68.583033][ T5008] name failslab, interval 1, probability 0, space 0, times 0
[   68.587116][ T5008] CPU: 0 PID: 5008 Comm: syz.0.122 Not tainted 6.1.140-syzkaller #0
[   68.589087][ T5008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   68.591628][ T5008] Call trace:
[   68.592364][ T5008]  dump_backtrace+0x1c8/0x1f4
[   68.593557][ T5008]  show_stack+0x2c/0x3c
[   68.594546][ T5008]  __dump_stack+0x30/0x40
[   68.595668][ T5008]  dump_stack_lvl+0xf8/0x160
[   68.596870][ T5008]  dump_stack+0x1c/0x5c
[   68.597928][ T5008]  should_fail_ex+0x3c4/0x520
[   68.599188][ T5008]  __should_failslab+0xc0/0x120
[   68.600499][ T5008]  should_failslab+0x10/0x28
[   68.601630][ T5008]  __kmem_cache_alloc_node+0x7c/0x320
[   68.602995][ T5008]  __kmalloc+0xd8/0x178
[   68.604071][ T5008]  sock_kmalloc+0xb0/0x160
[   68.605253][ T5008]  aead_recvmsg+0x7c4/0x1140
[   68.606426][ T5008]  sock_read_iter+0x25c/0x304
[   68.607562][ T5008]  vfs_read+0x5ac/0x7c4
[   68.608628][ T5008]  ksys_read+0x120/0x210
[   68.609713][ T5008]  __arm64_sys_read+0x7c/0x90
[   68.610892][ T5008]  invoke_syscall+0x98/0x2bc
[   68.612101][ T5008]  el0_svc_common+0x138/0x258
[   68.613309][ T5008]  do_el0_svc+0x58/0x13c
[   68.614409][ T5008]  el0_svc+0x58/0x138
[   68.615480][ T5008]  el0t_64_sync_handler+0x84/0xf0
[   68.616743][ T5008]  el0t_64_sync+0x18c/0x190
[   68.627642][ T4984] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff
[   68.634776][ T4984] F2FS-fs (loop3): invalid crc value
[   68.649583][ T4984] F2FS-fs (loop3): Found nat_bits in checkpoint
[   68.685678][ T4984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   68.924675][ T4306] syz-executor: attempt to access beyond end of device
[   68.924675][ T4306] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[   69.319724][ T5037] FAULT_INJECTION: forcing a failure.
[   69.319724][ T5037] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.330420][ T5037] CPU: 1 PID: 5037 Comm: syz.3.128 Not tainted 6.1.140-syzkaller #0
[   69.332331][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   69.334862][ T5037] Call trace:
[   69.335714][ T5037]  dump_backtrace+0x1c8/0x1f4
[   69.336896][ T5037]  show_stack+0x2c/0x3c
[   69.337902][ T5037]  __dump_stack+0x30/0x40
[   69.339065][ T5037]  dump_stack_lvl+0xf8/0x160
[   69.340293][ T5037]  dump_stack+0x1c/0x5c
[   69.341302][ T5037]  should_fail_ex+0x3c4/0x520
[   69.342474][ T5037]  should_fail+0x14/0x24
[   69.343599][ T5037]  should_fail_usercopy+0x20/0x30
[   69.344890][ T5037]  simple_read_from_buffer+0xcc/0x240
[   69.346263][ T5037]  proc_fail_nth_read+0x194/0x230
[   69.347523][ T5037]  vfs_read+0x288/0x7c4
[   69.348473][ T5037]  ksys_read+0x120/0x210
[   69.349489][ T5037]  __arm64_sys_read+0x7c/0x90
[   69.350681][ T5037]  invoke_syscall+0x98/0x2bc
[   69.351809][ T5037]  el0_svc_common+0x138/0x258
[   69.352966][ T5037]  do_el0_svc+0x58/0x13c
[   69.354000][ T5037]  el0_svc+0x58/0x138
[   69.354983][ T5037]  el0t_64_sync_handler+0x84/0xf0
[   69.356228][ T5037]  el0t_64_sync+0x18c/0x190
[   69.380294][ T5012] loop2: detected capacity change from 0 to 32768
[   69.447724][ T5012] XFS (loop2): Mounting V5 Filesystem
[   69.523177][ T5012] XFS (loop2): Ending clean mount
[   69.590280][ T4307] XFS (loop2): Unmounting Filesystem
[   69.598455][ T5022] loop1: detected capacity change from 0 to 32768
[   69.616276][ T3764] cfg80211: failed to load regulatory.db
[   69.688620][ T5022] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   69.734125][ T5022] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   69.846310][ T5055] loop4: detected capacity change from 0 to 2048
[   69.898574][ T5055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.905821][ T5055] FAULT_INJECTION: forcing a failure.
[   69.905821][ T5055] name failslab, interval 1, probability 0, space 0, times 0
[   69.908976][ T5055] CPU: 1 PID: 5055 Comm: syz.4.132 Not tainted 6.1.140-syzkaller #0
[   69.910858][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   69.913463][ T5055] Call trace:
[   69.914289][ T5055]  dump_backtrace+0x1c8/0x1f4
[   69.915423][ T5055]  show_stack+0x2c/0x3c
[   69.916485][ T5055]  __dump_stack+0x30/0x40
[   69.917587][ T5055]  dump_stack_lvl+0xf8/0x160
[   69.918731][ T5055]  dump_stack+0x1c/0x5c
[   69.919806][ T5055]  should_fail_ex+0x3c4/0x520
[   69.920963][ T5055]  __should_failslab+0xc0/0x120
[   69.922193][ T5055]  should_failslab+0x10/0x28
[   69.923382][ T5055]  __kmem_cache_alloc_node+0x7c/0x320
[   69.924686][ T5055]  kmalloc_trace+0x48/0x94
[   69.925796][ T5055]  udf_fiiter_find_entry+0x138/0x56c
[   69.927101][ T5055]  udf_lookup+0xf0/0x21c
[   69.928209][ T5055]  path_openat+0xfa4/0x2680
[   69.929350][ T5055]  do_filp_open+0x174/0x344
[   69.930427][ T5055]  do_sys_openat2+0x128/0x3d8
[   69.931615][ T5055]  __arm64_sys_openat+0x120/0x154
[   69.932899][ T5055]  invoke_syscall+0x98/0x2bc
[   69.934110][ T5055]  el0_svc_common+0x138/0x258
[   69.935464][ T5055]  do_el0_svc+0x58/0x13c
[   69.936566][ T5055]  el0_svc+0x58/0x138
[   69.937566][ T5055]  el0t_64_sync_handler+0x84/0xf0
[   69.938817][ T5055]  el0t_64_sync+0x18c/0x190
[   69.957101][ T4296] ocfs2: Unmounting device (7,1) on (node local)
[   70.084558][ T5061] capability: warning: `syz.1.134' uses 32-bit capabilities (legacy support in use)
[   70.344073][ T5073] FAULT_INJECTION: forcing a failure.
[   70.344073][ T5073] name failslab, interval 1, probability 0, space 0, times 0
[   70.347332][ T5073] CPU: 1 PID: 5073 Comm: syz.0.139 Not tainted 6.1.140-syzkaller #0
[   70.349281][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   70.351762][ T5073] Call trace:
[   70.352577][ T5073]  dump_backtrace+0x1c8/0x1f4
[   70.353799][ T5073]  show_stack+0x2c/0x3c
[   70.354869][ T5073]  __dump_stack+0x30/0x40
[   70.355974][ T5073]  dump_stack_lvl+0xf8/0x160
[   70.357193][ T5073]  dump_stack+0x1c/0x5c
[   70.358156][ T5073]  should_fail_ex+0x3c4/0x520
[   70.359311][ T5073]  __should_failslab+0xc0/0x120
[   70.360502][ T5073]  should_failslab+0x10/0x28
[   70.361699][ T5073]  __kmem_cache_alloc_node+0x7c/0x320
[   70.363004][ T5073]  __kmalloc+0xd8/0x178
[   70.363968][ T5073]  video_usercopy+0x144/0xf88
[   70.365119][ T5073]  subdev_ioctl+0x3c/0x50
[   70.366197][ T5073]  v4l2_ioctl+0x148/0x18c
[   70.367268][ T5073]  __arm64_sys_ioctl+0x14c/0x1c8
[   70.368465][ T5073]  invoke_syscall+0x98/0x2bc
[   70.369615][ T5073]  el0_svc_common+0x138/0x258
[   70.370740][ T5073]  do_el0_svc+0x58/0x13c
[   70.371870][ T5073]  el0_svc+0x58/0x138
[   70.372910][ T5073]  el0t_64_sync_handler+0x84/0xf0
[   70.374152][ T5073]  el0t_64_sync+0x18c/0x190
[   70.499705][ T5049] loop3: detected capacity change from 0 to 32768
[   70.531438][ T5049] XFS: ikeep mount option is deprecated.
[   70.650492][ T5049] XFS (loop3): Mounting V5 Filesystem
[   70.788807][ T5049] XFS (loop3): Ending clean mount
[   70.805682][ T5049] XFS (loop3): Quotacheck needed: Please wait.
[   70.891382][ T5049] XFS (loop3): Quotacheck: Done.
[   71.074461][ T4306] XFS (loop3): Unmounting Filesystem
[   71.482757][ T5101] loop3: detected capacity change from 0 to 2048
[   71.521210][ T5101] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.692466][ T5103] loop1: detected capacity change from 0 to 1024
[   71.784366][ T5099] loop4: detected capacity change from 0 to 32768
[   71.843828][ T5099] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[   71.874065][ T5103] devtmpfs: Unknown parameter ''
[   71.879057][ T5099] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   72.025937][ T4296] hfsplus: bad catalog entry type
[   72.064553][ T4301] ocfs2: Unmounting device (7,4) on (node local)
[   72.198252][ T5107] loop3: detected capacity change from 0 to 32768
[   72.570558][ T4431] hfsplus: b-tree write err: -5, ino 4
[   73.009457][ T4299] Bluetooth: hci1: hardware error 0x07
[   73.060002][ T5114] loop4: detected capacity change from 0 to 32768
[   73.069979][  T177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.073498][ T5114] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[   73.142575][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'.
[   73.153606][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'.
[   73.155828][ T5117] netlink: 'syz.0.153': attribute type 18 has an invalid length.
[   73.160268][ T4290] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   73.164277][   T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.173020][   T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.179117][   T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.181337][ T5107] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[   73.181337][ T5107] 
[   73.199277][ T5107] ERROR: (device loop3): remounting filesystem as read-only
[   73.201666][ T5107] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[   73.201666][ T5107] 
[   73.208484][ T5107] xtLookup: xtSearch returned -5
[   73.209806][   T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.211674][ T5107] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt
[   73.211674][ T5107] 
[   73.214779][   T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   73.216876][   T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.395334][  T177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.410487][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'.
[   73.599258][  T177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.699675][  T177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.937949][   T22] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   73.993664][   T22] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   74.058976][ T5122] chnl_net:caif_netlink_parms(): no params data found
[   74.241965][ T5141] loop4: detected capacity change from 0 to 32768
[   74.293751][ T5141] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[   74.309374][ T5135] loop2: detected capacity change from 0 to 32768
[   74.316484][ T5135] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   74.318593][ T5135] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   74.322681][ T5141] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   74.370085][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.375206][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.379441][ T5122] device bridge_slave_0 entered promiscuous mode
[   74.381102][ T5135] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[   74.404783][ T4932] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   74.406609][ T4932] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   74.431769][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.434967][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.440165][ T5122] device bridge_slave_1 entered promiscuous mode
[   74.476897][ T4301] ocfs2: Unmounting device (7,4) on (node local)
[   74.487763][ T4932] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 81ms
[   74.491414][ T4932] gfs2: fsid=syz:syz.0: jid=0: Done
[   74.494837][ T5135] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   74.506118][ T5135] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[   74.544991][ T5166] FAULT_INJECTION: forcing a failure.
