last executing test programs:

12.481935243s ago: executing program 2 (id=398):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x401}, &(0x7f00000000c0)=0x8)

12.4534028s ago: executing program 2 (id=399):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x30a, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a80)="537eb9f8d6b4", 0x6}], 0x1}}], 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000))

11.651525718s ago: executing program 0 (id=400):
socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
prlimit64(0x0, 0xa, &(0x7f0000000100)={0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$nfs4(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x144000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x113100)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
readv(r3, &(0x7f0000000240)=[{0x0}], 0x1)
close(r3)
mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r4, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r4, 0x1)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r6, 0x200}, 0x8)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xc8c4049c, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

10.093325989s ago: executing program 1 (id=406):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/stat\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', <r7=>0x0, 0x8, 0x7801, 0xf, 0x7, {{0x19, 0x4, 0x2, 0x34, 0x64, 0x67, 0x0, 0x76, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, {[@lsrr={0x83, 0x13, 0xea, [@empty, @rand_addr=0x64010101, @loopback, @multicast2]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x0, 0xd, "a518a14ba3c888dd59cf06"}, {0x0, 0x6, "4212e860"}]}, @ssrr={0x89, 0x7, 0xfc, [@local]}, @generic={0x7, 0x6, '=\tZ!'}, @noop, @timestamp={0x44, 0x10, 0x4d, 0x0, 0x8, [0xe5, 0x8000, 0x3]}, @timestamp={0x44, 0x4, 0xd0, 0x0, 0x6}]}}}}})
r8 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, &(0x7f0000000180)={0x2c, 0xd, r7, 0xe, r8}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848100000005e140602000000000e0021000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000060005000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0)

9.036118406s ago: executing program 1 (id=408):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x70, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0)
write$FUSE_STATFS(r0, &(0x7f0000000280)={0x60, 0x0, 0x0, {{0xfffffffffffffff8, 0x3, 0x4, 0x5, 0x6, 0x0, 0xff, 0x10001}}}, 0x60)

7.631415468s ago: executing program 2 (id=411):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x101040)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x172, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x80000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port1\x00', 0x89, 0x0, 0x4, 0xffdffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)

7.457585558s ago: executing program 1 (id=413):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000640)=0x7a, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x30a, 0x4)
sendmmsg$inet(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a80)="537eb9", 0x3}], 0x1}}], 0x1, 0x0)
sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x0, 0x0, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000))

7.411264539s ago: executing program 2 (id=414):
r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x17)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x20000000000000e5, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000100)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0)

7.301981858s ago: executing program 4 (id=415):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0xfffffffffffffec4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='net/fib_triestat\x00')
read$FUSE(r4, &(0x7f0000001200)={0x2020}, 0x2020)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b000000070000000200000022ff000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000005a00000000000044c12d9ad800"/28], 0x48)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x800)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000000), &(0x7f0000000180)=@tcp}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r5, &(0x7f0000000100), 0x0}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x801, &(0x7f0000000240)=ANY=[@ANYBLOB="002d03b383f3f4170f5618ee38ac616406361f018dc021000000007f8da53584e53d36b72bd37e1285"], 0x1, 0x235, &(0x7f0000000000)="$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")
add_key(&(0x7f0000000080)='user\x00', 0x0, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

6.296730873s ago: executing program 1 (id=416):
r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x20000000000000e5, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000500)={0x2, @sliced={0x7fff, [0x4, 0x1, 0x7, 0x0, 0x4, 0x7, 0x4, 0xfffc, 0x6, 0x1, 0x2, 0x23a6, 0x2, 0x59, 0xfff9, 0x4, 0x4, 0x9, 0xcd44, 0x8, 0x2, 0x9, 0x7, 0x2, 0x4682, 0x0, 0x4, 0xd, 0x7, 0x0, 0x7, 0x8, 0xf801, 0xff00, 0x81, 0xfff8, 0x0, 0x400, 0x387, 0xd4a, 0x9, 0xffff, 0x4, 0x6, 0x6, 0x2, 0x5069, 0xf8e], 0x46a}})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

6.147181556s ago: executing program 0 (id=417):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5a1000a, &(0x7f00000003c0)=ANY=[], 0x1, 0x1507, &(0x7f0000001b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}, @const={0x0, {0x8}}})
lseek(r4, 0xfffffffffffffff5, 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = add_key$user(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x3}, &(0x7f0000001000)="28fea41711", 0x5, 0xfffffffffffffffe)
keyctl$revoke(0x3, r5)
keyctl$read(0xb, r5, &(0x7f0000001200)=""/236, 0xec)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000100), 0x4)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0)

4.972089019s ago: executing program 1 (id=419):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000019002f41fc3770000000000080201403"], 0x2c}}, 0x4000014)
syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x120800c, &(0x7f00000000c0)=ANY=[@ANYRES32], 0xfb, 0x5a55, &(0x7f00000086c0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}]})
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xb8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x88}}, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000d00)={0x100, 0x4, 0x0, 0x100040000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x3, 0xe3f1})
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x100000000, 0x2000000000000000, 0x3, 0x9, 0x1002, 0x1, 0xfffffffffffffffd, 0x7fc})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
chdir(&(0x7f00000001c0)='./file0\x00')
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x101480, 0x0)
getdents64(r5, &(0x7f0000000540)=""/239, 0xef)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})

4.938181682s ago: executing program 3 (id=420):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x401}, &(0x7f00000000c0)=0x8)

4.859449454s ago: executing program 2 (id=421):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x30a, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a80)="537eb9f8d6b4", 0x6}], 0x1}}], 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000))

4.766892437s ago: executing program 3 (id=422):
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x37, 0x2d, 0x4e, 0x3a]}}}, 0x4e}]})

4.567269014s ago: executing program 3 (id=423):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x8)
write$dsp(r1, &(0x7f00000012c0)="a5", 0x1)
read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x103080, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=<r3=>0x0)
capget(&(0x7f00000001c0)={0x19980330, r3}, &(0x7f0000000200)={0x9, 0x3, 0x1, 0x9, 0x8, 0x8})
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000006c0)={0x7, 0x8}, 0x0)
socket$netlink(0x10, 0x3, 0x6)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000000)=ANY=[], 0x118)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0)
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f00000000c0))
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061147000000000000700000000000000950000000000000018c6e5c1bf2034b4a2fcac66d498a72927ef55eb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

3.876017099s ago: executing program 3 (id=424):
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)

2.235697314s ago: executing program 3 (id=425):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x0, 0x1}, 0x28, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000000)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x588, &(0x7f00000005c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f00000003c0)=ANY=[], 0x361, 0x2)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0)
llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x4000)

2.159019294s ago: executing program 1 (id=426):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r0)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}]}, 0x2c}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES32=0x0], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x80044940, &(0x7f0000001480)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r10=>0x0, <r11=>0x0, <r12=>0x0, <r13=>0x0})
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16=r13, @ANYRES64=r11, @ANYRES16=r10, @ANYRES16=r10, @ANYRESDEC=r12, @ANYRES16=r9, @ANYRES16, @ANYBLOB="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", @ANYRES8=r7, @ANYRES32=r8], 0x5, 0x0, &(0x7f0000000000))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000240)={"29adf6eeb04f990df158b5a512fad6dc", 0x0, r10, {0x3, 0x1}, {0x6, 0x7f}, 0x4, [0x0, 0x27c, 0x7, 0x1, 0x3, 0x85, 0xee5, 0x2, 0x100, 0x3, 0x100000001, 0xd846, 0x0, 0xbdee, 0x4, 0x8]})
sendmsg$nl_xfrm(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003c00)=@newae={0x48, 0x1e, 0x401, 0x70bd26, 0x25dfdbff, {{@in6=@loopback, 0x4d4, 0x2, 0xff}, @in6=@mcast2, 0x4f9, 0x3507}, [@extra_flags={0x8, 0x18, 0x8000}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r0) (async)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}]}, 0x2c}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES32=0x0], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
getdents64(r5, 0x0, 0x30) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) (async)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x80044940, &(0x7f0000001480)) (async)
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16=r13, @ANYRES64=r11, @ANYRES16=r10, @ANYRES16=r10, @ANYRESDEC=r12, @ANYRES16=r9, @ANYRES16, @ANYBLOB="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", @ANYRES8=r7, @ANYRES32=r8], 0x5, 0x0, &(0x7f0000000000)) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000240)={"29adf6eeb04f990df158b5a512fad6dc", 0x0, r10, {0x3, 0x1}, {0x6, 0x7f}, 0x4, [0x0, 0x27c, 0x7, 0x1, 0x3, 0x85, 0xee5, 0x2, 0x100, 0x3, 0x100000001, 0xd846, 0x0, 0xbdee, 0x4, 0x8]}) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003c00)=@newae={0x48, 0x1e, 0x401, 0x70bd26, 0x25dfdbff, {{@in6=@loopback, 0x4d4, 0x2, 0xff}, @in6=@mcast2, 0x4f9, 0x3507}, [@extra_flags={0x8, 0x18, 0x8000}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)

1.891905135s ago: executing program 0 (id=427):
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
r3 = gettid()
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)

1.891167091s ago: executing program 3 (id=428):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0xfffffffffffffec4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
getpid()
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='net/fib_triestat\x00')
read$FUSE(r3, &(0x7f0000001200)={0x2020}, 0x2020)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b000000070000000200000022ff000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000005a00000000000044c12d9ad800"/28], 0x48)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x800)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000000), &(0x7f0000000180)=@tcp}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r4, &(0x7f0000000100), 0x0}, 0x20)
socket$tipc(0x1e, 0x5, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x801, &(0x7f0000000240)=ANY=[@ANYBLOB="002d03b383f3f4170f5618ee38ac616406361f018dc021000000007f8da53584e53d36b72bd37e1285"], 0x1, 0x235, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiMwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3c6h/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1v9mjOH4hVjOKXcKufG3HWLF+Rapn6+7s0LhoNRnycyMDIyMDAxMMwM27kH2V/lDdDIYGBmYGBQYQApYmFIy8xJNfBgYGRghnIMWaCqYKqZGDjAEnrJ+Tkp7QyM4CQA1racgQVuhuFjBlZ+kHIQx+gxAytchoGhAWoSQzuUVoHSHlB6OZR+DKXl0ZINC9iEfihPo4GBgY2hIvE/f5EhGwMDQ0ViSUmRIUSspKTICC5mJAC3mQlq61wmVM8dZ2IYBaNgFIyCUTAKRsEoGAWjYBSMgpEMAAEAAP//kUi5hw==")
add_key(&(0x7f0000000080)='user\x00', 0x0, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc)

