last executing test programs:

9.481583073s ago: executing program 0 (id=384):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x608501, 0x14a)
fallocate(r0, 0xffa655b4c4d47a22, 0x2000, 0x8000)
r1 = socket$packet(0x11, 0x3, 0x300)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x1018852, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,background_gc=sync,acl,fsync_mone_xattr,disable_roll_forward,checkpoint=disable,background_gc=on,noinline_xattr,discard_unit=block,fsync_mode=strict\fage_extent_cache,extent_cache,fault_injection=18446744073709551615,subj_type=disable_roll_forward,dirsync,\x00'], 0x1, 0x551c, &(0x7f00000079c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x10b)
pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1, 0x7ffffe, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0xb, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @mcast1, 0x7}, 0x1c)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1f3241, 0x0)
pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000009050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e30000000000000000000000014000000020a090100000000000000000000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r8=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r8, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x6000001, {0x0, 0x0, 0x0, r8, {0x7}, {0xd}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c840}, 0x20048054)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r9}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6e3f2d63}}, './file1\x00'})

8.447995434s ago: executing program 2 (id=387):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0)

8.312178355s ago: executing program 2 (id=389):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000002000000)
recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)

7.653295204s ago: executing program 1 (id=391):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast1}, 0x1c)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet(0x2, 0xa, 0x7e0c)
ioctl$sock_inet_SIOCSARP(r3, 0x8954, &(0x7f0000000000)={{}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4, {0x2, 0x0, @multicast2}, 'lo\x00'})

7.448226014s ago: executing program 3 (id=392):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x4, 0x1, 0x1})
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000500)=@overlay={0x1, 0x1, 0x4, 0x2, 0x3, {0x0, 0x2710}, {0x3, 0xc, 0x81, 0x79, 0x4, 0x4, "3bc4a69f"}, 0x800, 0x3, {}, 0xfffff30c})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r3, &(0x7f0000000380)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
connect$ax25(r3, 0x0, 0x0)

7.367460727s ago: executing program 4 (id=393):
semget$private(0x0, 0x5, 0x3c0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x5, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @union={0x7, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x6, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x1, [{0x10, 0x9, 0xffffffff}, {0x2, 0x0, 0x63}, {0x7, 0x3, 0x6}, {0x10, 0x6, 0x80000001}, {0x7, 0x8, 0x9}, {0x2, 0x0, 0xb}]}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd}, {0x0, 0x1}, {0xb}, {0x0, 0x4}, {0x9, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x81}}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}]}, {0x0, [0x2e, 0x0, 0x61]}}, &(0x7f0000000740)=""/4096, 0x12d, 0x1000, 0x0, 0x8, 0x10000, @value=r0}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e000000ff010000bcbd00000000100040800400", @ANYRES32=r0, @ANYBLOB="abfad0a500"/20, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="00000000020000000200"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000540)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000dc4c0)={0xb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0xc, "05772799ed7cc7"})
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)

7.302316006s ago: executing program 2 (id=394):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x2000000000000178, &(0x7f00000002c0)=ANY=[@ANYBLOB="4448940f70dc6378c0557fc408c6c47e19367f99eddb646e05b41d8a9f2142f925d637214f0ef1795b46750a0a4b6cdddb857ad7f5e08d4e1ecb2941f4d0f7c8a061ece4c46cfee89598b1ca55247951f3af64e80a965e64470e1b1738d235b33aa777440c1d24e4bf3a8214f7a5c861a550020f25af5b0d730caa314e23a1c3df796486436e76", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) (async)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async)
r5 = dup(r4)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x2060, 0x2c, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x4, 0x4}, {0x0, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x1660, 0x2, [@TCA_ROUTE4_ACT={0x165c, 0x6, [@m_ct={0xf4, 0x15, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0xc1, 0x6, "0fa7bbe1d71a487dabb2f309e096b2a9e06e348bd5439418027b2325ea346d8940721e234545ecf7e207894e03f6cefde67ee5df39b9465f01678f69cfc68c0849ed92e1194c2dfa1c204e5f4215ae6529439d0964b95f717467c0d2da67d644714a82a1fab0ad2a5c4cebc60ada03b86cb695f6bcdc2b7db8250671f7bd6197a3d5cff254bbf7b9767f40b6d2cf77001325a53061b96dd2e106e7064ff6b9f13fb1f9c8296d1e201aec67e3bcee261e0abc94f3e4e7c9e45de792f613"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x108, 0x20, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd9653}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd56d0}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x9e0ee}, @TCA_MPLS_TTL={0x5, 0x7, 0xf}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xf}]}, {0x92, 0x6, "1f76f8d878f38d36a056c3784bebee15535d16f5559d23863ea84044218f5fd77ce78132dc94e3b6b13061cfabe043207dd1e7dfe153bbadb6f174e3fa13f2c65159d773ea465507999b4a8f542a111302bfc702181c1b6f9a48a4cbbcec9e9e26d6afb21c450d8d9c4b4b8c6f0ca4e5a35813c955a33ae3029cd72150bc2ce597e424928c58427bf8606acb79e9"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x108, 0x11, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x3, 0xbf9f}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0xad, 0x6, "c755fc5302ce1c0d0c90b1c37badacb8742f8871815c3a4195058dc7f7433bef8d465662c7bbec23f4e41d419a319537e98c0d0fb3002b0f4dd7cd0550b7f9a8791b0aee633b2c49b8c96f5a6d24f72b6f835e8560c2b2c64778bb850faea6bfa40b55bccd6c8e48c3c5b2a3bc4349d1a448bb724b68844c5cb1624252aaf1c8bd3f0b3d15864cfa2a2382e066bac232dabf439384ac1a42663359ba63958801b85831835a34afb13a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x1b8, 0x6, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xda3, 0xa66, 0x2, 0xb, 0x4}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x90, 0xffffff81, 0x7, 0xc, 0x216}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5b, 0x3, 0x10000000, 0x9, 0xf}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x0, 0x5, 0x7}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x4, 0x2, 0x7}, 0x2, r10}}]}, {0xea, 0x6, "0df555afb3221cd894becbf2abaf411c41e212a96e7e567bc3f236fd26ee7925354d2bc143c2b40f7773bceb309c7f2b7b0a9484f2a53c8e1656f1e247290eaca8f97320c66fbfe28990f687c0477822f789098a7f5ebd7458bef36e4f49201d8c48f573c4e89c7508c6c3917e5db30615c4e8dd96504f90c54af19dc332ed95d0e4e93c49321b9be07f718415c93362d0b4f7f4dbda4c173f0620cc4cee84bb91dbccf5571cb6904608a00e19ff30cda37e3c0918c719f28f1ff437fe98fdfd1edd4a856b711e2cf067e75358a462decd486310ad6d868bab2cdf2632f59bfc4cc4bf3e82f1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xfe8, 0x0, 0x0, 0x0, {{0xa}, {0xf00, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x543, 0x6, 0x2, 0xa, 0x6}, 0x10, 0x2, [{0x4, 0x5, 0x7, 0x1, 0x1, 0x5}, {0xa, 0x3, 0x4, 0x6, 0x3, 0x6}]}, [{0x7f, 0xd, 0x5, 0x10000, 0x3, 0x1}, {0xd, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x1b, 0x0, 0x4, 0xe}, {0x8, 0x2, 0x100, 0x0, 0x6, 0xfffffff8}, {0x8, 0x9, 0xffffff7f, 0x2, 0x9, 0xc}, {0xc9d, 0x4, 0x2, 0xfff, 0x10001, 0x3}, {0x5, 0x800, 0x8, 0x9, 0xc2a, 0x9}, {0x7, 0x7, 0x5, 0x6, 0x80000001, 0x6}, {0x10001, 0x7fff, 0x8, 0x8e43, 0x8001, 0x400}, {0x177328de, 0x3, 0x9, 0x3, 0x8, 0xdbf}, {0x81, 0x10000, 0x57a141bb, 0xffff, 0x320, 0xe2bf}, {0x6, 0x7f, 0xfe71a166, 0x3, 0x3, 0x40}, {0x6, 0x2456, 0xff, 0x5, 0x51, 0x9}, {0x2, 0x6, 0x8000, 0xe, 0x0, 0x3}, {0x5, 0x0, 0x0, 0x8a6, 0x1, 0x3}, {0x5, 0x40000000, 0xfff, 0xb, 0x6, 0xb}, {0x8001, 0x187d, 0x0, 0x0, 0x7fff, 0x32e6}, {0xda, 0x9, 0xee6, 0x2, 0x1, 0x2}, {0x8, 0x4, 0x1, 0xf2b, 0x7ff, 0x40}, {0x1, 0xfff, 0x0, 0xc, 0xffffffff, 0x8}, {0x5, 0x7, 0x515, 0xba9a, 0xb9e8, 0x4}, {0x8, 0x6, 0x1ff, 0x300000, 0x7, 0x5}, {0x376, 0x4, 0x4, 0x5488df28, 0x9, 0x7}, {0x5, 0x4, 0xfffffffe, 0x9, 0x5, 0x7}, {0xffffff3e, 0x1000, 0x8fa6, 0xd, 0x4, 0x401}, {0x80, 0x7fbe, 0x7, 0x0, 0x400, 0x5a}, {0xff, 0xa29, 0x10000, 0x1f1, 0x0, 0x2}, {0x101, 0xe32, 0x2, 0x6, 0xffff0001, 0x1}, {0x7, 0x8, 0x5, 0xfffffe01, 0x9, 0x5}, {0x9, 0x6, 0xb9, 0x15b9d114, 0x1, 0xdd9f}, {0x9614, 0xf4e, 0x4, 0x100, 0x2, 0x4}, {0x7732, 0x6, 0x2, 0x8, 0xe, 0x7fffffff}, {0x1, 0x5, 0x3, 0x1, 0x8001, 0x81}, {0x5, 0x7, 0x0, 0xff, 0xf, 0x6}, {0x1, 0xa, 0x6, 0x4, 0xf, 0x8000}, {0x85, 0x5, 0x40, 0x7, 0x3, 0x9}, {0x100, 0xfffffffd, 0xffffff22, 0x1ff, 0x7fffffff, 0x5}, {0x2, 0x6, 0x71, 0x9, 0x8, 0x1000}, {0x6, 0x5, 0x9, 0xffff, 0x5, 0xd9de}, {0x8, 0x8000, 0x6, 0x80000001, 0xfff, 0x579}, {0x14, 0x5, 0x319, 0x9, 0x101, 0x80000000}, {0x7, 0x2800, 0xc73, 0x2, 0x6, 0x8cd}, {0x2, 0x6, 0x0, 0x3, 0xb32, 0xe}, {0x8, 0x5, 0x7, 0x7f, 0x4, 0x42132b76}, {0x80, 0x9, 0xd3, 0x7, 0x8, 0x977}, {0x1, 0xea, 0x61, 0x9, 0x2bd, 0x2}, {0xb, 0x6, 0x6, 0x7f, 0x5, 0xae1c}, {0x17, 0x7, 0x2, 0x80000000, 0x5, 0x1}, {0x800, 0x8, 0xfffffdbf, 0xbf, 0x7bbb7026, 0x9}, {0x5, 0x0, 0x8, 0x7f, 0x10000, 0x9b8}, {0x51, 0x6038, 0x34b, 0x23, 0x6b1a, 0x200}, {0x1, 0x7, 0x0, 0x2, 0x8, 0xd2}, {0xb, 0x9, 0x9, 0x4, 0x4bf1, 0x1}, {0x5, 0x6da93276, 0x10001, 0x0, 0x4, 0x6}, {0x10001, 0x6, 0x1, 0x80, 0x1, 0x6}, {0x6e7, 0x4, 0x7, 0x6, 0xfffffffa, 0x400}, {0x4, 0x3, 0x9, 0xa, 0x8, 0x2}, {0x7fffffff, 0x9, 0xd53, 0x0, 0x8, 0x2}, {0x0, 0x2, 0x7, 0x2, 0x7ac}, {0x3ff, 0x5, 0xfffffddf, 0x18, 0x6, 0xfffffffd}, {0x8, 0x8, 0x10001, 0x5, 0x6}, {0x8, 0xfffffe55, 0x38, 0x56a, 0x2d8, 0x4}, {0x0, 0x6, 0x400, 0x2, 0x6, 0x4}, {0x1, 0x7, 0x0, 0x5, 0x8, 0x5}, {0x0, 0x5, 0x4, 0x2, 0x0, 0x8}, {0x1000, 0x9, 0x6, 0x2, 0x2, 0x9}, {0x0, 0x4, 0xfffffffc, 0x61, 0x10000, 0xfffffff7}, {0x43, 0x6, 0x8, 0x1, 0x2, 0x80000001}, {0x3, 0x1ff, 0x0, 0x0, 0x252e0307, 0x2}, {0x7, 0x7f, 0x0, 0x9, 0x7, 0x6}, {0x961f, 0x3, 0x3, 0xfffffff8, 0x0, 0x3}, {0xb5, 0x6, 0xffffff6e, 0x3, 0x7fffffff, 0x7a60}, {0x5, 0x9, 0x1, 0x7fffffff, 0x5, 0x81}, {0x7, 0xfffffffa, 0x2, 0x80, 0xfbac, 0x8}, {0x2, 0x8001, 0x5, 0x5, 0x5, 0xff}, {0x10000, 0x1000, 0x4, 0xd, 0x5, 0x9}, {0x10001, 0x3, 0x80000000, 0x3, 0x1ff, 0x1}, {0xb5, 0xfb, 0xb888, 0x3a080, 0x6c, 0x6}, {0x6, 0x84, 0x43d, 0x3, 0x9, 0xf72d}, {0x4, 0x2, 0x79f8efd4, 0x10001, 0x5, 0x1}, {0x1, 0x7, 0x10001, 0x1, 0x7, 0x6}, {0x10, 0x3, 0x1, 0x7, 0x1, 0x9}, {0x8e7c, 0x2, 0xfffffff8, 0xf7d, 0x5, 0x4}, {0x0, 0xfffffff8, 0xa, 0x8, 0x4b, 0x6}, {0x5, 0x2f0, 0xffffff58, 0x7, 0x800000, 0xa5}, {0x6, 0x0, 0x442, 0x8, 0x5, 0xfffffffa}, {0x3, 0x10, 0x5, 0x6, 0x1, 0x3}, {0x0, 0x0, 0x1, 0x1739, 0x3}, {0x0, 0x6, 0x2, 0xd4c, 0x8, 0xfff}, {0x1, 0x40, 0xa0000000, 0x6a9, 0x1e, 0x4}, {0x9, 0x8, 0x5f50ca01, 0x2, 0x6e3, 0x1}, {0x7, 0x6, 0x9, 0x3ff, 0x3, 0xcc0}, {0x1, 0x1, 0x80c, 0x8, 0x1, 0x6}, {0x7, 0x6, 0x2dd4, 0xffffffff, 0x8, 0xc8d}, {0x2, 0x10000, 0x1000, 0x2, 0x9, 0x9}, {0xb32, 0x7, 0x1, 0x6, 0x6, 0x32e}, {0x8001, 0x4, 0x3ff, 0x0, 0x80, 0x101}, {0x1, 0x7fffffff, 0x5, 0x400, 0x7, 0xffffffff}, {0x5, 0x8, 0x40, 0x7, 0x7, 0xa}, {0x81, 0x9, 0x1, 0x2, 0xffffffff, 0x5}, {0x6, 0x80000001, 0x2, 0x8, 0x80000000, 0xff}, {0x7f, 0x80, 0x7, 0x7, 0x9, 0x8}, {0x9, 0x80000000, 0x1ff, 0xfffff98a, 0xe51, 0x10000}, {0x5, 0x2, 0x5, 0x0, 0xffff, 0x6}, {0xc, 0x2, 0x3076, 0x4, 0x6, 0xa}, {0x9, 0x1, 0x8, 0x6, 0x5, 0x8}, {0xac2, 0x68, 0x0, 0x3, 0x3de7}, {0xfff, 0x8, 0x5, 0xf, 0xacc3, 0x5}, {0x1, 0x81, 0x6, 0x10001, 0x4, 0x7ff4}, {0x5, 0x7fffffff, 0x8, 0x5, 0x1, 0x1d3}, {0x2, 0x5, 0x9, 0x5, 0xcc, 0x401}, {0x8, 0x6, 0x4000000, 0x0, 0x4d84, 0x1439d03e}, {0x2, 0x9, 0x0, 0x0, 0xf, 0x9}, {0x1d4b, 0x0, 0x6, 0x4, 0x1, 0x3}, {0x10000, 0x2c3, 0xb31b, 0x9, 0xfff}, {0x5, 0x81, 0x7, 0x7ff, 0x2, 0xa913}, {0x1ff, 0x0, 0x6, 0x80000000, 0x6, 0x200}, {0x4, 0x5, 0x5d846fe6, 0x800, 0xd042, 0xb61}, {0x1, 0x81, 0x2, 0xbc7, 0x3, 0xa1bb}, {0xffff, 0x8, 0x4, 0x4, 0x2, 0x2}, {0x0, 0x6, 0x5, 0x7, 0x3, 0x6}, {0x4, 0x4, 0x87, 0x2, 0x7fff, 0x6}, {0x3, 0x7, 0x1, 0x3, 0x3, 0x6}, {0xffff, 0x9, 0x1, 0x1, 0xa, 0x9}, {0x4e4, 0x0, 0x8, 0x1, 0x5, 0x6}, {0x4, 0x1, 0x4, 0x1, 0x1, 0x3}, {0xce3, 0x6, 0xfffffff9, 0x8, 0x5, 0x4}, {0xb1337f9f, 0x9, 0x800, 0x0, 0x5, 0x7}], [{0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x6}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6}, {0x1}, {0x1}, {0x0, 0x1}, {}, {0x1}, {0x5}, {}, {0x4, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {}, {0x4}, {0x4}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3eedf438a8550cdc, 0x1}, {0x1}, {0x1}, {0x4}, {0x1}, {0x5}, {0x4}, {0x2}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xac, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0xbf, 0x6, "1378ad374903774ff5ddf1e968ae3859b15214c83d2368d7f4a2c771e0c1c504619364478a76e2fb1007a3faa58bc20f47139337714747700279d9ec08d3d802b1990677827b45451b3eaef181dba4cbde79bf13316bb7874b7f445f226d6ab4eab73a9b762dee92cc25c7afa2dce5929d017c0c30ab72f9231b8917de8c348b368c8094ba4274d6fbda8f1a52dea5b383b9fcd39351144fe53f280f277d0f7a7f5e441b9a9bc80e521cdac6e8d8052835c2202da4a5b7c2c525cb"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_ctinfo={0x154, 0x3, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffff0c9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x47b5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x96}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x10001, 0x6, 0x5, 0xffff7b85}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0xd8, 0x6, "9df1b9b30c2bc3e6942f42ffaa73bdff2e7c21f29525bfba2315a33cad4677abafd6d0566df91c0c35c4e9f8fdb2297d6be8be93515d6000b06ba186feba4953dd744460b02421aa5a5227e390f15ba2397f7733bdb8289c9d20ee9059139d8d4fc25e855c502815c99b5ab49f40c15b0148b97642bdedbb5d3e05b3f568c6e16923a2cc62617c7ee3ff2c6d4c7ffbdbd13961aa5e99b55b6f1f4a3303eb92ccec0ad8ad7c6ca8e49125dcb817541abd5c74ffcd93e8c75c0fdc39b4ec52e0cf020eb55d8c460bd96c53a69be5495f968da213c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x60, 0xb, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4000000}]}, {0x29, 0x6, "532989074499f79e4db4e971513b99e09d818d547d7c0c59fa768b16863ec0c144ea64d782"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_cgroup={{0xb}, {0x4f8, 0x2, [@TCA_CGROUP_EMATCHES={0xb4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x2}, {0x7, 0x80000000, 0x8, 0x8}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x1000}, {0x9, 0x6, 0x1, "5b44217dace1"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x80}, {{0x4, 0x1}, {0x3, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc2e}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_META={0x40, 0x3, 0x0, 0x0, {{0x6, 0x4, 0xac26}, [@TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="1f128fc528d081141e64", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='l', @TCF_META_TYPE_VAR="77641ec5b323"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xfd, 0x1}, {0x6, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xec, 0x8, 0x2}, {0x9, 0x5}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_POLICE={0x98, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x84f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x9, 0x101, 0x1, {0xf5, 0x0, 0x7, 0x2, 0x71, 0x8}, {0x4, 0x2, 0x6, 0x6, 0xff01, 0x100}, 0x81, 0xfffffffb, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x80, 0x5, 0xfffeffff, {0x3, 0x1, 0x9, 0xfffc, 0x642, 0x5}, {0x9, 0x1, 0x5, 0x4, 0x401, 0xc4}, 0x7b5, 0x20000000, 0x7f}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff6}]}, @TCA_CGROUP_EMATCHES={0x1d0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfe5, 0x3, 0xfff7}, {0x0, 0xffffff80, 0x2, 0x1000}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x10}, {0x8, 0x8, 0x0, 0x0, 0xf, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x2, 0x9, 0x9, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0xf0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xff, 0x7, 0x8}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0xc4, 0x2, 0x0, 0x0, {{0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x97, 0x5, "c4ebb2d509c1425e0c33c3089fd921f3f77cac9df1234bbb2bceebd192dec5d8edad362038c8388b3ec371dedbccd28ddc738ce5ef955be5d4c89ce8a0ced6b0cdd267f419ab3335a39c34624890ce5690e451f2bbcf92c97efb613c1dbe8eba03001f684c6c69534584aa9b0a410059f6804bf71ddf36b4f65a473cb95b07e9bb0017f01b6c8a8a0a88892d94cde1a915cadf"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x8}, {0x1, 0x1, 0x2, 'n'}}}]}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0xeb}, {0x4, 0x0, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xa, 0x1, 0xa}, {0x5, 0x80000000, 0x5, 0x6, 0x3, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf000, 0x3, 0x65}, {0xffffffff, 0x0, 0xc, 0x9}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x80}, {0x8, 0x819e, 0x2, 0x3ff}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x4}, {0xb24, 0x165b, 0x1, 0x0, 0x0, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x1d8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x11c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfdd9, 0x7, 0x905e}, {{0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x238, 0x0, 0x0, {{0xf801, 0x8, 0x7fff}, {0x3, 0x6}}}, @TCF_EM_CONTAINER={0x50, 0x3, 0x0, 0x0, {{0x9}, "78816c56e3effdcd79491d5658d9a3d0715e8837f1cec9f2456c41a17c3af1eb91343fe24515c4ee8f2f483a5958f2804f99950134b39bca10afae6664095eb194"}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="810c48cb"]}]}}, @TCF_EM_META={0x8c, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x37, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="7503", @TCF_META_TYPE_VAR="3956512f86d2ff6765", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="a2565a28655a1d2cd804", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="47e414af5d5d"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR="ec0588c4b1820cfe", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xf6, 0x2}, {0x200, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x23, 0x1}, {0x1e, 0x14, 0x1}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="1a6118", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="83e136518af3"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="9e"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x4b5d, 0x9, 0xc}}}]}, @TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x3}, {0x2, 0x7ff, 0x0, 0x7, 0x5, 0x1, 0x3}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x10}, {0x7f, 0x6, 0x401, 0x9}}}, @TCF_EM_CANID={0x6f, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x1}, {{0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfff, 0x7, 0x5}, {{0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x1}, {0x4, 0x8, 0x2, "c772ac42f110d425"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x400}, {0x6, 0x4, 0x6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x8}, {0x1, 0xd, 0xff79, 0x0, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4a4, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_POLICE={0x490, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x99e999d, 0x101, 0x8, 0x5, 0x7, 0x3, 0xfffffff0, 0x81, 0x29a, 0x8, 0xc, 0x80000001, 0x9, 0x3, 0x5, 0x7, 0x1, 0x64de, 0xc478, 0x9, 0x10000, 0x800, 0x98ea, 0x0, 0x3, 0x3, 0x9b, 0x9, 0x0, 0xffff, 0x4, 0x10, 0x3, 0xfffffff7, 0x7fffffff, 0x100, 0x6, 0x6, 0xfffff415, 0x1, 0xa087, 0x0, 0x2, 0x81, 0x6, 0x708b, 0x2, 0x0, 0xcd9, 0x5, 0x2, 0x401, 0x1, 0xcd, 0x50fc, 0x7ff, 0x0, 0x7, 0x101, 0x3, 0x1, 0x3, 0x660cb75f, 0x2, 0x9d50, 0xffff, 0x4bf, 0xc, 0xff, 0x4, 0x2d1, 0x6, 0x2, 0xfffffffd, 0x8d, 0x0, 0x8, 0x6, 0x10, 0xd, 0x5, 0x8, 0x2, 0x0, 0x3, 0x2, 0x4, 0x8, 0x0, 0x2, 0x6, 0x9, 0x3, 0x9, 0x0, 0x8001, 0x0, 0xfff, 0x3, 0x8000, 0x800, 0xfff, 0x8, 0x5, 0x3, 0x3, 0x3, 0x9, 0x4, 0xfffffeff, 0x7, 0x4, 0x5, 0x8000, 0x8001, 0xd6, 0x8, 0x6, 0x7ff, 0x6, 0x5, 0x8, 0xb447, 0x7, 0x0, 0x3ff, 0x1, 0x9, 0x3, 0x8fb6, 0x8, 0x5, 0x101, 0x75, 0x126b, 0x2, 0xcb, 0x3, 0x2, 0x5, 0x0, 0x4, 0x3, 0x7, 0xd, 0x8, 0x0, 0x9, 0x1, 0x7fffffff, 0x7, 0xf404, 0x3, 0x1, 0x0, 0xffff, 0x80, 0x9e48, 0x7, 0x80, 0x2, 0x2, 0x3, 0xfffffff9, 0x401, 0x0, 0x25c, 0x400, 0x7, 0x5, 0xfffff6b8, 0x4, 0x0, 0x5, 0x6, 0x1, 0xffff7702, 0x3, 0x7, 0x5, 0x81, 0x9, 0x3, 0x1, 0x1000, 0x7f, 0x1, 0x1, 0x0, 0x8, 0xfffffffb, 0x6, 0x6, 0x3b93, 0x2, 0x101, 0x4, 0x0, 0x80000000, 0x200, 0x7, 0x3, 0x80000000, 0x4, 0x10001, 0x74, 0x80, 0x0, 0x1, 0x1, 0x80000001, 0x9, 0x1, 0x3, 0x1, 0x0, 0x3, 0x4, 0x7, 0x400, 0xe, 0x9360, 0x382, 0x9, 0x1fe00000, 0x4, 0x0, 0x7fff, 0x3, 0xfffffff0, 0xa, 0xfffffffc, 0xfffffff8, 0x4, 0x4, 0x7ff, 0x2, 0x7ff, 0x8a, 0xe4, 0x3, 0xcef4, 0x2, 0x9, 0x6, 0x0, 0x4, 0x0, 0xfff, 0x81, 0x7, 0x0, 0x3e3, 0x7ff, 0xb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0x9, 0xffffffff, 0xfff, {0x10, 0x1, 0xfffb, 0xff40, 0x7, 0x4000000}, {0x5, 0x2, 0xfff7, 0x8, 0x9, 0x3}, 0x0, 0x1000, 0x80000001}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x7, 0x4, 0xfd7, 0x5, {0x8, 0x1, 0x4, 0xd12c, 0x2, 0x80000000}, {0x0, 0x1, 0x4, 0x3, 0x9, 0x2}, 0x0, 0x3}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x70}]}}, @TCA_CHAIN={0x8, 0xb, 0x85fe}, @TCA_RATE={0x6, 0x5, {0x84, 0xd4}}]}, 0x2060}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x4, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)
timer_create(0x7, 0x0, &(0x7f0000000140)=<r11=>0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f00000005c0)=ANY=[@ANYRES32=r11], 0xff, 0x203, &(0x7f0000000780)="$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") (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a82100000000000014000300000014300000000000000c0016800800018004000c80"], 0x54}}, 0x20008040) (async)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) (async)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000140)) (async)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3, 0x800}}, 0x30) (async)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) (async)
msgget(0x1, 0x100) (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async)
io_setup(0x2e, &(0x7f0000000100))
r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fcntl$setsig(r12, 0x3, 0x0)