[   74.544991][ T5166] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.577557][ T5166] CPU: 1 PID: 5166 Comm: syz.4.161 Not tainted 6.1.140-syzkaller #0
[   74.579542][ T5166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   74.582045][ T5166] Call trace:
[   74.582852][ T5166]  dump_backtrace+0x1c8/0x1f4
[   74.584003][ T5166]  show_stack+0x2c/0x3c
[   74.585009][ T5166]  __dump_stack+0x30/0x40
[   74.586129][ T5166]  dump_stack_lvl+0xf8/0x160
[   74.587258][ T5166]  dump_stack+0x1c/0x5c
[   74.588325][ T5166]  should_fail_ex+0x3c4/0x520
[   74.589461][ T5166]  should_fail+0x14/0x24
[   74.590537][ T5166]  should_fail_usercopy+0x20/0x30
[   74.591760][ T5166]  simple_read_from_buffer+0xcc/0x240
[   74.593075][ T5166]  proc_fail_nth_read+0x194/0x230
[   74.594290][ T5166]  vfs_read+0x288/0x7c4
[   74.595236][ T5166]  ksys_read+0x120/0x210
[   74.596253][ T5166]  __arm64_sys_read+0x7c/0x90
[   74.597416][ T5166]  invoke_syscall+0x98/0x2bc
[   74.598544][ T5166]  el0_svc_common+0x138/0x258
[   74.599658][ T5166]  do_el0_svc+0x58/0x13c
[   74.600742][ T5166]  el0_svc+0x58/0x138
[   74.601702][ T5166]  el0t_64_sync_handler+0x84/0xf0
[   74.602983][ T5166]  el0t_64_sync+0x18c/0x190
[   74.681454][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.689788][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.776555][ T5122] team0: Port device team_slave_0 added
[   74.779532][ T5122] team0: Port device team_slave_1 added
[   74.983317][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.985050][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.021676][ T5180] loop2: detected capacity change from 0 to 4096
[   75.023760][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.039876][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.041453][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.061969][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.293689][ T4299] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   75.296962][   T47] Bluetooth: hci0: command 0x0409 tx timeout
[   75.366654][ T5189] CIFS: Unable to determine destination address
[   75.380141][ T5189] FAULT_INJECTION: forcing a failure.
[   75.380141][ T5189] name failslab, interval 1, probability 0, space 0, times 0
[   75.383333][ T5189] CPU: 1 PID: 5189 Comm: syz.2.165 Not tainted 6.1.140-syzkaller #0
[   75.385361][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   75.387747][ T5189] Call trace:
[   75.388606][ T5189]  dump_backtrace+0x1c8/0x1f4
[   75.389788][ T5189]  show_stack+0x2c/0x3c
[   75.390814][ T5189]  __dump_stack+0x30/0x40
[   75.391934][ T5189]  dump_stack_lvl+0xf8/0x160
[   75.393069][ T5189]  dump_stack+0x1c/0x5c
[   75.394153][ T5189]  should_fail_ex+0x3c4/0x520
[   75.395336][ T5189]  __should_failslab+0xc0/0x120
[   75.396557][ T5189]  should_failslab+0x10/0x28
[   75.397721][ T5189]  kmem_cache_alloc+0x88/0x318
[   75.398885][ T5189]  getname_flags+0xb8/0x45c
[   75.400029][ T5189]  user_path_at_empty+0x40/0x84
[   75.401199][ T5189]  do_fchmodat+0xa4/0x1d0
[   75.402264][ T5189]  __arm64_sys_fchmodat+0x7c/0x94
[   75.403520][ T5189]  invoke_syscall+0x98/0x2bc
[   75.404694][ T5189]  el0_svc_common+0x138/0x258
[   75.405888][ T5189]  do_el0_svc+0x58/0x13c
[   75.406946][ T5189]  el0_svc+0x58/0x138
[   75.407921][ T5189]  el0t_64_sync_handler+0x84/0xf0
[   75.409175][ T5189]  el0t_64_sync+0x18c/0x190
[   76.040392][ T5191] CIFS: Unable to determine destination address
[   76.487874][ T5183] loop3: detected capacity change from 0 to 32768
[   76.590979][ T5183] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   76.593736][ T5183] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   76.595895][ T5183] BTRFS info (device loop3): setting nodatacow, compression disabled
[   76.597827][ T5183] BTRFS info (device loop3): max_inline at 0
[   76.599257][ T5183] BTRFS info (device loop3): enabling disk space caching
[   76.600955][ T5183] BTRFS info (device loop3): turning off barriers
[   76.618421][ T5122] device hsr_slave_0 entered promiscuous mode
[   76.634013][ T5183] BTRFS info (device loop3): turning on flush-on-commit
[   76.642063][ T5183] BTRFS info (device loop3): doing ref verification
[   76.644197][ T5122] device hsr_slave_1 entered promiscuous mode
[   76.647155][ T5183] BTRFS info (device loop3): force clearing of disk cache
[   76.649794][ T5183] BTRFS info (device loop3): enabling ssd optimizations
[   76.651461][ T5183] BTRFS info (device loop3): max_inline at 4096
[   76.652928][ T5183] BTRFS info (device loop3): disk space caching is enabled
[   76.693656][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.695500][ T5122] Cannot create hsr debugfs directory
[   76.965963][ T5211] CIFS: Unable to determine destination address
[   77.252999][ T5183] BTRFS info (device loop3): rebuilding free space tree
[   77.300428][ T5183] BTRFS info (device loop3): disabling free space tree
[   77.302339][ T5183] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   77.311621][ T5183] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   77.373544][   T47] Bluetooth: hci0: command 0x041b tx timeout
[   77.511519][ T4306] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.821748][ T5122] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   77.878184][ T5122] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   77.920213][ T5122] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   78.011985][ T5122] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   78.418445][ T5231] loop3: detected capacity change from 0 to 32768
[   78.485527][ T5231] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   78.512824][ T5231] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   78.597473][ T5245] FAULT_INJECTION: forcing a failure.
[   78.597473][ T5245] name failslab, interval 1, probability 0, space 0, times 0
[   78.600109][ T4306] ocfs2: Unmounting device (7,3) on (node local)
[   78.600660][ T5245] CPU: 1 PID: 5245 Comm: syz.2.175 Not tainted 6.1.140-syzkaller #0
[   78.604109][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   78.606626][ T5245] Call trace:
[   78.607473][ T5245]  dump_backtrace+0x1c8/0x1f4
[   78.608673][ T5245]  show_stack+0x2c/0x3c
[   78.609664][ T5245]  __dump_stack+0x30/0x40
[   78.610717][ T5245]  dump_stack_lvl+0xf8/0x160
[   78.611787][ T5245]  dump_stack+0x1c/0x5c
[   78.612878][ T5245]  should_fail_ex+0x3c4/0x520
[   78.614006][ T5245]  __should_failslab+0xc0/0x120
[   78.615186][ T5245]  should_failslab+0x10/0x28
[   78.616233][ T5245]  kmem_cache_alloc+0x88/0x318
[   78.617420][ T5245]  security_file_alloc+0x38/0x11c
[   78.618687][ T5245]  __alloc_file+0xa8/0x22c
[   78.619791][ T5245]  alloc_empty_file+0xa0/0x184
[   78.620964][ T5245]  alloc_file+0x64/0x560
[   78.622081][ T5245]  alloc_file_pseudo+0x160/0x1dc
[   78.623337][ T5245]  __shmem_file_setup+0x19c/0x264
[   78.624592][ T5245]  shmem_file_setup+0x40/0x54
[   78.625772][ T5245]  __arm64_sys_memfd_create+0x2d8/0x45c
[   78.627160][ T5245]  invoke_syscall+0x98/0x2bc
[   78.628330][ T5245]  el0_svc_common+0x138/0x258
[   78.629507][ T5245]  do_el0_svc+0x58/0x13c
[   78.630537][ T5245]  el0_svc+0x58/0x138
[   78.631555][ T5245]  el0t_64_sync_handler+0x84/0xf0
[   78.632806][ T5245]  el0t_64_sync+0x18c/0x190
[   78.670211][  T177] device hsr_slave_0 left promiscuous mode
[   78.715149][ T5249] loop2: detected capacity change from 0 to 4096
[   78.731663][  T177] device hsr_slave_1 left promiscuous mode
[   78.764224][ T4290] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   78.783617][  T177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.785589][  T177] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.789812][  T177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.791971][  T177] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.794778][  T177] device bridge_slave_1 left promiscuous mode
[   78.797490][  T177] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.851260][ T5256] FAULT_INJECTION: forcing a failure.
[   78.851260][ T5256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   78.871178][ T5256] CPU: 0 PID: 5256 Comm: syz.3.178 Not tainted 6.1.140-syzkaller #0
[   78.873077][ T5256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   78.875688][ T5256] Call trace:
[   78.876515][ T5256]  dump_backtrace+0x1c8/0x1f4
[   78.877793][ T5256]  show_stack+0x2c/0x3c
[   78.878818][ T5256]  __dump_stack+0x30/0x40
[   78.879868][ T5256]  dump_stack_lvl+0xf8/0x160
[   78.881060][ T5256]  dump_stack+0x1c/0x5c
[   78.882108][ T5256]  should_fail_ex+0x3c4/0x520
[   78.883257][ T5256]  should_fail+0x14/0x24
[   78.884348][ T5256]  should_fail_usercopy+0x20/0x30
[   78.885675][ T5256]  simple_read_from_buffer+0xcc/0x240
[   78.887063][ T5256]  proc_fail_nth_read+0x194/0x230
[   78.888380][ T5256]  vfs_read+0x288/0x7c4
[   78.889419][ T5256]  ksys_read+0x120/0x210
[   78.890486][ T5256]  __arm64_sys_read+0x7c/0x90
[   78.891651][ T5256]  invoke_syscall+0x98/0x2bc
[   78.892869][ T5256]  el0_svc_common+0x138/0x258
[   78.894061][ T5256]  do_el0_svc+0x58/0x13c
[   78.895187][ T5256]  el0_svc+0x58/0x138
[   78.896147][ T5256]  el0t_64_sync_handler+0x84/0xf0
[   78.897418][ T5256]  el0t_64_sync+0x18c/0x190
[   78.936352][  T177] device bridge_slave_0 left promiscuous mode
[   78.938150][  T177] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.958554][ T5258] loop2: detected capacity change from 0 to 4096
[   78.960772][ T4290] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   79.164581][  T177] device veth1_macvtap left promiscuous mode
[   79.166402][  T177] device veth0_macvtap left promiscuous mode
[   79.167973][  T177] device veth1_vlan left promiscuous mode
[   79.169838][  T177] device veth0_vlan left promiscuous mode
[   79.453568][ T4299] Bluetooth: hci0: command 0x040f tx timeout
[   79.812049][ T5272] loop4: detected capacity change from 0 to 32768
[   79.849267][ T5272] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[   79.876392][ T5272] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   79.903925][ T5274] loop3: detected capacity change from 0 to 32768
[   79.931441][ T5274] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.182 (5274)
[   79.932998][ T4301] ocfs2: Unmounting device (7,4) on (node local)
[   79.946008][ T5274] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   79.948692][ T5274] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   79.950924][ T5274] BTRFS info (device loop3): turning on sync discard
[   79.966869][ T5274] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   79.969198][ T5274] BTRFS info (device loop3): use zstd compression, level 3
[   79.970965][ T5274] BTRFS info (device loop3): using free space tree
[   80.133767][ T5274] BTRFS info (device loop3): enabling ssd optimizations
[   80.664059][ T5304] FAULT_INJECTION: forcing a failure.
