last executing test programs:

44.563210074s ago: executing program 2 (id=585):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140600003d000b00000000000100000003000000"], 0x14}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
getpid()
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0xad9, &(0x7f0000000340)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40786e88, &(0x7f0000000000)={@id={0x2, 0x0, @c}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r8 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@empty, 0x4e20, 0x6, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x32}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8)
sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
io_setup(0x4fb, &(0x7f00000009c0)=<r9=>0x0)
r10 = eventfd2(0x9, 0x80801)
io_submit(r9, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x1, 0x0, r10, 0x0, 0x0, 0x6, 0x0, 0x1, r10}])

44.210918623s ago: executing program 2 (id=592):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r0, 0x1ff)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x7f}}], 0x18}], 0x1, 0x0) (fail_nth: 2)

44.152904417s ago: executing program 2 (id=596):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r0, 0x1ff)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x7f}}], 0x18}], 0x1, 0x0)

44.151470107s ago: executing program 2 (id=597):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
read$FUSE(r2, &(0x7f000000a500)={0x2020, 0x0, 0x0, <r3=>0x0}, 0xffffffffffffff45)
r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406618, &(0x7f0000000000)={@id={0x2, 0x0, @a}})
setresuid(0xffffffffffffffff, r3, 0x0)
fchown(r1, r3, 0xee01)
getuid()
fstat(0xffffffffffffffff, &(0x7f0000000040))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f00000034c0)={0x2020, 0x0, 0x0, <r8=>0x0, <r9=>0x0}, 0xcac)
fchown(r6, r8, r9)
statx(r2, &(0x7f0000008380)='./mnt\x00', 0x6400, 0x400, &(0x7f00000083c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0})
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r12 = getgid()
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2000019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030304e3030303034303030843822bc8c9691dd643d", @ANYRESDEC=r12, @ANYBLOB=',group_id=', @ANYRESDEC=r12], 0xfc, 0x0, 0x0)
syz_fuse_handle_req(r11, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004240)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r11, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r11, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x4, 0x3, 0x0, 0xfffffeffffffff1c, 0x3, 0x5, {0x6, 0x0, 0x8, 0x3, 0x100000002, 0x4, 0x6, 0x7ffb, 0x101, 0x6000, 0x85, 0x0, r12, 0x20000fe, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
gettid()

44.018371788s ago: executing program 2 (id=600):
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000))
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x800000)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
close_range(r3, 0xffffffffffffffff, 0x0)
r6 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r7, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0xfffd, 0x0, "0000e5ff0100"})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r8, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a4000000060000000b00000000000001000000001c0079020f0000000000000e04000000010000000f0000000000000a03000000000000000000000d00000000100000000000000b00000000090000000000040a04000000050000000000000700000000000000000400000d000000000b000000050000000f000000000000000a000000020000001000000003000000090000000000001105000000010000000c0000000000000b0000000c0000005f0000"], &(0x7f0000000300)=""/41, 0xc2, 0x29, 0x1, 0x7fff}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x7c}, @ringbuf_query, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @ldst={0x0, 0x1, 0x3, 0x0, 0x6, 0xfffffffffffffff8, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, r9, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x8, 0xcba, 0x7b9c}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)

43.541815246s ago: executing program 2 (id=615):
connect(0xffffffffffffffff, &(0x7f0000000080)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) (fail_nth: 2)

43.533102767s ago: executing program 32 (id=615):
connect(0xffffffffffffffff, &(0x7f0000000080)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) (fail_nth: 2)

5.406412484s ago: executing program 3 (id=875):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x0)

5.272624016s ago: executing program 3 (id=878):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000ff60000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006a000000000000004c001400636d61632861657329"], 0x13c}}, 0x0)

5.268487006s ago: executing program 3 (id=880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
fsopen(&(0x7f0000000100)='sysv\x00', 0x1)

5.180761173s ago: executing program 3 (id=883):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000cc14000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0x94}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

5.171699974s ago: executing program 3 (id=885):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x110, &(0x7f0000000600)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1)
syz_io_uring_submit(r2, r3, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index=0x800, 0x80000001, 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r5 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec})
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x9, 0x0)

5.141094916s ago: executing program 3 (id=886):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x17b})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)

732.795771ms ago: executing program 0 (id=940):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)

709.267623ms ago: executing program 0 (id=944):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000e80)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xf, 0x3a, '@', 0x3a, '', 0x3a, './bus', 0x3a, [0x46]}, 0x27)

644.313088ms ago: executing program 0 (id=947):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ftruncate(r2, 0xc17a)
r3 = syz_io_uring_setup(0x1538, &(0x7f00000003c0)={0x0, 0xed32, 0x2, 0x1, 0x394}, &(0x7f0000000440), &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe)

629.299229ms ago: executing program 1 (id=948):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0)

591.337322ms ago: executing program 0 (id=949):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0xf, 0x2, 0x0, 0x5, 0x0})

532.297487ms ago: executing program 1 (id=951):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r0, 0x0, 0x0, 0x1001f0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
fallocate(r0, 0x3, 0xf00, 0x10000)

468.599412ms ago: executing program 0 (id=952):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
close_range(r1, 0xffffffffffffffff, 0x0)

448.499094ms ago: executing program 0 (id=953):
r0 = open(0x0, 0x145842, 0x10)
pwritev2(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0xb)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xce}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010200"/20, @ANYRES32=r5], 0x20}}, 0x0)

376.833009ms ago: executing program 5 (id=954):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1)

362.76572ms ago: executing program 5 (id=956):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x40000}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4)

354.906651ms ago: executing program 1 (id=957):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x804)

224.882351ms ago: executing program 4 (id=958):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)

224.388462ms ago: executing program 5 (id=959):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0})

224.153572ms ago: executing program 5 (id=960):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)

219.131672ms ago: executing program 4 (id=961):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dontfrag={{0x14, 0x29, 0x3e, 0x10000}}], 0x18}, 0x810)

188.643605ms ago: executing program 5 (id=962):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pi6   \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0)

128.725699ms ago: executing program 4 (id=963):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0)

128.328789ms ago: executing program 1 (id=964):
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@lazytime}, {@oldalloc}, {@lazytime}, {@bh}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$eJzs3M1vFOUfAPDv7LalvP3aH+ILCFJFI761tLzIwYMaTThgYqIHjKfaLqSyUENrIoSY6gGPhsS78e4fYDzpxagnE696NyTEcAE9rZndGVi2u6VbdrvQ/XyS2T7PzLP7PN+ZeTovz84G0LfG0pckYltE/BERI7XsnQXGan9uXr8088/1SzNJVCrv/J1Uy924fmkmL5q/b2stU6lk+U1N6r38fsR0uVw6n+UnFs9+NLFw4eJLc2enT5dOl85NHTt2+NDeoaNTR+rfNrzWONO4buz+dH7PruPvXXlr5uSVD375Nm3vtmx5fRydMlZbu0090+nKemx7XToZ6GFDaEsxItLNNVjt/yNRjM23lo3Em5/3tHFAV1UqlUqz43NmqQJsYEn0ugVAb+QH+vT6N5/W6dTjvnDtteoFUH7RM3OzmC8ZiEItsW+wdnnUFWMRcXLp36/TKdq9D7GvW60CADayH9Lznxebnf8V4pFaYih9+V82hjIaEf+PiB0R8VBE7IyIhyOqZR+NiMfarL9xhGT5+U/h6pqDW4X0/O+VbGwrn7J68yKjxSy3vRr/YHJqrlw6mK2TAzG46dRcUppcoY4f3/j9y1bL6s//0imtPz8XzNpxdaDhBt3s9OL0vcRc79pnEbsHmsWfRD6Mk0TErojYvcY65p5vPSB09/hX0IFxpso3Ec/Wtv9SNMSfS1qOT06+fHTqyMRwlEsHJ/K9Yrlff7v8dqv674w/htuKvwPS7b+l6f5/K/7RZDhi4cLFM9Xx2oUmH3Kz4WKyweU/v2h5TdPm/n98e7b/DyXvVmcMZQs+mV5cPD8ZMZScWD5/6van5fm8fBr/gf3N+/+OuL0mHo+IPRGxNyKeyC690rY/GRFPRcT+Fdbxz68//WH78a9wV76D0vhn77b9o377t58onvnp+/bjz6Xb/3A1dSCbs5r/f6tt4L2sOwAAAHhQFKrfgU8K47fShcL4eO07/DtjS6E8v7D4wqn5j8/N1r4rPxqDhfxO10jd/dDJ7N5wnp9qyB/K7ht/VdxczY/PzJdnex089LmtLfp/6q9ir1sHdN0axtFe7UY7gPXneU3oX/o/9KdE/4e+pv9D/2rW/ze3LD3+XVcbA6wrx3/oX6vo/0vr9DwSsM4c/6F/6f/Ql1o+G1+4p0f+JTqWOPFcEvdBM5YlonBfNGPjJwZW/WMWbSQqI7X+n87Z1LTM8t9mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBD9FwAA//+r+eEo")

128.066119ms ago: executing program 4 (id=965):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0)

91.262123ms ago: executing program 5 (id=966):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141a42, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0)
io_setup(0x7d, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}])

68.541344ms ago: executing program 4 (id=967):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)

813.08µs ago: executing program 4 (id=968):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
capset(0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

217.82µs ago: executing program 1 (id=969):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
ioctl$VT_ACTIVATE(r0, 0x4bfa, 0x10000000000004)

0s ago: executing program 1 (id=970):
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, r2, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)

kernel console output (not intermixed with test programs):