6.488165896s ago: executing program 3 (id=395):
r0 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fanotify_mark(0xffffffffffffffff, 0x7e, 0x1001, 0xffffffffffffffff, 0x0)
fchdir(r4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
fsetxattr$smack_xattr_label(r5, &(0x7f0000003080)='security.SMACK64MMAP\x00', &(0x7f00000031c0)={'blkio.bfq.io_service_time_recursive\x00'}, 0x25, 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x20010, r5, 0x0)

5.062634198s ago: executing program 3 (id=396):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x109}], {0x14}}, 0x3c}}, 0x0)

4.67064655s ago: executing program 1 (id=397):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$kcm(0xa, 0x2, 0x3a)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x8)
sendmmsg$inet6(r2, &(0x7f0000001580)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xe09, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290002ff0b0000000008"], 0x18}}], 0x1, 0x0)

4.173624889s ago: executing program 4 (id=398):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x4, 0x1, 0x1})
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000500)=@mmap={0x0, 0x2, 0x4, 0x4, 0x0, {0x77359400}, {0x0, 0x7, 0xfb, 0x98, 0x0, 0x80, "8d27eba8"}, 0xfff, 0x1, {}, 0x9})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r3, &(0x7f0000000380)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
r4 = socket(0x10, 0x80002, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x78, 0x13, 0x53b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_sample={0x60, 0x0, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x78}}, 0x0)
connect$ax25(r3, 0x0, 0x0)

4.102941324s ago: executing program 3 (id=399):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r5 = dup3(0xffffffffffffffff, r4, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x100a}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)={0x1})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf)
r7 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=""/218, 0xda}], 0x1}}], 0x2, 0x10002, 0x0)

4.086779207s ago: executing program 0 (id=400):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0)

3.860172849s ago: executing program 2 (id=401):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r2, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.85972096s ago: executing program 1 (id=402):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x420f40, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x74, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x3ffd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x4811)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x10)

3.599478335s ago: executing program 0 (id=403):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x102, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r2], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}}, 0x4, 0x7}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
r6 = gettid()
fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x0, r6})
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, 0x0)
r7 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000280)={[{@nogrpid}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@bh}, {@nodiscard}, {@quota}]}, 0x83, 0x449, &(0x7f00000007c0)="$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")
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r7, {<r8=>r7}}, './file2\x00'})
ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000001f80)=""/165)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x11cc03, &(0x7f0000002740)=ANY=[@ANYRES16=0x0], 0x1, 0x5eeb, &(0x7f000000e480)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

3.111068907s ago: executing program 3 (id=404):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x8100, r1, 0x1, 0x1}, 0x14)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = io_uring_setup(0x5456, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3})
socket$nl_rdma(0x10, 0x3, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0\x00'}]}, 0x38}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r6}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @private1, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x8}, r6, 0x403}}, 0x48) (fail_nth: 1)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r6, 0x5}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x1, 0x1, "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", 0x2, 0x4, 0x5, 0xf, 0xd, 0x0, 0x6, 0x1}, r6}}, 0x120)
close_range(r3, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)

2.871906825s ago: executing program 4 (id=405):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x4, 0x25dfdbfb, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ftruncate(r6, 0x2000009)
sendfile(r5, r6, 0x0, 0x7ffff004)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x2, 0x1}, 0x20)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x8d69, 0x1ff, 0x1, 0x4, 0x7]}, &(0x7f0000000080)=0x78)
connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000), 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), r10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r12, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000ffdbdf252800000006000600020000000a0001007770616e3100000005002b000000000008002c"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044)

2.712665769s ago: executing program 1 (id=406):
r0 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fanotify_mark(0xffffffffffffffff, 0x7e, 0x1001, 0xffffffffffffffff, 0x0)
fchdir(r4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
fsetxattr$smack_xattr_label(r5, &(0x7f0000003080)='security.SMACK64MMAP\x00', &(0x7f00000031c0)={'blkio.bfq.io_service_time_recursive\x00'}, 0x25, 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x20010, r5, 0x0)

1.762631123s ago: executing program 1 (id=407):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast1}, 0x1c)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet(0x2, 0xa, 0x7e0c)
ioctl$sock_inet_SIOCSARP(r3, 0x8954, &(0x7f0000000000)={{}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4, {0x2, 0x0, @multicast2}, 'lo\x00'})

1.499984807s ago: executing program 4 (id=408):
semget$private(0x0, 0x5, 0x3c0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x5, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @union={0x7, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x6, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x1, [{0x10, 0x9, 0xffffffff}, {0x2, 0x0, 0x63}, {0x7, 0x3, 0x6}, {0x10, 0x6, 0x80000001}, {0x7, 0x8, 0x9}, {0x2, 0x0, 0xb}]}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd}, {0x0, 0x1}, {0xb}, {0x0, 0x4}, {0x9, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x81}}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}]}, {0x0, [0x2e, 0x0, 0x61]}}, &(0x7f0000000740)=""/4096, 0x12d, 0x1000, 0x0, 0x8, 0x10000, @value=r0}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e000000ff010000bcbd00000000100040800400", @ANYRES32=r0, @ANYBLOB="abfad0a500"/20, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="00000000020000000200"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000540)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000dc4c0)={0xb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0xc, "05772799ed7cc7"})
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)

1.467601605s ago: executing program 0 (id=409):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x109}], {0x14}}, 0x3c}}, 0x0)

1.336736817s ago: executing program 2 (id=410):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@mblk_io_submit}, {@resgid}, {@norecovery}, {@nodelalloc}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ada000/0x3000)=nil)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x1, r3, 0xee01, 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x7ff, 0x6, 0x20200, 0xf1, 0x0, 0x0, 0xc6})
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}}], 0x1, 0x48050)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0xf0, 0x0, 0x470, 0xf0, 0xf0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@empty, 0x13, 0x31, 0x7}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff, 0xff000000, 0xff, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffff00], 'gre0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x2b, 0xc, 0x6, 0x28}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0xb}}, @common=@inet=@tcpmss={{0x28}, {0x8, 0xa, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}, 0x31, 0x22, 0x1}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0x0, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xff], 'wlan1\x00', 'vcan0\x00', {0xff}, {0xff}, 0x6c, 0x7, 0x2, 0x2}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x21, 0x2, 0x5f, 0xc, 0x8, 0x204, 0xa1}}, @common=@eui64={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@loopback, 0x2a, 0x8, 0x59}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x1d, 0x25, 0x6748}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670)
r5 = socket$netlink(0x10, 0x3, 0x80000000004)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x4, 0x0)
write(r5, &(0x7f0000000000)="29000000140005b7ff000000040860eb01ff00159f02c26ed638eeb738256e06a40e07fff0797ed9fa", 0x29)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={0x0})

251.730251ms ago: executing program 3 (id=411):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x608501, 0x14a)
fallocate(r0, 0xffa655b4c4d47a22, 0x2000, 0x8000)
r1 = socket$packet(0x11, 0x3, 0x300)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x1018852, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,background_gc=sync,acl,fsync_mone_xattr,disable_roll_forward,checkpoint=disable,background_gc=on,noinline_xattr,discard_unit=block,fsync_mode=strict\fage_extent_cache,extent_cache,fault_injection=18446744073709551615,subj_type=disable_roll_forward,dirsync,\x00'], 0x1, 0x551c, &(0x7f00000079c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x10b)
pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0xb, 0x3, 0xff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @mcast1, 0x7}, 0x1c)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1f3241, 0x0)
pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000009050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e30000000000000000000000014000000020a090100000000000000000000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r8=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r8, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x6000001, {0x0, 0x0, 0x0, r8, {0x7}, {0xd}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c840}, 0x20048054)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r9}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6e3f2d63}}, './file1\x00'})