[   80.664059][ T5304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   80.667165][ T5304] CPU: 1 PID: 5304 Comm: syz.0.187 Not tainted 6.1.140-syzkaller #0
[   80.669094][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   80.671589][ T5304] Call trace:
[   80.672367][ T5304]  dump_backtrace+0x1c8/0x1f4
[   80.673489][ T5304]  show_stack+0x2c/0x3c
[   80.674504][ T5304]  __dump_stack+0x30/0x40
[   80.675580][ T5304]  dump_stack_lvl+0xf8/0x160
[   80.676634][ T5304]  dump_stack+0x1c/0x5c
[   80.677780][ T5304]  should_fail_ex+0x3c4/0x520
[   80.678984][ T5304]  should_fail+0x14/0x24
[   80.680115][ T5304]  should_fail_usercopy+0x20/0x30
[   80.681458][ T5304]  copy_msghdr_from_user+0xb4/0x4ac
[   80.682726][ T5304]  __sys_sendmsg+0x200/0x320
[   80.683879][ T5304]  __arm64_sys_sendmsg+0x80/0x94
[   80.685042][ T5304]  invoke_syscall+0x98/0x2bc
[   80.686181][ T5304]  el0_svc_common+0x138/0x258
[   80.687371][ T5304]  do_el0_svc+0x58/0x13c
[   80.688445][ T5304]  el0_svc+0x58/0x138
[   80.689483][ T5304]  el0t_64_sync_handler+0x84/0xf0
[   80.690707][ T5304]  el0t_64_sync+0x18c/0x190
[   81.533502][   T47] Bluetooth: hci0: command 0x0419 tx timeout
[   81.896749][  T177] team0 (unregistering): Port device team_slave_1 removed
[   81.901709][ T5316] 9pnet_fd: Insufficient options for proto=fd
[   82.076482][  T177] team0 (unregistering): Port device team_slave_0 removed
[   82.265853][  T177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.484960][  T177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.867890][  T177] bond0 (unregistering): Released all slaves
[   85.150550][ T4306] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   85.219283][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.222338][ T5323] FAULT_INJECTION: forcing a failure.
[   85.222338][ T5323] name failslab, interval 1, probability 0, space 0, times 0
[   85.232648][ T5323] CPU: 1 PID: 5323 Comm: syz.4.191 Not tainted 6.1.140-syzkaller #0
[   85.234658][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   85.237218][ T5323] Call trace:
[   85.238019][ T5323]  dump_backtrace+0x1c8/0x1f4
[   85.239187][ T5323]  show_stack+0x2c/0x3c
[   85.240169][ T5323]  __dump_stack+0x30/0x40
[   85.241311][ T5323]  dump_stack_lvl+0xf8/0x160
[   85.242429][ T5323]  dump_stack+0x1c/0x5c
[   85.243541][ T5323]  should_fail_ex+0x3c4/0x520
[   85.244726][ T5323]  __should_failslab+0xc0/0x120
[   85.245924][ T5323]  should_failslab+0x10/0x28
[   85.246999][ T5323]  kmem_cache_alloc_node+0x8c/0x34c
[   85.248299][ T5323]  __alloc_skb+0x128/0x718
[   85.249467][ T5323]  qdisc_notify+0x88/0x33c
[   85.250578][ T5323]  qdisc_graft+0xf18/0x121c
[   85.251679][ T5323]  tc_modify_qdisc+0xc34/0x1718
[   85.252860][ T5323]  rtnetlink_rcv_msg+0x734/0xce4
[   85.254083][ T5323]  netlink_rcv_skb+0x208/0x3c4
[   85.255269][ T5323]  rtnetlink_rcv+0x28/0x38
[   85.256402][ T5323]  netlink_unicast+0x600/0x818
[   85.257651][ T5323]  netlink_sendmsg+0x6e8/0x9b0
[   85.258825][ T5323]  ____sys_sendmsg+0x5b8/0x918
[   85.259993][ T5323]  __sys_sendmsg+0x25c/0x320
[   85.261163][ T5323]  __arm64_sys_sendmsg+0x80/0x94
[   85.262365][ T5323]  invoke_syscall+0x98/0x2bc
[   85.263489][ T5323]  el0_svc_common+0x138/0x258
[   85.264656][ T5323]  do_el0_svc+0x58/0x13c
[   85.265758][ T5323]  el0_svc+0x58/0x138
[   85.266813][ T5323]  el0t_64_sync_handler+0x84/0xf0
[   85.268150][ T5323]  el0t_64_sync+0x18c/0x190
[   85.278354][ T4307] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[   85.280234][ T4307] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   85.401364][ T5330] xt_TCPMSS: Only works on TCP SYN packets
[   85.420035][ T5122] 8021q: adding VLAN 0 to HW filter on device team0
[   85.423841][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   85.426076][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   85.506682][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   85.509131][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   85.511473][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.513465][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.532194][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.542602][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.552541][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.554399][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.562558][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   85.603541][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   85.627028][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   85.629643][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   85.734520][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   85.737058][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   85.764186][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   85.775522][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.798982][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.806387][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.834902][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.859170][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   85.874634][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   86.330956][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.339697][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.341588][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.612843][ T5344] loop4: detected capacity change from 0 to 32768
[   86.631902][ T5371] FAULT_INJECTION: forcing a failure.
[   86.631902][ T5371] name failslab, interval 1, probability 0, space 0, times 0
[   86.640367][ T5371] CPU: 0 PID: 5371 Comm: syz.3.198 Not tainted 6.1.140-syzkaller #0
[   86.642322][ T5371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   86.644838][ T5371] Call trace:
[   86.645648][ T5371]  dump_backtrace+0x1c8/0x1f4
[   86.646833][ T5371]  show_stack+0x2c/0x3c
[   86.647838][ T5371]  __dump_stack+0x30/0x40
[   86.648889][ T5371]  dump_stack_lvl+0xf8/0x160
[   86.650054][ T5371]  dump_stack+0x1c/0x5c
[   86.651091][ T5371]  should_fail_ex+0x3c4/0x520
[   86.652195][ T5371]  __should_failslab+0xc0/0x120
[   86.653418][ T5371]  should_failslab+0x10/0x28
[   86.654660][ T5371]  kmem_cache_alloc+0x88/0x318
[   86.655846][ T5371]  security_inode_alloc+0x38/0x11c
[   86.657110][ T5371]  inode_init_always+0x690/0xab0
[   86.658379][ T5371]  new_inode_pseudo+0x7c/0x1cc
[   86.659605][ T5371]  new_inode+0x38/0x174
[   86.660668][ T5371]  proc_pid_make_inode+0x30/0x1a0
[   86.661922][ T5371]  proc_pident_instantiate+0x6c/0x274
[   86.663322][ T5371]  proc_pident_lookup+0x180/0x260
[   86.664584][ T5371]  proc_tgid_base_lookup+0x34/0x44
[   86.665804][ T5371]  __lookup_slow+0x24c/0x370
[   86.666947][ T5371]  lookup_slow+0x5c/0x80
[   86.668026][ T5371]  link_path_walk+0x76c/0xc6c
[   86.669197][ T5371]  path_openat+0x1c0/0x2680
[   86.670257][ T5371]  do_filp_open+0x174/0x344
[   86.671379][ T5371]  do_sys_openat2+0x128/0x3d8
[   86.672485][ T5371]  __arm64_sys_openat+0x120/0x154
[   86.673663][ T5371]  invoke_syscall+0x98/0x2bc
[   86.674828][ T5371]  el0_svc_common+0x138/0x258
[   86.675965][ T5371]  do_el0_svc+0x58/0x13c
[   86.676992][ T5371]  el0_svc+0x58/0x138
[   86.677927][ T5371]  el0t_64_sync_handler+0x84/0xf0
[   86.679126][ T5371]  el0t_64_sync+0x18c/0x190
[   86.802173][ T5344] XFS (loop4): Mounting V5 Filesystem
[   86.886612][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.889161][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.927998][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.930540][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.933152][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.942103][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.955135][ T5344] XFS (loop4): Ending clean mount
[   86.961030][ T5122] device veth0_vlan entered promiscuous mode
[   86.990222][ T5122] device veth1_vlan entered promiscuous mode
[   87.072677][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.077733][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   87.080565][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   87.084469][ T4301] XFS (loop4): Unmounting Filesystem
[   87.091921][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   87.108965][ T5122] device veth0_macvtap entered promiscuous mode
[   87.127470][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   87.131402][ T5122] device veth1_macvtap entered promiscuous mode
[   87.157818][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.160505][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.163138][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.169319][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.171760][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.176647][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.179084][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.181693][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.188595][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.190472][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   87.192998][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   87.200184][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.202789][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.208549][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.211054][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.215786][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.218363][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.220759][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.223233][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.230619][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.233592][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   87.238941][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.252187][ T5122] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.276622][ T5122] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.281176][ T5122] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.290099][ T5122] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.541291][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.553447][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.557938][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.627296][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.629398][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.633844][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   88.095123][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'.
[   88.108853][ T5393] device wlan0 entered promiscuous mode
[   88.126307][ T5400] loop4: detected capacity change from 0 to 32768
[   88.245357][ T5400] XFS (loop4): Mounting V5 Filesystem
[   88.338573][ T5400] XFS (loop4): Ending clean mount
[   88.511764][ T4301] XFS (loop4): Unmounting Filesystem
[   89.062462][ T5426] loop5: detected capacity change from 0 to 32768
[   89.122538][ T5426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.202 (5426)
[   89.137756][ T5426] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   89.140225][ T5426] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[   89.142297][ T5426] BTRFS info (device loop5): turning on sync discard
[   89.198458][ T5426] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   89.200666][ T5426] BTRFS info (device loop5): use zstd compression, level 3
[   89.202298][ T5426] BTRFS info (device loop5): using free space tree
[   89.210767][ T5447] loop2: detected capacity change from 0 to 32768
[   89.381572][ T5447] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   89.432219][ T5480] loop4: detected capacity change from 0 to 16
[   89.530141][ T5447] OCFS2: ERROR (device loop2): int ocfs2_validate_xattr_block(struct super_block *, struct buffer_head *): Extended attribute block #2304 has bad signature 
[   89.553842][ T5480] erofs: (device loop4): erofs_read_superblock: blkszbits 0 isn't supported
[   89.573811][ T5447] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   89.576139][ T5447] OCFS2: File system is now read-only.
[   89.577538][ T5447] (syz.2.203,5447,0):ocfs2_xattr_block_find:2835 ERROR: status = -30
[   89.599273][ T5503] FAULT_INJECTION: forcing a failure.