1.763217158s ago: executing program 2 (id=429):
r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x20000000000000e5, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000500)={0x2, @sliced={0x7fff, [0x4, 0x1, 0x7, 0x0, 0x4, 0x7, 0x4, 0xfffc, 0x6, 0x1, 0x2, 0x23a6, 0x2, 0x59, 0xfff9, 0x4, 0x4, 0x9, 0xcd44, 0x8, 0x2, 0x9, 0x7, 0x2, 0x4682, 0x0, 0x4, 0xd, 0x7, 0x0, 0x7, 0x8, 0xf801, 0xff00, 0x81, 0xfff8, 0x0, 0x400, 0x387, 0xd4a, 0x9, 0xffff, 0x4, 0x6, 0x6, 0x2, 0x5069, 0xf8e], 0x46a}})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

1.706956409s ago: executing program 4 (id=430):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/stat\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', <r7=>0x0, 0x8, 0x7801, 0xf, 0x7, {{0x19, 0x4, 0x2, 0x34, 0x64, 0x67, 0x0, 0x76, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, {[@lsrr={0x83, 0x13, 0xea, [@empty, @rand_addr=0x64010101, @loopback, @multicast2]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x0, 0xd, "a518a14ba3c888dd59cf06"}, {0x0, 0x6, "4212e860"}]}, @ssrr={0x89, 0x7, 0xfc, [@local]}, @generic={0x7, 0x6, '=\tZ!'}, @noop, @timestamp={0x44, 0x10, 0x4d, 0x0, 0x8, [0xe5, 0x8000, 0x3]}, @timestamp={0x44, 0x4, 0xd0, 0x0, 0x6}]}}}}})
r8 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, &(0x7f0000000180)={0x2c, 0xd, r7, 0xe, r8}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848100000005e140602000000000e0021000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000060005000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0)

512.450336ms ago: executing program 4 (id=431):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x4000)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (fail_nth: 1)

319.3624ms ago: executing program 4 (id=432):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x800)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x401}, &(0x7f00000000c0)=0x8)

315.785384ms ago: executing program 0 (id=433):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 4)

179.323894ms ago: executing program 0 (id=434):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x3e80, 0x0}, 0x0)

163.388556ms ago: executing program 4 (id=435):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) (fail_nth: 4)

47.224605ms ago: executing program 0 (id=436):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4000000})
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB='errors=continue,compression=gzip,norecovery,mocow,inodes_32bit,norecovery,journal_transaction_names,reconstruct_alloc,no_data_io,\x00', @ANYRESHEX], 0x1, 0x5918, &(0x7f0000000280)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1a1381, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0)

0s ago: executing program 4 (id=437):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x15c0}, 0x0, 0x44})
io_uring_enter(r1, 0x3516, 0x11, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):