183.777968ms ago: executing program 0 (id=412):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x14, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @jmp={0x5, 0x1, 0x5, 0x58efebbaa7e2a456, 0x5, 0x18}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x4}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd35e}}], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

122.720009ms ago: executing program 4 (id=413):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0)

33.547957ms ago: executing program 0 (id=414):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r5 = dup3(0xffffffffffffffff, r4, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x100a}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000100)={0x1})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf)
r7 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=""/218, 0xda}], 0x1}}], 0x2, 0x10002, 0x0)

32.358457ms ago: executing program 1 (id=415):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x11, r1, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8)
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$incfs(r1, &(0x7f0000002600)='.pending_reads\x00', 0x1, 0x5a)
openat$smackfs_ambient(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0)
getuid()
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000002740)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000000)="6b5f47c1caea36236ede091e56bdc0d2e572833796cbbd39e83685f6", 0x1c}, {&(0x7f00000001c0)="0acb34feba321a3e8f98014150d244a6b6a91bb9502de08121208261942e8b4c4639ed8d", 0x24}, {&(0x7f00000002c0)="a580ef71a37f2697c487dc614bab7ef13ac93b53a50c5ae8983a4c0209b233155c323ed04e5a4b34be9c6ce7197e55f9799b9788ceec6566b12bbabce513de6d39a07cd909c242a609c560911f660fc6bdc1991a83ea14dfcb28766a7563b65161f42725f1cec1c6aa2c232dcc46b43468b0bd3d66bffb148df85e7d43", 0x7d}], 0x3, &(0x7f0000002680)=ANY=[], 0xb0}}], 0x1, 0x868fb2abb85160a4)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x4, 0x1, 0x1})
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000500)=@overlay={0x1, 0x1, 0x4, 0x2, 0x3, {0x0, 0x2710}, {0x3, 0xc, 0x81, 0x79, 0x4, 0x4, "3bc4a69f"}, 0x800, 0x3, {}, 0xfffff30c})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r5, &(0x7f0000000380)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
connect$ax25(r5, 0x0, 0x0)

1.352093ms ago: executing program 4 (id=416):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x420f40, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x74, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x3ffd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x4811)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x10)

0s ago: executing program 2 (id=417):
r0 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fanotify_mark(0xffffffffffffffff, 0x7e, 0x1001, 0xffffffffffffffff, 0x0)
fchdir(r3)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
fsetxattr$smack_xattr_label(r4, &(0x7f0000003080)='security.SMACK64MMAP\x00', &(0x7f00000031c0)={'blkio.bfq.io_service_time_recursive\x00'}, 0x25, 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x20010, r4, 0x0)

kernel console output (not intermixed with test programs):