[   89.599273][ T5503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   89.602584][ T5503] CPU: 0 PID: 5503 Comm: syz.3.204 Not tainted 6.1.140-syzkaller #0
[   89.604488][ T5503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   89.607029][ T5503] Call trace:
[   89.607901][ T5503]  dump_backtrace+0x1c8/0x1f4
[   89.609140][ T5503]  show_stack+0x2c/0x3c
[   89.610275][ T5503]  __dump_stack+0x30/0x40
[   89.611364][ T5503]  dump_stack_lvl+0xf8/0x160
[   89.612508][ T5503]  dump_stack+0x1c/0x5c
[   89.613545][ T5503]  should_fail_ex+0x3c4/0x520
[   89.614810][ T5503]  should_fail+0x14/0x24
[   89.615890][ T5503]  should_fail_usercopy+0x20/0x30
[   89.617117][ T5503]  copy_msghdr_from_user+0xb4/0x4ac
[   89.618453][ T5503]  do_recvmmsg+0x330/0x96c
[   89.619545][ T5503]  __arm64_sys_recvmmsg+0x17c/0x238
[   89.620861][ T5503]  invoke_syscall+0x98/0x2bc
[   89.621996][ T5503]  el0_svc_common+0x138/0x258
[   89.623184][ T5503]  do_el0_svc+0x58/0x13c
[   89.624360][ T5503]  el0_svc+0x58/0x138
[   89.625336][ T5503]  el0t_64_sync_handler+0x84/0xf0
[   89.626641][ T5503]  el0t_64_sync+0x18c/0x190
[   89.692812][ T5426] BTRFS info (device loop5): enabling ssd optimizations
[   89.877089][ T4307] ocfs2: Unmounting device (7,2) on (node local)
[   90.188859][ T5122] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.671967][ T5534] fuse: Bad value for 'fd'
[   90.907023][ T5528] loop5: detected capacity change from 0 to 32768
[   90.991794][ T5528] XFS (loop5): Mounting V5 Filesystem
[   91.167722][ T5528] XFS (loop5): Ending clean mount
[   91.271585][ T5556] IPv6: sit1: Disabled Multicast RS
[   91.336483][ T5557] ieee802154 phy0 wpan0: encryption failed: -22
[   91.340119][ T5122] XFS (loop5): Unmounting Filesystem
[   91.425175][ T5559] FAULT_INJECTION: forcing a failure.
[   91.425175][ T5559] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   91.428348][ T5559] CPU: 1 PID: 5559 Comm: syz.2.218 Not tainted 6.1.140-syzkaller #0
[   91.430288][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   91.432660][ T5559] Call trace:
[   91.433448][ T5559]  dump_backtrace+0x1c8/0x1f4
[   91.434643][ T5559]  show_stack+0x2c/0x3c
[   91.435682][ T5559]  __dump_stack+0x30/0x40
[   91.436713][ T5559]  dump_stack_lvl+0xf8/0x160
[   91.437845][ T5559]  dump_stack+0x1c/0x5c
[   91.438844][ T5559]  should_fail_ex+0x3c4/0x520
[   91.440022][ T5559]  should_fail+0x14/0x24
[   91.441059][ T5559]  should_fail_usercopy+0x20/0x30
[   91.442182][ T5559]  nr_rt_ioctl+0x694/0xb80
[   91.443263][ T5559]  nr_ioctl+0x1c4/0x4e4
[   91.444346][ T5559]  sock_do_ioctl+0xf8/0x240
[   91.445426][ T5559]  sock_ioctl+0x5c4/0x840
[   91.446404][ T5559]  __arm64_sys_ioctl+0x14c/0x1c8
[   91.447627][ T5559]  invoke_syscall+0x98/0x2bc
[   91.448753][ T5559]  el0_svc_common+0x138/0x258
[   91.449865][ T5559]  do_el0_svc+0x58/0x13c
[   91.450937][ T5559]  el0_svc+0x58/0x138
[   91.451919][ T5559]  el0t_64_sync_handler+0x84/0xf0
[   91.453145][ T5559]  el0t_64_sync+0x18c/0x190
[   91.918411][ T5563] loop2: detected capacity change from 0 to 32768
[   91.970629][ T5563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.220 (5563)
[   92.047166][ T5563] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.077371][ T5563] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   92.079569][ T5563] BTRFS info (device loop2): turning on sync discard
[   92.081261][ T5563] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   92.084306][ T5563] BTRFS info (device loop2): use zstd compression, level 3
[   92.086127][ T5563] BTRFS info (device loop2): using free space tree
[   92.192093][ T5574] loop5: detected capacity change from 0 to 1024
[   92.224650][ T5574] hfsplus: unable to parse mount options
[   92.282713][ T5563] BTRFS info (device loop2): enabling ssd optimizations
[   92.469182][ T4307] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   93.383632][ T5616] loop5: detected capacity change from 0 to 64
[   93.649022][ T5623] netlink: 'syz.0.232': attribute type 10 has an invalid length.
[   93.691975][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.716258][ T5623] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   93.798882][ T5600] loop3: detected capacity change from 0 to 32768
[   93.868087][ T5600] XFS (loop3): Mounting V5 Filesystem
[   93.971833][ T5600] XFS (loop3): Ending clean mount
[   94.112168][ T4306] XFS (loop3): Unmounting Filesystem
[   94.491226][ T5644] loop4: detected capacity change from 0 to 32768
[   94.498084][ T5644] (syz.4.233,5644,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options
[   94.500471][ T5644] (syz.4.233,5644,1):ocfs2_fill_super:1176 ERROR: status = -22
[   94.623556][ T5321] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   94.881284][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.893069][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.015637][ T5653] loop3: detected capacity change from 0 to 32768
[   95.042213][ T5653] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   95.051152][ T5653] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   95.099023][ T4306] ocfs2: Unmounting device (7,3) on (node local)
[   95.358642][ T5661] loop3: detected capacity change from 0 to 32768
[   95.429082][ T5661] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   95.484571][ T5661] (syz.3.239,5661,0):ocfs2_rename:1282 ERROR: status = -2
[   95.486501][ T5661] (syz.3.239,5661,0):ocfs2_rename:1687 ERROR: status = -2
[   95.512447][   T27] kauditd_printk_skb: 455 callbacks suppressed
[   95.512459][   T27] audit: type=1326 audit(95.490:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5660 comm="syz.3.239" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa435a768 code=0x0
[   95.775437][ T5671] loop2: detected capacity change from 0 to 32768
[   95.793563][ T5671] XFS (loop2): Mounting V5 Filesystem
[   95.851556][ T5671] XFS (loop2): Ending clean mount
[   96.020908][ T4306] ocfs2: Unmounting device (7,3) on (node local)
[   96.176165][ T4307] XFS (loop2): Unmounting Filesystem
[   96.759094][ T5696] loop2: detected capacity change from 0 to 1024
[   96.812032][ T5696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   98.170099][   T27] audit: type=1326 audit(98.150:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5708 comm="syz.3.248" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa435a768 code=0x0
[   98.330939][ T5696] x_tables: duplicate entry at hook 1
[   98.392991][ T4307] EXT4-fs (loop2): unmounting filesystem.
[   98.479887][ T5701] loop4: detected capacity change from 0 to 32768
[   98.682727][ T5701] XFS (loop4): Mounting V5 Filesystem
[   98.789480][ T5713] loop5: detected capacity change from 0 to 32768
[   98.814556][ T5701] XFS (loop4): Ending clean mount
[   98.818573][ T5713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.249 (5713)
[   98.835841][ T5713] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   98.838420][ T5713] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[   98.843113][ T5713] BTRFS info (device loop5): turning on sync discard
[   98.864310][ T5713] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   98.869181][ T5713] BTRFS info (device loop5): use zstd compression, level 3
[   98.884398][ T5713] BTRFS info (device loop5): using free space tree
[   98.912833][ T4301] XFS (loop4): Unmounting Filesystem
[   99.120614][ T5759] input: syz0 as /devices/virtual/input/input2
[   99.138560][ T5713] BTRFS info (device loop5): enabling ssd optimizations
[   99.410843][ T5769] FAULT_INJECTION: forcing a failure.
[   99.410843][ T5769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.422387][ T5769] CPU: 0 PID: 5769 Comm: syz.0.256 Not tainted 6.1.140-syzkaller #0
[   99.424324][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   99.427000][ T5769] Call trace:
[   99.427829][ T5769]  dump_backtrace+0x1c8/0x1f4
[   99.428983][ T5769]  show_stack+0x2c/0x3c
[   99.430003][ T5769]  __dump_stack+0x30/0x40
[   99.431120][ T5769]  dump_stack_lvl+0xf8/0x160
[   99.432260][ T5769]  dump_stack+0x1c/0x5c
[   99.433270][ T5769]  should_fail_ex+0x3c4/0x520
[   99.434473][ T5769]  should_fail+0x14/0x24
[   99.435491][ T5769]  should_fail_usercopy+0x20/0x30
[   99.436798][ T5769]  _copy_from_iter+0x18c/0xf40
[   99.437979][ T5769]  skb_copy_datagram_from_iter+0xf4/0x594
[   99.439429][ T5769]  tun_get_user+0xf98/0x3240
[   99.440512][ T5769]  tun_chr_write_iter+0xfc/0x204
[   99.441697][ T5769]  vfs_write+0x5ac/0x7c4
[   99.442780][ T5769]  ksys_write+0x120/0x210
[   99.443957][ T5769]  __arm64_sys_write+0x7c/0x90
[   99.445139][ T5769]  invoke_syscall+0x98/0x2bc
[   99.446258][ T5769]  el0_svc_common+0x138/0x258
[   99.447418][ T5769]  do_el0_svc+0x58/0x13c
[   99.448502][ T5769]  el0_svc+0x58/0x138
[   99.449548][ T5769]  el0t_64_sync_handler+0x84/0xf0
[   99.450833][ T5769]  el0t_64_sync+0x18c/0x190
[   99.472937][ T5122] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   99.511370][ T5777] FAULT_INJECTION: forcing a failure.
[   99.511370][ T5777] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.514751][ T5777] CPU: 1 PID: 5777 Comm: syz.4.253 Not tainted 6.1.140-syzkaller #0
[   99.516754][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   99.519189][ T5777] Call trace:
[   99.519990][ T5777]  dump_backtrace+0x1c8/0x1f4
[   99.521170][ T5777]  show_stack+0x2c/0x3c
[   99.522192][ T5777]  __dump_stack+0x30/0x40
[   99.523286][ T5777]  dump_stack_lvl+0xf8/0x160
[   99.524444][ T5777]  dump_stack+0x1c/0x5c
[   99.525464][ T5777]  should_fail_ex+0x3c4/0x520
[   99.526633][ T5777]  should_fail+0x14/0x24
[   99.527790][ T5777]  should_fail_usercopy+0x20/0x30
[   99.529022][ T5777]  do_sys_poll+0x208/0xf78
[   99.529975][ T5777]  __arm64_sys_ppoll+0x218/0x2a8
[   99.530977][ T5777]  invoke_syscall+0x98/0x2bc
[   99.532107][ T5777]  el0_svc_common+0x138/0x258
[   99.533339][ T5777]  do_el0_svc+0x58/0x13c
[   99.534398][ T5777]  el0_svc+0x58/0x138
[   99.535378][ T5777]  el0t_64_sync_handler+0x84/0xf0
[   99.536656][ T5777]  el0t_64_sync+0x18c/0x190
[  100.292951][ T5775] loop2: detected capacity change from 0 to 32768
[  100.652601][ T5775] XFS (loop2): Mounting V5 Filesystem
[  100.762462][ T5775] XFS (loop2): Ending clean mount
[  100.771252][ T5775] XFS (loop2): Quotacheck needed: Please wait.
[  100.805595][ T5775] XFS (loop2): Quotacheck: Done.
[  100.906441][ T5775] device syzkaller1 entered promiscuous mode
[  100.919848][ T5832] FAULT_INJECTION: forcing a failure.