n't write quota data block 5
[   40.603862][ T4836] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.85: mark_inode_dirty error
[   40.606848][ T4836] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5915: Corrupt filesystem
[   40.610058][ T4851] loop1: detected capacity change from 0 to 4096
[   40.611203][ T4836] EXT4-fs error (device loop2): ext4_punch_hole:4152: inode #12: comm syz.2.85: mark_inode_dirty error
[   40.613288][ T4846] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[   40.615041][ T4846] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.87: Failed to acquire dquot type 1
[   40.621738][ T4851] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   40.630757][ T4835] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #12: block 37: comm syz.2.85: lblock 0 mapped to illegal pblock 37 (length 16)
[   40.633859][ T4846] EXT4-fs (loop4): Remounting filesystem read-only
[   40.634933][ T4835] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #12: block 20: comm syz.2.85: lblock 16 mapped to illegal pblock 20 (length 15)
[   40.638025][ T4835] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #12: block 33: comm syz.2.85: lblock 29 mapped to illegal pblock 33 (length 1)
[   40.640432][ T4835] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #12: block 34: comm syz.2.85: lblock 30 mapped to illegal pblock 34 (length 1)
[   40.644066][ T4835] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #12: block 37: comm syz.2.85: lblock 0 mapped to illegal pblock 37 (length 4)
[   40.646650][ T4846] Quota error (device loop4): write_blk: dquota write failed
[   40.647763][ T4846] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[   40.649306][ T4846] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[   40.650847][ T4846] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.87: Failed to acquire dquot type 1
[   40.659747][ T4846] EXT4-fs (loop4): Remounting filesystem read-only
[   40.734412][ T4851] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[   40.738096][ T4333] EXT4-fs (loop2): unmounting filesystem.
[   40.739477][ T4330] EXT4-fs (loop4): unmounting filesystem.
[   40.783586][ T4856] overlayfs: unrecognized mount option "seclabel" or missing value
[   40.789338][ T4480] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22.
[   40.790705][ T4326] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[   40.791727][ T4326] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   40.792813][ T4326] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[   40.794486][ T4480] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22.
[   40.812176][ T4326] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22.
[   40.859928][ T4856] capability: warning: `syz.2.90' uses deprecated v2 capabilities in a way that may be insecure
[   40.971430][ T4868] loop1: detected capacity change from 0 to 512
[   40.981837][ T4866] FAULT_INJECTION: forcing a failure.
[   40.981837][ T4866] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   40.983868][ T4866] CPU: 0 PID: 4866 Comm: syz.2.94 Not tainted 6.1.148-syzkaller #0
[   40.985043][ T4866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   40.986553][ T4866] Call trace:
[   40.987054][ T4866]  dump_backtrace+0x1c8/0x1f4
[   40.987868][ T4866]  show_stack+0x2c/0x3c
[   40.988578][ T4866]  __dump_stack+0x30/0x40
[   40.989274][ T4866]  dump_stack_lvl+0xf8/0x160
[   40.990042][ T4866]  dump_stack+0x1c/0x5c
[   40.990729][ T4866]  should_fail_ex+0x3c4/0x520
[   40.991512][ T4866]  should_fail_alloc_page+0x74/0xb8
[   40.992350][ T4866]  prepare_alloc_pages+0x1c0/0x504
[   40.993101][ T4866]  __alloc_pages+0x134/0x53c
[   40.993834][ T4866]  __folio_alloc+0x1c/0x44
[   40.994551][ T4866]  vma_alloc_folio+0x37c/0x8b4
[   40.995299][ T4866]  alloc_zeroed_user_highpage_movable+0x74/0x88
[   40.996272][ T4866]  wp_page_copy+0x1a0/0x187c
[   40.997047][ T4866]  do_wp_page+0xb04/0xef0
[   40.997738][ T4866]  handle_mm_fault+0x133c/0x2fd4
[   40.998540][ T4866]  do_page_fault+0x310/0x99c
[   40.999336][ T4866]  do_mem_abort+0x70/0x194
[   41.000029][ T4866]  el1_abort+0x3c/0x5c
[   41.000624][ T4866]  el1h_64_sync_handler+0x80/0xcc
[   41.001354][ T4866]  el1h_64_sync+0x64/0x68
[   41.001996][ T4866]  __arch_copy_to_user+0x1c4/0x234
[   41.002805][ T4866]  _copy_to_iter+0x42c/0xe84
[   41.003565][ T4866]  simple_copy_to_iter+0x5c/0x80
[   41.004348][ T4866]  __skb_datagram_iter+0xdc/0x680
[   41.005117][ T4866]  skb_copy_datagram_iter+0x124/0x33c
[   41.005943][ T4866]  tipc_recvstream+0x2c8/0xbc4
[   41.006692][ T4866]  ____sys_recvmsg+0x254/0x71c
[   41.007481][ T4866]  __sys_recvmsg+0x22c/0x2f0
[   41.008265][ T4866]  __arm64_sys_recvmsg+0x80/0x94
[   41.009021][ T4866]  invoke_syscall+0x98/0x2bc
[   41.009739][ T4866]  el0_svc_common+0x138/0x258
[   41.010471][ T4866]  do_el0_svc+0x58/0x13c
[   41.011155][ T4866]  el0_svc+0x58/0x138
[   41.011761][ T4866]  el0t_64_sync_handler+0x84/0xf0
[   41.012500][ T4866]  el0t_64_sync+0x18c/0x190
[   41.018485][ T4868] EXT4-fs: Ignoring removed orlov option
[   41.019404][ T4868] EXT4-fs: Ignoring removed nomblk_io_submit option
[   41.026706][ T4868] EXT4-fs: Mount option(s) incompatible with ext3
[   41.064446][ T4868] loop1: detected capacity change from 0 to 2048
[   41.087252][ T4868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   41.103898][ T4868] netlink: 'syz.1.95': attribute type 29 has an invalid length.
[   41.105155][ T4868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'.
[   41.107423][ T4868] netlink: 'syz.1.95': attribute type 29 has an invalid length.
[   41.108583][ T4868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'.
[   41.116146][ T4855] loop4: detected capacity change from 0 to 32768
[   41.127084][ T4855] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.89 (4855)
[   41.137919][ T4855] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   41.140053][ T4855] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   41.141509][ T4855] BTRFS info (device loop4): using free space tree
[   41.148801][ T4864] loop3: detected capacity change from 0 to 32768
[   41.157820][ T4864] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   41.159440][ T4864] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   41.160790][ T4864] BTRFS info (device loop3): setting nodatasum
[   41.161719][ T4864] BTRFS warning (device loop3): excessive commit interval 491628334
[   41.162899][ T4864] BTRFS info (device loop3): max_inline at 0
[   41.163721][ T4864] BTRFS info (device loop3): using free space tree
[   41.203159][ T4825] Set syz1 is full, maxelem 65536 reached
[   41.214004][ T4876] loop1: detected capacity change from 0 to 4096
[   41.333803][ T4326] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[   41.338009][ T4326] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   41.358306][ T4855] BTRFS info (device loop4): enabling ssd optimizations
[   41.358331][ T4864] BTRFS info (device loop3): enabling ssd optimizations
[   41.707884][ T4864] overlayfs: missing 'workdir'
[   41.743832][ T4916] loop1: detected capacity change from 0 to 2048
[   41.767497][ T4916] Dev loop1: unable to read partition block 1342177280
[   41.770044][ T4916]  loop1: RDSK (536870912) unable to read partition table
[   41.771533][ T4916] loop1: partition table beyond EOD, truncated
[   41.772610][ T4916] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[   41.812191][ T4920] virtio-fs: tag </dev/nullb0> not found
[   41.835542][ T4323] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   41.921057][ T4926] loop3: detected capacity change from 0 to 1024
[   41.922436][ T4926] EXT4-fs: Ignoring removed nobh option
[   41.923396][ T4926] EXT4-fs: Ignoring removed bh option
[   41.941291][ T4330] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   41.954155][ T4926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   41.976713][ T4918] loop2: detected capacity change from 0 to 32768
[   41.978960][ T4918] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.100 (4918)
[   41.984842][ T4918] FAULT_INJECTION: forcing a failure.
[   41.984842][ T4918] name failslab, interval 1, probability 0, space 0, times 1
[   41.986937][ T4918] CPU: 1 PID: 4918 Comm: syz.2.100 Not tainted 6.1.148-syzkaller #0
[   41.988170][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   41.989683][ T4918] Call trace:
[   41.990452][ T4918]  dump_backtrace+0x1c8/0x1f4
[   41.991169][ T4918]  show_stack+0x2c/0x3c
[   41.991794][ T4918]  __dump_stack+0x30/0x40
[   41.992467][ T4918]  dump_stack_lvl+0xf8/0x160
[   41.993191][ T4918]  dump_stack+0x1c/0x5c
[   41.993886][ T4918]  should_fail_ex+0x3c4/0x520
[   41.994674][ T4918]  __should_failslab+0xc0/0x120
[   41.995461][ T4918]  should_failslab+0x10/0x28
[   41.996164][ T4918]  __kmem_cache_alloc_node+0x7c/0x320
[   41.997043][ T4918]  __kmalloc+0xd8/0x178
[   41.997722][ T4918]  tomoyo_encode+0x274/0x4a4
[   41.998478][ T4918]  tomoyo_realpath_from_path+0x480/0x4d4
[   41.999306][ T4918]  tomoyo_path_number_perm+0x190/0x4dc
[   42.000179][ T4918]  tomoyo_file_ioctl+0x2c/0x3c
[   42.000891][ T4918]  security_file_ioctl+0x80/0xbc
[   42.001673][ T4918]  __arm64_sys_ioctl+0xa8/0x1c8
[   42.002409][ T4918]  invoke_syscall+0x98/0x2bc
[   42.003112][ T4918]  el0_svc_common+0x138/0x258
[   42.003769][ T4918]  do_el0_svc+0x58/0x13c
[   42.004393][ T4918]  el0_svc+0x58/0x138
[   42.004983][ T4918]  el0t_64_sync_handler+0x84/0xf0
[   42.005697][ T4918]  el0t_64_sync+0x18c/0x190
[   42.010588][ T4918] ERROR: Out of memory at tomoyo_realpath_from_path.
[   42.041132][ T4323] EXT4-fs (loop3): unmounting filesystem.
[   42.042963][ T4931] netlink: 'syz.2.106': attribute type 6 has an invalid length.
[   42.258953][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'.
[   42.269922][ T4509] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by udevd (4509)
[   42.410535][ T4952] Injecting memory failure for pfn 0x13ac11 at process virtual address 0x20ffd000
[   42.413536][ T4952] Memory failure: 0x13ac11: recovery action for clean LRU page: Recovered
[   42.415024][ T4952] Injecting memory failure for pfn 0x13ac12 at process virtual address 0x20ffe000
[   42.416881][ T4952] Memory failure: 0x13ac12: recovery action for clean LRU page: Recovered
[   42.418281][ T4952] Injecting memory failure for pfn 0x13ac13 at process virtual address 0x20fff000
[   42.419783][ T4952] Memory failure: 0x13ac13: recovery action for clean LRU page: Recovered
[   42.777398][ T4944] loop4: detected capacity change from 0 to 32768
[   42.782173][ T4944] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.103 (4944)
[   42.793783][ T4944] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   42.795722][ T4944] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   42.797183][ T4944] BTRFS info (device loop4): force zlib compression, level 3
[   42.798288][ T4944] BTRFS info (device loop4): force clearing of disk cache
[   42.799327][ T4944] BTRFS info (device loop4): setting nodatasum
[   42.800205][ T4944] BTRFS info (device loop4): doing ref verification
[   42.801189][ T4944] BTRFS info (device loop4): allowing degraded mounts
[   42.802189][ T4944] BTRFS info (device loop4): using free space tree
[   42.832867][ T4958] loop2: detected capacity change from 0 to 256
[   42.872647][ T4944] BTRFS info (device loop4): enabling ssd optimizations
[   42.875186][ T4944] BTRFS info (device loop4): rebuilding free space tree
[   42.909124][ T4944] overlayfs: missing 'lowerdir'
[   42.931065][ T4330] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   43.029321][ T4991] FAULT_INJECTION: forcing a failure.
[   43.029321][ T4991] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   43.033835][ T4991] CPU: 0 PID: 4991 Comm: syz.1.120 Not tainted 6.1.148-syzkaller #0
[   43.035057][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   43.036527][ T4991] Call trace:
[   43.037005][ T4991]  dump_backtrace+0x1c8/0x1f4
[   43.037718][ T4991]  show_stack+0x2c/0x3c
[   43.038328][ T4991]  __dump_stack+0x30/0x40
[   43.038925][ T4991]  dump_stack_lvl+0xf8/0x160
[   43.039598][ T4991]  dump_stack+0x1c/0x5c
[   43.040204][ T4991]  should_fail_ex+0x3c4/0x520
[   43.040942][ T4991]  should_fail+0x14/0x24
[   43.041616][ T4991]  should_fail_usercopy+0x20/0x30
[   43.042378][ T4991]  do_ip6t_get_ctl+0x3e8/0x1314
[   43.043117][ T4991]  nf_getsockopt+0x264/0x284
[   43.043846][ T4991]  ipv6_getsockopt+0x2bc/0x3e4
[   43.044609][ T4991]  udpv6_getsockopt+0x94/0xac
[   43.045376][ T4991]  sock_common_getsockopt+0xa8/0xc4
[   43.046273][ T4991]  __sys_getsockopt+0x1e0/0x480
[   43.047051][ T4991]  __arm64_sys_getsockopt+0xb8/0xd4
[   43.047896][ T4991]  invoke_syscall+0x98/0x2bc
[   43.048579][ T4991]  el0_svc_common+0x138/0x258
[   43.049232][ T4991]  do_el0_svc+0x58/0x13c
[   43.049923][ T4991]  el0_svc+0x58/0x138
[   43.050582][ T4991]  el0t_64_sync_handler+0x84/0xf0
[   43.051417][ T4991]  el0t_64_sync+0x18c/0x190
[   43.102032][ T4997] loop1: detected capacity change from 0 to 128
[   43.104285][ T4997] EXT4-fs: Ignoring removed nomblk_io_submit option
[   43.116414][ T4997] EXT4-fs: Ignoring removed nomblk_io_submit option
[   43.117852][ T4997] EXT4-fs (loop1): Test dummy encryption mode enabled
[   43.148890][ T4993] loop4: detected capacity change from 0 to 32768
[   43.159123][ T4997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   43.218977][ T4993] XFS (loop4): Mounting V5 Filesystem
[   43.220691][ T4326] EXT4-fs (loop1): unmounting filesystem.
[   43.257749][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'.
[   43.286359][ T4993] XFS (loop4): Ending clean mount
[   43.330371][ T5015] syz.0.126 uses obsolete (PF_INET,SOCK_PACKET)
[   43.365846][ T4330] XFS (loop4): Unmounting Filesystem
[   43.593652][ T5023] loop3: detected capacity change from 0 to 32768
[   43.603221][ T5023] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.128 (5023)
[   43.607559][ T5023] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   43.609354][ T5023] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[   43.610727][ T5023] BTRFS info (device loop3): force zlib compression, level 3
[   43.611945][ T5023] BTRFS info (device loop3): force clearing of disk cache
[   43.613042][ T5023] BTRFS info (device loop3): setting nodatasum
[   43.614097][ T5023] BTRFS info (device loop3): doing ref verification
[   43.615001][ T5023] BTRFS info (device loop3): allowing degraded mounts
[   43.625504][ T5023] BTRFS info (device loop3): using free space tree
[   43.674572][ T5036] loop4: detected capacity change from 0 to 2048
[   43.683655][ T5036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   43.706460][ T5023] BTRFS info (device loop3): enabling ssd optimizations
[   43.708453][ T5023] BTRFS info (device loop3): rebuilding free space tree
[   43.727716][ T5023] overlayfs: missing 'lowerdir'
[   43.744605][ T4323] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   43.861747][   T27] audit: type=1326 audit(43.843:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.3.130" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bb5af28 code=0x0
[   43.876151][ T5054] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   43.921430][ T5056] loop4: detected capacity change from 0 to 4096
[   43.930747][ T5056] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   44.599077][ T5068] FAULT_INJECTION: forcing a failure.
[   44.599077][ T5068] name failslab, interval 1, probability 0, space 0, times 0
[   44.601195][ T5068] CPU: 1 PID: 5068 Comm: syz.1.137 Not tainted 6.1.148-syzkaller #0
[   44.602379][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   44.603791][ T5068] Call trace:
[   44.604247][ T5068]  dump_backtrace+0x1c8/0x1f4
[   44.604984][ T5068]  show_stack+0x2c/0x3c
[   44.605586][ T5068]  __dump_stack+0x30/0x40
[   44.606267][ T5068]  dump_stack_lvl+0xf8/0x160
[   44.606946][ T5068]  dump_stack+0x1c/0x5c
[   44.607615][ T5068]  should_fail_ex+0x3c4/0x520
[   44.608669][ T5068]  __should_failslab+0xc0/0x120
[   44.609415][ T5068]  should_failslab+0x10/0x28
[   44.610104][ T5068]  __kmem_cache_alloc_node+0x7c/0x320
[   44.610939][ T5068]  kmalloc_trace+0x48/0x94
[   44.611572][ T5068]  drm_atomic_state_alloc+0xb4/0x108
[   44.612373][ T5068]  drm_mode_atomic_ioctl+0x338/0xc58
[   44.613187][ T5068]  drm_ioctl_kernel+0x28c/0x3f8
[   44.613911][ T5068]  drm_ioctl+0x580/0x8cc
[   44.614554][ T5068]  __arm64_sys_ioctl+0x14c/0x1c8
[   44.615231][ T5068]  invoke_syscall+0x98/0x2bc
[   44.615885][ T5068]  el0_svc_common+0x138/0x258
[   44.616613][ T5068]  do_el0_svc+0x58/0x13c
[   44.617210][ T5068]  el0_svc+0x58/0x138
[   44.617823][ T5068]  el0t_64_sync_handler+0x84/0xf0
[   44.618644][ T5068]  el0t_64_sync+0x18c/0x190
[   44.776640][ T5074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.138'.
[   45.459453][ T4330] EXT4-fs (loop4): unmounting filesystem.
[   45.507068][ T5083] loop4: detected capacity change from 0 to 512
[   45.539862][ T5081] loop1: detected capacity change from 0 to 32768
[   45.550176][ T5087] loop4: detected capacity change from 0 to 64
[   45.552198][ T5081] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.140 (5081)
[   45.557861][ T5081] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   45.559628][ T5081] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   45.561008][ T5081] BTRFS info (device loop1): force zlib compression, level 3
[   45.562135][ T5081] BTRFS info (device loop1): force clearing of disk cache
[   45.563224][ T5081] BTRFS info (device loop1): setting nodatasum