0.519268][ T6499] veth1_vlan: entered promiscuous mode
[   40.524554][ T6492] veth1_vlan: entered promiscuous mode
[   40.535041][ T6489] veth0_vlan: entered promiscuous mode
[   40.579751][ T6492] veth0_macvtap: entered promiscuous mode
[   40.583665][ T6492] veth1_macvtap: entered promiscuous mode
[   40.600580][ T6499] veth0_macvtap: entered promiscuous mode
[   40.602936][ T6499] veth1_macvtap: entered promiscuous mode
[   40.608313][ T6489] veth1_vlan: entered promiscuous mode
[   40.615356][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.623377][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.640782][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.651583][ T6492] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.651691][ T6492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.651721][ T6492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.651751][ T6492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.662744][ T6489] veth0_macvtap: entered promiscuous mode
[   40.664802][ T6489] veth1_macvtap: entered promiscuous mode
[   40.692630][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.706183][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.724306][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.726009][ T6499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.726065][ T6499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.726095][ T6499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.726123][ T6499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.761978][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.763822][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.766002][ T6489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.766056][ T6489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.766085][ T6489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.766115][ T6489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.804872][ T6498] veth0_vlan: entered promiscuous mode
[   40.850300][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.850391][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.854802][ T6498] veth1_vlan: entered promiscuous mode
[   40.912222][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.914782][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.940644][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.940707][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.951626][ T6487] veth0_vlan: entered promiscuous mode
[   40.954750][ T6498] veth0_macvtap: entered promiscuous mode
[   40.961709][ T6498] veth1_macvtap: entered promiscuous mode
[   40.972345][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.972407][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.982691][ T6487] veth1_vlan: entered promiscuous mode
[   41.010698][ T6487] veth0_macvtap: entered promiscuous mode
[   41.028484][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.032516][ T6487] veth1_macvtap: entered promiscuous mode
[   41.039844][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.051428][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.051488][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.062544][  T259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.062608][  T259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.068628][ T6498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.068703][ T6498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.068734][ T6498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.068762][ T6498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.072337][ T6492] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   41.078479][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.092171][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.102637][ T6487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.105435][ T6487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.108384][ T6487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.110906][ T6487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.405162][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.419177][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.502140][  T259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.502203][  T259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.120236][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.120305][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.226784][   T55] Bluetooth: hci0: command tx timeout
[   42.226893][   T55] Bluetooth: hci1: command tx timeout
[   42.254126][ T6569] loop2: detected capacity change from 0 to 32768
[   42.270234][ T6572] loop1: detected capacity change from 0 to 32768
[   42.297627][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   42.301248][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.301283][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.317695][   T55] Bluetooth: hci3: command tx timeout
[   42.317814][ T6493] Bluetooth: hci2: command tx timeout
[   42.386627][ T6493] Bluetooth: hci4: command tx timeout
[   42.420353][ T6572] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[   42.426660][ T6569] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[   42.463194][ T6569] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open
[   42.463697][ T6572] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[   42.463697][ T6572]   allowing incompatible features above 0.0: (unknown version)
[   42.463781][ T6572] bcachefs (loop1): initializing new filesystem
[   42.464717][ T6572] bcachefs (loop1): going read-write
[   42.477998][ T6569] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[   42.498638][ T6572] bcachefs (loop1): marking superblocks
[   42.515432][ T6572] bcachefs (loop1): initializing freespace
[   42.538599][ T6572] bcachefs (loop1): done initializing freespace
[   42.567650][ T6572] bcachefs (loop1): reading snapshots table
[   42.567753][ T6572] bcachefs (loop1): reading snapshots done
[   42.637191][ T6572] bcachefs (loop1): done starting filesystem
[   42.714604][ T6569] bcachefs: bch2_fs_get_tree() error: EINVAL
[   42.947479][ T6609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   42.950628][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   44.616951][ T6495] Bluetooth: hci0: command tx timeout
[   44.617043][ T6495] Bluetooth: hci2: command tx timeout
[   44.617097][ T6495] Bluetooth: hci3: command tx timeout
[   44.617138][ T6495] Bluetooth: hci4: command tx timeout
[   44.618665][ T6493] Bluetooth: hci1: command tx timeout
[   46.178853][ T6630] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET)
[   46.323218][ T6629] loop0: detected capacity change from 0 to 128
[   46.325467][ T6629] EXT4-fs: Ignoring removed nobh option
[   46.325521][ T6629] ext4: Unknown parameter 'uid'
[   46.349851][ T6499] bcachefs (loop1): shutting down
[   46.355850][ T6499] bcachefs (loop1): going read-only
[   46.356015][ T6499] bcachefs (loop1): finished waiting for writes to stop
[   46.435352][ T6635] loop4: detected capacity change from 0 to 256
[   46.439078][ T6635] exfat: Deprecated parameter 'namecase'
[   46.442246][ T6635] exfat: Deprecated parameter 'utf8'
[   46.454804][ T6635] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   46.575923][ T6499] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8
[   46.767094][   T55] Bluetooth: hci1: command tx timeout
[   46.767435][   T55] Bluetooth: hci4: command tx timeout
[   46.768036][   T55] Bluetooth: hci3: command tx timeout
[   46.768415][   T55] Bluetooth: hci2: command tx timeout
[   46.768760][   T55] Bluetooth: hci0: command tx timeout
[   47.419275][ T6499] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 9
[   47.425387][ T6499] bcachefs (loop1): clean shutdown complete, journal seq 10
[   47.436666][ T6635] bridge_slave_0: left allmulticast mode
[   47.438633][ T6635] bridge_slave_0: left promiscuous mode
[   47.440825][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.756364][ T6499] bcachefs (loop1): marking filesystem clean
[   47.773328][ T6642] netlink: 'syz.4.13': attribute type 10 has an invalid length.
[   47.800292][ T6651] loop2: detected capacity change from 0 to 1024
[   47.819477][ T6651] =======================================================
[   47.819477][ T6651] WARNING: The mand mount option has been deprecated and
[   47.819477][ T6651]          and is ignored by this kernel. Remove the mand
[   47.819477][ T6651]          option from the mount to silence this warning.
[   47.819477][ T6651] =======================================================
[   47.832594][ T6653] process 'syz.4.13' launched '/dev/fd/11' with NULL argv: empty string added
[   47.900725][ T6635] bridge_slave_1: left allmulticast mode
[   47.902632][ T6635] bridge_slave_1: left promiscuous mode
[   47.904710][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.939874][ T6635] bond0: (slave bond_slave_0): Releasing backup interface
[   48.011196][ T6651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.063838][ T6661] loop0: detected capacity change from 0 to 512
[   48.080229][ T6499] bcachefs (loop1): shutdown complete
[   48.095370][ T6492] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.098912][ T6635] bond0: (slave bond_slave_1): Releasing backup interface
[   48.113318][ T6661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.254815][ T6635] team0: Port device team_slave_0 removed
[   48.265930][ T6489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.289508][ T6635] team0: Port device team_slave_1 removed
[   48.298703][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.303703][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.312704][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.315734][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.327104][ T6538] IPVS: starting estimator thread 0...
[   48.362558][ T6668] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.423614][ T6669] IPVS: using max 34 ests per chain, 81600 per kthread
[   48.451341][ T6642] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   48.561831][ T6674] netlink: 156 bytes leftover after parsing attributes in process `syz.3.21'.
[   48.654997][ T6665] loop2: detected capacity change from 0 to 40427
[   48.711407][ T6677] loop4: detected capacity change from 0 to 512
[   48.754202][ T6665] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   48.754295][ T6665] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   48.763202][ T6665] F2FS-fs (loop2): Unrecognized mount option "fsync_mone_xattr" or missing value
[   48.772573][ T6677] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.22: iget: bogus i_mode (0)
[   48.776728][ T6677] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.22: couldn't read orphan inode 17 (err -117)
[   48.785108][ T6677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.910431][ T6677] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.22: bg 0: block 7: invalid block bitmap
[   49.005804][ T6683] loop3: detected capacity change from 0 to 1024
[   49.050925][ T6683] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   49.053410][ T6683] hfsplus: xattr searching failed
[   49.055397][ T6683] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   49.058374][ T6683] hfsplus: xattr searching failed
[   49.058477][ T6683] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   49.058507][ T6683] hfsplus: xattr searching failed
[   49.060544][ T6683] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   49.060577][ T6683] hfsplus: xattr searching failed
[   49.164352][ T6685] loop2: detected capacity change from 0 to 256
[   49.293394][ T6685] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[   49.293606][ T6685] FAT-fs (loop2): Filesystem has been set read-only
[   49.333944][ T6685] veth0: entered promiscuous mode
[   49.339206][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'.
[   51.644051][ T6701] bridge_slave_0: left allmulticast mode
[   51.645765][ T6701] bridge_slave_0: left promiscuous mode
[   51.651714][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.660270][ T6701] bridge_slave_1: left allmulticast mode
[   51.664262][ T6701] bridge_slave_1: left promiscuous mode
[   51.667391][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.679398][ T6701] bond0: (slave bond_slave_0): Releasing backup interface
[   51.710940][ T6701] bond0: (slave bond_slave_1): Releasing backup interface
[   51.768632][ T6487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.793524][ T6701] team0: Port device team_slave_0 removed
[   51.807419][ T6701] team0: Port device team_slave_1 removed
[   51.807954][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.808003][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.817582][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.817655][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.851984][ T6702] team0: Mode changed to "roundrobin"
[   51.863060][ T6693] loop2: detected capacity change from 0 to 40427
[   51.891289][ T6693] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   51.891354][ T6693] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   51.900774][ T6693] F2FS-fs (loop2): Unrecognized mount option "fsync_mone_xattr" or missing value
[   52.009009][ T6701] vlan0: entered promiscuous mode
[   52.023150][ T6701] team0: Port device vlan0 added
[   52.067670][ T6488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   52.178175][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'.
[   52.324351][ T6701] tipc: Started in network mode
[   52.326500][ T6701] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   52.326706][ T6701] tipc: Enabled bearer <eth:team0>, priority 0
[   52.557261][ T6714] loop2: detected capacity change from 0 to 256
[   52.567289][ T6712] loop3: detected capacity change from 0 to 128
[   52.579437][ T6706] loop4: detected capacity change from 0 to 32768
[   52.582099][ T6706] ocfs2: Bad value for 'commit'
[   52.599408][ T6712] affs: No valid root block on device loop3
[   52.619689][ T6714] FAT-fs (loop2): Directory bread(block 64) failed
[   52.619826][ T6714] FAT-fs (loop2): Directory bread(block 65) failed
[   52.619897][ T6714] FAT-fs (loop2): Directory bread(block 66) failed
[   52.619933][ T6714] FAT-fs (loop2): Directory bread(block 67) failed
[   52.620102][ T6714] FAT-fs (loop2): Directory bread(block 68) failed
[   52.620142][ T6714] FAT-fs (loop2): Directory bread(block 69) failed
[   52.620221][ T6714] FAT-fs (loop2): Directory bread(block 70) failed
[   52.620260][ T6714] FAT-fs (loop2): Directory bread(block 71) failed
[   52.620334][ T6714] FAT-fs (loop2): Directory bread(block 72) failed
[   52.620371][ T6714] FAT-fs (loop2): Directory bread(block 73) failed
[   53.013511][ T6698] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   53.655343][ T6537] tipc: Node number set to 11578026
[   53.871404][ T6725] Bluetooth: hci5: Frame reassembly failed (-84)
[   54.077252][ T6732] loop0: detected capacity change from 0 to 512
[   54.077886][ T6732] EXT4-fs: Ignoring removed bh option
[   54.086414][ T6732] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   54.086454][ T6732] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   54.099702][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   54.107358][ T6731] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma?
[   54.113796][ T6732] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   54.118275][ T6732] EXT4-fs (loop0): 1 truncate cleaned up
[   54.129432][ T6732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.169057][ T6734] loop1: detected capacity change from 0 to 512
[   54.341742][ T6732] EXT4-fs error (device loop0): __ext4_iget:5025: inode #12: block 2: comm syz.0.35: invalid block
[   54.349786][ T6734] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   54.350410][ T6734] EXT4-fs (loop1): 1 truncate cleaned up
[   54.351521][ T6734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.494717][ T6721] loop3: detected capacity change from 0 to 32768
[   54.514107][ T6721] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   54.547878][ T6721] XFS (loop3): Ending clean mount
[   54.639771][ T6498] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   54.764197][ T6489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.475210][ T6499] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.710670][ T6761] loop2: detected capacity change from 0 to 2048
[   55.724471][ T6761] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   56.186862][ T6490] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   56.402123][ T6598] udevd[6598]: incorrect nilfs2 checksum on /dev/loop2
[   56.418916][ T6501] udevd[6501]: incorrect nilfs2 checksum on /dev/loop2
[   56.481933][ T6768] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   56.496632][ T6501] udevd[6501]: incorrect nilfs2 checksum on /dev/loop2
[   57.298873][ T6768] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   57.298989][ T6768] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[   57.301653][ T6768] Remounting filesystem read-only
[   57.358134][ T6492] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[   57.456054][ T6752] loop3: detected capacity change from 0 to 40427
[   57.464584][ T6752] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(83886083)
[   57.468801][ T6752] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   57.471263][ T6752] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3fffff
[   57.473767][ T6752] F2FS-fs (loop3): heap/no_heap options were deprecated
[   57.475804][ T6752] F2FS-fs (loop3): Image doesn't support compression
[   57.488942][ T6752] F2FS-fs (loop3): invalid crc value
[   57.511553][ T6776] loop1: detected capacity change from 0 to 512
[   57.540122][ T6752] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   57.542346][ T6752] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   57.560192][ T6776] EXT4-fs (loop1): 1 orphan inode deleted
[   57.572789][ T6776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.580287][ T4404] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   57.580496][ T4404] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1
[   57.648967][ T6771] loop0: detected capacity change from 0 to 32768
[   57.649551][ T6771] btrfs: Unknown parameter 'fragment'
[   57.901355][ T6498] syz-executor: attempt to access beyond end of device
[   57.901355][ T6498] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   57.901945][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[   57.901976][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   57.901984][ T6498] Call trace:
[   57.901988][ T6498]  show_stack+0x2c/0x3c (C)
[   57.902006][ T6498]  __dump_stack+0x30/0x40
[   57.902017][ T6498]  dump_stack_lvl+0xd8/0x12c
[   57.902040][ T6498]  dump_stack+0x1c/0x28
[   57.902050][ T6498]  f2fs_handle_critical_error+0x34c/0x4b8
[   57.902065][ T6498]  f2fs_stop_checkpoint+0x58/0x6c
[   57.902076][ T6498]  f2fs_write_end_io+0x794/0xadc
[   57.902099][ T6498]  bio_endio+0x81c/0x858
[   57.902114][ T6498]  submit_bio_noacct+0x158/0x176c
[   57.902125][ T6498]  submit_bio+0x354/0x4d4
[   57.902135][ T6498]  f2fs_submit_write_bio+0x13c/0x324
[   57.902148][ T6498]  __submit_merged_bio+0x254/0x704
[   57.902161][ T6498]  __submit_merged_write_cond+0x23c/0x4ac
[   57.902174][ T6498]  f2fs_write_data_pages+0x1e9c/0x27ac
[   57.902188][ T6498]  do_writepages+0x2c0/0x6a8
[   57.902203][ T6498]  filemap_fdatawrite+0x144/0x1e8
[   57.902213][ T6498]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   57.902225][ T6498]  f2fs_write_checkpoint+0x684/0x1694
[   57.902237][ T6498]  kill_f2fs_super+0x21c/0x584
[   57.902251][ T6498]  deactivate_locked_super+0xc4/0x12c
[   57.902263][ T6498]  deactivate_super+0xe0/0x100
[   57.902274][ T6498]  cleanup_mnt+0x31c/0x3ac
[   57.902290][ T6498]  __cleanup_mnt+0x20/0x30
[   57.902301][ T6498]  task_work_run+0x1dc/0x260
[   57.902313][ T6498]  do_notify_resume+0x16c/0x1ec
[   57.902326][ T6498]  el0_svc+0xb4/0x17c
[   57.902340][ T6498]  el0t_64_sync_handler+0x78/0x108
[   57.902354][ T6498]  el0t_64_sync+0x198/0x19c
[   57.909549][ T6498] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   57.961745][ T6792] loop2: detected capacity change from 0 to 512
[   57.962368][ T6792] EXT4-fs: Ignoring removed bh option
[   57.966281][ T6792] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   57.989240][ T6792] EXT4-fs (loop2): 1 truncate cleaned up
[   57.990154][ T6792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.199927][ T6792] EXT4-fs error (device loop2): __ext4_iget:5025: inode #12: block 2: comm syz.2.49: invalid block
[   58.459188][ T6806] trusted_key: syz.1.46 sent an empty control message without MSG_MORE.
[   58.542772][   T31] audit: type=1326 audit(58.150:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6814 comm="syz.3.50" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb955a7a8 code=0x0
[   58.670486][ T6492] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.672969][ T6823] netlink: 44 bytes leftover after parsing attributes in process `syz.3.50'.
[   58.673183][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.50'.
[   58.688674][ T6816] loop4: detected capacity change from 0 to 4096
[   58.688706][ T6809] Zero length message leads to an empty skb
[   58.692512][ T6823] warning: `syz.3.50' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.721871][ T6816] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[   59.355055][ T6839] loop2: detected capacity change from 0 to 32768
[   59.421205][ T6839] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   59.498608][ T6839] XFS (loop2): Ending clean mount
[   59.528649][ T6499] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.533671][   T43] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   59.538824][   T43] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1
[   59.638938][ T6823] loop3: detected capacity change from 0 to 32768
[   59.642490][ T6823] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   59.642490][ T6823] clean (size 2912):
[   59.642490][ T6823] flags:          0
[   59.642490][ T6823] journal_seq:    10
[   59.642490][ T6823] blacklist: seq=8
[   59.642490][ T6823] usage: type=key_version v=0
[   59.642490][ T6823] usage: type=reserved v=0
[   59.642490][ T6823] usage: type=reserved v=0
[   59.642490][ T6823] usage: type=reserved v=0
[   59.642490][ T6823] usage: type=reserved v=0
[   59.642490][ T6823] data_usage: btree: 1/1 [0]=2816
[   59.642490][ T6823] data_usage: journal: 1/1 [0]=0
[   59.642490][ T6823] data_usage: user: 1/1 [0]=16
[   59.642490][ T6823] dev_usage: dev=0  
[   59.642490][ T6823]   free: buckets=83 sectors=0 fragmented=0
[   59.642490][ T6823]   sb: buckets=25 sectors=6152 fragmented=248
[   59.642490][ T6823]   journal: buckets=8 sectors=2048 fragmented=0
[   59.642490][ T6823]   btree: buckets=11 sectors=2816 fragmented=0
[   59.642490][ T6823]   user: buckets=1 sectors=16 fragmented=240
[   59.642490][ T6823]   cached: buckets=0 sectors=0 fragmented=0
[   59.642490][ T6823]   parity: buckets=0 sectors=0 fragmented=0
[   59.642490][ T6823]   stripe: buckets=0 sectors=0 fragmented=0