[  100.919848][ T5832] name failslab, interval 1, probability 0, space 0, times 0
[  100.922947][ T5832] CPU: 0 PID: 5832 Comm: syz.3.265 Not tainted 6.1.140-syzkaller #0
[  100.924932][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  100.927490][ T5832] Call trace:
[  100.928338][ T5832]  dump_backtrace+0x1c8/0x1f4
[  100.929440][ T5832]  show_stack+0x2c/0x3c
[  100.930543][ T5832]  __dump_stack+0x30/0x40
[  100.931589][ T5832]  dump_stack_lvl+0xf8/0x160
[  100.932742][ T5832]  dump_stack+0x1c/0x5c
[  100.933831][ T5832]  should_fail_ex+0x3c4/0x520
[  100.935034][ T5832]  __should_failslab+0xc0/0x120
[  100.936237][ T5832]  should_failslab+0x10/0x28
[  100.937465][ T5832]  kmem_cache_alloc_node+0x8c/0x34c
[  100.938917][ T5832]  __alloc_skb+0x128/0x718
[  100.940069][ T5832]  netlink_sendmsg+0x520/0x9b0
[  100.941333][ T5832]  ____sys_sendmsg+0x5b8/0x918
[  100.942613][ T5832]  __sys_sendmsg+0x25c/0x320
[  100.943818][ T5832]  __arm64_sys_sendmsg+0x80/0x94
[  100.945094][ T5832]  invoke_syscall+0x98/0x2bc
[  100.946290][ T5832]  el0_svc_common+0x138/0x258
[  100.947477][ T5832]  do_el0_svc+0x58/0x13c
[  100.948549][ T5832]  el0_svc+0x58/0x138
[  100.949534][ T5832]  el0t_64_sync_handler+0x84/0xf0
[  100.950870][ T5832]  el0t_64_sync+0x18c/0x190
[  101.249157][ T4307] XFS (loop2): Unmounting Filesystem
[  101.316684][ T5848] loop3: detected capacity change from 0 to 1024
[  101.361197][ T5806] loop4: detected capacity change from 0 to 32768
[  101.374889][ T5848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  101.487805][ T5806] XFS (loop4): Mounting V5 Filesystem
[  101.675768][ T5806] XFS (loop4): Ending clean mount
[  101.823075][ T4301] XFS (loop4): Unmounting Filesystem
[  101.878997][ T4306] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 168: padding at end of block bitmap is not set
[  101.890587][ T4306] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  101.904486][ T4306] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  101.907360][ T4306] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  101.909684][ T4306] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  101.911938][ T4306] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  101.919892][ T4306] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  101.922093][ T4306] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  101.944382][ T4306] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  101.946645][ T4306] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  101.948804][ T4306] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  101.951057][ T4306] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  102.283347][ T5892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  102.285296][ T5892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  102.323837][ T5892] vhci_hcd vhci_hcd.0: Device attached
[  102.343329][ T5897] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5)
[  102.344999][ T5897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  102.353604][ T5897] vhci_hcd vhci_hcd.0: Device attached
[  102.388135][ T5855] loop5: detected capacity change from 0 to 32768
[  102.392503][ T5892] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7)
[  102.394146][ T5892] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  102.401996][ T5892] vhci_hcd vhci_hcd.0: Device attached
[  102.406361][ T5855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.269 (5855)
[  102.407805][ T5893] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0
[  102.419141][   T11] vhci_hcd: stop threads
[  102.421549][   T11] vhci_hcd: release socket
[  102.431073][   T11] vhci_hcd: disconnect device
[  102.435513][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'.
[  102.461729][ T5900] vhci_hcd: connection closed
[  102.462708][ T5898] vhci_hcd: connection closed
[  102.464524][    T9] vhci_hcd: stop threads
[  102.479427][    T9] vhci_hcd: release socket
[  102.481812][    T9] vhci_hcd: disconnect device
[  102.487992][    T9] vhci_hcd: stop threads
[  102.490620][    T9] vhci_hcd: release socket
[  102.491766][ T5855] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  102.497728][    T9] vhci_hcd: disconnect device
[  102.506639][   T14] vhci_hcd: vhci_device speed not set
[  102.511878][ T5855] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  102.534508][ T5855] BTRFS info (device loop5): turning on sync discard
[  102.538453][ T5855] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  102.552610][ T5855] BTRFS info (device loop5): use zstd compression, level 3
[  102.564276][ T5855] BTRFS info (device loop5): using free space tree
[  102.709135][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  102.739505][ T5855] BTRFS info (device loop5): enabling ssd optimizations
[  103.033512][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.166154][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.248664][ T4299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.253874][ T4299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.256670][ T4299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.259084][ T4299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.261266][ T4299] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  103.263319][ T4299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.315738][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.332141][ T5122] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.449822][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.063918][ T5953] loop2: detected capacity change from 0 to 32768
[  104.115273][ T5953] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  104.222736][ T5953] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  104.290137][ T5960] loop4: detected capacity change from 0 to 32768
[  104.299268][ T5944] chnl_net:caif_netlink_parms(): no params data found
[  104.472281][ T6004] loop5: detected capacity change from 0 to 1024
[  104.479589][ T5960] XFS (loop4): Mounting V5 Filesystem
[  104.481540][ T6004] EXT4-fs: Ignoring removed nobh option
[  104.484980][ T6004] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  104.530150][ T4307] ocfs2: Unmounting device (7,2) on (node local)
[  104.541346][ T6004] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  104.567720][ T5960] XFS (loop4): Ending clean mount
[  104.689916][ T4301] XFS (loop4): Unmounting Filesystem
[  104.903693][ T6004] bridge_slave_0: default FDB implementation only supports local addresses
[  105.040480][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.044335][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.064161][ T5944] device bridge_slave_0 entered promiscuous mode
[  105.102064][ T5122] EXT4-fs (loop5): unmounting filesystem.
[  105.134990][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.136853][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.139403][ T5944] device bridge_slave_1 entered promiscuous mode
[  105.252478][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.259519][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.303501][ T4299] Bluetooth: hci3: command 0x0409 tx timeout
[  105.387529][ T5944] team0: Port device team_slave_0 added
[  105.395652][ T5944] team0: Port device team_slave_1 added
[  105.470620][ T6041] FAULT_INJECTION: forcing a failure.
[  105.470620][ T6041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.474348][ T6041] CPU: 1 PID: 6041 Comm: syz.4.286 Not tainted 6.1.140-syzkaller #0
[  105.476265][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  105.478800][ T6041] Call trace:
[  105.479625][ T6041]  dump_backtrace+0x1c8/0x1f4
[  105.480748][ T6041]  show_stack+0x2c/0x3c
[  105.481768][ T6041]  __dump_stack+0x30/0x40
[  105.482796][ T6041]  dump_stack_lvl+0xf8/0x160
[  105.483930][ T6041]  dump_stack+0x1c/0x5c
[  105.484969][ T6041]  should_fail_ex+0x3c4/0x520
[  105.486153][ T6041]  should_fail+0x14/0x24
[  105.487194][ T6041]  should_fail_usercopy+0x20/0x30
[  105.488488][ T6041]  ucma_get_event+0x3a8/0x754
[  105.489628][ T6041]  ucma_write+0x2b0/0x388
[  105.490736][ T6041]  vfs_write+0x29c/0x7c4
[  105.491769][ T6041]  ksys_write+0x120/0x210
[  105.492855][ T6041]  __arm64_sys_write+0x7c/0x90
[  105.494056][ T6041]  invoke_syscall+0x98/0x2bc
[  105.495168][ T6041]  el0_svc_common+0x138/0x258
[  105.496294][ T6041]  do_el0_svc+0x58/0x13c
[  105.497331][ T6041]  el0_svc+0x58/0x138
[  105.498321][ T6041]  el0t_64_sync_handler+0x84/0xf0
[  105.499612][ T6041]  el0t_64_sync+0x18c/0x190
[  105.549803][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.551700][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.561003][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.592854][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.603848][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.622198][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.891128][ T6059] loop2: detected capacity change from 0 to 256
[  106.029456][ T6037] loop5: detected capacity change from 0 to 32768
[  106.043475][ T6037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.289 (6037)
[  106.057774][ T6067] loop4: detected capacity change from 0 to 256
[  106.063486][ T6037] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.073935][ T6037] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  106.076175][ T6037] BTRFS info (device loop5): turning on sync discard
[  106.077771][ T6037] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  106.080033][ T6037] BTRFS info (device loop5): use zstd compression, level 3
[  106.081870][ T6037] BTRFS info (device loop5): using free space tree
[  106.132138][ T6067] FAULT_INJECTION: forcing a failure.
[  106.132138][ T6067] name failslab, interval 1, probability 0, space 0, times 0
[  106.150600][ T6067] CPU: 1 PID: 6067 Comm: syz.4.293 Not tainted 6.1.140-syzkaller #0
[  106.152587][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  106.155084][ T6067] Call trace:
[  106.155905][ T6067]  dump_backtrace+0x1c8/0x1f4
[  106.157079][ T6067]  show_stack+0x2c/0x3c
[  106.158166][ T6067]  __dump_stack+0x30/0x40
[  106.159210][ T6067]  dump_stack_lvl+0xf8/0x160
[  106.160220][ T6067]  dump_stack+0x1c/0x5c
[  106.161272][ T6067]  should_fail_ex+0x3c4/0x520
[  106.162418][ T6067]  __should_failslab+0xc0/0x120
[  106.163663][ T6067]  should_failslab+0x10/0x28
[  106.164835][ T6067]  kmem_cache_alloc+0x88/0x318
[  106.165933][ T6067]  getname_flags+0xb8/0x45c
[  106.167102][ T6067]  getname+0x28/0x38
[  106.168110][ T6067]  do_sys_openat2+0xd0/0x3d8
[  106.169285][ T6067]  __arm64_sys_openat+0x120/0x154
[  106.170612][ T6067]  invoke_syscall+0x98/0x2bc
[  106.171805][ T6067]  el0_svc_common+0x138/0x258
[  106.172924][ T6067]  do_el0_svc+0x58/0x13c
[  106.173960][ T6067]  el0_svc+0x58/0x138
[  106.174943][ T6067]  el0t_64_sync_handler+0x84/0xf0
[  106.176234][ T6067]  el0t_64_sync+0x18c/0x190
[  106.225787][ T5944] device hsr_slave_0 entered promiscuous mode
[  106.293788][ T5944] device hsr_slave_1 entered promiscuous mode
[  106.463882][ T6037] BTRFS info (device loop5): enabling ssd optimizations
[  106.889837][ T6079] loop2: detected capacity change from 0 to 32768
[  107.023916][ T6079] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  107.042729][   T11] device hsr_slave_0 left promiscuous mode
[  107.075603][ T5122] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  107.110830][ T6079] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  107.230969][   T11] device hsr_slave_1 left promiscuous mode
[  107.284099][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.286023][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.325220][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.326953][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.335126][   T11] device bridge_slave_1 left promiscuous mode
[  107.336752][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.385369][ T4299] Bluetooth: hci3: command 0x041b tx timeout
[  107.403022][   T11] device bridge_slave_0 left promiscuous mode
[  107.404762][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.433061][ T4307] ocfs2: Unmounting device (7,2) on (node local)
[  107.512302][ T6115] loop5: detected capacity change from 0 to 256
[  107.514605][ T6090] loop4: detected capacity change from 0 to 32768
[  107.523736][   T11] device veth1_macvtap left promiscuous mode
[  107.525204][   T11] device veth0_macvtap left promiscuous mode
[  107.526784][   T11] device veth1_vlan left promiscuous mode
[  107.528187][   T11] device veth0_vlan left promiscuous mode
[  107.597309][ T6090] XFS (loop4): Mounting V5 Filesystem
[  107.744986][ T6090] XFS (loop4): Ending clean mount
[  107.851790][ T4301] XFS (loop4): Unmounting Filesystem
[  108.175369][ T6131] loop2: detected capacity change from 0 to 40427
[  108.196718][ T6131] F2FS-fs (loop2): invalid crc value
[  108.210252][ T6131] F2FS-fs (loop2): Found nat_bits in checkpoint
[  108.222859][ T6131] F2FS-fs (loop2): recover fsync data on readonly fs
[  108.237116][ T6131] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  108.245946][ T6131] F2FS-fs (loop2): Corrupted max_depth of 3: 1025
[  108.248658][ T6131] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  108.447536][ T6140] loop4: detected capacity change from 0 to 256
[  108.608547][ T6143] loop4: detected capacity change from 0 to 256
[  108.616090][ T6143] FAULT_INJECTION: forcing a failure.