[   45.564218][ T5081] BTRFS info (device loop1): doing ref verification
[   45.567861][ T5081] BTRFS info (device loop1): allowing degraded mounts
[   45.576100][ T5081] BTRFS info (device loop1): using free space tree
[   45.650344][ T5100] fuse: Bad value for 'fd'
[   45.652223][ T4335] Bluetooth: hci0: Unable to find connection with handle 0xffff
[   45.668809][ T5081] BTRFS info (device loop1): enabling ssd optimizations
[   45.671275][ T5081] BTRFS info (device loop1): rebuilding free space tree
[   45.680519][ T5113] Invalid ELF header len 4
[   45.684717][ T5081] overlayfs: missing 'lowerdir'
[   45.701787][ T4326] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   45.792268][ T5123] loop1: detected capacity change from 0 to 8192
[   45.799458][ T5123] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   45.801643][ T5123] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   45.803239][ T5123] REISERFS (device loop1): using journaled data mode
[   45.804218][ T5123] reiserfs: using flush barriers
[   45.805978][ T5123] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   45.808376][ T5123] REISERFS (device loop1): checking transaction log (loop1)
[   45.810362][ T5119] syz.0.148 sent an empty control message without MSG_MORE.
[   45.812817][ T5123] REISERFS (device loop1): Using r5 hash to sort names
[   45.849126][ T5123] binder: 5122:5123 got reply transaction with no transaction stack
[   45.850448][ T5123] binder: 5122:5123 transaction reply to 0:0 failed 1/29201/-71, size 0-0 line 2955
[   45.897627][ T5133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.153'.
[   45.953757][ T5133] loop2: detected capacity change from 0 to 4096
[   45.961325][ T5133] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   46.620343][ T5153] MPTCP: kernel_bind error, err=-22
[   46.746707][ T4333] EXT4-fs (loop2): unmounting filesystem.
[   46.762616][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'.
[   46.774661][ T5163] netlink: 172 bytes leftover after parsing attributes in process `syz.0.163'.
[   46.782644][ T5155] loop1: detected capacity change from 0 to 32768
[   46.799486][ T5155] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.159 (5155)
[   46.813086][ T5165] loop2: detected capacity change from 0 to 1024
[   46.814310][ T5155] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   46.827128][ T5155] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   46.831677][ T5155] BTRFS info (device loop1): force zlib compression, level 3
[   46.838228][ T5155] BTRFS info (device loop1): force clearing of disk cache
[   46.841632][ T5155] BTRFS info (device loop1): setting nodatasum
[   46.847242][ T5155] BTRFS info (device loop1): doing ref verification
[   46.851084][ T5155] BTRFS info (device loop1): allowing degraded mounts
[   46.854455][ T5155] BTRFS info (device loop1): using free space tree
[   46.905124][ T5155] BTRFS info (device loop1): enabling ssd optimizations
[   46.909584][ T5155] BTRFS info (device loop1): rebuilding free space tree
[   46.928798][ T5155] overlayfs: missing 'lowerdir'
[   46.952084][ T4326] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   47.048049][ T5193] loop3: detected capacity change from 0 to 2048
[   47.051833][ T5193] EXT4-fs: Ignoring removed i_version option
[   47.055150][ T5193] EXT4-fs: Ignoring removed mblk_io_submit option
[   47.074316][ T5193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   47.094626][ T4323] EXT4-fs (loop3): unmounting filesystem.
[   47.105456][ T5194] hfsplus: bad catalog entry type
[   47.195498][ T5211] loop3: detected capacity change from 0 to 512
[   47.201468][ T5211] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   47.203380][ T5211] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   47.207602][ T5211] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.171: corrupted in-inode xattr
[   47.209562][ T5211] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.171: couldn't read orphan inode 15 (err -117)
[   47.211712][ T5211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   47.408780][ T5214] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #2: comm syz.3.171: invalid size
[   47.652730][ T4480] hfsplus: b-tree write err: -5, ino 4
[   47.794381][ T5219] loop2: detected capacity change from 0 to 32768
[   47.803302][ T5219] jfs: Unrecognized mount option "" or missing value
[   47.952001][ T5225] overlayfs: missing 'lowerdir'
[   47.957146][ T5231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.179'.
[   47.960111][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'.
[   48.024208][ T5233] loop2: detected capacity change from 0 to 4096
[   48.028250][ T5210] EXT4-fs (loop3): unmounting filesystem.
[   48.113909][ T5233] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[   48.573526][ T5254] loop1: detected capacity change from 0 to 512
[   48.574854][ T5254] EXT4-fs: Ignoring removed mblk_io_submit option
[   48.588538][ T5254] EXT4-fs: Ignoring removed i_version option
[   48.590107][ T5254] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   48.601452][ T5254] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0022]
[   48.602865][ T5254] System zones: 1-12
[   48.603764][ T5254] EXT4-fs (loop1): orphan cleanup on readonly fs
[   48.619098][ T5254] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.186: attempt to clear invalid blocks 1024 len 1
[   48.625270][ T5254] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.186: bg 0: block 361: padding at end of block bitmap is not set
[   48.637842][ T5254] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   48.648792][ T5254] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.186: invalid indirect mapped block 1811939328 (level 0)
[   48.655759][ T5254] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.186: invalid indirect mapped block 2 (level 2)
[   48.658620][ T5254] EXT4-fs (loop1): 1 truncate cleaned up
[   48.659507][ T5254] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   48.710572][ T4326] EXT4-fs (loop1): unmounting filesystem.
[   48.962919][ T5265] loop2: detected capacity change from 0 to 40427
[   48.980843][ T5265] F2FS-fs (loop2): Invalid log blocks per segment (83886089)
[   48.985705][ T5265] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   49.042103][ T5270] overlayfs: missing 'lowerdir'
[   49.066406][ T5268] loop1: detected capacity change from 0 to 32768
[   49.141058][ T5291] netlink: 'syz.3.198': attribute type 1 has an invalid length.
[   49.144399][ T5268] XFS (loop1): Mounting V5 Filesystem
[   49.160413][ T5291] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.180175][ T5291] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.185669][ T5268] XFS (loop1): Ending clean mount
[   49.186891][ T5291] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   49.189521][ T5291] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   49.202466][ T5268] ubi0: attaching mtd0
[   49.203623][ T5268] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042)
[   49.233667][ T4326] XFS (loop1): Unmounting Filesystem
[   49.245565][ T5297] device veth3 entered promiscuous mode
[   49.248218][ T5297] bond1: (slave veth3): Enslaving as an active interface with a down link
[   49.278381][ T5279] loop2: detected capacity change from 0 to 40427
[   49.282563][ T5297] bond1: (slave veth1_to_batadv): making interface the new active one
[   49.291585][ T5279] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff
[   49.292588][ T5297] bond1: (slave veth1_to_batadv): Enslaving as an active interface with an up link
[   49.294117][ T5279] F2FS-fs (loop2): invalid crc value
[   49.303659][ T5279] F2FS-fs (loop2): Found nat_bits in checkpoint
[   49.314549][ T5279] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   49.343355][ T5304] fuse: Bad value for 'fd'
[   49.361643][ T4333] syz-executor: attempt to access beyond end of device
[   49.361643][ T4333] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   49.571493][ T5323] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[   49.573060][ T5323] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[   49.625586][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'.
[   49.787948][ T5326] loop1: detected capacity change from 0 to 40427
[   49.795600][ T5326] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 196609)
[   49.796891][ T5326] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   49.798130][ T5326] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x3
[   49.799407][ T5326] F2FS-fs (loop1): Unrecognized mount option "no_he" or missing value
[   49.806036][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'.
[   49.823908][ T5339] device wlan0 entered promiscuous mode
[   49.845168][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'.
[   49.895101][ T5322] loop2: detected capacity change from 0 to 32768
[   49.912187][ T5322] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.206 (5322)
[   49.922979][ T5322] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   49.924661][ T5322] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   49.929594][ T5322] BTRFS info (device loop2): force zlib compression, level 3
[   49.930798][ T5322] BTRFS info (device loop2): force clearing of disk cache
[   49.931886][ T5322] BTRFS info (device loop2): setting nodatasum
[   49.932894][ T5322] BTRFS info (device loop2): doing ref verification
[   49.933956][ T5322] BTRFS info (device loop2): allowing degraded mounts
[   49.935026][ T5322] BTRFS info (device loop2): using free space tree
[   50.107807][ T5322] BTRFS info (device loop2): enabling ssd optimizations
[   50.109301][ T5373] loop1: detected capacity change from 0 to 1024
[   50.109937][ T5322] BTRFS info (device loop2): rebuilding free space tree
[   50.113043][ T5373] EXT4-fs: Ignoring removed bh option
[   50.131604][ T5322] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   50.133066][ T5322] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   50.151328][ T4333] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   50.169453][ T5373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   50.261449][ T4326] EXT4-fs (loop1): unmounting filesystem.
[   50.398095][ T5388] loop2: detected capacity change from 0 to 8192
[   50.807957][ T5386] usb usb1: check_ctrlrecip: process 5386 (syz.1.224) requesting ep 01 but needs 81
[   50.809450][ T5386] usb usb1: usbfs: process 5386 (syz.1.224) did not claim interface 0 before use
[   50.826000][ T4462] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   50.987955][ T5395] loop2: detected capacity change from 0 to 40427
[   50.992358][ T5395] F2FS-fs (loop2): invalid crc value
[   51.084347][ T5395] F2FS-fs (loop2): Found nat_bits in checkpoint
[   51.093911][ T5395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   51.097870][ T5395] capability: warning: `syz.2.222' uses 32-bit capabilities (legacy support in use)
[   51.199214][ T5406] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   51.200727][ T5406] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   51.227559][ T5416] FAULT_INJECTION: forcing a failure.
[   51.227559][ T5416] name failslab, interval 1, probability 0, space 0, times 0
[   51.232301][ T5416] CPU: 1 PID: 5416 Comm: syz.1.234 Not tainted 6.1.148-syzkaller #0
[   51.233621][ T5416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   51.235030][ T5416] Call trace:
[   51.235529][ T5416]  dump_backtrace+0x1c8/0x1f4
[   51.236276][ T5416]  show_stack+0x2c/0x3c
[   51.236941][ T5416]  __dump_stack+0x30/0x40
[   51.237585][ T5416]  dump_stack_lvl+0xf8/0x160
[   51.238287][ T5416]  dump_stack+0x1c/0x5c
[   51.238989][ T5416]  should_fail_ex+0x3c4/0x520
[   51.239796][ T5416]  __should_failslab+0xc0/0x120
[   51.240631][ T5416]  should_failslab+0x10/0x28
[   51.241398][ T5416]  __kmem_cache_alloc_node+0x7c/0x320
[   51.242280][ T5416]  __kmalloc_node_track_caller+0xcc/0x16c
[   51.243171][ T5416]  kvasprintf+0x118/0x1e8
[   51.243828][ T5416]  kasprintf+0xd8/0x124
[   51.244498][ T5416]  nf_tables_set_alloc_name+0xfc/0x628
[   51.245389][ T5416]  nf_tables_newset+0xe1c/0x1ad0
[   51.246195][ T5416]  nfnetlink_rcv+0xc80/0x1afc
[   51.246889][ T5416]  netlink_unicast+0x60c/0x824
[   51.247618][ T5416]  netlink_sendmsg+0x6e8/0x9b0
[   51.248450][ T5416]  ____sys_sendmsg+0x5b8/0x918
[   51.249243][ T5416]  __sys_sendmsg+0x25c/0x320
[   51.249995][ T5416]  __arm64_sys_sendmsg+0x80/0x94
[   51.250819][ T5416]  invoke_syscall+0x98/0x2bc
[   51.251544][ T5416]  el0_svc_common+0x138/0x258
[   51.252273][ T5416]  do_el0_svc+0x58/0x13c
[   51.252917][ T5416]  el0_svc+0x58/0x138
[   51.253570][ T5416]  el0t_64_sync_handler+0x84/0xf0
[   51.254333][ T5416]  el0t_64_sync+0x18c/0x190
[   51.273875][ T4333] syz-executor: attempt to access beyond end of device
[   51.273875][ T4333] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   51.614133][ T5430] loop2: detected capacity change from 0 to 32768
[   51.629861][ T5424] Soft offlining pfn 0x1388bb at process virtual address 0x20000000
[   51.638479][ T5424] Soft offlining pfn 0x1388bc at process virtual address 0x20001000
[   51.644775][ T5424] soft offline: 0x1388bc: page migration failed 1, type 0x5ffc000000a082e(referenced|uptodate|dirty|active|arch_1|mappedtodisk|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[   51.687511][ T5430] XFS (loop2): Mounting V5 Filesystem
[   51.751368][ T5430] XFS (loop2): Ending clean mount
[   51.761002][ T5430] XFS (loop2): Quotacheck needed: Please wait.
[   51.783304][ T5430] XFS (loop2): Quotacheck: Done.
[   52.259834][ T4333] XFS (loop2): Unmounting Filesystem
[   52.320517][ T5453] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   52.321980][ T5453] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   52.372279][ T5472] fuse: Bad value for 'fd'
[   53.341843][ T5489] loop1: detected capacity change from 0 to 64
[   53.507908][ T5489] sched: RT throttling activated
[   53.828243][ T5497] loop2: detected capacity change from 0 to 1024
[   53.856356][ T5497] EXT4-fs: Ignoring removed bh option
[   53.892735][ T5497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   54.003676][ T4333] EXT4-fs (loop2): unmounting filesystem.
[   54.431150][ T5524] TCP: MD5 Hash mismatch for [fe80::bb]:20001->[ff02::1]:20002 L3 index 0
[   54.448427][ T5509] loop2: detected capacity change from 0 to 32768
[   54.453486][ T5509] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.262 (5509)
[   54.786731][ T5509] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   54.788445][ T5509] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   54.790150][ T5509] BTRFS info (device loop2): force zlib compression, level 3
[   54.791225][ T5509] BTRFS info (device loop2): force clearing of disk cache
[   54.792349][ T5509] BTRFS info (device loop2): setting nodatasum
[   54.793327][ T5509] BTRFS info (device loop2): doing ref verification
[   54.794327][ T5509] BTRFS info (device loop2): allowing degraded mounts
[   54.795295][ T5509] BTRFS info (device loop2): using free space tree
[   54.988591][ T5509] BTRFS info (device loop2): enabling ssd optimizations
[   54.990253][ T5509] BTRFS info (device loop2): rebuilding free space tree
[   55.061624][ T5560] loop1: detected capacity change from 0 to 32768
[   55.064488][ T5560] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.276 (5560)
[   55.068633][ T5560] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   55.070277][ T5560] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   55.071653][ T5560] BTRFS info (device loop1): using free space tree
[   55.090560][ T5560] BTRFS info (device loop1): enabling ssd optimizations
[   55.128358][ T5509] overlayfs: missing 'workdir'
[   55.166724][ T4333] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   55.166739][ T4326] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   55.329912][ T5601] FAULT_INJECTION: forcing a failure.
[   55.329912][ T5601] name failslab, interval 1, probability 0, space 0, times 0
[   55.331982][ T5601] CPU: 0 PID: 5601 Comm: syz.1.282 Not tainted 6.1.148-syzkaller #0
[   55.333125][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   55.334703][ T5601] Call trace:
[   55.335231][ T5601]  dump_backtrace+0x1c8/0x1f4
[   55.336002][ T5601]  show_stack+0x2c/0x3c
[   55.336648][ T5601]  __dump_stack+0x30/0x40
[   55.337316][ T5601]  dump_stack_lvl+0xf8/0x160
[   55.338036][ T5601]  dump_stack+0x1c/0x5c
[   55.338678][ T5601]  should_fail_ex+0x3c4/0x520
[   55.339385][ T5601]  __should_failslab+0xc0/0x120
[   55.340126][ T5601]  should_failslab+0x10/0x28
[   55.340888][ T5601]  kmem_cache_alloc_node+0x8c/0x34c
[   55.341703][ T5601]  __alloc_skb+0x128/0x718
[   55.342429][ T5601]  _sctp_make_chunk+0x78/0x3e4
[   55.343220][ T5601]  sctp_make_init+0x3f8/0x1934
[   55.344006][ T5601]  sctp_sf_do_prm_asoc+0xb8/0x300
[   55.344858][ T5601]  sctp_do_sm+0x1ac/0x4894
[   55.345540][ T5601]  sctp_primitive_ASSOCIATE+0x98/0xc8
[   55.346394][ T5601]  sctp_sendmsg_to_asoc+0xfc8/0x1344
[   55.347254][ T5601]  sctp_sendmsg+0x14dc/0x20cc
[   55.347973][ T5601]  inet_sendmsg+0x154/0x284
[   55.348719][ T5601]  __sys_sendto+0x304/0x3fc
[   55.349484][ T5601]  __arm64_sys_sendto+0xd8/0xf8
[   55.350269][ T5601]  invoke_syscall+0x98/0x2bc
[   55.350984][ T5601]  el0_svc_common+0x138/0x258
[   55.351745][ T5601]  do_el0_svc+0x58/0x13c
[   55.352413][ T5601]  el0_svc+0x58/0x138
[   55.353046][ T5601]  el0t_64_sync_handler+0x84/0xf0
[   55.353849][ T5601]  el0t_64_sync+0x18c/0x190