[   39.678558][ T6496] bridge_slave_1: entered allmulticast mode
[   39.679422][ T6496] bridge_slave_1: entered promiscuous mode
[   39.729863][ T6497] hsr_slave_0: entered promiscuous mode
[   39.730431][ T6497] hsr_slave_1: entered promiscuous mode
[   39.730793][ T6497] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.730823][ T6497] Cannot create hsr debugfs directory
[   39.762079][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.764341][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.766413][ T6500] bridge_slave_0: entered allmulticast mode
[   39.769017][ T6500] bridge_slave_0: entered promiscuous mode
[   39.783758][ T6496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.786028][ T6496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.795082][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.797129][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.799604][ T6500] bridge_slave_1: entered allmulticast mode
[   39.802737][ T6500] bridge_slave_1: entered promiscuous mode
[   39.851590][ T6496] team0: Port device team_slave_0 added
[   39.856471][ T6496] team0: Port device team_slave_1 added
[   39.870832][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.921333][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.926137][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.926201][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.926231][ T6496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.927831][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.927862][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.927890][ T6496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   40.011406][ T6490] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   40.023717][ T6500] team0: Port device team_slave_0 added
[   40.036335][ T6496] hsr_slave_0: entered promiscuous mode
[   40.038626][ T6496] hsr_slave_1: entered promiscuous mode
[   40.040674][ T6496] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   40.042086][ T6496] Cannot create hsr debugfs directory
[   40.052826][ T6490] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   40.058633][ T6500] team0: Port device team_slave_1 added
[   40.074292][ T6490] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   40.099730][ T6490] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   40.112854][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0
[   40.112926][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.112957][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   40.114238][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1
[   40.114273][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.114301][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   40.150416][ T6500] hsr_slave_0: entered promiscuous mode
[   40.152666][ T6500] hsr_slave_1: entered promiscuous mode
[   40.153366][ T6500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   40.153400][ T6500] Cannot create hsr debugfs directory
[   40.253985][ T6497] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   40.274229][ T6497] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   40.293121][ T6497] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   40.297293][ T6497] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   40.372059][ T6489] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   40.380716][ T6489] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   40.385652][ T6489] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   40.390343][ T6489] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   40.407745][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.444134][ T6490] 8021q: adding VLAN 0 to HW filter on device team0
[   40.447584][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.447733][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.460451][ T6497] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.470688][ T6496] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   40.477310][ T6496] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   40.480967][ T6496] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   40.488863][ T6496] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   40.504418][  T187] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.504510][  T187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.524739][ T6500] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   40.540902][ T6497] 8021q: adding VLAN 0 to HW filter on device team0
[   40.542704][ T6500] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   40.556920][ T6500] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   40.561195][ T6500] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   40.583996][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.584073][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.629345][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.629426][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.672846][ T6491] Bluetooth: hci1: command tx timeout
[   40.678790][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.690836][ T6496] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.711689][ T6496] 8021q: adding VLAN 0 to HW filter on device team0
[   40.728802][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.742100][   T55] Bluetooth: hci0: command tx timeout
[   40.743856][ T6491] Bluetooth: hci2: command tx timeout
[   40.754024][ T6489] 8021q: adding VLAN 0 to HW filter on device team0
[   40.758140][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.758226][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.759833][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.759883][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.761050][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.761093][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.778496][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.807559][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.807636][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.822080][   T55] Bluetooth: hci3: command tx timeout
[   40.823978][ T6491] Bluetooth: hci4: command tx timeout
[   40.825151][ T6500] 8021q: adding VLAN 0 to HW filter on device team0
[   40.860873][  T187] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.860949][  T187] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.873926][  T187] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.874007][  T187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.898115][ T6500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.901229][ T6500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.939699][ T6497] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.957839][ T6490] veth0_vlan: entered promiscuous mode
[   40.961007][ T6490] veth1_vlan: entered promiscuous mode
[   41.006037][ T6497] veth0_vlan: entered promiscuous mode
[   41.010939][ T6489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   41.011017][ T6489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   41.038461][ T6497] veth1_vlan: entered promiscuous mode
[   41.050079][ T6497] veth0_macvtap: entered promiscuous mode
[   41.067206][ T6497] veth1_macvtap: entered promiscuous mode
[   41.079905][ T6496] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.110580][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.120171][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.133882][ T6490] veth0_macvtap: entered promiscuous mode
[   41.135889][ T6490] veth1_macvtap: entered promiscuous mode
[   41.158137][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.159835][ T6497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.159904][ T6497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.159936][ T6497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.159968][ T6497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.169752][ T6496] veth0_vlan: entered promiscuous mode
[   41.173902][ T6496] veth1_vlan: entered promiscuous mode
[   41.186293][ T6496] veth0_macvtap: entered promiscuous mode
[   41.188126][ T6496] veth1_macvtap: entered promiscuous mode
[   41.220948][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.221062][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.221724][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.237536][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.252685][ T6496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.255725][ T6496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.259119][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.263455][ T6496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.265923][ T6496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.268400][ T6496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.270829][ T6496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.278512][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.278582][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.280525][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.280548][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.281809][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.323125][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.326193][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.328953][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.331815][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.335789][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.370854][ T6490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.370936][ T6490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.370968][ T6490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.370997][ T6490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.447364][ T6489] veth0_vlan: entered promiscuous mode
[   41.451149][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.451246][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.452701][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.452732][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.475506][ T6500] veth0_vlan: entered promiscuous mode
[   41.492776][  T244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.492834][  T244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.498681][ T6489] veth1_vlan: entered promiscuous mode
[   41.515463][ T6500] veth1_vlan: entered promiscuous mode
[   41.523555][ T6489] veth0_macvtap: entered promiscuous mode
[   41.538249][ T6489] veth1_macvtap: entered promiscuous mode
[   41.542852][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.542909][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.560900][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.560964][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.580170][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.582304][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.582332][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.582362][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.582388][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.582408][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.583129][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.611753][ T6500] veth0_macvtap: entered promiscuous mode
[   41.621360][  T244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.621425][  T244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.626679][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.626743][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.627051][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.627073][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.627096][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.627126][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.627811][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.646781][ T6500] veth1_macvtap: entered promiscuous mode