[  108.616090][ T6143] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  108.619411][ T6143] CPU: 0 PID: 6143 Comm: syz.4.302 Not tainted 6.1.140-syzkaller #0
[  108.621449][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  108.623939][ T6143] Call trace:
[  108.624764][ T6143]  dump_backtrace+0x1c8/0x1f4
[  108.625916][ T6143]  show_stack+0x2c/0x3c
[  108.627021][ T6143]  __dump_stack+0x30/0x40
[  108.628124][ T6143]  dump_stack_lvl+0xf8/0x160
[  108.629304][ T6143]  dump_stack+0x1c/0x5c
[  108.630320][ T6143]  should_fail_ex+0x3c4/0x520
[  108.631538][ T6143]  should_fail+0x14/0x24
[  108.632667][ T6143]  should_fail_usercopy+0x20/0x30
[  108.634011][ T6143]  do_fcntl+0x518/0x15bc
[  108.635138][ T6143]  __arm64_sys_fcntl+0x110/0x1e8
[  108.636359][ T6143]  invoke_syscall+0x98/0x2bc
[  108.637484][ T6143]  el0_svc_common+0x138/0x258
[  108.638605][ T6143]  do_el0_svc+0x58/0x13c
[  108.639650][ T6143]  el0_svc+0x58/0x138
[  108.640628][ T6143]  el0t_64_sync_handler+0x84/0xf0
[  108.641864][ T6143]  el0t_64_sync+0x18c/0x190
[  108.702361][ T6145] loop4: detected capacity change from 0 to 256
[  108.887906][ T6148] loop4: detected capacity change from 0 to 4096
[  108.903852][ T6148] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  108.934052][ T6148] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  109.023074][ T6149] ntfs3: loop4: ino=21, "cpu.stat" mmap(write) compressed not supported
[  109.059663][ T4538] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22.
[  109.063133][ T4301] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  109.326800][ T6151] loop4: detected capacity change from 0 to 32768
[  109.343265][ T6151] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.305 (6151)
[  109.360531][ T6151] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.366497][ T6151] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm
[  109.369771][ T6151] BTRFS info (device loop4): turning on sync discard
[  109.371541][ T6151] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  109.375275][ T6151] BTRFS info (device loop4): use zstd compression, level 3
[  109.377684][ T6151] BTRFS info (device loop4): using free space tree
[  109.454797][ T6151] BTRFS info (device loop4): enabling ssd optimizations
[  109.463748][   T47] Bluetooth: hci3: command 0x040f tx timeout
[  109.661475][   T11] team0 (unregistering): Port device team_slave_1 removed
[  109.825380][   T11] team0 (unregistering): Port device team_slave_0 removed
[  110.026232][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.234317][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.467745][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.533445][ T4299] Bluetooth: hci3: command 0x0419 tx timeout
[  112.647209][   T11] bond0 (unregistering): Released all slaves
[  113.100480][ T4301] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  113.390099][ T6201] binder: 6200:6201 tried to acquire reference to desc 0, got 1 instead
[  113.394698][ T6201] FAULT_INJECTION: forcing a failure.
[  113.394698][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.397783][ T6201] CPU: 1 PID: 6201 Comm: syz.0.312 Not tainted 6.1.140-syzkaller #0
[  113.399659][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  113.402101][ T6201] Call trace:
[  113.402876][ T6201]  dump_backtrace+0x1c8/0x1f4
[  113.403993][ T6201]  show_stack+0x2c/0x3c
[  113.405081][ T6201]  __dump_stack+0x30/0x40
[  113.406149][ T6201]  dump_stack_lvl+0xf8/0x160
[  113.407337][ T6201]  dump_stack+0x1c/0x5c
[  113.408379][ T6201]  should_fail_ex+0x3c4/0x520
[  113.409577][ T6201]  should_fail+0x14/0x24
[  113.410632][ T6201]  should_fail_usercopy+0x20/0x30
[  113.411925][ T6201]  binder_ioctl_write_read+0xf8/0x89e0
[  113.413287][ T6201]  binder_ioctl+0x42c/0x1a84
[  113.414422][ T6201]  __arm64_sys_ioctl+0x14c/0x1c8
[  113.415670][ T6201]  invoke_syscall+0x98/0x2bc
[  113.416815][ T6201]  el0_svc_common+0x138/0x258
[  113.418016][ T6201]  do_el0_svc+0x58/0x13c
[  113.419119][ T6201]  el0_svc+0x58/0x138
[  113.420093][ T6201]  el0t_64_sync_handler+0x84/0xf0
[  113.421345][ T6201]  el0t_64_sync+0x18c/0x190
[  113.463890][ T5944] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  113.531201][ T5944] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  113.564110][ T6205] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002
[  113.588672][ T5944] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  113.603495][ T6201] binder: 6200:6201 ioctl c0306201 200001c0 returned -14
[  113.630226][ T5944] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  113.997468][ T6232] binder: 6231:6232 tried to acquire reference to desc 0, got 1 instead
[  114.001023][ T6232] binder: cannot allocate buffer
[  114.001070][ T6232] binder: 6231:6232 transaction call to 6231:0 failed 9/29201/-22, size 176--85 line 3239
[  114.045256][ T4521] binder: undelivered TRANSACTION_ERROR: 29201
[  114.251220][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.260839][ T6193] loop5: detected capacity change from 0 to 32768
[  114.289336][ T6193] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 scanned by syz.5.311 (6193)
[  114.337191][ T5944] 8021q: adding VLAN 0 to HW filter on device team0
[  114.339148][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.341553][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.423581][ T6193] BTRFS info (device loop5): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  114.426168][ T6193] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  114.428558][ T6193] BTRFS info (device loop5): turning on sync discard
[  114.430226][ T6193] BTRFS info (device loop5): using free space tree
[  114.435574][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  114.438154][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.440435][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.442179][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.448095][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  114.469889][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.472396][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.490910][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.492832][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.496552][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  114.608998][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.615645][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.621895][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.625524][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  114.642655][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  114.648002][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  114.674981][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  114.677546][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  114.694893][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  114.697229][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  114.702180][ T6193] BTRFS info (device loop5): enabling ssd optimizations
[  114.707458][ T5944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  114.838047][ T6238] loop4: detected capacity change from 0 to 32768
[  114.964318][ T6236] loop2: detected capacity change from 0 to 32768
[  115.029971][ T5122] BTRFS info (device loop5): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  115.048290][ T6238] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  115.120293][ T6238] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (54346, expected 74)
[  115.145371][ T6236] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  115.151393][ T6236] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  115.163421][ T6238] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  115.165758][ T6238] OCFS2: Returning error to the calling process.
[  115.167232][ T6238] (syz.4.317,6238,0):ocfs2_search_chain:1761 ERROR: status = -5
[  115.185558][ T6284] device wlan1 entered promiscuous mode
[  115.189875][ T6238] (syz.4.317,6238,1):ocfs2_search_chain:1871 ERROR: status = -5
[  115.191796][ T6238] (syz.4.317,6238,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -5
[  115.193846][ T6238] (syz.4.317,6238,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5
[  115.195825][ T6238] (syz.4.317,6238,1):ocfs2_claim_new_inode:2216 ERROR: status = -5
[  115.197724][ T6238] (syz.4.317,6238,1):ocfs2_claim_new_inode:2231 ERROR: status = -5
[  115.199862][ T6238] (syz.4.317,6238,1):ocfs2_mknod_locked:639 ERROR: status = -5
[  115.201780][ T6238] (syz.4.317,6238,1):ocfs2_mknod:385 ERROR: status = -5
[  115.203707][ T6238] (syz.4.317,6238,1):ocfs2_mknod:502 ERROR: status = -5
[  115.205603][ T6238] (syz.4.317,6238,1):ocfs2_create:676 ERROR: status = -5
[  115.306398][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'.
[  115.308623][ T6284] device bridge_slave_1 left promiscuous mode
[  115.311649][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.327846][ T6236] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  115.407672][ T6284] device bridge_slave_0 left promiscuous mode
[  115.409428][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.517364][ T4307] ocfs2: Unmounting device (7,2) on (node local)
[  115.767518][ T6300] loop2: detected capacity change from 0 to 512
[  115.884368][ T6300] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  116.003593][ T6310] binder: 6308:6310 ioctl 40046411 20000100 returned -22
[  116.007293][ T6310] binder: 6308:6310 tried to acquire reference to desc 0, got 1 instead
[  116.009514][ T6310] binder: cannot allocate buffer
[  116.009543][ T6310] binder: 6308:6310 transaction call to 6308:0 failed 14/29201/-22, size 176--85 line 3239
[  116.014038][ T4344] binder: undelivered TRANSACTION_ERROR: 29201
[  116.155573][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  116.157459][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.173217][ T4307] EXT4-fs (loop2): unmounting filesystem.
[  116.204804][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.287335][ T4301] ocfs2: Unmounting device (7,4) on (node local)
[  116.604158][ T6334] FAULT_INJECTION: forcing a failure.
[  116.604158][ T6334] name failslab, interval 1, probability 0, space 0, times 0
[  116.607746][ T6334] CPU: 0 PID: 6334 Comm: syz.4.326 Not tainted 6.1.140-syzkaller #0
[  116.609770][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  116.612416][ T6334] Call trace:
[  116.613311][ T6334]  dump_backtrace+0x1c8/0x1f4
[  116.614434][ T6334]  show_stack+0x2c/0x3c
[  116.615474][ T6334]  __dump_stack+0x30/0x40
[  116.616649][ T6334]  dump_stack_lvl+0xf8/0x160
[  116.617810][ T6334]  dump_stack+0x1c/0x5c
[  116.618901][ T6334]  should_fail_ex+0x3c4/0x520
[  116.620115][ T6334]  __should_failslab+0xc0/0x120
[  116.621220][ T6334]  should_failslab+0x10/0x28
[  116.622390][ T6334]  __kmem_cache_alloc_node+0x7c/0x320
[  116.623732][ T6334]  __kmalloc_node+0xdc/0x17c
[  116.624820][ T6334]  memcg_alloc_slab_cgroups+0x90/0x164
[  116.626221][ T6334]  slab_post_alloc_hook+0xc8/0x43c
[  116.627461][ T6334]  __kmem_cache_alloc_node+0x278/0x320
[  116.628823][ T6334]  __kmalloc_node+0xdc/0x17c
[  116.629976][ T6334]  kvmalloc_node+0x88/0x1dc
[  116.631053][ T6334]  traverse+0xec/0x554
[  116.632029][ T6334]  seq_read_iter+0xb48/0xc00
[  116.633132][ T6334]  seq_read+0x138/0x1cc
[  116.634110][ T6334]  proc_reg_read+0x188/0x2dc
[  116.635183][ T6334]  do_iter_read+0x3c0/0x8c4
[  116.636284][ T6334]  do_preadv+0x1c0/0x2f0
[  116.637302][ T6334]  __arm64_sys_preadv+0xa0/0xb8
[  116.638564][ T6334]  invoke_syscall+0x98/0x2bc
[  116.639741][ T6334]  el0_svc_common+0x138/0x258
[  116.640840][ T6334]  do_el0_svc+0x58/0x13c
[  116.641907][ T6334]  el0_svc+0x58/0x138
[  116.642914][ T6334]  el0t_64_sync_handler+0x84/0xf0
[  116.644138][ T6334]  el0t_64_sync+0x18c/0x190
[  116.712201][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  116.714822][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.867393][ T6341] loop2: detected capacity change from 0 to 4096
[  116.879605][ T6341] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  116.895898][ T6341] ntfs: (device loop2): parse_options(): The utf8 option requires a boolean argument.