[   55.354554][    C0] vkms_vblank_simulate: vblank timer overrun
[   55.375441][ T4509] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop2 scanned by udevd (4509)
[   55.438548][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'.
[   56.051609][ T5615] loop2: detected capacity change from 0 to 32768
[   56.055953][ T5615] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   56.057539][ T5615] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   56.059978][ T5615] BTRFS info (device loop2): force zlib compression, level 3
[   56.063298][ T5615] BTRFS info (device loop2): force clearing of disk cache
[   56.064569][ T5615] BTRFS info (device loop2): setting nodatasum
[   56.066919][ T5615] BTRFS info (device loop2): doing ref verification
[   56.067982][ T5615] BTRFS info (device loop2): allowing degraded mounts
[   56.069258][ T5615] BTRFS info (device loop2): using free space tree
[   56.109058][ T5645] loop1: detected capacity change from 0 to 8
[   56.187650][ T5615] BTRFS info (device loop2): enabling ssd optimizations
[   56.189454][ T5615] BTRFS info (device loop2): rebuilding free space tree
[   56.201210][ T5615] overlayfs: missing 'workdir'
[   56.235197][ T4333] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   56.393807][ T4462] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop2 scanned by udevd (4462)
[   56.475837][ T5671] loop1: detected capacity change from 0 to 4096
[   56.481532][ T5671] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   56.498140][ T5671] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   56.500020][ T5671] ntfs3: loop1: Failed to load $Extend.
[   56.540572][ T5671] overlayfs: upper fs does not support tmpfile.
[   56.553403][ T5671] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   56.554841][ T5671] overlayfs: failed to get origin (-22)
[   56.578098][ T5671] overlayfs: failed to verify origin (/, ino=5, err=-22)
[   56.579594][ T5671] overlayfs: failed to verify upper root origin
[   56.633344][ T5671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.302'.
[   56.944220][ T5690] 9pnet_fd: Insufficient options for proto=fd
[   57.138460][ T5695] overlayfs: missing 'workdir'
[   57.329646][ T5700] netlink: 'syz.3.313': attribute type 10 has an invalid length.
[   57.332425][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.334013][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.354013][ T5702] binder: BINDER_SET_CONTEXT_MGR already set
[   57.357839][ T5702] binder: 5701:5702 ioctl 40046207 0 returned -16
[   57.371701][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.372864][ T5700] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.374081][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.375210][ T5700] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.397494][ T5700] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   57.750314][ T5732] overlayfs: overlapping lowerdir path
[   57.775173][ T5732] overlayfs: failed to verify upper (50/file1, ino=323, err=-116)
[   57.776815][ T5732] overlayfs: failed to verify index dir 'upper' xattr
[   57.777880][ T5732] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[   57.956464][ T5734] loop1: detected capacity change from 0 to 512
[   57.966253][ T5735] netlink: 52 bytes leftover after parsing attributes in process `syz.1.325'.
[   57.968676][ T5735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.103193][ T5729] overlayfs: failed to clone upperpath
[   58.380153][ T5755] overlayfs: missing 'workdir'
[   58.511051][ T5757] loop2: detected capacity change from 0 to 32768
[   58.519590][ T5757] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.330 (5757)
[   58.538283][ T5757] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   58.540764][ T5757] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   58.542223][ T5757] BTRFS info (device loop2): setting nodatasum
[   58.543150][ T5757] BTRFS warning (device loop2): excessive commit interval 491628334
[   58.544375][ T5757] BTRFS info (device loop2): max_inline at 0
[   58.555685][ T5757] BTRFS info (device loop2): using free space tree
[   58.568864][ T5773] netlink: 'syz.3.332': attribute type 39 has an invalid length.
[   58.712445][ T5757] BTRFS info (device loop2): enabling ssd optimizations
[   58.895617][ T5784] overlayfs: failed to clone upperpath
[   58.900669][ T4333] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   59.096511][ T5806] loop2: detected capacity change from 0 to 1024
[   59.106959][ T5806] EXT4-fs: Ignoring removed bh option
[   59.155056][ T5806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   59.226241][ T4333] EXT4-fs (loop2): unmounting filesystem.
[   59.322610][ T5817] loop2: detected capacity change from 0 to 512
[   59.337850][ T5817] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 24
[   59.373391][ T5814] loop1: detected capacity change from 0 to 32768
[   59.378724][ T5814] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.343 (5814)
[   59.383342][ T5814] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.385708][ T5814] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   59.387164][ T5814] BTRFS error (device loop1): unrecognized mount option 'defcontext=root'
[   59.390718][ T5814] BTRFS error (device loop1): open_ctree failed: -22
[   59.440022][ T5827] FAULT_INJECTION: forcing a failure.
[   59.440022][ T5827] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.442921][ T5827] CPU: 0 PID: 5827 Comm: syz.1.350 Not tainted 6.1.148-syzkaller #0
[   59.444108][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   59.445688][ T5827] Call trace:
[   59.446209][ T5827]  dump_backtrace+0x1c8/0x1f4
[   59.446940][ T5827]  show_stack+0x2c/0x3c
[   59.447597][ T5827]  __dump_stack+0x30/0x40
[   59.448272][ T5827]  dump_stack_lvl+0xf8/0x160
[   59.449065][ T5827]  dump_stack+0x1c/0x5c
[   59.449805][ T5827]  should_fail_ex+0x3c4/0x520
[   59.450571][ T5827]  should_fail+0x14/0x24
[   59.451235][ T5827]  should_fail_usercopy+0x20/0x30
[   59.451959][ T5827]  copy_msghdr_from_user+0xb4/0x4ac
[   59.452754][ T5827]  __sys_sendmmsg+0x2c8/0x754
[   59.453039][ T5823] vcan0: tx drop: invalid sa for name 0x0000000010000003
[   59.453427][ T5827]  __arm64_sys_sendmmsg+0xa0/0xbc
[   59.455471][ T5827]  invoke_syscall+0x98/0x2bc
[   59.456197][ T5827]  el0_svc_common+0x138/0x258
[   59.456928][ T5827]  do_el0_svc+0x58/0x13c
[   59.457639][ T5827]  el0_svc+0x58/0x138
[   59.458267][ T5827]  el0t_64_sync_handler+0x84/0xf0
[   59.459074][ T5827]  el0t_64_sync+0x18c/0x190
[   59.510387][ T4462] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4462)
[   59.653334][ T5830] loop2: detected capacity change from 0 to 32768
[   59.659820][ T5825] overlayfs: failed to clone upperpath
[   59.683961][ T5830] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.351 (5830)
[   59.691596][ T5830] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   59.693325][ T5830] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   59.694651][ T5830] BTRFS info (device loop2): force zlib compression, level 3
[   59.700171][ T5830] BTRFS info (device loop2): force clearing of disk cache
[   59.701361][ T5830] BTRFS info (device loop2): setting nodatasum
[   59.702232][ T5830] BTRFS info (device loop2): doing ref verification
[   59.703207][ T5830] BTRFS info (device loop2): allowing degraded mounts
[   59.712365][ T5830] BTRFS info (device loop2): using free space tree
[   59.763935][ T5850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.356'.
[   59.775461][ T5850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'.
[   59.793243][ T5832] loop1: detected capacity change from 0 to 32768
[   59.794650][ T5832] XFS: ikeep mount option is deprecated.
[   59.877971][ T5832] XFS (loop1): Mounting V5 Filesystem
[   59.916022][ T5830] BTRFS info (device loop2): enabling ssd optimizations
[   59.917761][ T5830] BTRFS info (device loop2): rebuilding free space tree
[   59.957394][ T5832] XFS (loop1): Ending clean mount
[   59.960590][ T5832] XFS (loop1): Quotacheck needed: Please wait.
[   59.978841][ T5832] XFS (loop1): Quotacheck: Done.
[   59.987015][ T5832] XFS (loop1): Unmounting Filesystem
[   60.023274][ T4333] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   60.193983][ T5883] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000004'
[   60.392851][ T5883] loop2: detected capacity change from 0 to 32768
[   60.662578][ T5896] loop2: detected capacity change from 0 to 1024
[   60.670834][ T5896] EXT4-fs: Ignoring removed bh option
[   60.714406][ T5896] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   60.749661][ T5894] loop1: detected capacity change from 0 to 32768
[   60.751572][ T5894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.366 (5894)
[   60.756902][ T5894] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   60.758645][ T5894] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   60.760207][ T5894] BTRFS info (device loop1): setting nodatasum
[   60.761306][ T5894] BTRFS warning (device loop1): excessive commit interval 491628334
[   60.765003][ T5894] BTRFS info (device loop1): max_inline at 0
[   60.771971][ T5894] BTRFS info (device loop1): using free space tree
[   60.805111][ T4333] EXT4-fs (loop2): unmounting filesystem.
[   61.064416][ T5894] BTRFS info (device loop1): enabling ssd optimizations
[   61.103782][ T5911] loop2: detected capacity change from 0 to 32768
[   61.184748][ T5911] XFS (loop2): Mounting V5 Filesystem
[   61.228750][ T4326] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   61.315508][ T5911] XFS (loop2): Ending clean mount
[   61.320805][ T5911] XFS (loop2): Quotacheck needed: Please wait.
[   61.330383][ T5915] overlayfs: failed to clone upperpath
[   61.356996][ T5911] XFS (loop2): Quotacheck: Done.
[   61.469494][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'.
[   61.925185][ T4333] XFS (loop2): Unmounting Filesystem
[   61.925775][ T5976] xt_TCPMSS: Only works on TCP SYN packets
[   62.381525][ T5987] loop1: detected capacity change from 0 to 128
[   62.405942][ T5987] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   62.470891][ T5987] syz.1.390 (pid 5987) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   62.532087][ T5985] loop2: detected capacity change from 0 to 32768
[   62.546523][ T5985] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.389 (5985)
[   62.568410][ T5985] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   62.570060][ T5985] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   62.571501][ T5985] BTRFS info (device loop2): force zlib compression, level 3
[   62.572853][ T5985] BTRFS info (device loop2): force clearing of disk cache
[   62.573916][ T5985] BTRFS info (device loop2): setting nodatasum
[   62.574837][ T5985] BTRFS info (device loop2): doing ref verification
[   62.575932][ T5985] BTRFS info (device loop2): allowing degraded mounts
[   62.576937][ T5985] BTRFS info (device loop2): using free space tree
[   62.681487][ T5987] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)"
[   62.755172][ T4326] EXT4-fs (loop1): unmounting filesystem.
[   63.025524][ T5985] BTRFS info (device loop2): enabling ssd optimizations
[   63.027671][ T5985] BTRFS info (device loop2): rebuilding free space tree
[   63.079714][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.082602][ T4333] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   63.090706][ T6003] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   63.796767][ T6069] loop2: detected capacity change from 0 to 512
[   64.217276][ T6070] device wg1 entered promiscuous mode
[   64.477547][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[   64.478844][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[   64.480255][   T14] cfg80211: failed to load regulatory.db
[   64.487764][ T6076] loop1: detected capacity change from 0 to 32768
[   64.504551][ T6076] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.414 (6076)
[   64.540656][ T6076] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   64.553951][ T6076] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   64.566817][ T6076] BTRFS info (device loop1): force zlib compression, level 3
[   64.568073][ T6076] BTRFS info (device loop1): force clearing of disk cache
[   64.586534][ T6076] BTRFS info (device loop1): setting nodatasum
[   64.587556][ T6076] BTRFS info (device loop1): doing ref verification
[   64.588634][ T6076] BTRFS info (device loop1): allowing degraded mounts
[   64.595720][ T6076] BTRFS info (device loop1): using free space tree
[   64.944967][ T6076] BTRFS info (device loop1): enabling ssd optimizations
[   64.947426][ T6076] BTRFS info (device loop1): rebuilding free space tree
[   65.090547][ T4326] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   65.239065][ T6144] loop1: detected capacity change from 0 to 128
[   65.253767][ T6144] FAT-fs (loop1): Unrecognized mount option "ake!ä_utime=00000000000000000000233" or missing value
[   65.345006][ T6144] loop1: detected capacity change from 0 to 4096
[   65.829004][ T6159] loop1: detected capacity change from 0 to 32768
[   65.850236][ T6159] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.437 (6159)
[   65.856239][ T6159] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   65.857903][ T6159] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   65.860271][ T6159] BTRFS info (device loop1): force zlib compression, level 3
[   65.862104][ T6159] BTRFS info (device loop1): force clearing of disk cache
[   65.863229][ T6159] BTRFS info (device loop1): setting nodatasum
[   65.864298][ T6159] BTRFS info (device loop1): doing ref verification
[   65.866378][ T6159] BTRFS info (device loop1): allowing degraded mounts
[   65.867474][ T6159] BTRFS info (device loop1): using free space tree
[   66.021015][ T6159] BTRFS info (device loop1): enabling ssd optimizations
[   66.023881][ T6159] BTRFS info (device loop1): rebuilding free space tree
[   66.057449][ T4326] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   66.081315][ T6207] loop2: detected capacity change from 0 to 512
[   66.084055][ T6207] journal_path: Lookup failure for 'éq‰Y’3aK/file0'
[   66.093559][ T6207] EXT4-fs: error: could not find journal device path
[   66.229517][ T6214] IPVS: Error joining to the multicast group
[   66.684903][ T6227] device vlan1 entered promiscuous mode
[   66.851266][ T6233] netlink: 292 bytes leftover after parsing attributes in process `syz.4.459'.
[   68.277962][ T6244] overlayfs: failed to clone upperpath
[   68.347260][ T6264] loop1: detected capacity change from 0 to 256
[   68.388781][ T6264] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   68.543170][ T6263] 9p: Unknown uid 00000000004294967295
[   68.562364][ T6275] netlink: 'syz.1.474': attribute type 1 has an invalid length.
[   68.575360][ T6275] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   68.746596][ T6272] loop2: detected capacity change from 0 to 40427
[   68.753996][ T6272] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288)
[   68.765114][ T6272] F2FS-fs (loop2): invalid crc value
[   68.770743][ T6272] F2FS-fs (loop2): invalid crc value
[   68.771669][ T6272] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[   69.165906][ T6288] loop1: detected capacity change from 0 to 40427
[   69.173220][ T6288] F2FS-fs (loop1): invalid crc value
[   69.197909][ T6291] input: syz1 as /devices/virtual/input/input3
[   69.221336][ T6288] F2FS-fs (loop1): Found nat_bits in checkpoint
[   69.237385][ T6288] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   69.459518][ T6300] netlink: 830 bytes leftover after parsing attributes in process `syz.3.481'.
[   69.464260][ T6300] device bond_slave_0 entered promiscuous mode
[   69.465390][ T6300] device bond_slave_1 entered promiscuous mode
[   69.466316][ T6300] device bridge0 entered promiscuous mode
[   70.151519][ T6336] loop1: detected capacity change from 0 to 1024
[   70.159711][ T6336] EXT4-fs: Ignoring removed bh option
[   70.221013][ T6336] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   70.257694][ T6345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.498'.
[   70.269379][ T6348] loop2: detected capacity change from 0 to 512
[   70.285406][ T6348] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[   70.295815][ T6348] EXT2-fs (loop2): error: couldn't mount RDWR because of unsupported optional features (1000000)
[   70.305054][ T4326] EXT4-fs (loop1): unmounting filesystem.
[   70.929117][ T6368] team0: Device gtp0 is of different type
[   71.214653][ T6390] loop2: detected capacity change from 0 to 512
[   71.241935][ T6390] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.508: invalid block
[   71.251554][ T6390] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.508: invalid indirect mapped block 10 (level 1)
[   71.258749][ T6390] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.508: invalid indirect mapped block 8 (level 1)
[   71.262123][ T6390] EXT4-fs (loop2): 1 truncate cleaned up
[   71.263219][ T6390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   71.510568][ T4333] EXT4-fs (loop2): unmounting filesystem.
[   71.980176][ T6409] loop2: detected capacity change from 0 to 1024
[   71.994031][ T6409] EXT4-fs: Ignoring removed bh option
[   72.015890][ T6409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   72.079420][ T4333] EXT4-fs (loop2): unmounting filesystem.
[   72.237786][ T6426] loop1: detected capacity change from 0 to 40427
[   72.241114][ T6426] F2FS-fs (loop1): invalid crc value