[   41.657265][ T6489] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.657356][ T6489] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.657712][ T6489] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.657744][ T6489] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.671777][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.676056][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.678973][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.682256][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.685091][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.688234][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.691006][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.694087][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.698089][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.698402][ T6496] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   41.723588][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.729390][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.733160][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.736297][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.739285][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.742553][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.742585][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.742606][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.743423][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.767346][ T6500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.770503][ T6500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.773413][ T6500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.785206][ T6500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.918086][  T244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.920591][  T244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.990949][ T6573] loop0: detected capacity change from 0 to 8192
[   42.015372][ T6576] loop2: detected capacity change from 0 to 64
[   42.021709][ T6501]  loop0: p1[EZD] p2 p4
[   42.033439][ T6501] loop0: p1 size 1465778176 extends beyond EOD, truncated
[   42.046447][ T6501] loop0: p2 start 65535 is beyond EOD, truncated
[   42.048314][ T6501] loop0: p4 size 65536 extends beyond EOD, truncated
[   42.187501][ T6578] loop1: detected capacity change from 0 to 8
[   42.757808][ T6491] Bluetooth: hci1: command tx timeout
[   42.763625][ T6573]  loop0: p1[EZD] p2 p4
[   42.765151][ T6573] loop0: p1 size 1465778176 extends beyond EOD, truncated
[   42.766785][ T6578] SQUASHFS error: xz decompression failed, data probably corrupt
[   42.766863][ T6578] SQUASHFS error: Failed to read block 0x108: -5
[   42.766884][ T6578] SQUASHFS error: Unable to read metadata cache entry [106]
[   42.766905][ T6578] SQUASHFS error: Unable to read inode 0x11f
[   42.866288][ T6491] Bluetooth: hci2: command tx timeout
[   42.866492][ T6491] Bluetooth: hci0: command tx timeout
[   42.928231][ T6582] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   43.022414][ T6491] Bluetooth: hci3: command tx timeout
[   43.407337][ T6573] loop0: p2 start 65535 is beyond EOD, truncated
[   43.407439][ T6573] loop0: p4 size 65536 extends beyond EOD, truncated
[   43.471992][   T55] Bluetooth: hci4: command tx timeout
[   43.487932][  T267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.487991][  T267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.557841][  T244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.557900][  T244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.747810][  T244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.747876][  T244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.934640][ T6590] netlink: 'syz.2.8': attribute type 33 has an invalid length.
[   44.109191][ T6590] netlink: 'syz.2.8': attribute type 10 has an invalid length.
[   44.109478][ T6590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8'.
[   44.483057][ T6584] loop1: detected capacity change from 0 to 32768
[   44.483671][ T6584] =======================================================
[   44.483671][ T6584] WARNING: The mand mount option has been deprecated and
[   44.483671][ T6584]          and is ignored by this kernel. Remove the mand
[   44.483671][ T6584]          option from the mount to silence this warning.
[   44.483671][ T6584] =======================================================
[   44.497724][ T6590] team0: Port device geneve0 added
[   44.546839][ T6584] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7 (6584)
[   44.641739][ T6584] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   44.642011][ T6584] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   44.822037][   T55] Bluetooth: hci1: command tx timeout
[   44.902614][ T6491] Bluetooth: hci2: command tx timeout
[   44.905785][   T55] Bluetooth: hci0: command tx timeout
[   45.075736][   T55] Bluetooth: hci3: command tx timeout
[   45.552514][ T6491] Bluetooth: hci4: command tx timeout
[   45.581507][ T6501] udevd[6501]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   45.634238][ T6483] udevd[6483]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   45.647487][ T6501] udevd[6501]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   45.664964][ T6584] BTRFS info (device loop1): rebuilding free space tree
[   45.673756][ T6483] udevd[6483]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   45.704550][ T6597] loop3: detected capacity change from 0 to 32768
[   45.735844][ T6584] BTRFS info (device loop1): disabling free space tree
[   45.735976][ T6584] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   45.738499][ T6584] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   45.810649][ T6597] ea_get: invalid extended attribute
[   45.810781][ T6597] 0000000028d95d60: 04 00 00 00                                      ....
[   45.875054][ T6606] loop4: detected capacity change from 0 to 32768
[   45.887381][ T6606] BTRFS: device /dev/loop4 (7:4) using temp-fsid 934587f5-9e92-4345-a152-245baf4b6c41
[   45.890544][ T6606] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5 (6606)
[   45.909865][ T6597] veth1_macvtap: left promiscuous mode
[   45.921553][ T6606] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   45.921714][ T6606] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   46.107507][ T6606] BTRFS info (device loop4): rebuilding free space tree
[   46.130907][ T6606] BTRFS info (device loop4): disabling free space tree
[   46.254310][ T6606] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   46.254421][ T6606] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   46.902685][   T55] Bluetooth: hci1: command tx timeout
[   46.932823][ T6490] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   46.968278][ T6594] loop0: detected capacity change from 0 to 40427
[   46.982186][   T55] Bluetooth: hci2: command tx timeout
[   46.994540][ T6594] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff
[   46.997515][ T6594] F2FS-fs (loop0): Image doesn't support compression
[   46.999819][ T6594] F2FS-fs (loop0): heap/no_heap options were deprecated
[   47.002337][ T6594] F2FS-fs (loop0): Image doesn't support compression
[   47.052690][ T6594] F2FS-fs (loop0): invalid crc value
[   47.072389][   T55] Bluetooth: hci0: command tx timeout
[   47.155650][   T55] Bluetooth: hci3: command tx timeout
[   47.712321][   T55] Bluetooth: hci4: command tx timeout
[   47.962713][ T6500] BTRFS info (device loop4): last unmount of filesystem 934587f5-9e92-4345-a152-245baf4b6c41
[   47.983524][ T6640] loop2: detected capacity change from 0 to 32768
[   48.000490][ T6640] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12 (6640)
[   48.666954][ T6640] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   48.667057][ T6640] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   48.824855][ T6640] BTRFS info (device loop2): rebuilding free space tree
[   49.002717][ T6640] BTRFS info (device loop2): disabling free space tree
[   49.003112][ T6640] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   49.003163][ T6640] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   49.490832][ T6680] loop3: detected capacity change from 0 to 32768
[   49.496737][ T6681] netlink: 'syz.0.17': attribute type 33 has an invalid length.
[   49.505336][ T6681] netlink: 'syz.0.17': attribute type 10 has an invalid length.
[   49.505385][ T6681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'.
[   50.063027][ T6681] team0: Port device geneve0 added
[   50.304277][ T6680] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   50.612808][ T6696] loop1: detected capacity change from 0 to 32768
[   50.691695][ T6696] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.19 (6696)
[   50.835109][ T6696] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   50.836512][ T6696] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   50.838457][ T6696] BTRFS info (device loop1): using free-space-tree
[   51.078738][ T6491] Bluetooth: hci0: command 0x0406 tx timeout
[   51.215135][ T6497] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   51.280052][ T6680] XFS (loop3): Ending clean mount
[   51.291672][ T6680] XFS (loop3): Quotacheck needed: Please wait.
[   51.343119][ T6674] loop4: detected capacity change from 0 to 32768
[   51.352689][ T6680] XFS (loop3): Quotacheck: Done.
[   51.378426][ T6674] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.14 (6674)
[   51.386728][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'.
[   51.477513][ T6674] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   51.477626][ T6674] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   51.652197][ T6489] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   52.650494][ T6490] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   52.659981][ T6674] BTRFS info (device loop4): rebuilding free space tree
[   52.907857][ T6741] loop2: detected capacity change from 0 to 8
[   53.064926][ T6741] SQUASHFS error: xz decompression failed, data probably corrupt
[   53.065133][ T6741] SQUASHFS error: Failed to read block 0x108: -5
[   53.065221][ T6741] SQUASHFS error: Unable to read metadata cache entry [106]
[   53.065307][ T6741] SQUASHFS error: Unable to read inode 0x11f
[   53.350965][ T6674] BTRFS info (device loop4): disabling free space tree
[   53.351122][ T6674] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   53.351197][ T6674] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   53.488662][ T6500] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   54.716651][ T6743] loop0: detected capacity change from 0 to 32768
[   54.725323][ T6743] btrfs: Deprecated parameter 'usebackuproot'
[   54.729260][ T6743] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   55.533040][ T6743] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.24 (6743)
[   55.681814][ T6743] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   55.681986][ T6743] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm
[   55.682022][ T6743] BTRFS info (device loop0): using free-space-tree
[   55.939904][ T4421] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   55.940197][ T6743] BTRFS error (device loop0): failed to load root extent
[   55.940282][ T6743] BTRFS warning (device loop0): try to load backup roots slot 1
[   55.940523][ T4421] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   55.940627][ T6743] BTRFS warning (device loop0): couldn't read tree root
[   55.940662][ T6743] BTRFS warning (device loop0): try to load backup roots slot 2
[   55.940838][ T4421] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   55.961037][ T6743] BTRFS warning (device loop0): couldn't read tree root
[   55.963366][ T6743] BTRFS warning (device loop0): try to load backup roots slot 3
[   56.222424][ T6743] BTRFS info (device loop0): rebuilding free space tree
[   56.241113][ T6743] BTRFS info (device loop0): checking UUID tree
[   56.461894][ T6782] capability: warning: `syz.2.28' uses deprecated v2 capabilities in a way that may be insecure
[   56.937647][ T6784] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.216477][ T6776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25'.
[   57.216593][ T6776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25'.
[   57.409253][ T6785] loop3: detected capacity change from 0 to 2048
[   57.969991][ T6785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.996777][ T6496] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   58.004755][ T6783] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   58.005410][ T6783] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28
[   58.005497][ T6783] EXT4-fs (loop3): This should not happen!! Data will be lost
[   58.005497][ T6783] 
[   58.005530][ T6783] EXT4-fs (loop3): Total free blocks count 0
[   58.005560][ T6783] EXT4-fs (loop3): Free/Dirty block details
[   58.005594][ T6783] EXT4-fs (loop3): free_blocks=2415919104
[   58.005629][ T6783] EXT4-fs (loop3): dirty_blocks=32
[   58.005658][ T6783] EXT4-fs (loop3): Block reservation details
[   58.005686][ T6783] EXT4-fs (loop3): i_reserved_data_blocks=2
[   58.178737][ T6795] FAULT_INJECTION: forcing a failure.
[   58.178737][ T6795] name failslab, interval 1, probability 0, space 0, times 1