[  116.907709][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  116.912391][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  116.917617][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  116.922259][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  116.997016][ T5944] device veth0_vlan entered promiscuous mode
[  117.013815][ T5944] device veth1_vlan entered promiscuous mode
[  117.126715][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  117.129208][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  117.146330][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  117.148850][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.169152][ T5944] device veth0_macvtap entered promiscuous mode
[  117.189185][ T5944] device veth1_macvtap entered promiscuous mode
[  117.255147][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.264184][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.266604][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.268945][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.271262][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.308484][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.310894][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.336802][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.344977][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.358343][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.360917][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.363259][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.403421][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.405762][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.408123][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.410524][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.413010][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.434720][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.439771][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  117.442028][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.444850][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  117.455393][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.457949][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  117.460368][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.469621][ T5944] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.471733][ T5944] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.494637][ T5944] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.496741][ T5944] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.711221][ T6351] loop5: detected capacity change from 0 to 32768
[  117.755321][ T6345] loop4: detected capacity change from 0 to 32768
[  117.778107][ T6345] 
[  117.778107][ T6345]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.778107][ T6345] 
[  117.810299][ T6351] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  117.918871][ T6351] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  118.011183][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'.
[  118.039715][ T6345] 
[  118.039715][ T6345]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.039715][ T6345] 
[  118.042513][ T6345] 
[  118.042513][ T6345]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.042513][ T6345] 
[  118.072202][ T6345] 
[  118.072202][ T6345]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.072202][ T6345] 
[  118.166383][ T6345] 
[  118.166383][ T6345]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.166383][ T6345] 
[  118.200346][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.201733][ T5122] ocfs2: Unmounting device (7,5) on (node local)
[  118.202728][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.225200][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.236437][ T4301] 
[  118.236437][ T4301]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.236437][ T4301] 
[  118.240643][ T4301] 
[  118.240643][ T4301]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.240643][ T4301] 
[  118.317054][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.319105][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.326841][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.623655][ T6391] loop4: detected capacity change from 0 to 256
[  118.651296][ T6388] FAULT_INJECTION: forcing a failure.
[  118.651296][ T6388] name failslab, interval 1, probability 0, space 0, times 0
[  118.671540][ T6388] CPU: 1 PID: 6388 Comm: syz.0.338 Not tainted 6.1.140-syzkaller #0
[  118.673570][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  118.676109][ T6388] Call trace:
[  118.676948][ T6388]  dump_backtrace+0x1c8/0x1f4
[  118.678124][ T6388]  show_stack+0x2c/0x3c
[  118.679200][ T6388]  __dump_stack+0x30/0x40
[  118.680341][ T6388]  dump_stack_lvl+0xf8/0x160
[  118.681516][ T6388]  dump_stack+0x1c/0x5c
[  118.682620][ T6388]  should_fail_ex+0x3c4/0x520
[  118.683802][ T6388]  __should_failslab+0xc0/0x120
[  118.685060][ T6388]  should_failslab+0x10/0x28
[  118.686173][ T6388]  __kmem_cache_alloc_node+0x7c/0x320
[  118.687678][ T6388]  __kmalloc_node+0xdc/0x17c
[  118.688823][ T6388]  kvmalloc_node+0x88/0x1dc
[  118.689926][ T6388]  listxattr+0x5c/0x3cc
[  118.690984][ T6388]  path_listxattr+0xdc/0x1b4
[  118.692077][ T6388]  __arm64_sys_listxattr+0x80/0x94
[  118.693332][ T6388]  invoke_syscall+0x98/0x2bc
[  118.694557][ T6388]  el0_svc_common+0x138/0x258
[  118.695772][ T6388]  do_el0_svc+0x58/0x13c
[  118.696800][ T6388]  el0_svc+0x58/0x138
[  118.697800][ T6388]  el0t_64_sync_handler+0x84/0xf0
[  118.699046][ T6388]  el0t_64_sync+0x18c/0x190
[  118.782407][ T6398] loop2: detected capacity change from 0 to 1024
[  118.786966][ T6395] loop5: detected capacity change from 0 to 1764
[  119.446825][ T6418] loop5: detected capacity change from 0 to 4096
[  119.507954][ T6418] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  119.894557][ T4341] kernel write not supported for file /87/net/softnet_stat (pid: 4341 comm: kworker/1:5)
[  119.911559][ T6404] loop4: detected capacity change from 0 to 32768
[  119.972398][ T6404] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  119.988499][ T6416] loop2: detected capacity change from 0 to 32768
[  120.001941][ T6416] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.347 (6416)
[  120.062325][ T6404] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  120.122009][ T6416] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.173940][ T6416] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  120.176200][ T6416] BTRFS info (device loop2): turning on sync discard
[  120.177938][ T6416] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  120.180106][ T6416] BTRFS info (device loop2): use zstd compression, level 3
[  120.181865][ T6416] BTRFS info (device loop2): using free space tree
[  120.256077][ T4301] ocfs2: Unmounting device (7,4) on (node local)
[  120.368481][ T6454] FAULT_INJECTION: forcing a failure.
[  120.368481][ T6454] name failslab, interval 1, probability 0, space 0, times 0
[  120.371570][ T6454] CPU: 0 PID: 6454 Comm: syz.4.354 Not tainted 6.1.140-syzkaller #0
[  120.373610][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  120.376132][ T6454] Call trace:
[  120.376940][ T6454]  dump_backtrace+0x1c8/0x1f4
[  120.378112][ T6454]  show_stack+0x2c/0x3c
[  120.379174][ T6454]  __dump_stack+0x30/0x40
[  120.380273][ T6454]  dump_stack_lvl+0xf8/0x160
[  120.381436][ T6454]  dump_stack+0x1c/0x5c
[  120.382558][ T6454]  should_fail_ex+0x3c4/0x520
[  120.383791][ T6454]  __should_failslab+0xc0/0x120
[  120.385072][ T6454]  should_failslab+0x10/0x28
[  120.386263][ T6454]  kmem_cache_alloc_node+0x8c/0x34c
[  120.387651][ T6454]  __alloc_skb+0x128/0x718
[  120.388812][ T6454]  netlink_sendmsg+0x520/0x9b0
[  120.390051][ T6454]  ____sys_sendmsg+0x5b8/0x918
[  120.391313][ T6454]  __sys_sendmsg+0x25c/0x320
[  120.392547][ T6454]  __arm64_sys_sendmsg+0x80/0x94
[  120.393884][ T6454]  invoke_syscall+0x98/0x2bc
[  120.395039][ T6454]  el0_svc_common+0x138/0x258
[  120.396211][ T6454]  do_el0_svc+0x58/0x13c
[  120.397269][ T6454]  el0_svc+0x58/0x138
[  120.398299][ T6454]  el0t_64_sync_handler+0x84/0xf0
[  120.399607][ T6454]  el0t_64_sync+0x18c/0x190
[  120.474038][ T6416] BTRFS info (device loop2): enabling ssd optimizations
[  120.482430][ T6463] FAULT_INJECTION: forcing a failure.
[  120.482430][ T6463] name failslab, interval 1, probability 0, space 0, times 0
[  120.490887][ T6463] CPU: 0 PID: 6463 Comm: syz.5.357 Not tainted 6.1.140-syzkaller #0
[  120.492803][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  120.495312][ T6463] Call trace:
[  120.496113][ T6463]  dump_backtrace+0x1c8/0x1f4
[  120.497271][ T6463]  show_stack+0x2c/0x3c
[  120.498341][ T6463]  __dump_stack+0x30/0x40
[  120.499506][ T6463]  dump_stack_lvl+0xf8/0x160
[  120.500667][ T6463]  dump_stack+0x1c/0x5c
[  120.501680][ T6463]  should_fail_ex+0x3c4/0x520
[  120.502858][ T6463]  __should_failslab+0xc0/0x120
[  120.504047][ T6463]  should_failslab+0x10/0x28
[  120.505190][ T6463]  kmem_cache_alloc_node+0x8c/0x34c
[  120.506545][ T6463]  __alloc_skb+0x128/0x718
[  120.507626][ T6463]  netlink_sendmsg+0x520/0x9b0
[  120.508845][ T6463]  ____sys_sendmsg+0x5b8/0x918
[  120.510100][ T6463]  __sys_sendmsg+0x25c/0x320
[  120.511337][ T6463]  __arm64_sys_sendmsg+0x80/0x94
[  120.512598][ T6463]  invoke_syscall+0x98/0x2bc
[  120.513834][ T6463]  el0_svc_common+0x138/0x258
[  120.515057][ T6463]  do_el0_svc+0x58/0x13c
[  120.516190][ T6463]  el0_svc+0x58/0x138
[  120.517303][ T6463]  el0t_64_sync_handler+0x84/0xf0
[  120.518589][ T6463]  el0t_64_sync+0x18c/0x190
[  121.037918][ T4307] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.269292][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.6.360'.
[  121.323312][ T6480] loop5: detected capacity change from 0 to 256
[  121.455024][ T6469] loop4: detected capacity change from 0 to 32768
[  121.507466][ T6183] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  121.708130][ T6491] FAULT_INJECTION: forcing a failure.