[   72.260505][ T6424] loop2: detected capacity change from 0 to 32768
[   72.273881][ T6426] F2FS-fs (loop1): Found nat_bits in checkpoint
[   72.286226][ T6426] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   72.364592][ T6424] XFS (loop2): Mounting V5 Filesystem
[   72.428822][ T6424] XFS (loop2): Ending clean mount
[   72.432469][ T6424] XFS (loop2): Quotacheck needed: Please wait.
[   72.462005][ T6424] XFS (loop2): Quotacheck: Done.
[   72.979107][ T4333] XFS (loop2): Unmounting Filesystem
[   73.015237][ T6475] overlayfs: failed to clone upperpath
[   73.081549][ T6478] loop1: detected capacity change from 0 to 4096
[   73.091084][ T6478] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   73.104362][ T6478] ntfs3: loop1: Failed to load $Extend.
[   73.167314][ T6467] tipc: Started in network mode
[   73.168167][ T6467] tipc: Node identity ac1414aa, cluster identity 4711
[   73.170315][ T6467] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   73.171432][ T6467] tipc: Enabled bearer <udp:s>, priority 10
[   73.175972][ T6485] loop1: detected capacity change from 0 to 1024
[   73.177397][ T6485] EXT4-fs: Ignoring removed bh option
[   73.219259][ T6485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   73.274204][ T4326] EXT4-fs (loop1): unmounting filesystem.
[   73.306582][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   73.445428][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   73.482476][ T6506] loop1: detected capacity change from 0 to 40427
[   73.489605][ T6506] F2FS-fs (loop1): invalid crc value
[   73.510834][ T6506] F2FS-fs (loop1): Found nat_bits in checkpoint
[   73.539983][ T6506] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   73.585467][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   73.628712][ T6503] loop2: detected capacity change from 0 to 32768
[   73.680117][ T6503] XFS (loop2): Mounting V5 Filesystem
[   73.723579][ T6503] XFS (loop2): Ending clean mount
[   73.725299][ T6503] XFS (loop2): Quotacheck needed: Please wait.
[   73.726381][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   73.748408][ T6503] XFS (loop2): Quotacheck: Done.
[   73.865447][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   74.121851][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   74.233896][ T4333] XFS (loop2): Unmounting Filesystem
[   74.256660][  T112] tipc: Node number set to 2886997162
[   74.395513][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   74.492646][ T6563] loop1: detected capacity change from 0 to 32768
[   74.581554][ T6563] JBD2: Ignoring recovery information on journal
[   74.658727][ T6563] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   74.665454][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   74.724633][ T6574] loop2: detected capacity change from 0 to 1024
[   74.726111][ T6574] EXT4-fs: Ignoring removed bh option
[   74.773834][ T6574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   74.815784][ T4333] EXT4-fs (loop2): unmounting filesystem.
[   74.843028][ T4326] ocfs2: Unmounting device (7,1) on (node local)
[   74.873217][ T6581] FAULT_INJECTION: forcing a failure.
[   74.873217][ T6581] name failslab, interval 1, probability 0, space 0, times 0
[   74.875101][ T6581] CPU: 1 PID: 6581 Comm: syz.2.568 Not tainted 6.1.148-syzkaller #0
[   74.876444][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   74.878015][ T6581] Call trace:
[   74.878480][ T6581]  dump_backtrace+0x1c8/0x1f4
[   74.879243][ T6581]  show_stack+0x2c/0x3c
[   74.879972][ T6581]  __dump_stack+0x30/0x40
[   74.880737][ T6581]  dump_stack_lvl+0xf8/0x160
[   74.881482][ T6581]  dump_stack+0x1c/0x5c
[   74.882104][ T6581]  should_fail_ex+0x3c4/0x520
[   74.882851][ T6581]  __should_failslab+0xc0/0x120
[   74.883586][ T6581]  should_failslab+0x10/0x28
[   74.884357][ T6581]  kmem_cache_alloc_node+0x8c/0x34c
[   74.885169][ T6581]  __alloc_skb+0x128/0x718
[   74.885815][ T6581]  netlink_sendmsg+0x520/0x9b0
[   74.886606][ T6581]  sock_write_iter+0x25c/0x344
[   74.887325][ T6581]  do_iter_write+0x530/0x91c
[   74.888044][ T6581]  do_writev+0x1e0/0x380
[   74.888725][ T6581]  __arm64_sys_writev+0x80/0x94
[   74.889487][ T6581]  invoke_syscall+0x98/0x2bc
[   74.890159][ T6581]  el0_svc_common+0x138/0x258
[   74.890919][ T6581]  do_el0_svc+0x58/0x13c
[   74.891588][ T6581]  el0_svc+0x58/0x138
[   74.892231][ T6581]  el0t_64_sync_handler+0x84/0xf0
[   74.892960][ T6581]  el0t_64_sync+0x18c/0x190
[   74.951108][ T6583] loop1: detected capacity change from 0 to 512
[   74.953188][ T6585] loop2: detected capacity change from 0 to 2048
[   74.958081][ T6583] EXT4-fs: inline encryption not supported
[   74.959092][ T6583] EXT4-fs: Ignoring removed mblk_io_submit option
[   74.962680][ T6583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   74.967723][ T6583] EXT4-fs (loop1): Test dummy encryption mode enabled
[   74.978282][ T6583] EXT4-fs (loop1): orphan cleanup on readonly fs
[   74.979374][ T6583] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.567: inode #13: comm syz.1.567: iget: illegal inode #
[   74.981991][ T6583] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.567: couldn't read orphan inode 13 (err -117)
[   74.985521][ T6583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   74.989354][ T6583] EXT4-fs: inline encryption not supported
[   74.990227][ T6583] EXT4-fs: Ignoring removed mblk_io_submit option
[   74.991230][ T6583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   74.998442][ T6583] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   75.000992][ T6585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   75.008795][ T6583] EXT4-fs error (device loop1): __ext4_remount:6623: comm syz.1.567: Abort forced by user
[   75.013639][ T6583] EXT4-fs (loop1): Remounting filesystem read-only
[   75.014802][ T6583] EXT4-fs (loop1): re-mounted. Quota mode: none.
[   75.038043][ T4333] EXT4-fs (loop2): unmounting filesystem.
[   75.047250][ T4326] EXT4-fs (loop1): unmounting filesystem.
[   75.133140][ T4930] kernel write not supported for file /input/event0 (pid: 4930 comm: kworker/0:13)
[   75.139876][ T6591] device syzkaller1 entered promiscuous mode
[   75.149604][ T6592] loop2: detected capacity change from 0 to 4096
[   75.157088][ T6592] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   75.163685][ T6592] ntfs3: loop2: volume is dirty and "force" flag is not set!
[   75.196434][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   75.701913][ T6616] netlink: 'syz.4.579': attribute type 2 has an invalid length.
[   75.794327][ T6625] No buffer was provided with the request
[   75.896518][ T6628] loop1: detected capacity change from 0 to 40427
[   75.900880][ T6628] F2FS-fs (loop1): invalid crc value
[   75.923653][ T6634] netlink: 32 bytes leftover after parsing attributes in process `syz.4.587'.
[   75.989689][ T6628] F2FS-fs (loop1): Found nat_bits in checkpoint
[   76.005600][ T6628] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   76.011671][ T6636] loop2: detected capacity change from 0 to 2048
[   76.080148][ T6645] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   76.236836][ T6659] FAULT_INJECTION: forcing a failure.
[   76.236836][ T6659] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   76.239026][ T6659] CPU: 0 PID: 6659 Comm: syz.2.592 Not tainted 6.1.148-syzkaller #0
[   76.240178][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   76.241745][ T6659] Call trace:
[   76.242246][ T6659]  dump_backtrace+0x1c8/0x1f4
[   76.242935][ T6659]  show_stack+0x2c/0x3c
[   76.243564][ T6659]  __dump_stack+0x30/0x40
[   76.244229][ T6659]  dump_stack_lvl+0xf8/0x160
[   76.244985][ T6659]  dump_stack+0x1c/0x5c
[   76.245633][ T6659]  should_fail_ex+0x3c4/0x520
[   76.246387][ T6659]  should_fail+0x14/0x24
[   76.247101][ T6659]  should_fail_usercopy+0x20/0x30
[   76.247901][ T6659]  ____sys_sendmsg+0x27c/0x918
[   76.248684][ T6659]  __sys_sendmmsg+0x2f8/0x754
[   76.249497][ T6659]  __arm64_sys_sendmmsg+0xa0/0xbc
[   76.250362][ T6659]  invoke_syscall+0x98/0x2bc
[   76.251111][ T6659]  el0_svc_common+0x138/0x258
[   76.251849][ T6659]  do_el0_svc+0x58/0x13c
[   76.252479][ T6659]  el0_svc+0x58/0x138
[   76.253044][ T6659]  el0t_64_sync_handler+0x84/0xf0
[   76.253779][ T6659]  el0t_64_sync+0x18c/0x190
[   76.311511][ T6666] loop2: detected capacity change from 0 to 128
[   76.324212][ T6666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   76.347364][ T6658] netlink: 56 bytes leftover after parsing attributes in process `syz.3.594'.
[   76.350087][ T6664] netlink: 56 bytes leftover after parsing attributes in process `syz.3.594'.
[   76.389375][ T6666] fuse: Bad value for 'rootmode'
[   76.657482][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'.
[   76.659364][ T6690] FAULT_INJECTION: forcing a failure.
[   76.659364][ T6690] name failslab, interval 1, probability 0, space 0, times 0
[   76.661286][ T6690] CPU: 0 PID: 6690 Comm: syz.1.606 Not tainted 6.1.148-syzkaller #0
[   76.662483][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   76.664039][ T6690] Call trace:
[   76.664545][ T6690]  dump_backtrace+0x1c8/0x1f4
[   76.665305][ T6690]  show_stack+0x2c/0x3c
[   76.666003][ T6690]  __dump_stack+0x30/0x40
[   76.666675][ T6690]  dump_stack_lvl+0xf8/0x160
[   76.667372][ T6690]  dump_stack+0x1c/0x5c
[   76.668019][ T6690]  should_fail_ex+0x3c4/0x520
[   76.668840][ T6690]  __should_failslab+0xc0/0x120
[   76.669637][ T6690]  should_failslab+0x10/0x28
[   76.670324][ T6690]  kmem_cache_alloc+0x88/0x318
[   76.671041][ T6690]  sctp_get_port_local+0x5bc/0x112c
[   76.671831][ T6690]  sctp_do_bind+0x458/0x860
[   76.672624][ T6690]  sctp_connect_new_asoc+0x248/0x620
[   76.673515][ T6690]  sctp_sendmsg+0x1180/0x20cc
[   76.674289][ T6690]  inet_sendmsg+0x154/0x284
[   76.675045][ T6690]  __sys_sendto+0x304/0x3fc
[   76.675773][ T6690]  __arm64_sys_sendto+0xd8/0xf8
[   76.676594][ T6690]  invoke_syscall+0x98/0x2bc
[   76.677343][ T6690]  el0_svc_common+0x138/0x258
[   76.678053][ T6690]  do_el0_svc+0x58/0x13c
[   76.678672][ T6690]  el0_svc+0x58/0x138
[   76.679246][ T6690]  el0t_64_sync_handler+0x84/0xf0
[   76.679998][ T6690]  el0t_64_sync+0x18c/0x190
[   76.706808][ T6694] FAULT_INJECTION: forcing a failure.
[   76.706808][ T6694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   76.709067][ T6694] CPU: 0 PID: 6694 Comm: syz.1.608 Not tainted 6.1.148-syzkaller #0
[   76.710293][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   76.711934][ T6694] Call trace:
[   76.712483][ T6694]  dump_backtrace+0x1c8/0x1f4
[   76.713250][ T6694]  show_stack+0x2c/0x3c
[   76.713928][ T6694]  __dump_stack+0x30/0x40
[   76.714597][ T6694]  dump_stack_lvl+0xf8/0x160
[   76.715305][ T6694]  dump_stack+0x1c/0x5c
[   76.716003][ T6694]  should_fail_ex+0x3c4/0x520
[   76.716813][ T6694]  should_fail+0x14/0x24
[   76.717514][ T6694]  should_fail_usercopy+0x20/0x30
[   76.718311][ T6694]  iovec_from_user+0xcc/0x5dc
[   76.719162][ T6694]  __import_iovec+0x84/0x470
[   76.719900][ T6694]  import_iovec+0x88/0xa4
[   76.720572][ T6694]  copy_msghdr_from_user+0x334/0x4ac
[   76.721412][ T6694]  __sys_sendmsg+0x200/0x320
[   76.722138][ T6694]  __arm64_sys_sendmsg+0x80/0x94
[   76.722991][ T6694]  invoke_syscall+0x98/0x2bc
[   76.723782][ T6694]  el0_svc_common+0x138/0x258
[   76.724554][ T6694]  do_el0_svc+0x58/0x13c
[   76.725279][ T6694]  el0_svc+0x58/0x138
[   76.725936][ T6694]  el0t_64_sync_handler+0x84/0xf0
[   76.726687][ T6694]  el0t_64_sync+0x18c/0x190
[   76.752255][ T6698] netlink: 88 bytes leftover after parsing attributes in process `syz.0.609'.
[   76.754518][ T6699] netlink: 88 bytes leftover after parsing attributes in process `syz.0.609'.
[   76.760286][ T6696] overlayfs: failed to clone lowerpath
[   76.846636][ T6668] EXT4-fs (loop2): unmounting filesystem.
[   76.864192][ T6707] overlayfs: failed to clone lowerpath
[   76.955102][    C0] vcan0: j1939_tp_rxtimer: 0x000000003d51da2d: rx timeout, send abort
[   76.968509][ T4321] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.971806][ T4321] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.974881][ T4321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.983061][ T4331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.984610][ T4331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.986565][ T4331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.216921][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'.
[   77.338306][ T4725] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.399650][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'.
[   77.455499][    C0] vcan0: j1939_tp_rxtimer: 0x000000003df07371: rx timeout, send abort
[   77.457451][    C0] vcan0: j1939_tp_rxtimer: 0x000000003d51da2d: abort rx timeout. Force session deactivation
[   77.489539][ T4725] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.542768][ T6717] chnl_net:caif_netlink_parms(): no params data found
[   77.560580][ T6717] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.561923][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.563417][ T6717] device bridge_slave_0 entered promiscuous mode
[   77.627368][ T4725] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.630066][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.631403][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.632913][ T6717] device bridge_slave_1 entered promiscuous mode
[   77.642404][ T6717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.644973][ T6717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.654286][ T6717] team0: Port device team_slave_0 added
[   77.659825][ T6717] team0: Port device team_slave_1 added
[   77.666127][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.667195][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.670786][ T6717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.672931][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.673969][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.678223][ T6717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.736569][ T6717] device hsr_slave_0 entered promiscuous mode
[   77.775865][ T6717] device hsr_slave_1 entered promiscuous mode
[   77.817800][ T6717] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.819485][ T6717] Cannot create hsr debugfs directory
[   77.877687][ T4725] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.940072][ T6717] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   77.956843][    C0] vcan0: j1939_tp_rxtimer: 0x000000003df07371: abort rx timeout. Force session deactivation
[   77.997499][ T6717] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   78.072126][ T6717] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   78.119640][ T6717] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   78.315411][    C0] net_ratelimit: 2 callbacks suppressed
[   78.315424][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   78.384968][ T6717] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.591221][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.594874][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.652754][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'.
[   78.682714][ T6717] 8021q: adding VLAN 0 to HW filter on device team0
[   78.692405][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.694036][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.697402][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.698571][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.700985][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.711939][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.713710][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.715804][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.716972][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.719612][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   78.723332][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   78.792554][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   78.794715][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   78.797836][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   78.803827][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   78.806803][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   78.813442][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   78.819093][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.832821][ T6717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.836931][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   78.840838][ T6784] loop1: detected capacity change from 0 to 40427
[   78.842262][  T257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   78.843922][  T257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.855317][ T6784] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   78.859895][ T6784] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   78.861948][ T6784] F2FS-fs (loop1): invalid crc value
[   78.867068][ T6784] F2FS-fs (loop1): Found nat_bits in checkpoint
[   78.892429][ T6784] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   78.896015][ T6784] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   79.036310][ T4321] Bluetooth: hci4: command 0x0409 tx timeout