[   58.178878][ T6795] CPU: 0 UID: 0 PID: 6795 Comm: syz.2.31 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[   58.178894][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   58.178902][ T6795] Call trace:
[   58.178906][ T6795]  show_stack+0x2c/0x3c (C)
[   58.178923][ T6795]  __dump_stack+0x30/0x40
[   58.178935][ T6795]  dump_stack_lvl+0xd8/0x12c
[   58.178945][ T6795]  dump_stack+0x1c/0x28
[   58.178955][ T6795]  should_fail_ex+0x41c/0x594
[   58.178968][ T6795]  should_failslab+0xc0/0x128
[   58.178982][ T6795]  kmem_cache_alloc_noprof+0x80/0x3e8
[   58.178996][ T6795]  skb_clone+0x1b4/0x328
[   58.179011][ T6795]  __netlink_deliver_tap+0x36c/0x708
[   58.179024][ T6795]  netlink_deliver_tap+0x1ac/0x1b0
[   58.179035][ T6795]  netlink_unicast+0x5f0/0x824
[   58.179046][ T6795]  netlink_sendmsg+0x648/0x930
[   58.179057][ T6795]  sock_write_iter+0x25c/0x378
[   58.179071][ T6795]  vfs_write+0x62c/0x97c
[   58.179081][ T6795]  ksys_write+0x120/0x210
[   58.179092][ T6795]  __arm64_sys_write+0x7c/0x90
[   58.179111][ T6795]  invoke_syscall+0x98/0x2b8
[   58.179122][ T6795]  el0_svc_common+0x130/0x23c
[   58.179133][ T6795]  do_el0_svc+0x48/0x58
[   58.179143][ T6795]  el0_svc+0x58/0x17c
[   58.179158][ T6795]  el0t_64_sync_handler+0x78/0x108
[   58.179171][ T6795]  el0t_64_sync+0x198/0x19c
[   58.179358][ T6795] netlink: 176 bytes leftover after parsing attributes in process `syz.2.31'.
[   58.285009][ T1635] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   58.345682][ T6798] loop4: detected capacity change from 0 to 2048
[   58.907901][ T6804] netlink: 'syz.0.30': attribute type 33 has an invalid length.
[   59.477797][ T6798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.484555][ T6802] loop2: detected capacity change from 0 to 32768
[   59.743012][ T6802] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   59.853100][ T6825] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   60.046350][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.050418][ T6817] bond0: (slave rose0): Enslaving as an active interface with an up link
[   60.121360][ T6814] loop3: detected capacity change from 0 to 1024
[   60.163284][ T6802] XFS (loop2): Ending clean mount
[   60.166766][ T6802] XFS (loop2): Quotacheck needed: Please wait.
[   60.204513][ T6802] XFS (loop2): Quotacheck: Done.
[   60.213763][ T6802] netlink: 'syz.2.33': attribute type 72 has an invalid length.
[   60.213821][ T6802] netlink: 'syz.2.33': attribute type 8 has an invalid length.
[   60.277131][ T6814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.358545][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.366075][ T6497] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   60.466516][ T6489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.651949][   T55] Bluetooth: hci3: command tx timeout
[   60.985118][ T6851] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   60.985546][ T6851] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   60.986596][ T6851] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   60.986662][ T6851] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   60.986920][ T6851] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   60.986963][ T6851] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   60.987229][ T6851] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   60.987276][ T6851] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   60.987799][ T6851] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   60.987854][ T6851] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   61.508291][ T6847] loop1: detected capacity change from 0 to 32768
[   61.573813][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.574231][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.330949][ T6847] (syz.1.41,6847,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[   62.331438][ T6847] (syz.1.41,6847,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 71
[   62.335271][ T6847] (syz.1.41,6847,0):ocfs2_fill_super:1177 ERROR: status = -22
[   62.588095][ T6866] loop4: detected capacity change from 0 to 1024
[   62.608770][ T6866] EXT4-fs: Ignoring removed orlov option
[   62.665038][ T6866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.879501][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[   63.783329][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.233120][ T6889] loop1: detected capacity change from 0 to 32768
[   64.236778][ T6892] netlink: 'syz.0.45': attribute type 33 has an invalid length.
[   64.237633][ T6892] netlink: 'syz.0.45': attribute type 10 has an invalid length.
[   64.237671][ T6892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'.
[   64.793718][ T2392] ieee802154 phy0 wpan0: encryption failed: -22
[   64.793875][ T2392] ieee802154 phy1 wpan1: encryption failed: -22
[   64.906696][ T6889] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.051519][ T6889] XFS (loop1): Ending clean mount
[   65.053192][ T6889] XFS (loop1): Quotacheck needed: Please wait.
[   65.071803][ T6913] loop0: detected capacity change from 0 to 2048
[   65.364779][ T6918] netlink: 'syz.4.49': attribute type 33 has an invalid length.
[   65.537767][ T6918] netlink: 'syz.4.49': attribute type 10 has an invalid length.
[   65.537913][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.49'.
[   65.918208][ T6889] XFS (loop1): Quotacheck: Done.
[   65.925156][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[   65.928151][ T6889] netlink: 'syz.1.48': attribute type 72 has an invalid length.
[   65.928212][ T6889] netlink: 'syz.1.48': attribute type 8 has an invalid length.
[   65.990758][ T6490] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.994835][ T6913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.150894][ T6918] team0: Port device geneve0 added
[   66.253677][ T6929] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   66.883950][ T6944] loop3: detected capacity change from 0 to 8
[   67.221433][ T6944] SQUASHFS error: xz decompression failed, data probably corrupt
[   67.221614][ T6944] SQUASHFS error: Failed to read block 0x108: -5
[   67.221715][ T6944] SQUASHFS error: Unable to read metadata cache entry [106]
[   67.221808][ T6944] SQUASHFS error: Unable to read inode 0x11f
[   67.482738][ T6496] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.508977][ T6945] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   67.728439][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'.
[   67.737199][ T6955] loop3: detected capacity change from 0 to 512
[   67.738301][ T6955] EXT4-fs: Ignoring removed mblk_io_submit option
[   67.738404][ T6955] EXT4-fs: inline encryption not supported
[   67.738451][ T6955] EXT4-fs: Ignoring removed mblk_io_submit option
[   67.740309][ T6955] EXT4-fs (loop3): Test dummy encryption mode enabled
[   67.740356][ T6955] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   67.740395][ T6955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   67.796979][ T6955] EXT4-fs (loop3): 1 truncate cleaned up
[   67.797905][ T6955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.222688][ T6968] loop1: detected capacity change from 0 to 32768
[   68.239945][ T6968] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   68.264281][ T6489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.340824][ T6932] loop4: detected capacity change from 0 to 40427
[   68.381220][ T6932] F2FS-fs (loop4): invalid crc value
[   68.398276][ T6968] XFS (loop1): Ending clean mount
[   68.401517][ T6968] XFS (loop1): Quotacheck needed: Please wait.
[   68.447321][ T6968] XFS (loop1): Quotacheck: Done.
[   68.456782][ T6968] netlink: 'syz.1.63': attribute type 72 has an invalid length.
[   68.456840][ T6968] netlink: 'syz.1.63': attribute type 8 has an invalid length.
[   68.519240][ T6490] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   68.564638][ T6932] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   68.570861][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'.
[   69.162389][ T7003] netlink: 'syz.1.66': attribute type 33 has an invalid length.
[   69.261766][ T7004] netlink: 'syz.1.66': attribute type 10 has an invalid length.
[   69.262015][ T7004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.66'.
[   69.503139][ T6986] loop0: detected capacity change from 0 to 32768
[   69.503773][ T6986] btrfs: Deprecated parameter 'usebackuproot'
[   69.503821][ T6986] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   69.506914][ T6986] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.65 (6986)
[   69.537562][ T7008] loop3: detected capacity change from 0 to 8
[   69.692296][ T6986] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.692403][ T6986] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm
[   69.692440][ T6986] BTRFS info (device loop0): using free-space-tree
[   69.714838][ T7008] SQUASHFS error: xz decompression failed, data probably corrupt
[   69.714926][ T7008] SQUASHFS error: Failed to read block 0x108: -5
[   69.714968][ T7008] SQUASHFS error: Unable to read metadata cache entry [106]
[   69.714996][ T7008] SQUASHFS error: Unable to read inode 0x11f
[   70.001589][ T7004] team0: Port device geneve0 added
[   70.351993][ T7010] netlink: 'syz.2.68': attribute type 33 has an invalid length.
[   70.352612][ T7010] netlink: 'syz.2.68': attribute type 10 has an invalid length.
[   70.352655][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.68'.
[   70.362753][ T1803] cfg80211: failed to load regulatory.db
[   70.436522][ T6500] syz-executor: attempt to access beyond end of device
[   70.436522][ T6500] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   70.446174][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[   70.446205][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   70.446213][ T6500] Call trace:
[   70.446217][ T6500]  show_stack+0x2c/0x3c (C)
[   70.446234][ T6500]  __dump_stack+0x30/0x40
[   70.446246][ T6500]  dump_stack_lvl+0xd8/0x12c
[   70.446257][ T6500]  dump_stack+0x1c/0x28
[   70.446267][ T6500]  f2fs_handle_critical_error+0x34c/0x4b8
[   70.446295][ T6500]  f2fs_stop_checkpoint+0x58/0x6c
[   70.446307][ T6500]  f2fs_write_end_io+0x794/0xadc
[   70.446321][ T6500]  bio_endio+0x81c/0x858
[   70.446334][ T6500]  submit_bio_noacct+0x158/0x176c
[   70.446345][ T6500]  submit_bio+0x354/0x4d4
[   70.446356][ T6500]  f2fs_submit_write_bio+0x13c/0x324
[   70.446369][ T6500]  __submit_merged_bio+0x254/0x704
[   70.446382][ T6500]  __submit_merged_write_cond+0x23c/0x4ac
[   70.446395][ T6500]  f2fs_write_data_pages+0x1e9c/0x27ac
[   70.446409][ T6500]  do_writepages+0x2c0/0x6a8
[   70.446424][ T6500]  filemap_fdatawrite+0x144/0x1e8
[   70.446435][ T6500]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   70.446447][ T6500]  f2fs_write_checkpoint+0x684/0x1694
[   70.446459][ T6500]  kill_f2fs_super+0x21c/0x584
[   70.446473][ T6500]  deactivate_locked_super+0xc4/0x12c
[   70.446486][ T6500]  deactivate_super+0xe0/0x100
[   70.446497][ T6500]  cleanup_mnt+0x31c/0x3ac
[   70.446510][ T6500]  __cleanup_mnt+0x20/0x30
[   70.446521][ T6500]  task_work_run+0x1dc/0x260
[   70.446534][ T6500]  do_notify_resume+0x16c/0x1ec
[   70.446546][ T6500]  el0_svc+0xb4/0x17c
[   70.446560][ T6500]  el0t_64_sync_handler+0x78/0x108
[   70.446574][ T6500]  el0t_64_sync+0x198/0x19c
[   70.485360][ T6500] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   70.500489][ T6609] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[   70.500825][ T6986] BTRFS warning (device loop0): couldn't read tree root
[   70.500856][ T6986] BTRFS warning (device loop0): try to load backup roots slot 1
[   70.501124][ T6609] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[   70.501180][ T6986] BTRFS warning (device loop0): couldn't read tree root
[   70.501205][ T6986] BTRFS warning (device loop0): try to load backup roots slot 2
[   70.503800][  T267] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   70.503916][ T6986] BTRFS warning (device loop0): couldn't read tree root
[   70.503944][ T6986] BTRFS warning (device loop0): try to load backup roots slot 3
[   70.629519][ T6986] BTRFS info (device loop0): rebuilding free space tree
[   70.652685][ T6986] BTRFS info (device loop0): checking UUID tree
[   70.715351][ T7033] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   70.725514][ T7033] loop2: detected capacity change from 0 to 1024
[   70.770230][ T7028] loop1: detected capacity change from 0 to 32768
[   70.774916][ T7028] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.70 (7028)