[  121.708130][ T6491] name failslab, interval 1, probability 0, space 0, times 0
[  121.718765][ T6491] CPU: 1 PID: 6491 Comm: syz.0.365 Not tainted 6.1.140-syzkaller #0
[  121.720829][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  121.723233][ T6491] Call trace:
[  121.724053][ T6491]  dump_backtrace+0x1c8/0x1f4
[  121.725149][ T6491]  show_stack+0x2c/0x3c
[  121.726229][ T6491]  __dump_stack+0x30/0x40
[  121.727336][ T6491]  dump_stack_lvl+0xf8/0x160
[  121.728513][ T6491]  dump_stack+0x1c/0x5c
[  121.729605][ T6491]  should_fail_ex+0x3c4/0x520
[  121.730830][ T6491]  __should_failslab+0xc0/0x120
[  121.732049][ T6491]  should_failslab+0x10/0x28
[  121.733275][ T6491]  kmem_cache_alloc_node+0x8c/0x34c
[  121.734543][ T6491]  __alloc_skb+0x128/0x718
[  121.735651][ T6491]  netlink_sendmsg+0x520/0x9b0
[  121.736825][ T6491]  ____sys_sendmsg+0x5b8/0x918
[  121.738000][ T6491]  __sys_sendmsg+0x25c/0x320
[  121.739099][ T6491]  __arm64_sys_sendmsg+0x80/0x94
[  121.740340][ T6491]  invoke_syscall+0x98/0x2bc
[  121.741503][ T6491]  el0_svc_common+0x138/0x258
[  121.742678][ T6491]  do_el0_svc+0x58/0x13c
[  121.743835][ T6491]  el0_svc+0x58/0x138
[  121.744801][ T6491]  el0t_64_sync_handler+0x84/0xf0
[  121.746123][ T6491]  el0t_64_sync+0x18c/0x190
[  121.758829][ T6492] loop5: detected capacity change from 0 to 1024
[  121.857650][ T6499] loop4: detected capacity change from 0 to 256
[  121.932902][ T6499] FAT-fs (loop4): Unrecognized mount option "allow_utime=00000000/00000000000377" or missing value
[  122.042188][ T6503] loop5: detected capacity change from 0 to 8192
[  122.062624][ T6503] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  122.072550][ T6503] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  122.077647][ T6503] REISERFS (device loop5): using ordered data mode
[  122.079261][ T6503] reiserfs: using flush barriers
[  122.139571][ T6487] loop6: detected capacity change from 0 to 32768
[  122.142657][ T6503] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  122.146815][ T6503] REISERFS (device loop5): checking transaction log (loop5)
[  122.149496][ T6503] REISERFS (device loop5): Using r5 hash to sort names
[  122.151235][ T6503] REISERFS (device loop5): using 3.5.x disk format
[  122.157691][ T6503] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  122.169889][ T6503] 
[  122.170565][ T6503] ======================================================
[  122.172340][ T6503] WARNING: possible circular locking dependency detected
[  122.174035][ T6503] 6.1.140-syzkaller #0 Not tainted
[  122.175334][ T6503] ------------------------------------------------------
[  122.177102][ T6503] syz.5.369/6503 is trying to acquire lock:
[  122.178604][ T6503] ffff0000e1cf8980 (&type->i_mutex_dir_key#15){+.+.}-{3:3}, at: path_openat+0x5e4/0x2680
[  122.181194][ T6503] 
[  122.181194][ T6503] but task is already holding lock:
[  122.183051][ T6503] ffff0000f9460460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[  122.185294][ T6503] 
[  122.185294][ T6503] which lock already depends on the new lock.
[  122.185294][ T6503] 
[  122.187919][ T6503] 
[  122.187919][ T6503] the existing dependency chain (in reverse order) is:
[  122.188623][ T6487] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  122.190179][ T6503] 
[  122.190179][ T6503] -> #2 (sb_writers#18){.+.+}-{0:0}:
[  122.194050][ T6503]        sb_start_write+0x74/0x2ac
[  122.195422][ T6503]        mnt_want_write_file+0x64/0x1e8
[  122.196775][ T6503]        reiserfs_ioctl+0x114/0x450
[  122.198127][ T6503]        __arm64_sys_ioctl+0x14c/0x1c8
[  122.199562][ T6503]        invoke_syscall+0x98/0x2bc
[  122.200826][ T6503]        el0_svc_common+0x138/0x258
[  122.202151][ T6503]        do_el0_svc+0x58/0x13c
[  122.203356][ T6503]        el0_svc+0x58/0x138
[  122.204477][ T6503]        el0t_64_sync_handler+0x84/0xf0
[  122.205934][ T6503]        el0t_64_sync+0x18c/0x190
[  122.207173][ T6503] 
[  122.207173][ T6503] -> #1 (&sbi->lock){+.+.}-{3:3}:
[  122.208993][ T6503]        __mutex_lock_common+0x190/0x1f38
[  122.210498][ T6503]        mutex_lock_nested+0x38/0x44
[  122.211880][ T6503]        reiserfs_write_lock+0x7c/0xe8
[  122.213214][ T6503]        reiserfs_lookup+0x11c/0x378
[  122.214598][ T6503]        __lookup_slow+0x24c/0x370
[  122.215863][ T6503]        lookup_one_len+0x178/0x28c
[  122.217179][ T6503]        reiserfs_lookup_privroot+0x8c/0x204
[  122.218767][ T6503]        reiserfs_fill_super+0x18ec/0x1d40
[  122.220303][ T6503]        mount_bdev+0x264/0x358
[  122.221539][ T6503]        get_super_block+0x44/0x58
[  122.222837][ T6503]        legacy_get_tree+0xd4/0x16c
[  122.224155][ T6503]        vfs_get_tree+0x90/0x274
[  122.225401][ T6503]        do_new_mount+0x228/0x810
[  122.226684][ T6503]        path_mount+0x5b4/0xe78
[  122.227899][ T6503]        __arm64_sys_mount+0x49c/0x584
[  122.229276][ T6503]        invoke_syscall+0x98/0x2bc
[  122.230595][ T6503]        el0_svc_common+0x138/0x258
[  122.231902][ T6503]        do_el0_svc+0x58/0x13c
[  122.233139][ T6503]        el0_svc+0x58/0x138
[  122.234331][ T6503]        el0t_64_sync_handler+0x84/0xf0
[  122.235803][ T6503]        el0t_64_sync+0x18c/0x190
[  122.237048][ T6503] 
[  122.237048][ T6503] -> #0 (&type->i_mutex_dir_key#15){+.+.}-{3:3}:
[  122.239226][ T6503]        __lock_acquire+0x293c/0x6544
[  122.240607][ T6503]        lock_acquire+0x20c/0x644
[  122.241883][ T6503]        down_write+0x5c/0x88
[  122.243103][ T6503]        path_openat+0x5e4/0x2680
[  122.244316][ T6503]        do_filp_open+0x174/0x344
[  122.245566][ T6503]        do_sys_openat2+0x128/0x3d8
[  122.246886][ T6503]        __arm64_sys_openat+0x120/0x154
[  122.248282][ T6503]        invoke_syscall+0x98/0x2bc
[  122.249609][ T6503]        el0_svc_common+0x138/0x258
[  122.250921][ T6503]        do_el0_svc+0x58/0x13c
[  122.252161][ T6503]        el0_svc+0x58/0x138
[  122.253326][ T6503]        el0t_64_sync_handler+0x84/0xf0
[  122.254742][ T6503]        el0t_64_sync+0x18c/0x190
[  122.256035][ T6503] 
[  122.256035][ T6503] other info that might help us debug this:
[  122.256035][ T6503] 
[  122.258722][ T6503] Chain exists of:
[  122.258722][ T6503]   &type->i_mutex_dir_key#15 --> &sbi->lock --> sb_writers#18
[  122.258722][ T6503] 
[  122.262081][ T6503]  Possible unsafe locking scenario:
[  122.262081][ T6503] 
[  122.263971][ T6503]        CPU0                    CPU1
[  122.265308][ T6503]        ----                    ----
[  122.266658][ T6503]   lock(sb_writers#18);
[  122.267771][ T6503]                                lock(&sbi->lock);
[  122.269461][ T6503]                                lock(sb_writers#18);
[  122.271185][ T6503]   lock(&type->i_mutex_dir_key#15);
[  122.272526][ T6503] 
[  122.272526][ T6503]  *** DEADLOCK ***
[  122.272526][ T6503] 
[  122.274591][ T6503] 1 lock held by syz.5.369/6503:
[  122.275886][ T6503]  #0: ffff0000f9460460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[  122.278316][ T6503] 
[  122.278316][ T6503] stack backtrace:
[  122.279766][ T6503] CPU: 0 PID: 6503 Comm: syz.5.369 Not tainted 6.1.140-syzkaller #0
[  122.281887][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  122.284389][ T6503] Call trace:
[  122.285266][ T6503]  dump_backtrace+0x1c8/0x1f4
[  122.286450][ T6503]  show_stack+0x2c/0x3c
[  122.287712][ T6503]  __dump_stack+0x30/0x40
[  122.288842][ T6503]  dump_stack_lvl+0xf8/0x160
[  122.289980][ T6503]  dump_stack+0x1c/0x5c
[  122.291107][ T6503]  print_circular_bug+0x148/0x1b0
[  122.292483][ T6503]  check_noncircular+0x240/0x2d4
[  122.293775][ T6503]  __lock_acquire+0x293c/0x6544
[  122.295008][ T6503]  lock_acquire+0x20c/0x644
[  122.296240][ T6503]  down_write+0x5c/0x88
[  122.297366][ T6503]  path_openat+0x5e4/0x2680
[  122.298554][ T6503]  do_filp_open+0x174/0x344
[  122.299721][ T6503]  do_sys_openat2+0x128/0x3d8
[  122.300963][ T6503]  __arm64_sys_openat+0x120/0x154
[  122.302270][ T6503]  invoke_syscall+0x98/0x2bc
[  122.303479][ T6503]  el0_svc_common+0x138/0x258
[  122.304630][ T6503]  do_el0_svc+0x58/0x13c
[  122.305727][ T6503]  el0_svc+0x58/0x138
[  122.306752][ T6503]  el0t_64_sync_handler+0x84/0xf0
[  122.308046][ T6503]  el0t_64_sync+0x18c/0x190
[  122.335187][ T6487] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  122.377465][ T5944] ocfs2: Unmounting device (7,6) on (node local)
[  122.460009][ T6515] netlink: 48 bytes leftover after parsing attributes in process `syz.5.369'.
[  122.475021][ T6512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.369'.
[  122.813163][ T6513] loop4: detected capacity change from 0 to 40427
[  122.816705][ T6513] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  122.818608][ T6513] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  122.821374][ T6513] F2FS-fs (loop4): invalid crc value
[  122.825240][ T6513] F2FS-fs (loop4): Found nat_bits in checkpoint
[  122.838833][ T6513] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  122.840663][ T6513] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  123.006220][ T6513] syz.4.372: attempt to access beyond end of device
[  123.006220][ T6513] loop4: rw=2049, sector=77824, nr_sectors = 2048 limit=40427
[  123.017314][ T6513] syz.4.372: attempt to access beyond end of device
[  123.017314][ T6513] loop4: rw=2049, sector=79872, nr_sectors = 2048 limit=40427
[  123.029731][ T6513] syz.4.372: attempt to access beyond end of device
[  123.029731][ T6513] loop4: rw=2049, sector=49152, nr_sectors = 2600 limit=40427
[  123.039611][ T6513] syz.4.372: attempt to access beyond end of device
[  123.039611][ T6513] loop4: rw=2049, sector=51752, nr_sectors = 1496 limit=40427
[  123.056447][ T6513] syz.4.372: attempt to access beyond end of device
[  123.056447][ T6513] loop4: rw=2049, sector=57344, nr_sectors = 4128 limit=40427
[  123.079498][ T6513] syz.4.372: attempt to access beyond end of device
[  123.079498][ T6513] loop4: rw=2049, sector=61472, nr_sectors = 5496 limit=40427
[  123.123598][ T6513] syz.4.372: attempt to access beyond end of device
[  123.123598][ T6513] loop4: rw=2049, sector=66968, nr_sectors = 10856 limit=40427
[  123.147731][ T6513] syz.4.372: attempt to access beyond end of device
[  123.147731][ T6513] loop4: rw=2049, sector=81920, nr_sectors = 3896 limit=40427
[  123.816186][ T4301] syz-executor: attempt to access beyond end of device
[  123.816186][ T4301] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  125.934320][ T2058] ieee802154 phy0 wpan0: encryption failed: -22
[  125.935806][ T2058] ieee802154 phy1 wpan1: encryption failed: -22