[   59.642490][ T6823]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   59.642490][ T6823]   need_discard: buckets=0 sectors=0 fragmented=0
[   59.642490][ T6823] clock: read=0
[   59.642490][ T6823] clock: write=1280
[   59.642490][ T6823] (unknown jset_entry_type 255)
[   59.642490][ T6823] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_
[   59.643180][ T6823] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   59.685853][    C0] vkms_vblank_simulate: vblank timer overrun
[   59.822632][ T6492] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   60.913991][ T6882] batadv_slave_0: entered promiscuous mode
[   61.027919][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   62.296769][ T6894] loop4: detected capacity change from 0 to 4096
[   62.369238][ T6894] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[   62.423819][ T6896] loop2: detected capacity change from 0 to 1024
[   62.427571][ T6896] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (20000)
[   62.473414][ T6886] ntfs3(loop4): ino=1d, mi_enum_attr
[   62.473570][ T6886] ntfs3(loop4): ino=1d, mi_enum_attr
[   62.492541][ T6888] loop1: detected capacity change from 0 to 2048
[   62.514206][ T6888] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   62.532681][ T6900] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   62.776763][ T6901] netlink: 'syz.3.68': attribute type 1 has an invalid length.
[   62.776826][ T6901] netlink: 224 bytes leftover after parsing attributes in process `syz.3.68'.
[   62.815137][ T6908] loop4: detected capacity change from 0 to 512
[   62.934445][ T6908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.139258][ T6487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.289332][ T6913] loop1: detected capacity change from 0 to 32768
[   63.318986][ T6913] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   63.344662][ T6913] XFS (loop1): Ending clean mount
[   63.345901][ T6913] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   63.388325][ T6933] loop2: detected capacity change from 0 to 1024
[   63.410521][ T6933] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   63.410583][ T6933] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   63.418547][ T6933] jbd2_journal_init_inode: Cannot locate journal superblock
[   63.418603][ T6933] EXT4-fs (loop2): Could not load journal inode
[   63.491225][ T6936] binder: 6935:6936 ioctl c0306201 20000100 returned -14
[   63.808121][ T6944] loop2: detected capacity change from 0 to 8192
[   63.815794][ T6944] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   63.921382][ T6944] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[   63.921677][ T6944] ntfs3(loop2): ino=5, mi_enum_attr
[   63.921747][ T6944] ntfs3(loop2): Failed to load root (-22).
[   64.114616][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89'.
[   64.132985][ T6966] capability: warning: `syz.3.93' uses deprecated v2 capabilities in a way that may be insecure
[   64.197232][ T6966] loop3: detected capacity change from 0 to 1024
[   64.322910][ T6972] team_slave_0: entered allmulticast mode
[   64.340120][ T6972] team0: Port device team_slave_0 removed
[   64.516924][ T6967] loop4: detected capacity change from 0 to 32768
[   64.801629][ T6963] loop0: detected capacity change from 0 to 32768
[   64.869190][ T2389] ieee802154 phy0 wpan0: encryption failed: -22
[   64.871423][ T2389] ieee802154 phy1 wpan1: encryption failed: -22
[   64.905986][ T6963] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[   64.914054][ T6979] loop2: detected capacity change from 0 to 32768
[   64.936604][ T6979] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   64.954900][ T6963] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=lz4,fsck,nochanges,nojournal_transaction_names,noexcl,read_only,nocow
[   64.954900][ T6963]   allowing incompatible features above 0.0: (unknown version)
[   64.969417][ T6963] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing
[   64.974486][ T6979] XFS (loop2): Ending clean mount
[   64.978868][ T6963] bcachefs (loop0): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:10004000b  compress none
[   64.978928][ T6963]   has non ptr field, deleting
[   64.979055][ T6963] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[   64.979835][ T6963] bcachefs (loop0): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete
[   64.979835][ T6963] Doing compatible version upgrade from 1.3: rebalance_work to 1.25: extent_flags
[   64.979835][ T6963]   running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents
[   64.995198][ T6979] Bluetooth: MGMT ver 1.23
[   65.014978][ T6963] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree alloc level 0/0
[   65.015057][ T6963]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[   65.015072][ T6963]   node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing
[   65.015939][ T6963] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
[   65.015939][ T6963]   btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[   65.029055][ T6963] bcachefs (loop0): accounting_read... done
[   65.057799][ T6963] bcachefs (loop0): alloc_read... done
[   65.057945][ T6963] bcachefs (loop0): snapshots_read... done
[   65.058055][ T6963] bcachefs (loop0): check_allocations...
[   65.062201][ T6963] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree
[   65.062227][ T6963]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[   65.073866][ T6963] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[   65.073916][ T6963]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   65.074415][ T6963] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[   65.074428][ T6963]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   65.084868][ T6963] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[   65.084913][ T6963]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   65.091005][ T6963] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[   65.091034][ T6963]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   65.095414][ T6963] bcachefs (loop0): bucket 0:0 gen 0 data type sb has wrong cached_sectors: got 458752, should be 0, fixing
[   65.097037][ T6963] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
[   65.097122][ T6963] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   65.097271][ T6963] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
[   65.097335][ T6963] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   65.097448][ T6963] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
[   65.097508][ T6963] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   65.218496][ T6963] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
[   65.218605][ T6963] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   65.219628][ T6963] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
[   65.219776][ T6963] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   65.219980][ T6963] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[   65.220067][ T6963] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   65.245395][ T6963] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
[   65.252202][ T6963] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   65.252382][ T6963] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
[   65.252446][ T6963] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
[   65.252634][ T6963] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing
[   65.252704][ T6963] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[   65.252839][ T6963] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing
[   65.252901][ T6963] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[   65.253046][ T6963] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing
[   65.253059][ T6963]   Ratelimiting new instances of previous error
[   65.253142][ T6963] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[   65.253154][ T6963]   Ratelimiting new instances of previous error
[   65.278404][ T6963]  done
[   65.278929][ T6963] bcachefs (loop0): going read-write
[   65.294593][ T6492] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   65.328436][ T6963] bcachefs (loop0): journal_replay...
[   65.438460][ T7006] loop1: detected capacity change from 0 to 512
[   65.508543][ T7006] EXT4-fs (loop1): 1 orphan inode deleted
[   65.509474][ T7006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.527658][ T6578] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   65.527767][ T6578] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1
[   65.541732][ T6963]  done
[   65.543072][ T6963] bcachefs (loop0): check_alloc_info...
[   65.544886][ T6963] bcachefs (loop0): bucket incorrectly unset in need_discard btree
[   65.549230][ T6963]   u64s 13 type alloc_v4 0:31:0 len 0 ver 0: 
[   65.549282][ T6963]     gen 0 oldest_gen 0 data_type need_discard
[   65.549298][ T6963]     journal_seq_nonempty 4
[   65.549308][ T6963]     journal_seq_empty    0
[   65.549317][ T6963]     need_discard         1
[   65.549327][ T6963]     need_inc_gen         1
[   65.549336][ T6963]     dirty_sectors        0
[   65.549345][ T6963]     stripe_sectors       0
[   65.549354][ T6963]     cached_sectors       0
[   65.549363][ T6963]     stripe               0
[   65.549372][ T6963]     stripe_redundancy    0
[   65.555695][ T6963]     io_time[READ]        1
[   65.555711][ T6963]     io_time[WRITE]       512
[   65.555720][ T6963]     fragmentation     0
[   65.555730][ T6963]     bp_start          8
[   65.555739][ T6963]   , fixing
[   65.564158][ T6963]  done
[   65.565971][ T6963] bcachefs (loop0): check_lrus...
[   65.568280][ T6963] bcachefs (loop0): incorrect lru entry: lru fragmentation time 134217728
[   65.568297][ T6963]   u64s 5 type set 18446462598867058688:6597069766690:0 len 0 ver 0
[   65.568308][ T6963]   for u64s 5 type deleted 0:6597069766690:0 len 0 ver 0, fixing
[   65.568418][ T6963]  done
[   65.571945][ T6963] bcachefs (loop0): check_btree_backpointers... done
[   65.572369][ T6963] bcachefs (loop0): check_backpointers_to_extents... done
[   65.574291][ T6963] bcachefs (loop0): check_extents_to_backpointers...
[   65.575658][ T6963] bcachefs (loop0): scanning for missing backpointers in 7/128 buckets
[   65.594173][ T6963]  done
[   65.595492][ T6963] bcachefs (loop0): check_alloc_to_lru_refs...
[   65.597273][ T6963] bcachefs (loop0): missing fragmentation lru entry
[   65.600886][ T6963]   u64s 12 type alloc_v4 0:34:0 len 0 ver 0: 
[   65.602686][ T6963]     gen 0 oldest_gen 0 data_type user
[   65.604290][ T6963]     journal_seq_nonempty 5
[   65.605684][ T6963]     journal_seq_empty    134217728
[   65.607434][ T6963]     need_discard         1
[   65.608803][ T6963]     need_inc_gen         1
[   65.610148][ T6963]     dirty_sectors        16
[   65.611524][ T6963]     stripe_sectors       0
[   65.612896][ T6963]     cached_sectors       0
[   65.614238][ T6963]     stripe               0
[   65.615806][ T6963]     stripe_redundancy    0
[   65.617308][ T6963]     io_time[READ]        1
[   65.618647][ T6963]     io_time[WRITE]       512
[   65.620119][ T6963]     fragmentation     134217728
[   65.621648][ T6963]     bp_start          8
[   65.622953][ T6963]   , fixing
[   65.624427][ T6963]  done
[   65.625477][ T6963] bcachefs (loop0): check_snapshot_trees... done
[   65.631061][ T6963] bcachefs (loop0): check_snapshots...
[   65.631453][ T6963] bcachefs (loop0): snapshot points to missing/incorrect tree:
[   65.635160][ T6963]   u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent          0 children          0          0 subvol 1 tree 0, fixing
[   65.654072][ T6963]  done
[   65.655526][ T6963] bcachefs (loop0): check_subvols... done
[   65.661396][ T6963] bcachefs (loop0): check_subvol_children... done
[   65.661510][ T6963] bcachefs (loop0): delete_dead_snapshots... done
[   65.661552][ T6963] bcachefs (loop0): check_inodes... done
[   65.662299][ T6963] bcachefs (loop0): check_extents... done
[   65.662728][ T6963] bcachefs (loop0): check_indirect_extents... done
[   65.664295][ T6963] bcachefs (loop0): check_dirents... done
[   65.685679][ T6499] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.701571][ T6963] bcachefs (loop0): check_xattrs... done
[   65.701683][ T6963] bcachefs (loop0): check_root... done
[   65.701911][ T6963] bcachefs (loop0): check_unreachable_inodes... done
[   65.702117][ T6963] bcachefs (loop0): check_subvolume_structure... done
[   65.702193][ T6963] bcachefs (loop0): check_directory_structure... done
[   65.702762][ T6963] bcachefs (loop0): check_nlinks...
[   65.703226][ T6963] bcachefs (loop0): inode 536870914 type reg has wrong i_nlink (2780562353, should be 1), fixing
[   65.705716][ T6963]  done
[   65.705932][ T6963] bcachefs (loop0): resume_logged_ops... done
[   65.706011][ T6963] bcachefs (loop0): delete_dead_inodes... done
[   65.713897][ T6963] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[   65.715035][ T6963] bcachefs (loop0): check_alloc_info... done
[   65.733774][ T6963] bcachefs (loop0): check_lrus... done
[   65.737892][ T6963] bcachefs (loop0): check_btree_backpointers... done
[   65.739485][ T6963] bcachefs (loop0): check_backpointers_to_extents... done
[   65.741951][ T6963] bcachefs (loop0): check_extents_to_backpointers... done
[   65.745896][ T6963] bcachefs (loop0): check_alloc_to_lru_refs... done
[   65.749247][ T6963] bcachefs (loop0): check_snapshot_trees... done
[   65.749490][ T6963] bcachefs (loop0): check_snapshots... done
[   65.753868][ T6963] bcachefs (loop0): check_subvols... done
[   65.753999][ T6963] bcachefs (loop0): check_subvol_children... done
[   65.754069][ T6963] bcachefs (loop0): delete_dead_snapshots... done
[   65.754111][ T6963] bcachefs (loop0): check_inodes... done
[   65.754447][ T6963] bcachefs (loop0): check_extents... done
[   65.780930][ T6963] bcachefs (loop0): check_indirect_extents... done
[   65.780981][ T6963] bcachefs (loop0): check_dirents... done
[   65.781508][ T6963] bcachefs (loop0): check_xattrs... done
[   65.833045][ T6963] bcachefs (loop0): check_root... done
[   65.833154][ T6963] bcachefs (loop0): check_unreachable_inodes... done
[   65.833295][ T6963] bcachefs (loop0): check_subvolume_structure... done
[   65.833347][ T6963] bcachefs (loop0): check_directory_structure... done
[   65.833569][ T6963] bcachefs (loop0): check_nlinks... done
[   65.834188][ T6963] bcachefs (loop0): resume_logged_ops... done
[   65.834237][ T6963] bcachefs (loop0): delete_dead_inodes... done
[   65.834808][ T6963] bcachefs (loop0): going read-only
[   65.834842][ T6963] bcachefs (loop0): finished waiting for writes to stop
[   65.843828][ T6963] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24
[   65.844222][ T6963] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24
[   65.851569][ T6963] bcachefs (loop0): clean shutdown complete, journal seq 25
[   65.965627][ T7014] dlm: plock device version mismatch: kernel (1.2.0), user (1.458752.0)
[   66.161379][ T7014] loop2: detected capacity change from 0 to 40427
[   66.232379][ T7014] F2FS-fs (loop2): Unrecognized mount option "background_geap" or missing value
[   66.273693][ T7004] loop3: detected capacity change from 0 to 32768
[   66.294576][ T6963] bcachefs (loop0): marking filesystem clean
[   66.301862][ T6963] bcachefs (loop0): done starting filesystem
[   66.359836][ T7004] (syz.3.100,7004,0):ocfs2_check_set_options:1252 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[   66.363885][ T7004] (syz.3.100,7004,0):ocfs2_fill_super:1177 ERROR: status = -22
[   66.479079][ T6489] bcachefs (loop0): shutting down
[   66.529068][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'.
[   66.533058][ T7025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.449401][ T6502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   67.457781][ T6489] bcachefs (loop0): shutdown complete
[   67.464937][ T6578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   67.474758][  T835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   67.691356][ T7021] loop1: detected capacity change from 0 to 32768
[   67.693745][ T7040] loop4: detected capacity change from 0 to 8
[   67.694654][ T7040] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   67.702395][ T7037] team0: Port device vlan0 removed
[   67.715332][ T4404] tipc: Resetting bearer <eth:team0>
[   67.735186][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.741901][ T7021] (syz.1.102,7021,1):ocfs2_verify_heartbeat:830 ERROR: Mismatching o2cb heartbeat modes
[   67.746779][ T7021] (syz.1.102,7021,1):ocfs2_fill_super:1177 ERROR: status = -22
[   67.755182][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.763637][ T7037] loop3: detected capacity change from 0 to 256
[   67.806403][ T7037] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x5dc98cac, utbl_chksum : 0xe619d30d)
[   67.812935][ T7037] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x07ffffff)
[   67.813008][ T7037] exFAT-fs (loop3): failed to initialize root inode
[   67.839824][ T7040] cramfs: Error -3 while decompressing!
[   67.839936][ T7040] cramfs: 00000000028a96a6(26)->000000002ebbb1ee(4096)
[   67.839988][ T7040] cramfs: Error -3 while decompressing!
[   67.840015][ T7040] cramfs: 0000000053a8f475(26)->00000000bb6ae154(4096)
[   67.840076][ T7040] cramfs: Error -3 while decompressing!
[   67.840101][ T7040] cramfs: 00000000028a96a6(26)->000000002ebbb1ee(4096)
[   67.932554][ T7034] loop2: detected capacity change from 0 to 32768
[   67.935222][ T7034] btrfs: Unknown parameter 'subj_user'
[   68.016376][ T7046] netlink: 'syz.3.109': attribute type 4 has an invalid length.
[   68.037768][ T7047] netlink: 'syz.4.111': attribute type 10 has an invalid length.
[   68.089288][ T7049] netlink: 'syz.4.111': attribute type 10 has an invalid length.
[   68.089366][ T7049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.111'.
[   69.149673][ T7043] bond0: (slave wlan1): Releasing backup interface
[   69.271058][ T7047] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.283577][ T7047] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   69.293273][ T7048] team0: Port device vlan0 added
[   69.293883][ T7049] batadv0: entered promiscuous mode
[   69.293918][ T7049] batadv0: entered allmulticast mode
[   69.300877][ T7049] bond0: (slave batadv0): Releasing backup interface
[   69.311337][ T7072] loop2: detected capacity change from 0 to 1024
[   69.329114][ T7049] bridge0: port 1(batadv0) entered blocking state
[   69.329223][ T7049] bridge0: port 1(batadv0) entered disabled state
[   69.349233][ T7052] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   69.429961][ T7070] syz.2.119: attempt to access beyond end of device
[   69.429961][ T7070] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[   69.433683][ T6577] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   69.433794][ T6577] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   69.439573][ T7070] Buffer I/O error on dev loop2, logical block 100663296, async page read
[   69.439823][ T7070] syz.2.119: attempt to access beyond end of device
[   69.439823][ T7070] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[   69.439867][ T7070] Buffer I/O error on dev loop2, logical block 100663296, async page read
[   69.473158][ T7070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.119'.
[   69.511351][ T7071] loop1: detected capacity change from 0 to 32768
[   69.521358][ T7071] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.118 (7071)
[   69.628426][ T7072] tipc: Started in network mode
[   69.630065][ T7072] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   69.633257][ T7072] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   69.636123][ T7072] tipc: Enabled bearer <udp:syz0>, priority 10
[   69.671339][ T7074] loop4: detected capacity change from 0 to 1024
[   69.699515][ T7071] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.727070][ T7071] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[   69.727163][ T7071] BTRFS info (device loop1): using free-space-tree
[   69.762219][  T259] hfsplus: b-tree write err: -5, ino 4
[   69.851069][ T7071] BTRFS info (device loop1): rebuilding free space tree
[   70.025587][ T1801] cfg80211: failed to load regulatory.db
[   70.106594][ T7098] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   70.106699][ T7098] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   70.114357][ T7098] vhci_hcd vhci_hcd.0: Device attached
[   70.751379][    T9] tipc: Node number set to 1
[   70.849591][ T7110] loop4: detected capacity change from 0 to 256
[   70.882402][ T7110] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   70.936834][   T24] usb 2-1: new high-speed USB device number 2 using vhci_hcd
[   70.993398][ T6499] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   71.382287][ T7099] loop0: detected capacity change from 0 to 32768
[   71.385309][ T7099] XFS: attr2 mount option is deprecated.
[   71.391536][ T7099] XFS: ikeep mount option is deprecated.
[   71.988343][ T7099] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   72.098974][ T7099] XFS (loop0): Ending clean mount
[   72.128163][ T7099] XFS (loop0): Quotacheck needed: Please wait.
[   72.206678][ T7134] bridge0: port 1(batadv0) entered disabled state
[   72.206876][ T7099] XFS (loop0): Quotacheck: Done.
[   72.217066][ T7102] vhci_hcd: cannot find a urb of seqnum 4294967295 max seqnum 1
[   72.221528][   T14] vhci_hcd: stop threads
[   72.224535][   T14] vhci_hcd: release socket
[   72.227333][   T14] vhci_hcd: disconnect device
[   72.335625][ T7115] loop3: detected capacity change from 0 to 32768
[   72.340380][ T7115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.128 (7115)
[   72.380374][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'.
[   72.383080][ T7139] netlink: 10 bytes leftover after parsing attributes in process `syz.1.132'.
[   72.391795][ T7115] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.391924][ T7115] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm
[   72.391966][ T7115] BTRFS info (device loop3): using free-space-tree
[   72.401177][ T6489] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   72.748651][ T7175] loop0: detected capacity change from 0 to 256
[   72.749264][ T7175] exfat: Deprecated parameter 'utf8'
[   72.749335][ T7175] exfat: Deprecated parameter 'namecase'
[   72.749393][ T7175] exfat: Deprecated parameter 'namecase'
[   72.749425][ T7175] exfat: Deprecated parameter 'utf8'
[   72.826176][ T7175] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[   73.017537][ T6498] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   73.214812][ T7135] loop4: detected capacity change from 0 to 32768
[   73.230526][ T7135] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.130 (7135)
[   73.241334][ T7135] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   73.244694][ T7135] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   73.373663][ T7135] BTRFS info (device loop4): rebuilding free space tree
[   73.543815][ T7135] BTRFS info (device loop4): disabling free space tree
[   73.543917][ T7135] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   73.544949][ T7135] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   74.260086][ T7212] loop1: detected capacity change from 0 to 24