[   70.780791][ T7033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.788661][ T7028] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   70.788758][ T7028] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   70.911273][ T7028] BTRFS info (device loop1): rebuilding free space tree
[   70.926577][ T7028] BTRFS info (device loop1): disabling free space tree
[   70.926949][ T7028] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   70.926984][ T7028] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   71.015319][ T6497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.715889][ T7063] loop2: detected capacity change from 0 to 256
[   71.718180][ T7063] exfat: Deprecated parameter 'namecase'
[   71.746746][ T7062] loop4: detected capacity change from 0 to 2048
[   71.805283][ T6490] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   71.842415][ T7062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.850702][ T7063] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[   71.857192][ T6496] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.047320][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[   72.126500][ T7071] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   72.767739][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.864847][ T7070] loop2: detected capacity change from 0 to 32768
[   72.935714][ T7070] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   73.148277][ T7070] XFS (loop2): Ending clean mount
[   73.150838][ T7070] XFS (loop2): Quotacheck needed: Please wait.
[   73.808005][ T7070] XFS (loop2): Quotacheck: Done.
[   73.815197][ T7070] netlink: 892 bytes leftover after parsing attributes in process `syz.2.77'.
[   73.936830][ T7095] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   73.946249][ T6497] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.202287][ T7101] netlink: 'syz.4.81': attribute type 33 has an invalid length.
[   74.202903][ T7101] netlink: 'syz.4.81': attribute type 10 has an invalid length.
[   74.202970][ T7101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.81'.
[   76.296182][ T2254] libceph: connect (1)[c::]:6789 error -101
[   76.301796][ T2254] libceph: mon0 (1)[c::]:6789 connect error
[   76.315467][ T7127] exFAT-fs (loop0): invalid boot record signature
[   76.315602][ T7127] exFAT-fs (loop0): failed to read boot sector
[   76.315706][ T7127] exFAT-fs (loop0): failed to recognize exfat type
[   76.845118][ T2254] libceph: connect (1)[c::]:6789 error -101
[   76.847119][ T2254] libceph: mon0 (1)[c::]:6789 connect error
[   77.062552][ T7132] loop1: detected capacity change from 0 to 256
[   78.025143][ T7133] netlink: 'syz.2.91': attribute type 9 has an invalid length.
[   78.025190][ T6537] libceph: connect (1)[c::]:6789 error -101
[   78.029557][ T6537] libceph: mon0 (1)[c::]:6789 connect error
[   78.284761][ T7124] ceph: No mds server is up or the cluster is laggy
[   78.299932][ T7131] process 'syz.2.91' launched '/dev/fd/5' with NULL argv: empty string added
[   78.760214][ T7141] netlink: 'syz.4.92': attribute type 33 has an invalid length.
[   78.782986][ T7141] netlink: 'syz.4.92': attribute type 10 has an invalid length.
[   78.783156][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.92'.
[   79.927388][ T6537] libceph: connect (1)[c::]:6789 error -101
[   79.959525][ T6537] libceph: mon0 (1)[c::]:6789 connect error
[   80.113252][ T7142] ceph: No mds server is up or the cluster is laggy
[   80.163403][ T7147] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   80.206091][ T7147] loop0: detected capacity change from 0 to 1024
[   80.234538][ T7154] loop2: detected capacity change from 0 to 2048
[   80.386743][ T7154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.405229][ T7147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.423649][ T7161] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   80.676189][ T7167] netlink: 'syz.3.97': attribute type 33 has an invalid length.
[   80.681228][ T7167] netlink: 'syz.3.97': attribute type 10 has an invalid length.
[   80.681278][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.97'.
[   80.795521][ T7167] team0: Port device geneve0 added
[   81.378930][ T7166] Zero length message leads to an empty skb
[   81.545348][ T7172] loop1: detected capacity change from 0 to 8
[   81.601785][ T6497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.662435][ T6496] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.703765][ T7172] SQUASHFS error: xz decompression failed, data probably corrupt
[   81.703834][ T7172] SQUASHFS error: Failed to read block 0x108: -5
[   81.703874][ T7172] SQUASHFS error: Unable to read metadata cache entry [106]
[   81.703901][ T7172] SQUASHFS error: Unable to read inode 0x11f
[   81.737377][ T7152] loop4: detected capacity change from 0 to 32768
[   81.744537][ T7152] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.94 (7152)
[   81.885229][ T7152] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   81.885331][ T7152] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   82.012268][ T7190] loop2: detected capacity change from 0 to 8
[   82.104084][ T7190] SQUASHFS error: xz decompression failed, data probably corrupt
[   82.104271][ T7190] SQUASHFS error: Failed to read block 0x108: -5
[   82.104364][ T7190] SQUASHFS error: Unable to read metadata cache entry [106]
[   82.104457][ T7190] SQUASHFS error: Unable to read inode 0x11f
[   82.755738][ T7152] BTRFS info (device loop4): rebuilding free space tree
[   82.823997][ T7152] BTRFS info (device loop4): disabling free space tree
[   82.824087][ T7152] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   82.824125][ T7152] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   83.224028][ T6500] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   84.450920][ T7203] loop2: detected capacity change from 0 to 32768
[   84.454564][ T7203] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.102 (7203)
[   84.474424][ T7203] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   84.477334][ T7203] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   84.489145][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'.
[   84.620416][ T7203] BTRFS info (device loop2): rebuilding free space tree
[   84.661740][ T7203] BTRFS info (device loop2): disabling free space tree
[   84.661830][ T7203] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.661999][ T7203] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   85.172280][ T7251] FAULT_INJECTION: forcing a failure.
[   85.172280][ T7251] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   85.172357][ T7251] CPU: 1 UID: 0 PID: 7251 Comm: syz.3.109 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[   85.172374][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   85.172381][ T7251] Call trace:
[   85.172385][ T7251]  show_stack+0x2c/0x3c (C)
[   85.172402][ T7251]  __dump_stack+0x30/0x40
[   85.172414][ T7251]  dump_stack_lvl+0xd8/0x12c
[   85.172425][ T7251]  dump_stack+0x1c/0x28
[   85.172435][ T7251]  should_fail_ex+0x41c/0x594
[   85.172447][ T7251]  should_fail+0x14/0x24
[   85.172458][ T7251]  should_fail_usercopy+0x20/0x30
[   85.172470][ T7251]  _inline_copy_from_user+0x40/0x180
[   85.172485][ T7251]  ___sys_recvmsg+0x11c/0x45c
[   85.172499][ T7251]  do_recvmmsg+0x294/0x7cc
[   85.172514][ T7251]  __arm64_sys_recvmmsg+0x17c/0x238
[   85.172528][ T7251]  invoke_syscall+0x98/0x2b8
[   85.172539][ T7251]  el0_svc_common+0x130/0x23c
[   85.172550][ T7251]  do_el0_svc+0x48/0x58
[   85.172560][ T7251]  el0_svc+0x58/0x17c
[   85.172574][ T7251]  el0t_64_sync_handler+0x78/0x108
[   85.172588][ T7251]  el0t_64_sync+0x198/0x19c
[   85.424209][ T6497] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   85.680596][ T7265] FAULT_INJECTION: forcing a failure.
[   85.680596][ T7265] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.703272][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.3.113 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[   85.703297][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   85.703304][ T7265] Call trace:
[   85.703308][ T7265]  show_stack+0x2c/0x3c (C)
[   85.703325][ T7265]  __dump_stack+0x30/0x40
[   85.703337][ T7265]  dump_stack_lvl+0xd8/0x12c
[   85.703347][ T7265]  dump_stack+0x1c/0x28
[   85.703357][ T7265]  should_fail_ex+0x41c/0x594
[   85.703370][ T7265]  should_fail+0x14/0x24
[   85.703380][ T7265]  should_fail_usercopy+0x20/0x30
[   85.703392][ T7265]  bpf_test_finish+0x6a8/0xaa0
[   85.703413][ T7265]  bpf_prog_test_run_flow_dissector+0x418/0x544
[   85.703427][ T7265]  bpf_prog_test_run+0x294/0x33c
[   85.703440][ T7265]  __sys_bpf+0x4b0/0x614
[   85.703450][ T7265]  __arm64_sys_bpf+0x80/0x98
[   85.703464][ T7265]  invoke_syscall+0x98/0x2b8
[   85.703476][ T7265]  el0_svc_common+0x130/0x23c
[   85.703486][ T7265]  do_el0_svc+0x48/0x58
[   85.703496][ T7265]  el0_svc+0x58/0x17c
[   85.703510][ T7265]  el0t_64_sync_handler+0x78/0x108
[   85.703525][ T7265]  el0t_64_sync+0x198/0x19c
[   86.909335][ T7270] netlink: 'syz.2.111': attribute type 33 has an invalid length.
[   87.028943][ T7269] loop1: detected capacity change from 0 to 8
[   87.047473][ T7268] netlink: 'syz.2.111': attribute type 10 has an invalid length.
[   87.047693][ T7268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.111'.
[   87.359429][ T7269] SQUASHFS error: xz decompression failed, data probably corrupt
[   87.359501][ T7269] SQUASHFS error: Failed to read block 0x108: -5
[   87.359521][ T7269] SQUASHFS error: Unable to read metadata cache entry [106]
[   87.359539][ T7269] SQUASHFS error: Unable to read inode 0x11f
[   87.585226][ T7277] syz.4.108: attempt to access beyond end of device
[   87.585226][ T7277] loop4: rw=0, sector=0, nr_sectors = 1 limit=0
[   87.585378][ T7277] exFAT-fs (loop4): unable to read boot sector
[   87.585420][ T7277] exFAT-fs (loop4): failed to read boot sector
[   87.585445][ T7277] exFAT-fs (loop4): failed to recognize exfat type
[   87.780975][ T7280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'.
[   87.853432][ T7282] SET target dimension over the limit!
[   87.969805][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'.
[   88.539280][ T7302] loop0: detected capacity change from 0 to 8
[   88.614711][ T7302] SQUASHFS error: xz decompression failed, data probably corrupt
[   88.624020][ T7302] SQUASHFS error: Failed to read block 0x108: -5
[   88.626772][ T7302] SQUASHFS error: Unable to read metadata cache entry [106]
[   88.629914][ T7302] SQUASHFS error: Unable to read inode 0x11f
[   88.819014][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.822714][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.652900][ T7310] netlink: 'syz.4.125': attribute type 33 has an invalid length.
[   90.653462][ T7310] netlink: 'syz.4.125': attribute type 10 has an invalid length.
[   90.653527][ T7310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.125'.
[   90.743902][ T7295] loop3: detected capacity change from 0 to 32768
[   90.751367][ T7295] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.122 (7295)
[   90.807807][ T7295] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   90.807911][ T7295] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[   90.818631][ T7315] loop1: detected capacity change from 0 to 8
[   90.825969][ T7315] SQUASHFS error: xz decompression failed, data probably corrupt
[   90.826037][ T7315] SQUASHFS error: Failed to read block 0x108: -5
[   90.826065][ T7315] SQUASHFS error: Unable to read metadata cache entry [106]
[   90.826091][ T7315] SQUASHFS error: Unable to read inode 0x11f
[   90.950000][ T7295] BTRFS info (device loop3): rebuilding free space tree
[   90.969872][ T7295] BTRFS info (device loop3): disabling free space tree
[   90.970141][ T7295] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   90.970171][ T7295] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   91.734448][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[   91.782033][ T6489] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   92.080089][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'.
[   92.080887][ T7353] netlink: 176 bytes leftover after parsing attributes in process `syz.3.131'.
[   92.614284][ T7366] syz.3.135: attempt to access beyond end of device
[   92.614284][ T7366] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[   92.614695][ T7366] exFAT-fs (loop3): unable to read boot sector
[   92.614805][ T7366] exFAT-fs (loop3): failed to read boot sector
[   92.614895][ T7366] exFAT-fs (loop3): failed to recognize exfat type
[   93.352364][ T7365] netlink: 'syz.1.137': attribute type 33 has an invalid length.