[   79.103069][ T4326] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   79.103096][ T4326] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   79.104585][ T4326] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   79.111866][ T4326] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   79.112941][ T4326] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   79.115471][ T4326] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   79.116663][ T4326] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   79.226505][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   79.229093][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   79.232063][ T6717] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.355447][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   79.392735][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.644'.
[   79.525924][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.527562][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.535964][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.537549][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.538952][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.540303][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.542843][ T6717] device veth0_vlan entered promiscuous mode
[   79.576405][ T6852] loop1: detected capacity change from 0 to 256
[   79.593217][ T6852] exfat: Deprecated parameter 'namecase'
[   79.594141][ T6852] exfat: Deprecated parameter 'namecase'
[   79.595063][ T6852] exfat: Unknown parameter 'š`ù÷ßðfmask'
[   79.609333][ T6717] device veth1_vlan entered promiscuous mode
[   79.633871][ T6838] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   79.649148][ T6717] device veth0_macvtap entered promiscuous mode
[   79.651366][ T6717] device veth1_macvtap entered promiscuous mode
[   79.653489][ T6838] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   79.661772][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   79.663429][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   79.664864][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.666490][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.668033][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.691593][ T6852] loop1: detected capacity change from 0 to 4096
[   79.704885][ T6852] ntfs: (device loop1): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096).  This is not supported.  Sorry.
[   79.712389][ T6852] ntfs: (device loop1): ntfs_fill_super(): Unsupported NTFS filesystem.
[   79.731048][ T6851] delete_channel: no stack
[   79.939040][ T6874] netlink: 'syz.4.648': attribute type 2 has an invalid length.
[   79.940343][ T6874] netlink: 'syz.4.648': attribute type 1 has an invalid length.
[   79.990920][ T6870] loop1: detected capacity change from 0 to 32768
[   80.008591][ T6870] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.652 (6870)
[   80.017536][ T6870] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   80.020177][ T6870] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   80.023174][ T6870] BTRFS info (device loop1): using free space tree
[   80.096363][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   80.114736][ T6858] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   80.165598][ T6862] tipc: Started in network mode
[   80.166337][ T6862] tipc: Node identity aa82f7509445, cluster identity 4711
[   80.167496][ T6862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.178171][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.180224][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.181721][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.183318][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.191303][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.192993][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.195687][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.199753][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.201772][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.203554][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.230439][ T6717] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.233346][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.234949][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.237531][ T6870] BTRFS info (device loop1): enabling ssd optimizations
[   80.237647][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.240291][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.241850][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.243526][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.245094][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.247228][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.248755][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.250414][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.253744][ T6717] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.326389][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.328155][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.329626][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.331168][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.335125][ T6717] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.337818][ T6717] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.339402][ T6717] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.340738][ T6717] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.344195][ T6901] netlink: 'syz.3.655': attribute type 2 has an invalid length.
[   80.356928][ T4489] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   80.395419][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   80.579208][ T4326] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   80.694770][ T6909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.776334][ T6927] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   80.781152][ T6930] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   80.792275][ T6936] loop1: detected capacity change from 0 to 8192
[   80.809206][ T6936] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   80.811274][ T6936] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   80.820170][ T6936] REISERFS (device loop1): using journaled data mode
[   80.823587][ T6936] reiserfs: using flush barriers
[   80.845194][ T4725] device hsr_slave_0 left promiscuous mode
[   80.854962][ T6936] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   80.861711][ T6936] REISERFS (device loop1): checking transaction log (loop1)
[   80.864408][ T6936] REISERFS (device loop1): Using r5 hash to sort names
[   80.889263][ T4725] device hsr_slave_1 left promiscuous mode
[   80.965693][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.966876][ T4725] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.968422][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.969620][ T4725] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.974164][ T4725] device bridge_slave_1 left promiscuous mode
[   80.976485][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.017578][ T4725] device bridge_slave_0 left promiscuous mode
[   81.018845][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.210394][ T6955] loop1: detected capacity change from 0 to 40427
[   81.212043][ T4331] Bluetooth: hci4: command 0x041b tx timeout
[   81.234040][ T6955] F2FS-fs (loop1): invalid crc value
[   81.285410][ T4707] tipc: Node number set to 1053292368
[   81.435444][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   81.564109][ T6955] F2FS-fs (loop1): Found nat_bits in checkpoint
[   81.644920][ T6955] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   81.925749][ T4725] device veth1_macvtap left promiscuous mode
[   81.926998][ T4725] device veth0_macvtap left promiscuous mode
[   81.928085][ T4725] device veth1_vlan left promiscuous mode
[   82.288831][ T6962] loop1: detected capacity change from 0 to 256
[   82.301297][ T6962] FAT-fs (loop1): Directory bread(block 64) failed
[   82.302369][ T6962] FAT-fs (loop1): Directory bread(block 65) failed
[   82.303442][ T6962] FAT-fs (loop1): Directory bread(block 66) failed
[   82.304476][ T6962] FAT-fs (loop1): Directory bread(block 67) failed
[   82.305555][ T6962] FAT-fs (loop1): Directory bread(block 68) failed
[   82.306576][ T6962] FAT-fs (loop1): Directory bread(block 69) failed
[   82.307652][ T6962] FAT-fs (loop1): Directory bread(block 70) failed
[   82.308632][ T6962] FAT-fs (loop1): Directory bread(block 71) failed
[   82.309665][ T6962] FAT-fs (loop1): Directory bread(block 72) failed
[   82.310705][ T6962] FAT-fs (loop1): Directory bread(block 73) failed
[   82.475434][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   83.356109][ T4331] Bluetooth: hci4: command 0x040f tx timeout
[   83.515417][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   84.137932][ T4725] team0 (unregistering): Port device team_slave_1 removed
[   84.308522][ T4725] team0 (unregistering): Port device team_slave_0 removed
[   84.487163][ T4725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.555404][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   84.696815][ T4725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.435374][ T4331] Bluetooth: hci4: command 0x0419 tx timeout
[   85.595577][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   86.645394][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   87.108712][ T4725] bond0 (unregistering): Released all slaves
[   87.343179][ T6949] device netdevsim0 entered promiscuous mode
[   87.345770][ T6949] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   87.403929][ T1646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.405263][ T1646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.417868][ T6598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   87.434713][ T6598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.436187][ T6598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.445609][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.452882][ T6978] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   87.456993][ T6978] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   87.675464][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   87.736478][ T6979] loop1: detected capacity change from 0 to 32768
[   87.754143][ T6979] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   87.801717][ T7003] FAULT_INJECTION: forcing a failure.
[   87.801717][ T7003] name failslab, interval 1, probability 0, space 0, times 0
[   87.803750][ T7003] CPU: 0 PID: 7003 Comm: syz.5.678 Not tainted 6.1.148-syzkaller #0
[   87.804922][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   87.806403][ T7003] Call trace:
[   87.806891][ T7003]  dump_backtrace+0x1c8/0x1f4
[   87.807615][ T7003]  show_stack+0x2c/0x3c
[   87.808268][ T7003]  __dump_stack+0x30/0x40
[   87.808932][ T7003]  dump_stack_lvl+0xf8/0x160
[   87.809638][ T7003]  dump_stack+0x1c/0x5c
[   87.810232][ T7003]  should_fail_ex+0x3c4/0x520
[   87.810931][ T7003]  __should_failslab+0xc0/0x120
[   87.811693][ T7003]  should_failslab+0x10/0x28
[   87.812373][ T7003]  __kmem_cache_alloc_node+0x7c/0x320
[   87.813171][ T7003]  __kmalloc+0xd8/0x178
[   87.813788][ T7003]  tomoyo_encode+0x274/0x4a4
[   87.814464][ T7003]  tomoyo_realpath_from_path+0x480/0x4d4
[   87.815265][ T7003]  tomoyo_path_number_perm+0x190/0x4dc
[   87.816157][ T7003]  tomoyo_file_ioctl+0x2c/0x3c
[   87.816940][ T7003]  security_file_ioctl+0x80/0xbc
[   87.817783][ T7003]  __arm64_sys_ioctl+0xa8/0x1c8
[   87.818596][ T7003]  invoke_syscall+0x98/0x2bc
[   87.819325][ T7003]  el0_svc_common+0x138/0x258
[   87.820054][ T7003]  do_el0_svc+0x58/0x13c
[   87.820696][ T7003]  el0_svc+0x58/0x138
[   87.821333][ T7003]  el0t_64_sync_handler+0x84/0xf0
[   87.822180][ T7003]  el0t_64_sync+0x18c/0x190
[   87.844677][ T4326] ocfs2: Unmounting device (7,1) on (node local)
[   87.895513][ T7003] ERROR: Out of memory at tomoyo_realpath_from_path.
[   88.815570][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   89.313017][ T7039] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   89.333108][ T7039] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   89.580299][ T7054] netlink: 'syz.3.689': attribute type 4 has an invalid length.
[   89.581493][ T7054] __nla_validate_parse: 5 callbacks suppressed
[   89.581506][ T7054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'.
[   89.614150][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'.
[   89.835490][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   90.339473][ T7074] loop1: detected capacity change from 0 to 40427
[   90.851089][ T7074] F2FS-fs (loop1): invalid crc value
[   90.875464][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   91.021219][ T7074] F2FS-fs (loop1): Found nat_bits in checkpoint
[   91.101296][ T7074] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   91.497836][ T7106] FAULT_INJECTION: forcing a failure.
[   91.497836][ T7106] name failslab, interval 1, probability 0, space 0, times 0
[   91.499823][ T7106] CPU: 1 PID: 7106 Comm: syz.1.697 Not tainted 6.1.148-syzkaller #0
[   91.500896][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   91.502292][ T7106] Call trace:
[   91.502747][ T7106]  dump_backtrace+0x1c8/0x1f4
[   91.503486][ T7106]  show_stack+0x2c/0x3c
[   91.504189][ T7106]  __dump_stack+0x30/0x40
[   91.504880][ T7106]  dump_stack_lvl+0xf8/0x160
[   91.505668][ T7106]  dump_stack+0x1c/0x5c
[   91.506399][ T7106]  should_fail_ex+0x3c4/0x520
[   91.507182][ T7106]  __should_failslab+0xc0/0x120
[   91.507982][ T7106]  should_failslab+0x10/0x28
[   91.508681][ T7106]  kmem_cache_alloc+0x88/0x318
[   91.509452][ T7106]  prepare_creds+0x44/0x6ac
[   91.510125][ T7106]  copy_creds+0x110/0xc28
[   91.510723][ T7106]  copy_process+0x8d0/0x3670
[   91.511495][ T7106]  kernel_clone+0x1d8/0x8fc
[   91.512210][ T7106]  __arm64_sys_clone+0x140/0x19c
[   91.512995][ T7106]  invoke_syscall+0x98/0x2bc
[   91.513774][ T7106]  el0_svc_common+0x138/0x258
[   91.514594][ T7106]  do_el0_svc+0x58/0x13c
[   91.515342][ T7106]  el0_svc+0x58/0x138
[   91.515989][ T7106]  el0t_64_sync_handler+0x84/0xf0
[   91.516783][ T7106]  el0t_64_sync+0x18c/0x190
[   91.719586][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'.
[   91.720934][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'.
[   91.915453][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   92.106888][ T7114] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   92.116766][ T7114] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   92.175124][ T7140] netlink: 'syz.1.706': attribute type 2 has an invalid length.
[   92.182330][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'.
[   92.955516][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   93.419591][ T7161] loop5: detected capacity change from 0 to 512
[   93.859754][ T7161] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   93.861837][ T7161] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   93.995405][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   94.526784][ T7161] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   94.529461][ T7161] EXT4-fs (loop5): 1 truncate cleaned up
[   94.530326][ T7161] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   94.589049][ T7168] loop1: detected capacity change from 0 to 128
[   94.611436][ T7168] hpfs: bad mount options.
[   94.646679][ T6970] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   94.685083][ T6717] EXT4-fs (loop5): unmounting filesystem.
[   94.960223][ T7185] ptrace attach of "./syz-executor exec"[4320] was attempted by ""[7185]
[   95.035421][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   95.227364][ T7198] FAULT_INJECTION: forcing a failure.
[   95.227364][ T7198] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.229545][ T7198] CPU: 1 PID: 7198 Comm: syz.5.721 Not tainted 6.1.148-syzkaller #0
[   95.230677][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   95.232085][ T7198] Call trace:
[   95.232577][ T7198]  dump_backtrace+0x1c8/0x1f4
[   95.233258][ T7198]  show_stack+0x2c/0x3c
[   95.233853][ T7198]  __dump_stack+0x30/0x40
[   95.234463][ T7198]  dump_stack_lvl+0xf8/0x160
[   95.235210][ T7198]  dump_stack+0x1c/0x5c
[   95.235936][ T7198]  should_fail_ex+0x3c4/0x520
[   95.236691][ T7198]  should_fail+0x14/0x24
[   95.237365][ T7198]  should_fail_usercopy+0x20/0x30
[   95.238178][ T7198]  simple_read_from_buffer+0xcc/0x240
[   95.239049][ T7198]  proc_fail_nth_read+0x194/0x230
[   95.239860][ T7198]  vfs_read+0x288/0x7c4
[   95.240493][ T7198]  ksys_read+0x120/0x210
[   95.241120][ T7198]  __arm64_sys_read+0x7c/0x90
[   95.241916][ T7198]  invoke_syscall+0x98/0x2bc
[   95.242670][ T7198]  el0_svc_common+0x138/0x258
[   95.243432][ T7198]  do_el0_svc+0x58/0x13c
[   95.244155][ T7198]  el0_svc+0x58/0x138
[   95.244844][ T7198]  el0t_64_sync_handler+0x84/0xf0
[   95.245691][ T7198]  el0t_64_sync+0x18c/0x190
[   95.409264][ T7188] loop1: detected capacity change from 0 to 32768
[   95.469284][ T7188] XFS (loop1): Mounting V5 Filesystem
[   95.539899][ T7188] XFS (loop1): Ending clean mount
[   95.542591][ T7188] XFS (loop1): Quotacheck needed: Please wait.
[   95.596281][ T7188] XFS (loop1): Quotacheck: Done.
[   95.649790][ T4326] XFS (loop1): Unmounting Filesystem
[   95.742200][ T7212] loop5: detected capacity change from 0 to 32768
[   95.893750][ T7212] XFS (loop5): Mounting V5 Filesystem
[   95.908847][ T7222] overlayfs: failed to clone upperpath
[   95.977433][ T7212] XFS (loop5): Ending clean mount
[   95.990393][ T7212] XFS (loop5): Quotacheck needed: Please wait.
[   96.016316][ T7212] XFS (loop5): Quotacheck: Done.
[   96.075433][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   96.132507][ T7251] FAULT_INJECTION: forcing a failure.