[   74.260723][ T7212] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   74.276406][ T7212] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   74.341182][ T7212] VFS: Lookup of 'file0' in romfs loop1 would have caused loop
[   74.790845][ T7228] loop2: detected capacity change from 0 to 4096
[   74.804205][ T7228] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   74.881515][ T7228] ntfs3(loop2): ino=1a, mi_enum_attr
[   74.881603][ T7228] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   74.883966][ T7228] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   75.153265][ T7225] loop3: detected capacity change from 0 to 40427
[   75.164168][ T7225] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   75.169228][ T7225] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   75.171931][ T7225] F2FS-fs (loop3): Unrecognized mount option "fsync_mone_xattr" or missing value
[   75.278405][ T7134] vlan0: entered promiscuous mode
[   75.294482][ T7134] team0: Port device vlan0 added
[   75.308562][ T7134] tipc: Started in network mode
[   75.308626][ T7134] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   75.308705][ T7134] tipc: Enabled bearer <eth:team0>, priority 0
[   75.414017][ T6487] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   75.452352][ T7236] loop2: detected capacity change from 0 to 2048
[   75.499705][ T7236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.530709][ T7236] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   75.549963][ T7236] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[   75.670085][ T7242] loop3: detected capacity change from 0 to 256
[   75.730593][ T7242] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[   75.730727][ T7242] FAT-fs (loop3): Filesystem has been set read-only
[   75.761465][ T7242] veth0: entered promiscuous mode
[   75.767196][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'.
[   76.248450][   T24] vhci_hcd: vhci_device speed not set
[   76.280867][ T7250] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   76.280935][ T7250] CIFS mount error: No usable UNC path provided in device string!
[   76.280935][ T7250] 
[   76.281138][ T7250] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   76.426900][ T6538] tipc: Node number set to 11578026
[   76.473573][ T6492] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.864750][ T7267] loop0: detected capacity change from 0 to 32768
[   77.891554][ T7266] loop3: detected capacity change from 0 to 2048
[   78.002016][ T7267] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.040114][ T7277] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.180944][ T7267] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   78.199149][ T7267] XFS (loop0): Starting recovery (logdev: internal)
[   78.220521][ T7267] XFS (loop0): Ending recovery (logdev: internal)
[   78.710138][ T7284] netlink: 140 bytes leftover after parsing attributes in process `syz.4.160'.
[   80.170839][ T7289] team0: Port device vlan0 removed
[   80.357843][  T259] tipc: Resetting bearer <eth:team0>
[   80.359454][ T7294] team0: Unable to change to the same mode the team is in
[   80.398822][ T7289] team0: Port device vlan0 added
[   80.474787][ T7289] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   80.545958][ T6489] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   80.716459][ T7308] loop1: detected capacity change from 0 to 16
[   80.721261][ T7308] erofs: Unknown parameter '18446744073709551615'
[   81.139868][ T7303] loop3: detected capacity change from 0 to 32768
[   81.147567][ T7303] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.164 (7303)
[   81.161605][ T7303] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   81.164926][ T7303] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[   81.167740][ T7303] BTRFS info (device loop3): using free-space-tree
[   81.221435][ T7313] loop1: detected capacity change from 0 to 32768
[   81.234763][   T14] BTRFS warning (device loop3): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0x485369b20ad1c2ba0b8d0b64027c6c49e3eac44b81d11f87bbc1e2bf71e4bd77 level 1
[   81.244210][ T7303] BTRFS warning (device loop3): failed to read fs tree: -5
[   81.249011][ T7313] (syz.1.167,7313,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[   81.260855][ T7313] (syz.1.167,7313,1):ocfs2_fill_super:1177 ERROR: status = -22
[   81.280396][ T7311] loop2: detected capacity change from 0 to 40427
[   81.283971][ T7311] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   81.286036][ T7311] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   81.298463][ T7311] F2FS-fs (loop2): Unrecognized mount option "fsync_mone_xattr" or missing value
[   81.323217][ T7303] BTRFS error (device loop3): open_ctree failed: -5
[   81.374811][ T7306] loop0: detected capacity change from 0 to 40427
[   81.378515][ T7306] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   81.378582][ T7306] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   81.383723][ T7306] F2FS-fs (loop0): Unrecognized mount option "fsync_mone_xattr" or missing value
[   81.421222][ T7313] netlink: 'syz.1.167': attribute type 2 has an invalid length.
[   81.434759][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'.
[   81.732663][   T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   81.739206][   T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   82.043344][ T7343] loop2: detected capacity change from 0 to 256
[   82.083740][   T24] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   82.268538][ T7343] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[   82.268808][ T7343] FAT-fs (loop2): Filesystem has been set read-only
[   82.578541][ T7345] loop0: detected capacity change from 0 to 256
[   83.628823][ T7313] loop1: detected capacity change from 0 to 8
[   84.144530][ T7313] SQUASHFS error: lzo decompression failed, data probably corrupt
[   84.144674][ T7313] SQUASHFS error: Failed to read block 0x91: -5
[   84.145364][ T7313] SQUASHFS error: Unable to read metadata cache entry [8f]
[   84.145407][ T7313] SQUASHFS error: Unable to read inode 0x11f
[   84.173869][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.178401][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.683782][ T7355] fido_id[7355]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   85.688896][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'.
[   85.763085][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.174'.
[   85.770579][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.174'.
[   85.784724][ T7370] random: crng reseeded on system resumption
[   85.839295][ T7381] loop0: detected capacity change from 0 to 64
[   86.251908][ T7390] syzkaller0: entered allmulticast mode
[   86.252430][ T7390] RDS: rds_bind could not find a transport for fec0:ffff::, load rds_tcp or rds_rdma?
[   86.252850][ T7390] capability: warning: `syz.0.179' uses 32-bit capabilities (legacy support in use)
[   86.300403][ T7389] loop3: detected capacity change from 0 to 512
[   86.301393][ T7389] EXT4-fs: Ignoring removed bh option
[   86.360340][ T7389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   86.738669][ T7380] syzkaller0: left allmulticast mode
[   86.874268][ T7389] EXT4-fs (loop3): 1 truncate cleaned up
[   86.875257][ T7389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.087728][ T7389] EXT4-fs error (device loop3): __ext4_iget:5025: inode #12: block 2: comm syz.3.180: invalid block
[   87.894921][ T6498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.937669][ T7400] loop4: detected capacity change from 0 to 8
[   87.939659][ T7400] squashfs: Unknown parameter ''
[   87.945429][ T7403] loop0: detected capacity change from 0 to 8
[   88.037850][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.038705][ T7403] SQUASHFS error: zlib decompression failed, data probably corrupt
[   88.155933][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.156545][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.157009][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.157153][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.157670][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.195518][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.202694][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.204606][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.204717][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.204794][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.204934][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.204996][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.205103][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.205214][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.205286][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.205343][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.205519][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.205577][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.205645][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.205757][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.205819][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.205881][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.206005][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.206074][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.206137][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.208021][ T7413] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[   88.218282][ T7411] overlayfs: failed to resolve './bus': -2
[   88.221882][ T7411] mmap: syz.2.185 (7411) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   88.222180][ T7411] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   88.222205][ T7411] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   88.222216][ T7411] overlayfs: missing 'lowerdir'
[   88.226921][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.226991][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.227055][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.227168][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.227224][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.227278][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.227386][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.227440][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.227493][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.227636][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.227696][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.230162][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.230295][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231133][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231190][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231302][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231357][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231415][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231610][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231664][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231719][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231822][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231877][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.231930][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232106][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232167][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232232][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232432][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232495][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232545][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232655][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232704][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232765][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232864][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.232927][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.310367][ T7402] SQUASHFS error: Failed to read block 0x4de: -5
[   88.851439][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.851553][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.851663][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.851747][ T7403] SQUASHFS error: Failed to read block 0x4de: -5
[   88.921907][ T7410] loop2: detected capacity change from 0 to 4096
[   88.930390][   T24] kernel write not supported for file /127/attr/sockcreate (pid: 24 comm: kworker/1:0)
[   88.979462][ T7424] FAULT_INJECTION: forcing a failure.
[   88.979462][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   88.979541][ T7424] CPU: 1 UID: 0 PID: 7424 Comm: syz.3.188 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[   88.979556][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   88.979563][ T7424] Call trace:
[   88.979566][ T7424]  show_stack+0x2c/0x3c (C)
[   88.979583][ T7424]  __dump_stack+0x30/0x40
[   88.979595][ T7424]  dump_stack_lvl+0xd8/0x12c
[   88.979605][ T7424]  dump_stack+0x1c/0x28
[   88.979614][ T7424]  should_fail_ex+0x41c/0x594
[   88.979627][ T7424]  should_fail+0x14/0x24
[   88.979637][ T7424]  should_fail_usercopy+0x20/0x30
[   88.979649][ T7424]  _inline_copy_from_user+0x40/0x180
[   88.979662][ T7424]  kstrtouint_from_user+0xbc/0x158
[   88.979673][ T7424]  proc_fail_nth_write+0x94/0x190
[   88.979686][ T7424]  vfs_write+0x2a0/0x97c
[   88.979697][ T7424]  ksys_write+0x120/0x210
[   88.979707][ T7424]  __arm64_sys_write+0x7c/0x90
[   88.979717][ T7424]  invoke_syscall+0x98/0x2b8
[   88.979728][ T7424]  el0_svc_common+0x130/0x23c
[   88.979738][ T7424]  do_el0_svc+0x48/0x58
[   88.979748][ T7424]  el0_svc+0x58/0x17c
[   88.979762][ T7424]  el0t_64_sync_handler+0x78/0x108
[   88.979775][ T7424]  el0t_64_sync+0x198/0x19c
[   89.846054][ T7441] netlink: 'syz.0.191': attribute type 10 has an invalid length.
[   89.874511][ T7441] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.898753][ T7441] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   90.106723][ T7440] loop4: detected capacity change from 0 to 512
[   90.119349][ T7440] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   90.119415][ T7440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[   90.119595][ T7440] EXT4-fs (loop4): orphan cleanup on readonly fs
[   90.121161][ T7440] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13
[   90.121304][ T7440] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13
[   90.122654][ T7440] EXT4-fs (loop4): 1 truncate cleaned up
[   90.123607][ T7440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   90.864746][ T6487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.463085][ T7430] loop1: detected capacity change from 0 to 32768
[   91.469220][ T7430] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.190 (7430)
[   91.477182][ T7430] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   91.477279][ T7430] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[   91.477315][ T7430] BTRFS info (device loop1): using free-space-tree
[   91.686588][ T7468] loop4: detected capacity change from 0 to 16
[   91.812703][ T7468] erofs (device loop4): mounted with root inode @ nid 36.
[   92.544399][ T6499] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.613799][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'.
[   92.761450][ T7488] overlayfs: failed to resolve './file0': -2
[   93.607487][ T7493] loop3: detected capacity change from 0 to 8
[   93.643159][ T7331] udevd[7331]: incorrect cramfs checksum on /dev/loop3
[   93.646760][ T7493] cramfs: Error -3 while decompressing!
[   93.646825][ T7493] cramfs: 000000004918c9e1(26)->00000000e856351e(4096)
[   93.646862][ T7493] cramfs: Error -5 while decompressing!
[   93.646881][ T7493] cramfs: 00000000037d31ec(26)->00000000b0609503(4096)
[   93.646908][ T7493] cramfs: Error -3 while decompressing!
[   93.646926][ T7493] cramfs: 00000000386904a6(16)->0000000003fd5ef6(4096)
[   93.646961][ T7493] cramfs: Error -3 while decompressing!
[   93.646980][ T7493] cramfs: 000000004918c9e1(26)->00000000e856351e(4096)
[   93.745095][ T7503] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   93.784500][ T7502] iommufd_mock iommufd_mock0: Adding to iommu group 1
[   93.802477][ T7331] udevd[7331]: incorrect cramfs checksum on /dev/loop3
[   93.863165][ T7506] mkiss: ax0: crc mode is auto.
[   93.915014][ T7502] iommufd_mock iommufd_mock2: Adding to iommu group 2
[   93.945174][ T7503] iommufd_mock iommufd_mock3: Adding to iommu group 3
[   93.951696][ T7502] iommufd_mock iommufd_mock4: Adding to iommu group 4
[   93.963616][ T7502] iommufd_mock iommufd_mock5: Adding to iommu group 5
[   94.178678][ T7515] loop4: detected capacity change from 0 to 764
[   95.310070][ T7525] netlink: 732 bytes leftover after parsing attributes in process `syz.0.211'.
[   95.313431][ T7525] netlink: 732 bytes leftover after parsing attributes in process `syz.0.211'.
[   95.398834][ T7526] loop2: detected capacity change from 0 to 4096
[   95.400795][ T7526] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   95.412642][ T7531] Symlink component flag not implemented
[   95.415539][ T7531] Symlink component flag not implemented (7)
[   95.449665][ T7526] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   95.636762][ T7533] loop3: detected capacity change from 0 to 4096
[   95.746118][ T7537] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.433915][ T7541] binder: BINDER_SET_CONTEXT_MGR already set
[   96.434077][ T7541] binder: 7518:7541 ioctl 4018620d 20000040 returned -16
[   96.434535][ T7541] binder: 7518:7541 got transaction to invalid handle, 1
[   96.434679][ T7541] binder: 7541:7518 cannot find target node
[   96.434709][ T7541] binder: 7518:7541 transaction async to 0:0 failed 2/29201/-22, code 0 size 72-24 line 3150
[   96.435013][ T7541] binder: 7518:7541 ioctl c018620c 20000100 returned -1
[   96.575816][    T9] binder: undelivered TRANSACTION_ERROR: 29201
[   97.867844][ T7556] loop0: detected capacity change from 0 to 1024
[   98.211540][ T7533] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=56, inode=144115188075855884, rec_len=0, name_len=0
[   98.227777][ T7533] Remounting filesystem read-only
[   98.232327][ T7533] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=56, inode=144115188075855884, rec_len=0, name_len=0
[   98.244897][ T7533] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=56, inode=144115188075855884, rec_len=0, name_len=0
[   98.252679][ T7533] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=56, inode=144115188075855884, rec_len=0, name_len=0
[   98.440944][ T7562] loop4: detected capacity change from 0 to 1024
[  100.435524][ T7562] loop4: detected capacity change from 0 to 32768
[  100.448651][ T7562] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.225 (7562)
[  100.461305][ T7569] loop3: detected capacity change from 0 to 32768
[  100.489919][ T7562] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  100.490036][ T7562] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  100.490094][ T7562] BTRFS info (device loop4): using free-space-tree
[  100.525304][ T7569] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  100.589592][ T7569] XFS (loop3): Ending clean mount
[  100.598847][ T7569] XFS (loop3): Quotacheck needed: Please wait.
[  100.666840][ T7569] XFS (loop3): Quotacheck: Done.
[  100.722973][ T6487] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  100.730782][ T6498] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  100.767852][ T7585] loop1: detected capacity change from 0 to 32768
[  100.802871][ T7585] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.231 (7585)
[  100.840081][ T7585] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  100.840196][ T7585] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[  100.840234][ T7585] BTRFS info (device loop1): using free-space-tree
[  100.983327][ T7583] loop0: detected capacity change from 0 to 32768
[  101.032329][ T7611] loop3: detected capacity change from 0 to 32768
[  101.040980][ T7611] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.233 (7611)
[  101.072485][ T7611] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  101.072592][ T7611] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  101.072633][ T7611] BTRFS info (device loop3): using free-space-tree
[  101.232538][ T6499] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  101.241434][ T7583] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  101.290440][ T7583] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  101.290440][ T7583]   allowing incompatible features above 0.0: (unknown version)
[  101.290597][ T7583] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  101.290723][ T7583] bcachefs (loop0): Version upgrade required:
[  101.290723][ T7583] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  101.290723][ T7583] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  101.290723][ T7583]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  101.365594][ T7583] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree alloc level 0/0
[  101.365645][ T7583]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  101.365677][ T7583]   node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing
[  101.365969][ T7583] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
[  101.365969][ T7583]   btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  101.390960][ T7583] bcachefs (loop0): accounting_read... done
[  101.417136][ T7583] bcachefs (loop0): alloc_read... done
[  101.417290][ T7583] bcachefs (loop0): snapshots_read... done
[  101.417376][ T7583] bcachefs (loop0): check_allocations...
[  101.426381][ T7583] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree
[  101.426427][ T7583]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  101.446103][ T7583] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[  101.446148][ T7583]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  101.452293][ T7583] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[  101.452312][ T7583]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  101.495456][ T7583] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[  101.495508][ T7583]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  101.500958][ T7583] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[  101.500976][ T7583]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  101.501694][ T7583] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
[  101.501756][ T7583] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  101.501973][ T7583] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
[  101.502047][ T7583] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  101.502172][ T7583] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
[  101.502234][ T7583] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  101.502352][ T7583] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
[  101.502413][ T7583] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  101.502530][ T7583] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