[   93.352878][ T7365] netlink: 'syz.1.137': attribute type 10 has an invalid length.
[   93.352930][ T7365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.137'.
[   93.366679][ T7354] loop2: detected capacity change from 0 to 32768
[   93.431553][ T7354] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   93.431553][ T7354] clean (size 2912):
[   93.431553][ T7354] flags:          0
[   93.431553][ T7354] journal_seq:    10
[   93.431553][ T7354] usage: type=inodes v=8
[   93.431553][ T7354] usage: type=key_version v=0
[   93.431553][ T7354] usage: type=reserved v=0
[   93.431553][ T7354] usage: type=reserved v=0
[   93.431553][ T7354] usage: type=reserved v=0
[   93.431553][ T7354] usage: type=reserved v=0
[   93.431553][ T7354] data_usage: btree: 1/1 [0]=2816
[   93.431553][ T7354] data_usage: need_discard: 1/0 []=0
[   93.431553][ T7354] data_usage: user: 1/1 [0]=16
[   93.431553][ T7354] dev_usage: dev=0  
[   93.431553][ T7354]   free: buckets=83 sectors=0 fragmented=0
[   93.431553][ T7354]   sb: buckets=25 sectors=6152 fragmented=248
[   93.431553][ T7354]   journal: buckets=8 sectors=2048 fragmented=0
[   93.431553][ T7354]   btree: buckets=11 sectors=2816 fragmented=0
[   93.431553][ T7354]   user: buckets=1 sectors=16 fragmented=240
[   93.431553][ T7354]   cached: buckets=0 sectors=0 fragmented=0
[   93.431553][ T7354]   parity: buckets=0 sectors=0 fragmented=0
[   93.431553][ T7354]   stripe: buckets=0 sectors=0 fragmented=0
[   93.431553][ T7354]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   93.431553][ T7354]   need_discard: buckets=0 sectors=0 fragmented=0
[   93.431553][ T7354] clock: read=0
[   93.431553][ T7354] clock: write=1280
[   93.431553][ T7354] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: se
[   93.431751][ T7354] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   93.781832][ T7378] loop3: detected capacity change from 0 to 8
[   93.786314][ T7378] SQUASHFS error: xz decompression failed, data probably corrupt
[   93.786383][ T7378] SQUASHFS error: Failed to read block 0x108: -5
[   93.786417][ T7378] SQUASHFS error: Unable to read metadata cache entry [106]
[   93.786444][ T7378] SQUASHFS error: Unable to read inode 0x11f
[   94.316427][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.318911][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.952373][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'.
[   94.996180][ T7369] loop0: detected capacity change from 0 to 32768
[   95.070149][ T7398] FAULT_INJECTION: forcing a failure.
[   95.070149][ T7398] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   95.074403][ T7376] loop1: detected capacity change from 0 to 32768
[   95.077145][ T7398] CPU: 1 UID: 0 PID: 7398 Comm: syz.2.146 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[   95.077171][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   95.077179][ T7398] Call trace:
[   95.077183][ T7398]  show_stack+0x2c/0x3c (C)
[   95.077201][ T7398]  __dump_stack+0x30/0x40
[   95.077213][ T7398]  dump_stack_lvl+0xd8/0x12c
[   95.077234][ T7398]  dump_stack+0x1c/0x28
[   95.077245][ T7398]  should_fail_ex+0x41c/0x594
[   95.077258][ T7398]  should_fail+0x14/0x24
[   95.077269][ T7398]  should_fail_usercopy+0x20/0x30
[   95.077282][ T7398]  _copy_from_iter+0x194/0x1284
[   95.077296][ T7398]  hci_sock_sendmsg+0x334/0xbb0
[   95.077312][ T7398]  sock_write_iter+0x25c/0x378
[   95.077328][ T7398]  vfs_write+0x62c/0x97c
[   95.077340][ T7398]  ksys_write+0x120/0x210
[   95.077351][ T7398]  __arm64_sys_write+0x7c/0x90
[   95.077362][ T7398]  invoke_syscall+0x98/0x2b8
[   95.077373][ T7398]  el0_svc_common+0x130/0x23c
[   95.077384][ T7398]  do_el0_svc+0x48/0x58
[   95.077395][ T7398]  el0_svc+0x58/0x17c
[   95.077410][ T7398]  el0t_64_sync_handler+0x78/0x108
[   95.077424][ T7398]  el0t_64_sync+0x198/0x19c
[   95.081519][ T7376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.141 (7376)
[   95.098699][ T7376] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   95.098777][ T7376] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   95.122651][ T7402] syz.3.145 uses old SIOCAX25GETINFO
[   95.160843][ T7369] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[   95.229100][ T7369] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,compression=lz4,wide_macs,norecovery,nojournal_transaction_names,noexcl,reconstruct_alloc
[   95.229100][ T7369]   allowing incompatible features above 0.0: (unknown version)
[   95.229733][ T7369] bcachefs (loop0): invalid bkey in superblock btree=lru level=1: u64s 11 type inode SPOS_MAX len 0 ver 0: (unpack error)
[   95.229761][ T7369]   invalid key type for btree internal btree node (inode), deleting
[   95.229878][ T7369] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[   95.252594][ T7369] bcachefs (loop0): Version upgrade required:
[   95.252594][ T7369] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   95.252594][ T7369] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[   95.252594][ T7369]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[   95.255177][ T7376] BTRFS info (device loop1): rebuilding free space tree
[   95.266570][ T7376] BTRFS info (device loop1): disabling free space tree
[   95.266624][ T7376] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   95.266652][ T7376] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   95.279627][ T7369] bcachefs (loop0): dropping and reconstructing all alloc info
[   95.325194][ T7369] bcachefs (loop0): invalid bkey in btree_node btree=snapshots level=0: u64s 8 type snapshot 0:4294967295:0 len 0 ver 55834574848: is_subvol 1 deleted 0 parent          0 children          0  912261120 subvol 0 tree 0
[   95.325249][ T7369]   children not normalized, deleting
[   95.335227][ T7369] bcachefs (loop0): accounting_read... done
[   95.538253][ T7369] bcachefs (loop0): alloc_read...
[   95.786526][ T7431] syz.2.149: attempt to access beyond end of device
[   95.786526][ T7431] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[   95.786612][ T7431] exFAT-fs (loop2): unable to read boot sector
[   95.786640][ T7431] exFAT-fs (loop2): failed to read boot sector
[   95.786663][ T7431] exFAT-fs (loop2): failed to recognize exfat type
[   96.102439][ T7369]  done
[   96.104827][ T7369] bcachefs (loop0): snapshots_read... done
[   96.118216][ T7369] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[   96.241215][ T7369] bcachefs (loop0): done starting filesystem
[   96.295382][ T6490] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   96.510736][ T6496] bcachefs (loop0): shutting down
[   96.842929][ T7441] netlink: 'syz.1.151': attribute type 33 has an invalid length.
[   96.846922][ T7441] netlink: 'syz.1.151': attribute type 10 has an invalid length.
[   96.847089][ T7441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.151'.
[   97.448637][ T6496] bcachefs (loop0): shutdown complete
[   97.720741][ T7449] loop4: detected capacity change from 0 to 8
[   97.727081][ T7449] SQUASHFS error: xz decompression failed, data probably corrupt
[   97.727175][ T7449] SQUASHFS error: Failed to read block 0x108: -5
[   97.727213][ T7449] SQUASHFS error: Unable to read metadata cache entry [106]
[   97.727240][ T7449] SQUASHFS error: Unable to read inode 0x11f
[   98.499477][ T7455] loop2: detected capacity change from 0 to 256
[   98.813714][ T7456] loop4: detected capacity change from 0 to 32768
[   99.042924][ T7455] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.055137][ T7456] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.104289][ T7469] netlink: 144 bytes leftover after parsing attributes in process `syz.2.158'.
[   99.290339][ T7456] XFS (loop4): Ending clean mount
[   99.336004][ T7456] XFS (loop4): Quotacheck needed: Please wait.
[   99.360651][ T7456] XFS (loop4): Quotacheck: Done.
[   99.425553][ T6500] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.808869][ T7479] syz.4.163: attempt to access beyond end of device
[   99.808869][ T7479] loop4: rw=0, sector=0, nr_sectors = 1 limit=0
[   99.809261][ T7479] exFAT-fs (loop4): unable to read boot sector
[   99.809367][ T7479] exFAT-fs (loop4): failed to read boot sector
[   99.809463][ T7479] exFAT-fs (loop4): failed to recognize exfat type
[  100.385198][ T7471] loop1: detected capacity change from 0 to 32768
[  100.388553][ T7471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.161 (7471)
[  100.402616][ T7471] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  100.402718][ T7471] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  100.466394][ T7471] BTRFS info (device loop1): rebuilding free space tree
[  100.486928][ T7471] BTRFS info (device loop1): disabling free space tree
[  100.487003][ T7471] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  100.487049][ T7471] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  100.592087][   T55] Bluetooth: hci4: command tx timeout
[  100.842553][ T7501] netlink: 'syz.4.165': attribute type 33 has an invalid length.
[  100.843194][ T7501] netlink: 'syz.4.165': attribute type 10 has an invalid length.
[  100.843247][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.165'.
[  102.329878][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.332842][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.526819][ T6490] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  102.791501][ T7508] FAULT_INJECTION: forcing a failure.
[  102.791501][ T7508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.791584][ T7508] CPU: 1 UID: 0 PID: 7508 Comm: syz.4.166 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  102.791600][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  102.791608][ T7508] Call trace:
[  102.791612][ T7508]  show_stack+0x2c/0x3c (C)
[  102.791630][ T7508]  __dump_stack+0x30/0x40
[  102.791641][ T7508]  dump_stack_lvl+0xd8/0x12c
[  102.791652][ T7508]  dump_stack+0x1c/0x28
[  102.791661][ T7508]  should_fail_ex+0x41c/0x594
[  102.791674][ T7508]  should_fail+0x14/0x24
[  102.791685][ T7508]  should_fail_usercopy+0x20/0x30
[  102.791696][ T7508]  video_usercopy+0xbb0/0xef0
[  102.791711][ T7508]  video_ioctl2+0x3c/0x50
[  102.791724][ T7508]  v4l2_ioctl+0x148/0x18c
[  102.791736][ T7508]  __arm64_sys_ioctl+0x14c/0x1c4
[  102.791751][ T7508]  invoke_syscall+0x98/0x2b8
[  102.791762][ T7508]  el0_svc_common+0x130/0x23c
[  102.791773][ T7508]  do_el0_svc+0x48/0x58
[  102.791783][ T7508]  el0_svc+0x58/0x17c
[  102.791797][ T7508]  el0t_64_sync_handler+0x78/0x108
[  102.791810][ T7508]  el0t_64_sync+0x198/0x19c
[  102.906446][ T7515] FAULT_INJECTION: forcing a failure.
[  102.906446][ T7515] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.910426][ T7515] CPU: 1 UID: 0 PID: 7515 Comm: syz.4.169 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  102.910450][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  102.910458][ T7515] Call trace:
[  102.910462][ T7515]  show_stack+0x2c/0x3c (C)
[  102.910481][ T7515]  __dump_stack+0x30/0x40
[  102.910493][ T7515]  dump_stack_lvl+0xd8/0x12c
[  102.910504][ T7515]  dump_stack+0x1c/0x28
[  102.910515][ T7515]  should_fail_ex+0x41c/0x594
[  102.910528][ T7515]  should_fail+0x14/0x24
[  102.910540][ T7515]  should_fail_usercopy+0x20/0x30
[  102.910552][ T7515]  _copy_from_iter+0x194/0x1284
[  102.910566][ T7515]  netlink_sendmsg+0x548/0x930
[  102.910580][ T7515]  ____sys_sendmsg+0x490/0x7b8
[  102.910595][ T7515]  ___sys_sendmsg+0x204/0x278
[  102.910609][ T7515]  __arm64_sys_sendmsg+0x184/0x238
[  102.910623][ T7515]  invoke_syscall+0x98/0x2b8
[  102.910635][ T7515]  el0_svc_common+0x130/0x23c
[  102.910646][ T7515]  do_el0_svc+0x48/0x58
[  102.910657][ T7515]  el0_svc+0x58/0x17c
[  102.910672][ T7515]  el0t_64_sync_handler+0x78/0x108
[  102.910686][ T7515]  el0t_64_sync+0x198/0x19c
[  103.190154][ T7522] loop4: detected capacity change from 0 to 8
[  103.194278][ T7522] SQUASHFS error: xz decompression failed, data probably corrupt
[  103.194333][ T7522] SQUASHFS error: Failed to read block 0x108: -5
[  103.194373][ T7522] SQUASHFS error: Unable to read metadata cache entry [106]
[  103.194400][ T7522] SQUASHFS error: Unable to read inode 0x11f
[  104.403846][ T7530] loop1: detected capacity change from 0 to 256
[  104.491959][ T7527] loop4: detected capacity change from 0 to 32768
[  104.496066][ T7535] netlink: 'syz.3.176': attribute type 33 has an invalid length.
[  104.496656][ T7535] netlink: 'syz.3.176': attribute type 10 has an invalid length.
[  104.496698][ T7535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.176'.
[  104.722622][ T7527] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  105.340025][ T7527] XFS (loop4): Ending clean mount