[   96.132507][ T7251] name failslab, interval 1, probability 0, space 0, times 0
[   96.144674][ T7251] CPU: 0 PID: 7251 Comm: syz.1.731 Not tainted 6.1.148-syzkaller #0
[   96.145947][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   96.147566][ T7251] Call trace:
[   96.148125][ T7251]  dump_backtrace+0x1c8/0x1f4
[   96.148849][ T7251]  show_stack+0x2c/0x3c
[   96.149492][ T7251]  __dump_stack+0x30/0x40
[   96.150240][ T7251]  dump_stack_lvl+0xf8/0x160
[   96.150929][ T7251]  dump_stack+0x1c/0x5c
[   96.151646][ T7251]  should_fail_ex+0x3c4/0x520
[   96.152434][ T7251]  __should_failslab+0xc0/0x120
[   96.153218][ T7251]  should_failslab+0x10/0x28
[   96.153968][ T7251]  __kmem_cache_alloc_node+0x7c/0x320
[   96.154817][ T7251]  __kmalloc+0xd8/0x178
[   96.155434][ T7251]  tomoyo_encode+0x274/0x4a4
[   96.156189][ T7251]  tomoyo_realpath_from_path+0x480/0x4d4
[   96.157077][ T7251]  tomoyo_path_number_perm+0x190/0x4dc
[   96.157942][ T7251]  tomoyo_file_ioctl+0x2c/0x3c
[   96.158698][ T7251]  security_file_ioctl+0x80/0xbc
[   96.159548][ T7251]  __arm64_sys_ioctl+0xa8/0x1c8
[   96.160344][ T7251]  invoke_syscall+0x98/0x2bc
[   96.161089][ T7251]  el0_svc_common+0x138/0x258
[   96.161871][ T7251]  do_el0_svc+0x58/0x13c
[   96.162557][ T7251]  el0_svc+0x58/0x138
[   96.163198][ T7251]  el0t_64_sync_handler+0x84/0xf0
[   96.164011][ T7251]  el0t_64_sync+0x18c/0x190
[   96.417042][ T7251] ERROR: Out of memory at tomoyo_realpath_from_path.
[   96.443898][ T6717] XFS (loop5): Unmounting Filesystem
[   96.499683][ T7261] ipt_REJECT: ECHOREPLY no longer supported.
[   96.626033][ T7267] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3952. macoff=96
[   97.367334][ T7277] loop1: detected capacity change from 0 to 40427
[   97.373450][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   97.456371][ T7277] F2FS-fs (loop1): invalid crc value
[   97.829299][ T7277] F2FS-fs (loop1): Found nat_bits in checkpoint
[   97.846818][ T7277] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   98.395606][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   98.540872][ T7287] overlayfs: failed to clone upperpath
[   98.556837][ T7302] Bluetooth: Short BCSP packet
[   98.620795][ T7289] loop1: detected capacity change from 0 to 32768
[   98.724543][ T7289] XFS (loop1): Mounting V5 Filesystem
[   99.875972][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  100.032226][ T7289] XFS (loop1): Ending clean mount
[  100.053022][ T7289] XFS (loop1): Quotacheck needed: Please wait.
[  100.075469][ T7289] XFS (loop1): Quotacheck: Done.
[  100.242275][ T4326] XFS (loop1): Unmounting Filesystem
[  100.555524][ T4321] Bluetooth: hci5: command 0x1003 tx timeout
[  100.557720][ T4331] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  100.651794][ T7358] tipc: Can't bind to reserved service type 2
[  100.685852][ T7366] binder: 7364:7366 ioctl 400c620e 20000180 returned -22
[  100.688583][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.761'.
[  100.933310][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.760'.
[  101.194997][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  101.270344][ T7383] loop1: detected capacity change from 0 to 128
[  101.293930][ T7383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  101.302121][ T7383] fscrypt (loop1, inode 12): Unsupported encryption modes (contents 9, filenames 3)
[  101.368202][ T4326] EXT4-fs (loop1): unmounting filesystem.
[  101.511127][ T7391] loop5: detected capacity change from 0 to 64
[  101.528290][ T7393] bridge1: the hash_elasticity option has been deprecated and is always 16
[  101.806048][ T7404] loop1: detected capacity change from 0 to 40427
[  101.819828][ T7404] F2FS-fs (loop1): invalid crc value
[  102.079829][ T7404] F2FS-fs (loop1): Found nat_bits in checkpoint
[  102.152136][ T7404] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  102.235845][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  102.628008][ T7414] loop5: detected capacity change from 0 to 1024
[  103.275459][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  103.348397][ T7439] hfsplus: bad catalog entry type
[  103.417941][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'.
[  103.498801][ T7460] netlink: 'syz.0.783': attribute type 9 has an invalid length.
[  103.509523][ T7462] netlink: 132 bytes leftover after parsing attributes in process `syz.1.781'.
[  103.537857][    T9] hfsplus: b-tree write err: -5, ino 4
[  103.565577][ T7466] sctp: [Deprecated]: syz.1.781 (pid 7466) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.565577][ T7466] Use struct sctp_sack_info instead
[  104.323189][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  104.763299][ T7472] loop5: detected capacity change from 0 to 32768
[  104.813220][ T7480] loop1: detected capacity change from 0 to 32768
[  104.836248][ T7480] (syz.1.789,7480,0):ocfs2_verify_userspace_stack:854 ERROR: cluster stack passed to mount, but this filesystem does not support it
[  104.838400][ T7480] (syz.1.789,7480,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode.
[  104.847335][ T7480] (syz.1.789,7480,0):ocfs2_fill_super:1176 ERROR: status = -22
[  104.871814][ T7472] XFS (loop5): Mounting V5 Filesystem
[  104.906696][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'.
[  104.927199][ T7472] XFS (loop5): Ending clean mount
[  104.940146][ T7472] XFS (loop5): Quotacheck needed: Please wait.
[  104.968050][ T7472] XFS (loop5): Quotacheck: Done.
[  105.329104][ T7511] loop1: detected capacity change from 0 to 1024
[  105.355487][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  105.378165][ T6717] XFS (loop5): Unmounting Filesystem
[  105.591750][ T7518] hfsplus: bad catalog entry type
[  105.691297][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'.
[  105.692773][ T7520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.801'.
[  106.479895][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  106.645135][   T39] hfsplus: b-tree write err: -5, ino 4
[  106.847555][ T7547] loop1: detected capacity change from 0 to 256
[  107.515457][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  108.096693][ T7546] netlink: 188 bytes leftover after parsing attributes in process `syz.1.803'.
[  108.125124][ T7552] netlink: 'syz.3.807': attribute type 4 has an invalid length.
[  108.555449][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  108.601184][ T7592] loop1: detected capacity change from 0 to 4096
[  108.611132][ T7592] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  108.625023][ T7592] ntfs: volume version 3.1.
[  109.023317][ T7602] loop1: detected capacity change from 0 to 4096
[  109.052449][ T7602] FAULT_INJECTION: forcing a failure.
[  109.052449][ T7602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.056879][ T7602] CPU: 1 PID: 7602 Comm: syz.1.817 Not tainted 6.1.148-syzkaller #0
[  109.057916][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[  109.059347][ T7602] Call trace:
[  109.059834][ T7602]  dump_backtrace+0x1c8/0x1f4
[  109.060498][ T7602]  show_stack+0x2c/0x3c
[  109.061176][ T7602]  __dump_stack+0x30/0x40
[  109.061877][ T7602]  dump_stack_lvl+0xf8/0x160
[  109.062621][ T7602]  dump_stack+0x1c/0x5c
[  109.063314][ T7602]  should_fail_ex+0x3c4/0x520
[  109.064027][ T7602]  should_fail+0x14/0x24
[  109.064640][ T7602]  should_fail_usercopy+0x20/0x30
[  109.065506][ T7602]  strncpy_from_user+0x48/0x57c
[  109.066299][ T7602]  getname_flags+0xec/0x45c
[  109.067092][ T7602]  getname+0x28/0x38
[  109.067764][ T7602]  do_sys_openat2+0xd0/0x3d8
[  109.068496][ T7602]  __arm64_sys_openat+0x120/0x154
[  109.069290][ T7602]  invoke_syscall+0x98/0x2bc
[  109.070061][ T7602]  el0_svc_common+0x138/0x258
[  109.070814][ T7602]  do_el0_svc+0x58/0x13c
[  109.071535][ T7602]  el0_svc+0x58/0x138
[  109.072164][ T7602]  el0t_64_sync_handler+0x84/0xf0
[  109.072969][ T7602]  el0t_64_sync+0x18c/0x190
[  109.595445][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  109.952248][ T7616] netlink: 188 bytes leftover after parsing attributes in process `syz.5.820'.
[  109.957753][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.820'.
[  110.160311][   T27] audit: type=1326 audit(366.141:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.1.822" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8395af28 code=0x0
[  110.366085][ T7647] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.623318][ T7637] netlink: 128 bytes leftover after parsing attributes in process `syz.4.827'.
[  110.635441][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  110.656557][ T4335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  110.658291][ T4335] CPU: 0 PID: 4335 Comm: kworker/u5:6 Not tainted 6.1.148-syzkaller #0
[  110.659474][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[  110.660882][ T4335] Workqueue: hci1 hci_rx_work
[  110.661609][ T4335] Call trace:
[  110.662111][ T4335]  dump_backtrace+0x1c8/0x1f4
[  110.662754][ T4335]  show_stack+0x2c/0x3c
[  110.663401][ T4335]  __dump_stack+0x30/0x40
[  110.664027][ T4335]  dump_stack_lvl+0xf8/0x160
[  110.664747][ T4335]  dump_stack+0x1c/0x5c
[  110.665368][ T4335]  sysfs_create_dir_ns+0x22c/0x24c
[  110.666157][ T4335]  kobject_add_internal+0x5a8/0xb30
[  110.666967][ T4335]  kobject_add+0x134/0x1f8
[  110.667660][ T4335]  device_add+0x3f0/0xf94
[  110.668335][ T4335]  hci_conn_add_sysfs+0xbc/0x1cc
[  110.669049][ T4335]  le_conn_complete_evt+0xa24/0xf8c
[  110.669814][ T4335]  hci_le_enh_conn_complete_evt+0x114/0x3f8
[  110.670626][ T4335]  hci_le_meta_evt+0x2c0/0x4a4
[  110.671363][ T4335]  hci_event_packet+0x6ac/0xf08
[  110.672077][ T4335]  hci_rx_work+0x324/0xaa0
[  110.672697][ T4335]  process_one_work+0x7f4/0x13a8
[  110.673439][ T4335]  worker_thread+0x8c8/0xfbc
[  110.674159][ T4335]  kthread+0x250/0x2d8
[  110.674832][ T4335]  ret_from_fork+0x10/0x20
[  110.677675][ T4335] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  110.679714][ T4335] Bluetooth: hci1: failed to register connection device
[  111.281227][ T7707] loop1: detected capacity change from 0 to 256
[  111.675438][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  112.214547][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.218800][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.381701][ T7717] loop1: detected capacity change from 0 to 4096
[  112.410596][ T7717] ntfs: (device loop1): check_mft_mirror(): $MFTMirr location mismatch.  Run chkdsk.
[  112.421554][ T7717] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  112.463499][ T7717] ntfs: volume version 3.1.
[  112.518233][ T7717] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  112.519858][ T7717] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to lookup $DATA attribute.
[  112.521290][ T7717] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x44 as bad.  Run chkdsk.
[  112.594830][ T7735] FAULT_INJECTION: forcing a failure.
[  112.594830][ T7735] name failslab, interval 1, probability 0, space 0, times 0
[  112.596987][ T7735] CPU: 1 PID: 7735 Comm: syz.1.845 Not tainted 6.1.148-syzkaller #0
[  112.598168][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[  112.599671][ T7735] Call trace:
[  112.600208][ T7735]  dump_backtrace+0x1c8/0x1f4
[  112.600954][ T7735]  show_stack+0x2c/0x3c
[  112.601581][ T7735]  __dump_stack+0x30/0x40
[  112.602237][ T7735]  dump_stack_lvl+0xf8/0x160
[  112.602974][ T7735]  dump_stack+0x1c/0x5c
[  112.603659][ T7735]  should_fail_ex+0x3c4/0x520
[  112.604368][ T7735]  __should_failslab+0xc0/0x120
[  112.605191][ T7735]  should_failslab+0x10/0x28
[  112.605978][ T7735]  kmem_cache_alloc+0x88/0x318
[  112.606776][ T7735]  __alloc_file+0x30/0x22c
[  112.607508][ T7735]  alloc_empty_file+0xa0/0x184
[  112.608300][ T7735]  alloc_file+0x64/0x560
[  112.608947][ T7735]  alloc_file_pseudo+0x160/0x1dc
[  112.609710][ T7735]  __shmem_file_setup+0x19c/0x264
[  112.610543][ T7735]  shmem_file_setup+0x40/0x54
[  112.611339][ T7735]  __arm64_sys_memfd_create+0x2d8/0x45c
[  112.612288][ T7735]  invoke_syscall+0x98/0x2bc
[  112.613040][ T7735]  el0_svc_common+0x138/0x258
[  112.613768][ T7735]  do_el0_svc+0x58/0x13c
[  112.614431][ T7735]  el0_svc+0x58/0x138
[  112.615050][ T7735]  el0t_64_sync_handler+0x84/0xf0
[  112.615873][ T7735]  el0t_64_sync+0x18c/0x190
[  112.628451][ T7720] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  112.631776][ T7720] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  112.695197][ T7742] binder: 7741:7742 ioctl c0306201 20000080 returned -14
[  112.697570][ T7742] binder: 7741:7742 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  112.715461][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  112.724477][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'.
[  112.842932][ T7746] loop1: detected capacity change from 0 to 32768
[  112.894507][ T7746] XFS (loop1): Mounting V5 Filesystem
[  112.918307][ T7746] XFS (loop1): Ending clean mount
[  112.920024][ T7746] XFS (loop1): Quotacheck needed: Please wait.
[  112.944008][ T7746] XFS (loop1): Quotacheck: Done.
[  113.019509][ T7762] loop5: detected capacity change from 0 to 1024
[  113.755453][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  114.320382][ T7773] hfsplus: bad catalog entry type
[  114.553582][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'.
[  114.560748][   T11] hfsplus: b-tree write err: -5, ino 4
[  114.566158][ T4326] XFS (loop1): Unmounting Filesystem
[  114.581396][ T7784] device bridge_slave_1 left promiscuous mode
[  114.582537][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.647203][ T7784] device bridge_slave_0 left promiscuous mode
[  114.648378][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.795463][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  114.848430][ T7777] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  114.858714][ T7794] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  114.908875][   T27] audit: type=1326 audit(370.891:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bb5af28 code=0x7ffc0000
[  114.912980][   T27] audit: type=1326 audit(370.891:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8bb5af28 code=0x7ffc0000
[  114.914102][ T7808] device wlan0 entered promiscuous mode
[  114.919132][   T27] audit: type=1326 audit(370.901:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bb5af28 code=0x7ffc0000
[  114.928011][ T7808] device wlan0 left promiscuous mode
[  114.941521][   T27] audit: type=1326 audit(370.901:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8bb5af28 code=0x7ffc0000
[  114.945560][   T27] audit: type=1326 audit(370.911:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bb5af28 code=0x7ffc0000
[  114.949306][   T27] audit: type=1326 audit(370.911:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bb5af28 code=0x7ffc0000
[  114.955694][   T27] audit: type=1326 audit(370.921:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8bb5af28 code=0x7ffc0000
[  114.959111][   T27] audit: type=1326 audit(370.921:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bb5af28 code=0x7ffc0000
[  114.966809][   T27] audit: type=1326 audit(370.921:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bb5af28 code=0x7ffc0000
[  114.970198][   T27] audit: type=1326 audit(370.921:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.869" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=143 compat=0 ip=0xffff8bb5af28 code=0x7ffc0000
[  115.044711][ T7818] atomic_op 0000000048f54c3d conn xmit_atomic 0000000000000000
[  115.079423][ T7806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.177324][ T7806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.287460][ T7806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.412974][ T7806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.416397][ T7850] netlink: 'syz.1.888': attribute type 1 has an invalid length.
[  115.429036][ T7850] bond1: (slave bridge1): making interface the new active one
[  115.430710][ T7850] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  115.459891][ T7853] netlink: 'syz.1.889': attribute type 13 has an invalid length.
[  115.564416][ T7853] bridge0: port 3(team0) entered disabled state
[  115.565816][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.568264][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.835482][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  115.982778][ T7853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.998468][ T7853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.222043][ T4323] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  116.223834][ T4323] CPU: 1 PID: 4323 Comm: syz-executor Not tainted 6.1.148-syzkaller #0
[  116.225032][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[  116.226588][ T4323] Call trace:
[  116.227088][ T4323]  dump_backtrace+0x1c8/0x1f4
[  116.227865][ T4323]  show_stack+0x2c/0x3c
[  116.228540][ T4323]  __dump_stack+0x30/0x40
[  116.229226][ T4323]  dump_stack_lvl+0xf8/0x160
[  116.229909][ T4323]  dump_stack+0x1c/0x5c
[  116.230589][ T4323]  dump_header+0xc0/0x724
[  116.231271][ T4323]  oom_kill_process+0x360/0x674
[  116.232103][ T4323]  out_of_memory+0xc5c/0xf68
[  116.232808][ T4323]  mem_cgroup_out_of_memory+0x210/0x2bc
[  116.233671][ T4323]  try_charge_memcg+0xac4/0x1448
[  116.234431][ T4323]  charge_memcg+0xa4/0x1f4
[  116.235127][ T4323]  mem_cgroup_swapin_charge_folio+0x270/0x3d8
[  116.236130][ T4323]  __read_swap_cache_async+0x3ac/0x6c0
[  116.237027][ T4323]  swapin_readahead+0x59c/0xa7c
[  116.237808][ T4323]  do_swap_page+0x2c8/0x2314