[  101.502593][ T7583] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  101.502704][ T7583] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[  101.502764][ T7583] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  101.502895][ T7583] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
[  101.502956][ T7583] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  101.503088][ T7583] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
[  101.503148][ T7583] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
[  101.503260][ T7583] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing
[  101.503320][ T7583] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[  101.503431][ T7583] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing
[  101.503495][ T7583] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[  101.503616][ T7583] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing
[  101.503629][ T7583]   Ratelimiting new instances of previous error
[  101.503704][ T7583] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[  101.503717][ T7583]   Ratelimiting new instances of previous error
[  101.507311][ T6490] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  101.518383][ T6498] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  101.577687][ T7583]  done
[  101.598373][ T7583] bcachefs (loop0): going read-write
[  101.622484][ T7583] bcachefs (loop0): journal_replay... done
[  101.914428][ T7583] bcachefs (loop0): check_alloc_info... done
[  101.963250][ T7583] bcachefs (loop0): check_lrus... done
[  101.964086][ T7583] bcachefs (loop0): check_btree_backpointers... done
[  101.964913][ T7583] bcachefs (loop0): check_backpointers_to_extents... done
[  102.834617][ T7583] bcachefs (loop0): check_extents_to_backpointers...
[  102.835442][ T7583] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets
[  102.836055][ T7583]  done
[  102.918401][ T7583] bcachefs (loop0): check_alloc_to_lru_refs... done
[  102.938550][ T7583] bcachefs (loop0): bucket_gens_init... done
[  102.953992][ T7583] bcachefs (loop0): check_snapshot_trees... done
[  103.368598][ T7583] bcachefs (loop0): check_snapshots...
[  103.369324][ T7583] bcachefs (loop0): snapshot points to missing/incorrect tree:
[  103.369375][ T7583]   u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent          0 children          0          0 subvol 1 tree 0, fixing
[  103.395041][ T7583]  done
[  103.405992][ T7583] bcachefs (loop0): check_subvols... done
[  103.424160][ T7583] bcachefs (loop0): check_subvol_children... done
[  103.436804][ T7583] bcachefs (loop0): delete_dead_snapshots... done
[  103.441261][ T7583] bcachefs (loop0): check_inodes...
[  103.441866][ T7583] bcachefs (loop0): inode points to missing dirent
[  103.441961][ T7583]   inum: 4098:4294967295 
[  103.441980][ T7583]     mode=40755
[  103.441995][ T7583]     flags=(15300000)
[  103.442009][ T7583]     journal_seq=4
[  103.442023][ T7583]     hash_seed=ece93825deac2443
[  103.442047][ T7583]     hash_type=siphash
[  103.442061][ T7583]     bi_size=0
[  103.442075][ T7583]     bi_sectors=0
[  103.442088][ T7583]     bi_version=0
[  103.442102][ T7583]     bi_atime=2770562249
[  103.442116][ T7583]     bi_ctime=2780562352
[  103.442130][ T7583]     bi_mtime=2780562352
[  103.442144][ T7583]     bi_otime=2770562249
[  103.442165][ T7583]     bi_uid=0
[  103.442179][ T7583]     bi_gid=0
[  103.442192][ T7583]     bi_nlink=0
[  103.442206][ T7583]     bi_generation=0
[  103.442220][ T7583]     bi_dev=0
[  103.442233][ T7583]     bi_data_checksum=0
[  103.442247][ T7583]     bi_compression=0
[  103.442261][ T7583]     bi_project=0
[  103.442275][ T7583]     bi_background_compression=0
[  103.442289][ T7583]     bi_data_replicas=0
[  103.442303][ T7583]     bi_promote_target=0
[  103.442317][ T7583]     bi_foreground_target=64
[  103.442331][ T7583]     bi_background_target=1
[  103.442345][ T7583]     bi_erasure_code=0
[  103.442359][ T7583]     bi_fields_set=0
[  103.442373][ T7583]     bi_dir=0
[  103.442386][ T7583]     bi_dir_offset=32
[  103.442400][ T7583]     bi_subvol=0
[  103.442414][ T7583]     bi_parent_subvol=0
[  103.442428][ T7583]     bi_nocow=0
[  103.442442][ T7583]     bi_depth=0
[  103.442455][ T7583]     bi_inodes_32bit=0
[  103.442469][ T7583]     bi_casefold=0, fixing
[  103.476642][ T7583]  done
[  103.495446][ T7583] bcachefs (loop0): check_extents... done
[  103.514865][ T7583] bcachefs (loop0): check_indirect_extents... done
[  103.551092][ T7583] bcachefs (loop0): check_dirents...
[  103.551926][ T7583] bcachefs (loop0): directory with missing backpointer
[  103.551967][ T7583]   u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir
[  103.551980][ T7583]   inum: 4098:4294967295 
[  103.551990][ T7583]     mode=40755
[  103.551999][ T7583]     flags=(11300000)
[  103.552008][ T7583]     journal_seq=22
[  103.552017][ T7583]     hash_seed=ece93825deac2443
[  103.552026][ T7583]     hash_type=siphash
[  103.552043][ T7583]     bi_size=0
[  103.552051][ T7583]     bi_sectors=0
[  103.552060][ T7583]     bi_version=0
[  103.552069][ T7583]     bi_atime=2770562249
[  103.552078][ T7583]     bi_ctime=2780562352
[  103.552087][ T7583]     bi_mtime=2780562352
[  103.552096][ T7583]     bi_otime=2770562249
[  103.552106][ T7583]     bi_uid=0
[  103.552114][ T7583]     bi_gid=0
[  103.552123][ T7583]     bi_nlink=0
[  103.552132][ T7583]     bi_generation=0
[  103.552141][ T7583]     bi_dev=0
[  103.552149][ T7583]     bi_data_checksum=0
[  103.552158][ T7583]     bi_compression=0
[  103.552167][ T7583]     bi_project=0
[  103.552176][ T7583]     bi_background_compression=0
[  103.552186][ T7583]     bi_data_replicas=0
[  103.552195][ T7583]     bi_promote_target=0
[  103.552204][ T7583]     bi_foreground_target=64
[  103.552213][ T7583]     bi_background_target=1
[  103.552222][ T7583]     bi_erasure_code=0
[  103.552231][ T7583]     bi_fields_set=0
[  103.552240][ T7583]     bi_dir=0
[  103.552249][ T7583]     bi_dir_offset=0
[  103.552258][ T7583]     bi_subvol=0
[  103.552266][ T7583]     bi_parent_subvol=0
[  103.552276][ T7583]     bi_nocow=0
[  103.552284][ T7583]     bi_depth=0
[  103.552297][ T7583]     bi_inodes_32bit=0
[  103.552306][ T7583]     bi_casefold=0, fixing
[  103.553106][ T7583]  done
[  103.586369][ T7583] bcachefs (loop0): check_xattrs... done
[  103.587313][ T7583] bcachefs (loop0): check_root... done
[  103.587988][ T7583] bcachefs (loop0): check_unreachable_inodes... done
[  103.588761][ T7583] bcachefs (loop0): check_subvolume_structure... done
[  103.589363][ T7583] bcachefs (loop0): check_directory_structure... done
[  103.602301][ T7583] bcachefs (loop0): check_nlinks...
[  103.602734][ T7583] bcachefs (loop0): inode 536870914 type reg has wrong i_nlink (2780562353, should be 1), fixing
[  103.602856][ T7583]  done
[  103.632144][ T7583] bcachefs (loop0): resume_logged_ops... done
[  103.632230][ T7583] bcachefs (loop0): delete_dead_inodes... done
[  103.632499][ T7583] bcachefs (loop0): set_fs_needs_rebalance...
[  103.643975][ T7693] binder: BINDER_SET_CONTEXT_MGR already set
[  103.644016][ T7693] binder: 7675:7693 ioctl 4018620d 20000040 returned -16
[  103.644382][ T7693] binder: 7675:7693 got transaction to invalid handle, 1
[  103.644411][ T7693] binder: 7693:7675 cannot find target node
[  103.644434][ T7693] binder: 7675:7693 transaction async to 0:0 failed 4/29201/-22, code 0 size 72-24 line 3150
[  103.644662][ T7693] binder: 7675:7693 ioctl c018620c 20000100 returned -1
[  103.653353][ T7583]  done
[  103.696492][ T7583] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[  103.696534][ T7583] bcachefs (loop0): check_alloc_info... done
[  103.720786][ T7583] bcachefs (loop0): check_lrus... done
[  103.720856][ T7583] bcachefs (loop0): check_btree_backpointers... done
[  103.723865][ T7583] bcachefs (loop0): check_backpointers_to_extents... done
[  103.731888][ T7583] bcachefs (loop0): check_extents_to_backpointers... done
[  103.732582][ T7583] bcachefs (loop0): check_alloc_to_lru_refs...
[  103.754589][ T6502] binder: undelivered TRANSACTION_ERROR: 29201
[  103.760085][ T7583]  done
[  103.760131][ T7583] bcachefs (loop0): bucket_gens_init... done
[  103.761230][ T7583] bcachefs (loop0): check_snapshot_trees... done
[  103.763040][ T7583] bcachefs (loop0): check_snapshots... done
[  103.763139][ T7583] bcachefs (loop0): check_subvols... done
[  103.763224][ T7583] bcachefs (loop0): check_subvol_children... done
[  103.763270][ T7583] bcachefs (loop0): delete_dead_snapshots... done
[  103.763300][ T7583] bcachefs (loop0): check_inodes... done
[  103.763623][ T7583] bcachefs (loop0): check_extents... done
[  103.763978][ T7583] bcachefs (loop0): check_indirect_extents... done
[  103.764024][ T7583] bcachefs (loop0): check_dirents... done
[  103.764521][ T7583] bcachefs (loop0): check_xattrs... done
[  103.764630][ T7583] bcachefs (loop0): check_root... done
[  103.764688][ T7583] bcachefs (loop0): check_unreachable_inodes... done
[  103.764815][ T7583] bcachefs (loop0): check_subvolume_structure... done
[  103.764866][ T7583] bcachefs (loop0): check_directory_structure... done
[  103.765109][ T7583] bcachefs (loop0): check_nlinks...
[  103.782075][ T7669] loop2: detected capacity change from 0 to 32768
[  103.791864][ T7583]  done
[  103.791904][ T7583] bcachefs (loop0): resume_logged_ops... done
[  103.791950][ T7583] bcachefs (loop0): delete_dead_inodes... done
[  103.792006][ T7583] bcachefs (loop0): set_fs_needs_rebalance... done
[  103.793595][ T7583] bcachefs (loop0): done starting filesystem
[  103.798173][ T7669] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.237 (7669)
[  103.799479][ T7583] bcachefs (loop0): shutting down
[  103.799505][ T7583] bcachefs (loop0): going read-only
[  103.799531][ T7583] bcachefs (loop0): finished waiting for writes to stop
[  103.867134][ T7583] bcachefs (loop0): flushing journal and stopping allocators, journal seq 32
[  103.876746][ T7583] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 33
[  103.884933][ T7583] bcachefs (loop0): clean shutdown complete, journal seq 34
[  103.957900][ T7583] bcachefs (loop0): marking filesystem clean
[  104.032110][ T7669] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.032198][ T7669] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm
[  104.032236][ T7669] BTRFS info (device loop2): using free-space-tree
[  104.088462][ T7583] bcachefs (loop0): shutdown complete
[  104.214755][ T7695] loop4: detected capacity change from 0 to 8192
[  104.311579][ T7707] loop1: detected capacity change from 0 to 40427
[  104.317166][ T7707] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288)
[  104.318500][ T7707] F2FS-fs (loop1): heap/no_heap options were deprecated
[  104.509161][ T7707] F2FS-fs (loop1): invalid crc value
[  104.532129][ T7707] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  104.733671][ T6492] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.101893][ T7724] loop2: detected capacity change from 0 to 512
[  105.111078][ T7724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16)
[  105.111117][ T7724] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  105.111194][ T7724] vhci_hcd vhci_hcd.0: Device attached
[  105.121770][ T7724] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(18)
[  105.121813][ T7724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  105.121894][ T7724] vhci_hcd vhci_hcd.0: Device attached
[  105.122697][ T7724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  105.124025][ T7724] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(22)
[  105.124068][ T7724] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  105.124113][ T7724] vhci_hcd vhci_hcd.0: Device attached
[  105.132334][ T7724] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(24)
[  105.132364][ T7724] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  105.132410][ T7724] vhci_hcd vhci_hcd.0: Device attached
[  105.139123][ T7724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(26)
[  105.139154][ T7724] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  105.139211][ T7724] vhci_hcd vhci_hcd.0: Device attached
[  105.139961][ T7724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  105.140671][ T7724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  105.163158][ T7725] vhci_hcd: connection closed
[  105.163390][ T7727] vhci_hcd: connection closed
[  105.164682][  T835] vhci_hcd: stop threads
[  105.165260][  T835] vhci_hcd: release socket
[  105.165297][  T835] vhci_hcd: disconnect device
[  105.167352][ T7731] vhci_hcd: connection closed
[  105.167812][  T835] vhci_hcd: stop threads
[  105.167842][  T835] vhci_hcd: release socket
[  105.167870][  T835] vhci_hcd: disconnect device
[  105.171887][  T835] vhci_hcd: stop threads
[  105.171913][  T835] vhci_hcd: release socket
[  105.171941][  T835] vhci_hcd: disconnect device
[  105.172003][ T7729] vhci_hcd: connection closed
[  105.173772][  T835] vhci_hcd: stop threads
[  105.173806][  T835] vhci_hcd: release socket
[  105.173833][  T835] vhci_hcd: disconnect device
[  105.173884][ T7733] vhci_hcd: connection closed
[  105.174202][  T835] vhci_hcd: stop threads
[  105.174228][  T835] vhci_hcd: release socket
[  105.174254][  T835] vhci_hcd: disconnect device
[  105.503913][ T7737] loop3: detected capacity change from 0 to 4096
[  107.325429][ T7740] loop4: detected capacity change from 0 to 40427
[  107.649670][ T7799] loop2: detected capacity change from 0 to 256
[  107.654493][ T7799] vfat: Unknown parameter 'uni_xhate'
[  107.710693][ T7799] loop2: detected capacity change from 0 to 512
[  108.059917][ T7807] binder: BINDER_SET_CONTEXT_MGR already set
[  108.059987][ T7807] binder: 7770:7807 ioctl 4018620d 20000040 returned -16
[  108.060365][ T7807] binder: 7770:7807 got transaction to invalid handle, 1
[  108.060405][ T7807] binder: 7807:7770 cannot find target node
[  108.060435][ T7807] binder: 7770:7807 transaction async to 0:0 failed 6/29201/-22, code 0 size 72-24 line 3150
[  108.060681][ T7807] binder: 7770:7807 ioctl c018620c 20000100 returned -1
[  108.168774][ T6537] binder: undelivered TRANSACTION_ERROR: 29201
[  108.271409][ T7778] loop1: detected capacity change from 0 to 32768
[  108.530699][ T7814] loop3: detected capacity change from 0 to 128
[  108.757426][ T7814] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.675399][ T7832] loop2: detected capacity change from 0 to 512
[  110.676065][ T7832] EXT4-fs: Ignoring removed bh option
[  110.693527][ T7832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  110.721973][ T7832] EXT4-fs (loop2): 1 truncate cleaned up
[  110.722856][ T7832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.866726][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'.
[  110.958657][ T7832] EXT4-fs error (device loop2): __ext4_iget:5025: inode #12: block 2: comm syz.2.265: invalid block
[  111.023774][ T6498] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  111.024081][ T6492] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.261140][ T7865] loop3: detected capacity change from 0 to 512
[  111.292653][ T7865] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.270: bad orphan inode 15
[  111.293458][ T7865] ext4_test_bit(bit=14, block=18) = 1
[  111.293483][ T7865] is_bad_inode(inode)=0
[  111.293501][ T7865] NEXT_ORPHAN(inode)=1023
[  111.293518][ T7865] max_ino=32
[  111.293550][ T7865] i_nlink=0
[  111.334677][ T7865] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.270: corrupted xattr block 19: invalid header
[  111.335205][ T7865] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117)
[  111.340431][ T7865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  111.421691][ T6498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  111.457208][ T7876] loop2: detected capacity change from 0 to 1024
[  111.457832][ T7876] EXT4-fs: Ignoring removed orlov option
[  111.457922][ T7876] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.492837][ T7876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.689729][ T7833] loop1: detected capacity change from 0 to 32768
[  111.697266][ T7833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.262 (7833)
[  111.773060][ T7833] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.773160][ T7833] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  111.773227][ T7833] BTRFS info (device loop1): disk space caching is enabled
[  111.773258][ T7833] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  111.849936][ T7833] BTRFS info (device loop1): rebuilding free space tree
[  111.912804][ T7833] BTRFS info (device loop1): disabling free space tree
[  111.912893][ T7833] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  111.912921][ T7833] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  112.059613][ T7919] binder: BINDER_SET_CONTEXT_MGR already set
[  112.059673][ T7919] binder: 7872:7919 ioctl 4018620d 20000040 returned -16
[  112.060000][ T7919] binder: 7872:7919 got transaction to invalid handle, 1
[  112.060046][ T7919] binder: 7919:7872 cannot find target node
[  112.060075][ T7919] binder: 7872:7919 transaction async to 0:0 failed 8/29201/-22, code 0 size 72-24 line 3150
[  112.060281][ T7919] binder: 7872:7919 ioctl c018620c 20000100 returned -1
[  112.417147][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[  113.021578][ T6499] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.032050][ T6492] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.102401][ T7926] loop0: detected capacity change from 0 to 128
[  113.162991][ T7926] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.341971][ T7935] tc_dump_action: action bad kind
[  114.311510][ T7922] loop3: detected capacity change from 0 to 32768
[  114.536535][ T7918] fuse: Bad value for 'fd'
[  114.579225][ T7918] loop3: detected capacity change from 0 to 1024
[  114.598642][ T7918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.605325][ T6489] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.837657][ T7918] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.958891][ T7949] loop1: detected capacity change from 0 to 32768
[  114.971171][ T7949] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.284 (7949)
[  114.985631][ T7949] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  114.988838][ T7949] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  114.991503][ T7949] BTRFS info (device loop1): using free-space-tree
[  114.998918][ T7958] loop2: detected capacity change from 0 to 32768
[  114.999570][ T7958] XFS: ikeep mount option is deprecated.
[  114.999618][ T7958] xfs: Unknown parameter 'measure'
[  115.011861][ T7968] binder: BINDER_SET_CONTEXT_MGR already set
[  115.011918][ T7968] binder: 7961:7968 ioctl 4018620d 20000040 returned -16
[  115.020291][ T7968] binder: 7961:7968 got transaction to invalid handle, 1
[  115.020346][ T7968] binder: 7968:7961 cannot find target node
[  115.020391][ T7968] binder: 7961:7968 transaction async to 0:0 failed 10/29201/-22, code 0 size 72-24 line 3150
[  115.028282][ T7968] binder: 7961:7968 ioctl c018620c 20000100 returned -1
[  115.129407][ T6499] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  115.228761][ T7988] loop3: detected capacity change from 0 to 2048
[  115.239957][ T7988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.248690][ T7958] netlink: 72 bytes leftover after parsing attributes in process `syz.2.286'.
[  115.270508][ T7958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.286'.
[  115.295088][ T7964] loop0: detected capacity change from 0 to 40427
[  115.298435][ T7964] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff
[  115.300961][ T7964] F2FS-fs (loop0): Image doesn't support compression
[  115.321073][ T7964] F2FS-fs (loop0): invalid crc value
[  115.507563][ T7964] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  116.188380][ T6488] binder: undelivered TRANSACTION_ERROR: 29201
[  116.634790][ T6489] syz-executor: attempt to access beyond end of device
[  116.634790][ T6489] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  116.634879][ T6489] CPU: 1 UID: 0 PID: 6489 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  116.634895][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  116.634902][ T6489] Call trace:
[  116.634906][ T6489]  show_stack+0x2c/0x3c (C)
[  116.634922][ T6489]  __dump_stack+0x30/0x40
[  116.634934][ T6489]  dump_stack_lvl+0xd8/0x12c
[  116.634944][ T6489]  dump_stack+0x1c/0x28
[  116.634953][ T6489]  f2fs_handle_critical_error+0x34c/0x4b8
[  116.634968][ T6489]  f2fs_stop_checkpoint+0x58/0x6c
[  116.634979][ T6489]  f2fs_write_end_io+0x794/0xadc
[  116.634993][ T6489]  bio_endio+0x81c/0x858
[  116.635006][ T6489]  submit_bio_noacct+0x158/0x176c
[  116.635017][ T6489]  submit_bio+0x354/0x4d4
[  116.635027][ T6489]  f2fs_submit_write_bio+0x13c/0x324
[  116.635048][ T6489]  __submit_merged_bio+0x254/0x704
[  116.635061][ T6489]  __submit_merged_write_cond+0x23c/0x4ac
[  116.635079][ T6489]  f2fs_write_data_pages+0x1e9c/0x27ac
[  116.635093][ T6489]  do_writepages+0x2c0/0x6a8
[  116.635108][ T6489]  filemap_fdatawrite+0x144/0x1e8
[  116.635118][ T6489]  f2fs_sync_dirty_inodes+0x2b8/0x788
[  116.635130][ T6489]  f2fs_write_checkpoint+0x684/0x1694
[  116.635141][ T6489]  kill_f2fs_super+0x21c/0x584
[  116.635155][ T6489]  deactivate_locked_super+0xc4/0x12c
[  116.635167][ T6489]  deactivate_super+0xe0/0x100
[  116.635178][ T6489]  cleanup_mnt+0x31c/0x3ac
[  116.635190][ T6489]  __cleanup_mnt+0x20/0x30
[  116.635201][ T6489]  task_work_run+0x1dc/0x260
[  116.635213][ T6489]  do_notify_resume+0x16c/0x1ec
[  116.635226][ T6489]  el0_svc+0xb4/0x17c
[  116.635240][ T6489]  el0t_64_sync_handler+0x78/0x108
[  116.635253][ T6489]  el0t_64_sync+0x198/0x19c
[  116.635438][ T6489] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  116.713987][ T8008] sp0: Synchronizing with TNC
[  116.881290][ T8011] loop2: detected capacity change from 0 to 128
[  116.917362][ T8011] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.584095][ T6492] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.794708][ T8017] loop0: detected capacity change from 0 to 32768
[  117.821302][ T8034] loop2: detected capacity change from 0 to 64
[  117.919396][ T8017] loop0: detected capacity change from 0 to 16
[  117.920013][ T8017] erofs: Unknown parameter '01777777777777777777777�'
[  118.923010][ T8031] loop4: detected capacity change from 0 to 32768
[  118.936366][ T8031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.301 (8031)
[  118.958235][ T8031] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.958340][ T8031] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  118.958376][ T8031] BTRFS error (device loop4): superblock checksum mismatch
[  118.969587][ T8031] BTRFS error (device loop4): open_ctree failed: -22
[  119.041168][ T8017] loop0: detected capacity change from 0 to 32768
[  119.150171][ T7331] udevd[7331]: incorrect btrfs checksum on /dev/loop4
[  119.541577][ T8044] loop3: detected capacity change from 0 to 32768
[  119.575531][ T8046] loop2: detected capacity change from 0 to 32768
[  119.585210][ T8017] loop0: detected capacity change from 0 to 32768
[  119.658287][ T8046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.305 (8046)