[  116.238517][ T4323]  handle_mm_fault+0xffc/0x2fd4
[  116.239192][ T4323]  do_page_fault+0x310/0x99c
[  116.239906][ T4323]  do_translation_fault+0x94/0xc8
[  116.240714][ T4323]  do_mem_abort+0x70/0x194
[  116.241414][ T4323]  el0_da+0x70/0x154
[  116.242015][ T4323]  el0t_64_sync_handler+0x90/0xf0
[  116.242737][ T4323]  el0t_64_sync+0x18c/0x190
[  116.244756][ T4323] memory: usage 307200kB, limit 307200kB, failcnt 226
[  116.246391][ T4323] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0
[  116.247735][ T4323] kmem: usage 302752kB, limit 9007199254740988kB, failcnt 0
[  116.248944][ T4323] Memory cgroup stats for /syz3:
[  116.249224][ T4323] anon 0
[  116.249224][ T4323] file 4567040
[  116.249224][ T4323] kernel 310018048
[  116.249224][ T4323] kernel_stack 65536
[  116.249224][ T4323] pagetables 126976
[  116.249224][ T4323] sec_pagetables 0
[  116.249224][ T4323] percpu 8288
[  116.249224][ T4323] sock 0
[  116.249224][ T4323] vmalloc 0
[  116.249224][ T4323] shmem 4472832
[  116.249224][ T4323] zswap 0
[  116.249224][ T4323] zswapped 0
[  116.249224][ T4323] file_mapped 94208
[  116.249224][ T4323] file_dirty 94208
[  116.249224][ T4323] file_writeback 0
[  116.249224][ T4323] swapcached 307200
[  116.249224][ T4323] anon_thp 0
[  116.249224][ T4323] file_thp 0
[  116.249224][ T4323] shmem_thp 0
[  116.249224][ T4323] inactive_anon 2220032
[  116.249224][ T4323] active_anon 1716224
[  116.249224][ T4323] inactive_file 94208
[  116.249224][ T4323] active_file 0
[  116.249224][ T4323] unevictable 0
[  116.249224][ T4323] slab_reclaimable 45432
[  116.249224][ T4323] slab_unreclaimable 655080
[  116.277934][ T4323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.886,pid=7845,uid=0
[  116.281744][ T4323] Memory cgroup out of memory: Killed process 7845 (syz.3.886) total-vm:101668kB, anon-rss:888kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0
[  116.325231][ T7853] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.326840][ T7853] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.328351][ T7853] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.329754][ T7853] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.472074][ T7858] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  116.489073][ T7858] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  116.528272][ T7868] rdma_op 00000000a0b91f19 conn xmit_rdma 0000000000000000
[  116.576401][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.897'.
[  116.601243][ T7872] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.614136][ T7806] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.618769][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'.
[  116.710338][ T7877] loop1: detected capacity change from 0 to 1024
[  116.723232][ T7877] EXT4-fs: inline encryption not supported
[  116.724200][ T7877] EXT4-fs: Ignoring removed i_version option
[  116.743633][ T7877] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #3: block 1: comm syz.1.899: lblock 1 mapped to illegal pblock 1 (length 1)
[  116.750679][ T7877] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.899: Failed to acquire dquot type 0
[  116.754319][ T7877] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.899: Freeing blocks not in datazone - block = 0, count = 4096
[  116.790057][ T7877] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.899: Invalid inode bitmap blk 0 in block_group 0
[  116.793619][ T7877] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  116.796350][ T7877] EXT4-fs (loop1): 1 orphan inode deleted
[  116.797218][ T7877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  116.805910][ T1646] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  116.816447][ T1646] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 0
[  116.875435][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  116.931202][ T7884] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.899: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  116.935960][ T7884] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.899: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  117.306583][ T7872] bond1 (unregistering): Released all slaves
[  117.314949][ T7806] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.318771][ T7806] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.329948][ T7806] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.526495][ T4326] EXT4-fs (loop1): unmounting filesystem.
[  117.587542][ T7904] loop1: detected capacity change from 0 to 128
[  117.631925][ T7904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  117.633167][ T7904] System zones: 1-3, 19-19, 35-36
[  117.660503][ T7904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  117.733039][ T4326] EXT4-fs (loop1): unmounting filesystem.
[  117.915469][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  118.327827][   T29] oom_reaper: reaped process 7845 (syz.3.886), now anon-rss:0kB, file-rss:20932kB, shmem-rss:0kB
[  118.383696][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'.
[  118.955446][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  119.292578][ T7959] netlink: 104 bytes leftover after parsing attributes in process `syz.0.929'.
[  119.300481][ T4323] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  119.319196][ T4323] CPU: 0 PID: 4323 Comm: syz-executor Not tainted 6.1.148-syzkaller #0
[  119.320430][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[  119.322085][ T4323] Call trace:
[  119.322636][ T4323]  dump_backtrace+0x1c8/0x1f4
[  119.323363][ T4323]  show_stack+0x2c/0x3c
[  119.324026][ T4323]  __dump_stack+0x30/0x40
[  119.324703][ T4323]  dump_stack_lvl+0xf8/0x160
[  119.325457][ T4323]  dump_stack+0x1c/0x5c
[  119.326108][ T4323]  dump_header+0xc0/0x724
[  119.326826][ T4323]  oom_kill_process+0x360/0x674
[  119.327580][ T4323]  out_of_memory+0xc5c/0xf68
[  119.328213][ T4323]  mem_cgroup_out_of_memory+0x210/0x2bc
[  119.329027][ T4323]  try_charge_memcg+0xac4/0x1448
[  119.329721][ T4323]  charge_memcg+0xa4/0x1f4
[  119.330382][ T4323]  mem_cgroup_swapin_charge_folio+0x270/0x3d8
[  119.331309][ T4323]  __read_swap_cache_async+0x3ac/0x6c0
[  119.332099][ T4323]  swapin_readahead+0x59c/0xa7c
[  119.332861][ T4323]  do_swap_page+0x2c8/0x2314
[  119.333540][ T4323]  handle_mm_fault+0xffc/0x2fd4
[  119.334273][ T4323]  do_page_fault+0x310/0x99c
[  119.334988][ T4323]  do_translation_fault+0x94/0xc8
[  119.335771][ T4323]  do_mem_abort+0x70/0x194
[  119.336474][ T4323]  el0_da+0x70/0x154
[  119.337075][ T4323]  el0t_64_sync_handler+0x90/0xf0
[  119.337821][ T4323]  el0t_64_sync+0x18c/0x190
[  119.549015][ T4323] memory: usage 307200kB, limit 307200kB, failcnt 1096
[  119.550290][ T4323] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0
[  119.551389][ T4323] kmem: usage 302752kB, limit 9007199254740988kB, failcnt 0
[  119.552428][ T4323] Memory cgroup stats for /syz3:
[  119.552506][ T4323] anon 0
[  119.552506][ T4323] file 4567040
[  119.552506][ T4323] kernel 310018048
[  119.552506][ T4323] kernel_stack 65536
[  119.552506][ T4323] pagetables 126976
[  119.552506][ T4323] sec_pagetables 0
[  119.552506][ T4323] percpu 8288
[  119.552506][ T4323] sock 0
[  119.552506][ T4323] vmalloc 308035584
[  119.552506][ T4323] shmem 4472832
[  119.552506][ T4323] zswap 0
[  119.552506][ T4323] zswapped 0
[  119.552506][ T4323] file_mapped 94208
[  119.552506][ T4323] file_dirty 94208
[  119.552506][ T4323] file_writeback 0
[  119.552506][ T4323] swapcached 307200
[  119.552506][ T4323] anon_thp 0
[  119.552506][ T4323] file_thp 0
[  119.552506][ T4323] shmem_thp 0
[  119.552506][ T4323] inactive_anon 1310720
[  119.552506][ T4323] active_anon 3149824
[  119.552506][ T4323] inactive_file 0
[  119.552506][ T4323] active_file 94208
[  119.552506][ T4323] unevictable 0
[  119.552506][ T4323] slab_reclaimable 45432
[  119.552506][ T4323] slab_unreclaimable 655080
[  119.566085][ T4323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor,pid=4323,uid=0
[  119.568420][ T4323] Memory cgroup out of memory: Killed process 4323 (syz-executor) total-vm:97636kB, anon-rss:952kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:0
[  119.698865][ T7983] netlink: 5 bytes leftover after parsing attributes in process `syz.0.940'.
[  119.882226][ T8003] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  119.975969][ T8005] loop1: detected capacity change from 0 to 1024
[  119.987933][ T8005] EXT4-fs: Ignoring removed orlov option
[  119.988826][ T8005] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.995469][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  120.035522][ T8005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  120.035540][ T8010] device bridge_slave_1 left promiscuous mode
[  120.037837][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.104639][ T8010] device bridge_slave_0 left promiscuous mode
[  120.105843][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.112645][ T4326] EXT4-fs (loop1): unmounting filesystem.
[  120.348832][ T8035] loop1: detected capacity change from 0 to 512
[  120.401612][ T6970] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  120.440074][ T8043] mmap: syz.4.968 (8043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  120.442345][ T8043] ------------[ cut here ]------------
[  120.443660][ T8043] WARNING: CPU: 0 PID: 8043 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c
[  120.445098][ T8043] Modules linked in:
[  120.445747][ T8043] CPU: 0 PID: 8043 Comm: syz.4.968 Not tainted 6.1.148-syzkaller #0
[  120.446968][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[  120.448549][ T8043] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  120.449773][ T8043] pc : hugetlb_split+0x234/0x29c
[  120.450586][ T8043] lr : hugetlb_split+0x234/0x29c
[  120.451362][ T8043] sp : ffff800022b673d0
[  120.452026][ T8043] x29: ffff800022b673d0 x28: dfff800000000000 x27: ffff70000456ce98
[  120.453345][ T8043] x26: ffff0000f4403798 x25: ffff8000150b0000 x24: 1ffff00002a160b0
[  120.454628][ T8043] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000
[  120.455873][ T8043] x20: 0000000020000000 x19: ffff0000f4403798 x18: ffff800011aabce0
[  120.457014][ T8043] x17: ffff8000087ecf04 x16: ffff8000082d0ec0 x15: ffff8000087f33bc
[  120.458317][ T8043] x14: 000000001194919c x13: 000000007e4ea3c0 x12: 0000000000080000
[  120.459591][ T8043] x11: 0000000000004475 x10: ffff80002973d000 x9 : ffff800008887dc8
[  120.460859][ T8043] x8 : 0000000000004476 x7 : 0000000000000000 x6 : 000000000000003f
[  120.462177][ T8043] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008887c48
[  120.463463][ T8043] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
[  120.464741][ T8043] Call trace:
[  120.465265][ T8043]  hugetlb_split+0x234/0x29c
[  120.465960][ T8043]  __vma_adjust+0x438/0x16b0
[  120.466701][ T8043]  __split_vma+0x324/0x448
[  120.467323][ T8043]  do_mas_align_munmap+0x2c8/0xeec
[  120.468135][ T8043]  mmap_region+0x64c/0x1860
[  120.468863][ T8043]  do_mmap+0x978/0x10dc
[  120.469554][ T8043]  __arm64_sys_remap_file_pages+0x4b4/0x644
[  120.470453][ T8043]  invoke_syscall+0x98/0x2bc
[  120.471168][ T8043]  el0_svc_common+0x138/0x258
[  120.471853][ T8043]  do_el0_svc+0x58/0x13c
[  120.472498][ T8043]  el0_svc+0x58/0x138
[  120.473152][ T8043]  el0t_64_sync_handler+0x84/0xf0
[  120.473936][ T8043]  el0t_64_sync+0x18c/0x190
[  120.474659][ T8043] irq event stamp: 330
[  120.475321][ T8043] hardirqs last  enabled at (329): [<ffff800011a34624>] _raw_spin_unlock_irqrestore+0x48/0xac
[  120.476792][ T8043] hardirqs last disabled at (330): [<ffff800011948d00>] el1_dbg+0x24/0x80
[  120.477966][ T8043] softirqs last  enabled at (254): [<ffff800008030900>] local_bh_enable+0x10/0x34
[  120.479303][ T8043] softirqs last disabled at (252): [<ffff8000080308cc>] local_bh_disable+0x10/0x34
[  120.480654][ T8043] ---[ end trace 0000000000000000 ]---
[  120.512124][ T8043] ------------[ cut here ]------------
[  120.513021][ T8043] WARNING: CPU: 0 PID: 8043 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c
[  120.514531][ T8043] Modules linked in:
[  120.515147][ T8043] CPU: 0 PID: 8043 Comm: syz.4.968 Tainted: G        W          6.1.148-syzkaller #0
[  120.516564][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[  120.518005][ T8043] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  120.519157][ T8043] pc : hugetlb_split+0x234/0x29c
[  120.519892][ T8043] lr : hugetlb_split+0x234/0x29c
[  120.520646][ T8043] sp : ffff800022b673d0
[  120.521300][ T8043] x29: ffff800022b673d0 x28: dfff800000000000 x27: ffff70000456ce98
[  120.522488][ T8043] x26: ffff0000f4403798 x25: ffff8000150b0000 x24: 1ffff00002a160b0
[  120.523693][ T8043] x23: dfff800000000000 x22: 0000000000000003 x21: 0000000000000000
[  120.524946][ T8043] x20: 0000000020800000 x19: ffff0000f4403798 x18: ffff800011aabce0
[  120.526242][ T8043] x17: ffff8000087ecf04 x16: ffff8000082d0ec0 x15: ffff8000087f33bc
[  120.527551][ T8043] x14: 000000001194919c x13: 000000007e4ea3c0 x12: 0000000000080000
[  120.528856][ T8043] x11: 000000000001d5b9 x10: ffff80002973d000 x9 : ffff800008887dc8
[  120.530186][ T8043] x8 : 000000000001d5ba x7 : 0000000000000000 x6 : 000000000000003f
[  120.531530][ T8043] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008887c48
[  120.532817][ T8043] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
[  120.534102][ T8043] Call trace:
[  120.534571][ T8043]  hugetlb_split+0x234/0x29c
[  120.535279][ T8043]  __vma_adjust+0x444/0x16b0
[  120.535956][ T8043]  __split_vma+0x324/0x448
[  120.536639][ T8043]  do_mas_align_munmap+0x2c8/0xeec
[  120.537385][ T8043]  mmap_region+0x64c/0x1860
[  120.538052][ T8043]  do_mmap+0x978/0x10dc
[  120.538699][ T8043]  __arm64_sys_remap_file_pages+0x4b4/0x644
[  120.539666][ T8043]  invoke_syscall+0x98/0x2bc
[  120.540398][ T8043]  el0_svc_common+0x138/0x258
[  120.541158][ T8043]  do_el0_svc+0x58/0x13c
[  120.541840][ T8043]  el0_svc+0x58/0x138
[  120.542484][ T8043]  el0t_64_sync_handler+0x84/0xf0
[  120.543220][ T8043]  el0t_64_sync+0x18c/0x190
[  120.543943][ T8043] irq event stamp: 596
[  120.544568][ T8043] hardirqs last  enabled at (595): [<ffff80001194addc>] exit_to_kernel_mode+0xcc/0xfc
[  120.545973][ T8043] hardirqs last disabled at (596): [<ffff800011948d00>] el1_dbg+0x24/0x80
[  120.547274][ T8043] softirqs last  enabled at (580): [<ffff8000081a9670>] handle_softirqs+0xaf8/0xc6c
[  120.548683][ T8043] softirqs last disabled at (333): [<ffff800008020164>] __do_softirq+0x14/0x20
[  120.550067][ T8043] ---[ end trace 0000000000000000 ]---
[  121.035460][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  121.472339][ T4725] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.608434][ T4725] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.726283][ T4725] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.807103][ T4725] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.068397][ T4725] tipc: Disabling bearer <eth:syzkaller0>
[  122.069924][ T4725] tipc: Left network mode
[  122.075500][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  123.115408][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  124.086918][ T4725] device hsr_slave_0 left promiscuous mode
[  124.115703][ T4725] device hsr_slave_1 left promiscuous mode
[  124.155421][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  124.195396][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.196536][ T4725] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.198493][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.199640][ T4725] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.200988][ T4725] device bridge_slave_1 left promiscuous mode
[  124.201971][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.235853][ T4725] device bridge_slave_0 left promiscuous mode
[  124.236859][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.375450][ T4725] device veth1_macvtap left promiscuous mode
[  124.376352][ T4725] device veth0_macvtap left promiscuous mode
[  124.377252][ T4725] device veth1_vlan left promiscuous mode
[  124.378093][ T4725] device veth0_vlan left promiscuous mode
[  124.379593][ T4725] device bridge0 left promiscuous mode
[  124.659285][ T4725] bond1 (unregistering): (slave veth3): Releasing active interface
[  124.660636][ T4725] device veth1_to_batadv entered promiscuous mode
[  125.195400][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  125.349315][ T4725] bond1 (unregistering): (slave veth1_to_batadv): Releasing active interface
[  125.350686][ T4725] device veth1_to_batadv left promiscuous mode
[  125.388074][ T4725] bond1 (unregistering): Released all slaves
[  125.915800][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  125.916798][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  126.235427][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  127.221038][ T4725] team0 (unregistering): Port device team_slave_1 removed
[  127.285390][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  127.418222][ T4725] team0 (unregistering): Port device team_slave_0 removed
[  127.600387][ T4725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.818484][ T4725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.315413][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  129.355398][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  130.140763][ T4725] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  130.178691][ T4725] bond0 (unregistering): Released all slaves
[  130.405445][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available