[  119.662070][ T8044] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  119.691385][ T8046] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.691500][ T8046] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm
[  119.691537][ T8046] BTRFS info (device loop2): using free-space-tree
[  120.071334][ T6492] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.202126][ T6498] ocfs2: Unmounting device (7,3) on (node local)
[  120.226938][ T8086] binder: BINDER_SET_CONTEXT_MGR already set
[  120.227003][ T8086] binder: 8079:8086 ioctl 4018620d 20000040 returned -16
[  120.228020][ T8086] binder: 8079:8086 got transaction to invalid handle, 1
[  120.228068][ T8086] binder: 8086:8079 cannot find target node
[  120.228091][ T8086] binder: 8079:8086 transaction async to 0:0 failed 12/29201/-22, code 0 size 72-24 line 3150
[  120.228399][ T8086] binder: 8079:8086 ioctl c018620c 20000100 returned -1
[  120.823374][ T6538] binder: undelivered TRANSACTION_ERROR: 29201
[  121.006785][ T8100] loop2: detected capacity change from 0 to 64
[  121.015879][ T8100] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2
[  121.883990][ T8089] loop3: detected capacity change from 0 to 40427
[  121.904782][ T8089] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  121.909119][ T8089] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  121.970482][ T8112] loop1: detected capacity change from 0 to 512
[  121.990984][ T8089] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  121.991061][ T8089] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  122.007437][ T8088] syz.3.311: attempt to access beyond end of device
[  122.007437][ T8088] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  122.013141][ T8112] EXT4-fs (loop1): can't mount with both data=journal and dax
[  122.152573][ T8117] loop1: detected capacity change from 0 to 512
[  122.153227][ T8117] ext4: Bad value for 'max_batch_time'
[  122.516110][ T8117] loop1: detected capacity change from 0 to 32768
[  122.530337][ T8119] loop3: detected capacity change from 0 to 256
[  122.530792][ T8117] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.322 (8117)
[  122.584012][ T8117] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.584129][ T8117] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[  122.584166][ T8117] BTRFS info (device loop1): using free-space-tree
[  122.603073][ T8107] loop2: detected capacity change from 0 to 32768
[  122.633516][ T8117] BTRFS info (device loop1): checking UUID tree
[  122.746080][ T8114] loop4: detected capacity change from 0 to 40427
[  122.780769][ T8114] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  122.780834][ T8114] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  122.849960][ T8107] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  122.935940][ T8107] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  122.935940][ T8107]   allowing incompatible features above 0.0: (unknown version)
[  122.992907][ T8107] bcachefs (loop2): initializing new filesystem
[  122.993588][ T8107] bcachefs (loop2): going read-write
[  123.445751][ T8107] bcachefs (loop2): marking superblocks
[  123.618696][ T8107] bcachefs (loop2): initializing freespace
[  123.621716][ T8107] bcachefs (loop2): done initializing freespace
[  123.625457][ T8107] bcachefs (loop2): reading snapshots table
[  123.630024][ T8107] bcachefs (loop2): reading snapshots done
[  123.649297][ T6499] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.688444][ T8107] bcachefs (loop2): done starting filesystem
[  123.711324][ T8114] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  123.711398][ T8114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  123.804219][ T8163] loop0: detected capacity change from 0 to 256
[  123.804858][ T8163] vfat: Bad value for 'shortname'
[  123.818596][ T8114] syz.4.320: attempt to access beyond end of device
[  123.818596][ T8114] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  125.061999][ T6492] bcachefs (loop2): shutting down
[  125.062077][ T6492] bcachefs (loop2): going read-only
[  125.062125][ T6492] bcachefs (loop2): finished waiting for writes to stop
[  125.075398][ T8155] loop3: detected capacity change from 0 to 32768
[  125.090289][ T8155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.326 (8155)
[  125.095690][ T8155] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.098967][ T8155] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  125.099021][ T8155] BTRFS info (device loop3): using free-space-tree
[  125.114720][ T6492] bcachefs (loop2): flushing journal and stopping allocators, journal seq 16
[  125.150284][ T6492] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 18
[  125.157716][ T6492] bcachefs (loop2): clean shutdown complete, journal seq 19
[  125.197414][ T8155] BTRFS info (device loop3): rebuilding free space tree
[  125.218314][ T6492] bcachefs (loop2): marking filesystem clean
[  125.562635][ T8196] FAULT_INJECTION: forcing a failure.
[  125.562635][ T8196] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.562776][ T8196] CPU: 1 UID: 0 PID: 8196 Comm: syz.4.329 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  125.562792][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  125.562800][ T8196] Call trace:
[  125.562804][ T8196]  show_stack+0x2c/0x3c (C)
[  125.562821][ T8196]  __dump_stack+0x30/0x40
[  125.562832][ T8196]  dump_stack_lvl+0xd8/0x12c
[  125.562843][ T8196]  dump_stack+0x1c/0x28
[  125.562852][ T8196]  should_fail_ex+0x41c/0x594
[  125.562864][ T8196]  should_fail+0x14/0x24
[  125.562875][ T8196]  should_fail_usercopy+0x20/0x30
[  125.562886][ T8196]  _inline_copy_from_user+0x40/0x180
[  125.562899][ T8196]  __sys_bind+0x174/0x360
[  125.562911][ T8196]  __arm64_sys_bind+0x7c/0x94
[  125.562924][ T8196]  invoke_syscall+0x98/0x2b8
[  125.562934][ T8196]  el0_svc_common+0x130/0x23c
[  125.562945][ T8196]  do_el0_svc+0x48/0x58
[  125.562954][ T8196]  el0_svc+0x58/0x17c
[  125.562968][ T8196]  el0t_64_sync_handler+0x78/0x108
[  125.562981][ T8196]  el0t_64_sync+0x198/0x19c
[  126.274971][ T8202] loop0: detected capacity change from 0 to 256
[  126.321328][ T2389] ieee802154 phy0 wpan0: encryption failed: -22
[  126.321416][ T2389] ieee802154 phy1 wpan1: encryption failed: -22
[  126.335500][ T6492] bcachefs (loop2): shutdown complete
[  126.390969][ T6498] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.420339][ T8204] binder: BINDER_SET_CONTEXT_MGR already set
[  126.420403][ T8204] binder: 8199:8204 ioctl 4018620d 20000040 returned -16
[  126.420742][ T8204] binder: 8199:8204 got transaction to invalid handle, 1
[  126.420771][ T8204] binder: 8204:8199 cannot find target node
[  126.420793][ T8204] binder: 8199:8204 transaction async to 0:0 failed 14/29201/-22, code 0 size 72-24 line 3150
[  126.421023][ T8204] binder: 8199:8204 ioctl c018620c 20000100 returned -1
[  126.660769][ T8213] loop1: detected capacity change from 0 to 16
[  126.688693][ T8213] erofs (device loop1): dirblkbits 8 isn't supported
[  127.019236][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[  127.498834][ T8221] loop1: detected capacity change from 0 to 40427
[  127.503668][ T8221] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  127.506103][ T8221] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  127.512468][ T8221] F2FS-fs (loop1): heap/no_heap options were deprecated
[  127.519585][ T8221] F2FS-fs (loop1): invalid crc value
[  127.591954][ T8230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.344'.
[  127.629755][ T8221] F2FS-fs (loop1): Start checkpoint disabled!
[  127.645020][ T8221] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  127.645099][ T8221] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  127.679559][ T8235] netlink: 260 bytes leftover after parsing attributes in process `syz.3.346'.
[  127.883827][ T8242] loop0: detected capacity change from 0 to 512
[  127.884478][ T8242] EXT4-fs: Ignoring removed bh option
[  127.885617][ T8242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  127.897535][ T8242] EXT4-fs (loop0): 1 truncate cleaned up
[  127.910769][ T8242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.923792][  T259] kworker/u8:5: attempt to access beyond end of device
[  127.923792][  T259] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  127.938615][  T259] CPU: 1 UID: 0 PID: 259 Comm: kworker/u8:5 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  127.938647][  T259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  127.938656][  T259] Workqueue: writeback wb_workfn (flush-7:1)
[  127.938679][  T259] Call trace:
[  127.938683][  T259]  show_stack+0x2c/0x3c (C)
[  127.938698][  T259]  __dump_stack+0x30/0x40
[  127.938709][  T259]  dump_stack_lvl+0xd8/0x12c
[  127.938719][  T259]  dump_stack+0x1c/0x28
[  127.938729][  T259]  f2fs_handle_critical_error+0x34c/0x4b8
[  127.938743][  T259]  f2fs_stop_checkpoint+0x58/0x6c
[  127.938755][  T259]  f2fs_write_end_io+0x794/0xadc
[  127.938769][  T259]  bio_endio+0x81c/0x858
[  127.938782][  T259]  submit_bio_noacct+0x158/0x176c
[  127.938793][  T259]  submit_bio+0x354/0x4d4
[  127.938803][  T259]  f2fs_submit_write_bio+0x13c/0x324
[  127.938816][  T259]  __submit_merged_bio+0x254/0x704
[  127.938829][  T259]  __submit_merged_write_cond+0x23c/0x4ac
[  127.938841][  T259]  f2fs_write_data_pages+0x1e9c/0x27ac
[  127.938855][  T259]  do_writepages+0x2c0/0x6a8
[  127.938870][  T259]  __writeback_single_inode+0x15c/0x13e8
[  127.938881][  T259]  writeback_sb_inodes+0x558/0xe38
[  127.938891][  T259]  wb_writeback+0x3cc/0xd70
[  127.938902][  T259]  wb_workfn+0x338/0xdc0
[  127.938914][  T259]  process_one_work+0x7e8/0x156c
[  127.938925][  T259]  worker_thread+0x958/0xed8
[  127.938935][  T259]  kthread+0x5fc/0x75c
[  127.938948][  T259]  ret_from_fork+0x10/0x20
[  127.982295][  T259] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  128.121666][ T8242] EXT4-fs error (device loop0): __ext4_iget:5025: inode #12: block 2: comm syz.0.347: invalid block
[  128.188700][ T6489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.450314][ T8244] loop4: detected capacity change from 0 to 32768
[  128.452831][ T8244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.349 (8244)
[  129.134759][ T8244] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.134860][ T8244] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  129.134921][ T8244] BTRFS info (device loop4): using free-space-tree
[  129.195052][ T8264] loop0: detected capacity change from 0 to 24
[  129.424682][ T6487] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.455508][ T8285] pimreg3: entered allmulticast mode
[  130.083865][ T8285] loop0: detected capacity change from 0 to 256
[  130.171336][ T8285] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xb81e6d3a, utbl_chksum : 0xe619d30d)
[  130.236717][ T8289] exFAT-fs (loop0): valid_size(150994954) is greater than size(0)
[  130.369992][ T8283] pimreg3: left allmulticast mode
[  131.242907][ T8300] binder: BINDER_SET_CONTEXT_MGR already set
[  131.242960][ T8300] binder: 8299:8300 ioctl 4018620d 20000040 returned -16
[  131.247178][ T8300] binder: 8299:8300 got transaction to invalid handle, 1
[  131.247212][ T8300] binder: 8300:8299 cannot find target node
[  131.247235][ T8300] binder: 8299:8300 transaction async to 0:0 failed 16/29201/-22, code 0 size 72-24 line 3150
[  131.247608][ T8300] binder: 8299:8300 ioctl c018620c 20000100 returned -1
[  131.306402][ T6537] binder: undelivered TRANSACTION_ERROR: 29201
[  131.344847][ T8290] loop2: detected capacity change from 0 to 32768
[  131.440462][ T8290] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  131.462406][ T8290] (syz.2.331,8290,1):ocfs2_mknod:502 ERROR: status = -2
[  131.462471][ T8290] (syz.2.331,8290,1):ocfs2_mkdir:658 ERROR: status = -2
[  131.575346][ T6492] (syz-executor,6492,0):ocfs2_inode_is_valid_to_delete:866 ERROR: Skipping delete of root inode.
[  131.624669][ T8297] loop4: detected capacity change from 0 to 40427
[  131.642313][ T6492] ocfs2: Unmounting device (7,2) on (node local)
[  131.642568][ T8297] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  131.642599][ T8297] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  131.643357][ T8297] F2FS-fs (loop4): Unrecognized mount option "fsync_mone_xattr" or missing value
[  131.923767][ T8320] netlink: 'syz.3.365': attribute type 1 has an invalid length.
[  133.758161][ T8334] FAULT_INJECTION: forcing a failure.
[  133.758161][ T8334] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.758855][ T8334] CPU: 1 UID: 0 PID: 8334 Comm: syz.3.367 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  133.758878][ T8334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  133.758885][ T8334] Call trace:
[  133.758889][ T8334]  show_stack+0x2c/0x3c (C)
[  133.758906][ T8334]  __dump_stack+0x30/0x40
[  133.758918][ T8334]  dump_stack_lvl+0xd8/0x12c
[  133.758928][ T8334]  dump_stack+0x1c/0x28
[  133.758937][ T8334]  should_fail_ex+0x41c/0x594
[  133.758950][ T8334]  should_fail+0x14/0x24
[  133.758969][ T8334]  should_fail_usercopy+0x20/0x30
[  133.758980][ T8334]  simple_read_from_buffer+0xc4/0x254
[  133.758993][ T8334]  proc_fail_nth_read+0x130/0x19c
[  133.759005][ T8334]  vfs_read+0x22c/0x898
[  133.759016][ T8334]  ksys_read+0x120/0x210
[  133.759025][ T8334]  __arm64_sys_read+0x7c/0x90
[  133.759044][ T8334]  invoke_syscall+0x98/0x2b8
[  133.759056][ T8334]  el0_svc_common+0x130/0x23c
[  133.759066][ T8334]  do_el0_svc+0x48/0x58
[  133.759076][ T8334]  el0_svc+0x58/0x17c
[  133.759090][ T8334]  el0t_64_sync_handler+0x78/0x108
[  133.759103][ T8334]  el0t_64_sync+0x198/0x19c
[  135.349231][ T8345] binder: BINDER_SET_CONTEXT_MGR already set
[  135.349284][ T8345] binder: 8338:8345 ioctl 4018620d 20000040 returned -16
[  135.352114][ T8345] binder: 8338:8345 got transaction to invalid handle, 1
[  135.352152][ T8345] binder: 8345:8338 cannot find target node
[  135.352175][ T8345] binder: 8338:8345 transaction async to 0:0 failed 18/29201/-22, code 0 size 72-24 line 3150
[  135.354314][ T8345] binder: 8338:8345 ioctl c018620c 20000100 returned -1
[  135.416951][ T6488] binder: undelivered TRANSACTION_ERROR: 29201
[  136.964164][ T8364] loop0: detected capacity change from 0 to 512
[  136.964774][ T8364] EXT4-fs: Ignoring removed bh option
[  136.965993][ T8364] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  136.994728][ T8364] EXT4-fs (loop0): 1 truncate cleaned up
[  136.995611][ T8364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.217686][ T8362] EXT4-fs error (device loop0): __ext4_iget:5025: inode #12: block 2: comm syz.0.376: invalid block
[  138.014152][ T6489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.191585][ T8391] binder: BINDER_SET_CONTEXT_MGR already set
[  139.191638][ T8391] binder: 8390:8391 ioctl 4018620d 20000040 returned -16
[  139.195746][ T8391] binder: 8390:8391 got transaction to invalid handle, 1
[  139.195783][ T8391] binder: 8391:8390 cannot find target node
[  139.195807][ T8391] binder: 8390:8391 transaction async to 0:0 failed 20/29201/-22, code 0 size 72-24 line 3150
[  139.198148][ T8391] binder: 8390:8391 ioctl c018620c 20000100 returned -1
[  139.252292][ T6488] binder: undelivered TRANSACTION_ERROR: 29201
[  139.508903][ T8395] loop3: detected capacity change from 0 to 4096
[  139.516948][ T8395] ntfs3: Unknown parameter '0xffffffffffffffff+������+�gc��u$*���'
[  139.612737][ T8395] loop3: detected capacity change from 0 to 4096
[  139.613281][ T8395] ntfs3: Unknown parameter '��ϕ�z���6�v�h*�����xy��n�����s�r���d�]L�PK�_��|na>�$E��3Gd��fȬ���gL��'
[  139.639905][ T8407] loop4: detected capacity change from 0 to 512
[  139.640572][ T8407] EXT4-fs: Ignoring removed bh option
[  139.644931][ T8407] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  139.773529][ T8407] EXT4-fs (loop4): 1 truncate cleaned up
[  139.774414][ T8407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.987244][ T8407] EXT4-fs error (device loop4): __ext4_iget:5025: inode #12: block 2: comm syz.4.390: invalid block
[  140.234526][ T8386] loop0: detected capacity change from 0 to 40427
[  140.247454][ T8386] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  140.247518][ T8386] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  140.249523][ T8386] F2FS-fs (loop0): Unrecognized mount option "fsync_mone_xattr" or missing value
[  140.342315][ T6487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.596805][ T8434] loop0: detected capacity change from 0 to 256
[  141.840776][ T8434] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  141.840862][ T8434] FAT-fs (loop0): Filesystem has been set read-only
[  141.845045][ T8434] veth0: entered promiscuous mode
[  141.845731][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'.
[  143.896862][ T8459] binder: BINDER_SET_CONTEXT_MGR already set
[  143.896922][ T8459] binder: 8446:8459 ioctl 4018620d 20000040 returned -16
[  143.897310][ T8459] binder: 8446:8459 got transaction to invalid handle, 1
[  143.897351][ T8459] binder: 8459:8446 cannot find target node
[  143.897384][ T8459] binder: 8446:8459 transaction async to 0:0 failed 22/29201/-22, code 0 size 72-24 line 3150
[  143.897633][ T8459] binder: 8446:8459 ioctl c018620c 20000100 returned -1
[  144.902705][ T6502] binder: undelivered TRANSACTION_ERROR: 29201
[  144.981193][ T8469] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  144.981287][ T8469] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  145.051975][ T8471] loop0: detected capacity change from 0 to 512
[  145.052645][ T8471] EXT4-fs: Ignoring removed bh option
[  145.065144][ T8471] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  145.841960][ T8471] EXT4-fs (loop0): 1 truncate cleaned up
[  145.842882][ T8471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.058430][ T8471] EXT4-fs error (device loop0): __ext4_iget:5025: inode #12: block 2: comm syz.0.403: invalid block
[  146.251005][ T6489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.261284][ T8470] FAULT_INJECTION: forcing a failure.
[  146.261284][ T8470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.261350][ T8470] CPU: 1 UID: 0 PID: 8470 Comm: syz.3.404 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  146.261364][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  146.261372][ T8470] Call trace:
[  146.261375][ T8470]  show_stack+0x2c/0x3c (C)
[  146.261392][ T8470]  __dump_stack+0x30/0x40
[  146.261403][ T8470]  dump_stack_lvl+0xd8/0x12c
[  146.261413][ T8470]  dump_stack+0x1c/0x28
[  146.261423][ T8470]  should_fail_ex+0x41c/0x594
[  146.261435][ T8470]  should_fail+0x14/0x24
[  146.261446][ T8470]  should_fail_usercopy+0x20/0x30
[  146.261457][ T8470]  _inline_copy_from_user+0x40/0x180
[  146.261471][ T8470]  ucma_write+0x134/0x2b4
[  146.261482][ T8470]  vfs_write+0x2a0/0x97c
[  146.261493][ T8470]  ksys_write+0x120/0x210
[  146.261502][ T8470]  __arm64_sys_write+0x7c/0x90
[  146.261513][ T8470]  invoke_syscall+0x98/0x2b8
[  146.261523][ T8470]  el0_svc_common+0x130/0x23c
[  146.261534][ T8470]  do_el0_svc+0x48/0x58
[  146.261544][ T8470]  el0_svc+0x58/0x17c
[  146.261558][ T8470]  el0t_64_sync_handler+0x78/0x108
[  146.261571][ T8470]  el0t_64_sync+0x198/0x19c
[  146.429934][ T8492] loop2: detected capacity change from 0 to 1024
[  146.430570][ T8492] EXT4-fs: Ignoring removed mblk_io_submit option
[  147.252057][ T8492] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  147.255255][ T8492] EXT4-fs (loop2): group descriptors corrupted!
[  148.049937][ T8508] ------------[ cut here ]------------
[  148.050121][ T8508] WARNING: CPU: 0 PID: 8508 at mm/vma.c:1240 vms_complete_munmap_vmas+0x694/0x7e4
[  148.054364][ T8508] Modules linked in:
[  148.055597][ T8508] CPU: 0 UID: 0 PID: 8508 Comm: syz.1.415 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  148.058793][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  148.061719][ T8508] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  148.064009][ T8508] pc : vms_complete_munmap_vmas+0x694/0x7e4
[  148.065723][ T8508] lr : vms_complete_munmap_vmas+0x694/0x7e4
[  148.067433][ T8508] sp : ffff80009fed7510
[  148.068612][ T8508] x29: ffff80009fed7560 x28: ffff0000d7202a80 x27: 0000000000000736
[  148.070922][ T8508] x26: ffff0000d7202cf8 x25: ffff80009fed77a0 x24: ffff0000d7202cf0
[  148.073243][ T8508] x23: ffff80009fed7798 x22: 0000000000000021 x21: 0000000000006379
[  148.075619][ T8508] x20: 1ffff00013fdaef0 x19: dfff800000000000 x18: 0000000000000000
[  148.077934][ T8508] x17: ffff0001fea8a870 x16: ffff80008adbeaf4 x15: 0000000000000001
[  148.080346][ T8508] x14: 1ffff00011e63d53 x13: 0000000000000000 x12: 0000000000000000
[  148.083169][ T8508] x11: 0000000000080000 x10: 000000000003d246 x9 : ffff8000a21b9000
[  148.086146][ T8508] x8 : 000000000003d247 x7 : 0000000000000000 x6 : 0000000000000000
[  148.088988][ T8508] x5 : 00000000000000fe x4 : ffff0000f620a280 x3 : ffff8000809799f4
[  148.091350][ T8508] x2 : 0000000000000001 x1 : 0000000000000021 x0 : 0000000000000736
[  148.093696][ T8508] Call trace:
[  148.094689][ T8508]  vms_complete_munmap_vmas+0x694/0x7e4 (P)
[  148.096495][ T8508]  mmap_region+0x10b4/0x1a24
[  148.097933][ T8508]  do_mmap+0x968/0xf78
[  148.099307][ T8508]  vm_mmap_pgoff+0x2b8/0x43c
[  148.100700][ T8508]  ksys_mmap_pgoff+0xd0/0x5b8
[  148.102088][ T8508]  __arm64_sys_mmap+0xf8/0x110
[  148.103430][ T8508]  invoke_syscall+0x98/0x2b8
[  148.104794][ T8508]  el0_svc_common+0x130/0x23c
[  148.106185][ T8508]  do_el0_svc+0x48/0x58
[  148.107385][ T8508]  el0_svc+0x58/0x17c
[  148.108539][ T8508]  el0t_64_sync_handler+0x78/0x108
[  148.110075][ T8508]  el0t_64_sync+0x198/0x19c
[  148.111397][ T8508] irq event stamp: 31818
[  148.112605][ T8508] hardirqs last  enabled at (31817): [<ffff8000805a9be0>] call_rcu+0x650/0x96c
[  148.115173][ T8508] hardirqs last disabled at (31818): [<ffff80008adb9eb8>] el1_dbg+0x24/0x80
[  148.117695][ T8508] softirqs last  enabled at (31714): [<ffff8000803cf71c>] handle_softirqs+0xaf8/0xc88
[  148.120438][ T8508] softirqs last disabled at (31633): [<ffff800080020efc>] __do_softirq+0x14/0x20
[  148.123058][ T8508] ---[ end trace 0000000000000000 ]---
[  148.299574][ T8513] binder: BINDER_SET_CONTEXT_MGR already set
[  148.299615][ T8513] binder: 8503:8513 ioctl 4018620d 20000040 returned -16
[  148.300082][ T8513] binder: 8503:8513 got transaction to invalid handle, 1
[  148.300119][ T8513] binder: 8513:8503 cannot find target node
[  148.300153][ T8513] binder: 8503:8513 transaction async to 0:0 failed 24/29201/-22, code 0 size 72-24 line 3150
[  148.300467][ T8513] binder: 8503:8513 ioctl c018620c 20000100 returned -1
[  148.854630][ T8497] loop3: detected capacity change from 0 to 40427
[  148.871999][ T8497] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  148.874476][ T8497] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  148.881727][ T8497] F2FS-fs (loop3): Unrecognized mount option "fsync_mone_xattr" or missing value
[  149.110139][ T6502] binder: undelivered TRANSACTION_ERROR: 29201
[  149.340983][ T8520] loop3: detected capacity change from 0 to 256
[  149.357196][ T8520] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  149.357262][ T8520] FAT-fs (loop3): Filesystem has been set read-only
[  149.414383][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'.