[  105.345868][ T7527] XFS (loop4): Quotacheck needed: Please wait.
[  105.422045][ T7527] XFS (loop4): Quotacheck: Done.
[  106.451973][ T6500] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.600458][ T7548] loop3: detected capacity change from 0 to 32768
[  106.629674][ T7548] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.178 (7548)
[  106.639509][ T7548] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.642997][ T7548] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  106.699187][ T7548] BTRFS info (device loop3): rebuilding free space tree
[  106.707880][ T7548] BTRFS info (device loop3): disabling free space tree
[  106.709930][ T7548] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  106.713901][ T7548] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  106.746962][ T7554] loop2: detected capacity change from 0 to 8192
[  106.749356][ T7554] vfat: Unknown parameter 'nl80211'
[  107.512402][ T6489] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  107.812310][ T7585] loop2: detected capacity change from 0 to 8
[  107.829141][ T7585] SQUASHFS error: xz decompression failed, data probably corrupt
[  107.829219][ T7585] SQUASHFS error: Failed to read block 0x108: -5
[  107.829247][ T7585] SQUASHFS error: Unable to read metadata cache entry [106]
[  107.829274][ T7585] SQUASHFS error: Unable to read inode 0x11f
[  107.880064][ T7580] loop4: detected capacity change from 0 to 32768
[  108.093646][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.095687][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.192307][ T7604] netlink: 'syz.2.188': attribute type 33 has an invalid length.
[  110.210744][ T7603] netlink: 'syz.2.188': attribute type 10 has an invalid length.
[  110.210795][ T7603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.188'.
[  110.716505][ T7606] loop4: detected capacity change from 0 to 32768
[  110.930973][ T7606] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  111.763168][ T7606] XFS (loop4): Ending clean mount
[  111.765358][ T7606] XFS (loop4): Quotacheck needed: Please wait.
[  111.796202][ T7606] XFS (loop4): Quotacheck: Done.
[  111.939224][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.194'.
[  111.950339][ T6500] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  112.208029][ T7632] loop1: detected capacity change from 0 to 8
[  112.210715][ T7632] SQUASHFS error: xz decompression failed, data probably corrupt
[  112.210785][ T7632] SQUASHFS error: Failed to read block 0x108: -5
[  112.210814][ T7632] SQUASHFS error: Unable to read metadata cache entry [106]
[  112.210841][ T7632] SQUASHFS error: Unable to read inode 0x11f
[  113.037197][ T7636] loop4: detected capacity change from 0 to 256
[  113.067806][ T7625] loop2: detected capacity change from 0 to 32768
[  113.125506][ T7625] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.193 (7625)
[  113.142559][ T7625] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  113.142657][ T7625] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  113.235762][ T7611] loop3: detected capacity change from 0 to 32768
[  113.346730][ T7611] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  113.433552][ T7661] netlink: 'syz.0.200': attribute type 33 has an invalid length.
[  113.442188][ T7661] netlink: 'syz.0.200': attribute type 10 has an invalid length.
[  113.442308][ T7661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.200'.
[  114.123765][ T7625] BTRFS info (device loop2): rebuilding free space tree
[  114.147258][ T7625] BTRFS info (device loop2): disabling free space tree
[  114.149463][ T7625] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  114.155616][ T7625] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  114.188023][ T6489] (syz-executor,6489,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72
[  114.293421][ T7665] loop0: detected capacity change from 0 to 4096
[  114.309456][ T6489] ocfs2: Unmounting device (7,3) on (node local)
[  114.761762][ T7651] loop1: detected capacity change from 0 to 32768
[  115.154178][ T7675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.157936][ T7675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.384259][ T6497] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  115.748214][ T7665] ªªªªªª¯È?û?òÏþ: renamed from lo (while UP)
[  115.828965][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'.
[  116.253702][ T7690] FAULT_INJECTION: forcing a failure.
[  116.253702][ T7690] name failslab, interval 1, probability 0, space 0, times 0
[  116.253776][ T7690] CPU: 0 UID: 0 PID: 7690 Comm: syz.0.208 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  116.253792][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  116.253799][ T7690] Call trace:
[  116.253803][ T7690]  show_stack+0x2c/0x3c (C)
[  116.253820][ T7690]  __dump_stack+0x30/0x40
[  116.253832][ T7690]  dump_stack_lvl+0xd8/0x12c
[  116.253842][ T7690]  dump_stack+0x1c/0x28
[  116.253852][ T7690]  should_fail_ex+0x41c/0x594
[  116.253865][ T7690]  should_failslab+0xc0/0x128
[  116.253879][ T7690]  __kmalloc_noprof+0xf4/0x4c8
[  116.253890][ T7690]  sk_prot_alloc+0xc4/0x1f0
[  116.253903][ T7690]  sk_alloc+0x44/0x3ac
[  116.253913][ T7690]  bpf_prog_test_run_skb+0x2cc/0x12ec
[  116.253928][ T7690]  bpf_prog_test_run+0x294/0x33c
[  116.253940][ T7690]  __sys_bpf+0x4b0/0x614
[  116.253950][ T7690]  __arm64_sys_bpf+0x80/0x98
[  116.253964][ T7690]  invoke_syscall+0x98/0x2b8
[  116.253976][ T7690]  el0_svc_common+0x130/0x23c
[  116.253986][ T7690]  do_el0_svc+0x48/0x58
[  116.253996][ T7690]  el0_svc+0x58/0x17c
[  116.254010][ T7690]  el0t_64_sync_handler+0x78/0x108
[  116.254024][ T7690]  el0t_64_sync+0x198/0x19c
[  117.963281][ T7701] loop2: detected capacity change from 0 to 8
[  118.282933][ T7705] netlink: 'syz.3.211': attribute type 33 has an invalid length.
[  118.283579][ T7705] netlink: 'syz.3.211': attribute type 10 has an invalid length.
[  118.283619][ T7705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.211'.
[  118.865726][ T7701] SQUASHFS error: xz decompression failed, data probably corrupt
[  118.865797][ T7701] SQUASHFS error: Failed to read block 0x108: -5
[  118.865836][ T7701] SQUASHFS error: Unable to read metadata cache entry [106]
[  118.865864][ T7701] SQUASHFS error: Unable to read inode 0x11f
[  120.052222][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[  120.052553][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'.
[  120.052956][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'.
[  120.053024][ T7718] net_ratelimit: 1052 callbacks suppressed
[  120.053051][ T7718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.137092][ T7722] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  120.148169][ T7722] loop3: detected capacity change from 0 to 1024
[  120.206697][ T7722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.333669][ T6489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.350358][ T7702] loop0: detected capacity change from 0 to 40427
[  120.361826][ T7736] loop4: detected capacity change from 0 to 256
[  120.365253][ T7736] exfat: Deprecated parameter 'namecase'
[  120.374155][ T7702] F2FS-fs (loop0): invalid crc value
[  120.394481][ T7736] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  120.412160][ T7702] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  121.299786][ T6496] syz-executor: attempt to access beyond end of device
[  121.299786][ T6496] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  121.316533][ T6496] CPU: 1 UID: 0 PID: 6496 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  121.316556][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  121.316564][ T6496] Call trace:
[  121.316567][ T6496]  show_stack+0x2c/0x3c (C)
[  121.316586][ T6496]  __dump_stack+0x30/0x40
[  121.316599][ T6496]  dump_stack_lvl+0xd8/0x12c
[  121.316609][ T6496]  dump_stack+0x1c/0x28
[  121.316619][ T6496]  f2fs_handle_critical_error+0x34c/0x4b8
[  121.316634][ T6496]  f2fs_stop_checkpoint+0x58/0x6c
[  121.316646][ T6496]  f2fs_write_end_io+0x794/0xadc
[  121.316660][ T6496]  bio_endio+0x81c/0x858
[  121.316674][ T6496]  submit_bio_noacct+0x158/0x176c
[  121.316686][ T6496]  submit_bio+0x354/0x4d4
[  121.316696][ T6496]  f2fs_submit_write_bio+0x13c/0x324
[  121.316710][ T6496]  __submit_merged_bio+0x254/0x704
[  121.316723][ T6496]  __submit_merged_write_cond+0x23c/0x4ac
[  121.316736][ T6496]  f2fs_write_data_pages+0x1e9c/0x27ac
[  121.316750][ T6496]  do_writepages+0x2c0/0x6a8
[  121.316765][ T6496]  filemap_fdatawrite+0x144/0x1e8
[  121.316776][ T6496]  f2fs_sync_dirty_inodes+0x2b8/0x788
[  121.316788][ T6496]  f2fs_write_checkpoint+0x684/0x1694
[  121.316801][ T6496]  kill_f2fs_super+0x21c/0x584
[  121.316814][ T6496]  deactivate_locked_super+0xc4/0x12c
[  121.316827][ T6496]  deactivate_super+0xe0/0x100
[  121.316838][ T6496]  cleanup_mnt+0x31c/0x3ac
[  121.316851][ T6496]  __cleanup_mnt+0x20/0x30
[  121.316863][ T6496]  task_work_run+0x1dc/0x260
[  121.316875][ T6496]  do_notify_resume+0x16c/0x1ec
[  121.316888][ T6496]  el0_svc+0xb4/0x17c
[  121.316902][ T6496]  el0t_64_sync_handler+0x78/0x108
[  121.316916][ T6496]  el0t_64_sync+0x198/0x19c
[  121.316966][ T6496] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  121.404517][ T7750] loop3: detected capacity change from 0 to 8
[  121.902532][ T7750] SQUASHFS error: xz decompression failed, data probably corrupt
[  121.902603][ T7750] SQUASHFS error: Failed to read block 0x108: -5
[  121.902631][ T7750] SQUASHFS error: Unable to read metadata cache entry [106]
[  121.902657][ T7750] SQUASHFS error: Unable to read inode 0x11f
[  122.179472][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'.
[  123.069338][ T7768] loop2: detected capacity change from 0 to 256
[  123.422527][ T7777] netlink: 132 bytes leftover after parsing attributes in process `syz.1.235'.
[  123.454070][ T7777] binder: 7776:7777 tried to acquire reference to desc 0, got 1 instead
[  123.454186][ T7777] binder: 7776:7777 ioctl c0306201 200003c0 returned -14
[  123.484648][ T6539] binder: release 7776:7777 transaction 5 out, still active
[  123.484824][ T6539] binder: undelivered TRANSACTION_COMPLETE
[  123.542777][ T6539] binder: send failed reply for transaction 5, target dead
[  124.560744][ T7788] loop3: detected capacity change from 0 to 2048
[  124.601023][ T7788] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576
[  124.618508][ T7788] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.341805][ T7774] loop0: detected capacity change from 0 to 32768
[  125.688913][ T7801] loop1: detected capacity change from 0 to 8
[  126.114443][ T7801] SQUASHFS error: xz decompression failed, data probably corrupt
[  126.114514][ T7801] SQUASHFS error: Failed to read block 0x108: -5
[  126.114555][ T7801] SQUASHFS error: Unable to read metadata cache entry [106]
[  126.114582][ T7801] SQUASHFS error: Unable to read inode 0x11f
[  126.203287][ T2392] ieee802154 phy0 wpan0: encryption failed: -22
[  126.203383][ T2392] ieee802154 phy1 wpan1: encryption failed: -22
[  126.413641][ T6489] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4102 different from extent length 4608. Filesystem need not be standards compliant.
[  126.852217][ T7818] warning: `syz.4.248' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  127.484915][ T7819] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.616313][ T7819] loop4: detected capacity change from 0 to 1764
[  127.858262][ T7811] loop0: detected capacity change from 0 to 262144
[  127.936170][ T7811] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  127.949890][ T7805] loop1: detected capacity change from 0 to 32768
[  128.003101][ T7805] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.243 (7805)
[  128.154346][ T7805] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  128.154447][ T7805] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  128.154507][ T7805] BTRFS info (device loop1): disk space caching is enabled
[  128.154540][ T7805] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  128.369811][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.373544][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.998776][ T7805] BTRFS info (device loop1): rebuilding free space tree
[  129.014832][ T7805] BTRFS info (device loop1): disabling free space tree
[  129.019181][ T7805] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.025306][ T7805] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.084001][ T7805] BTRFS info (device loop1): balance: start -f -ssoft,profiles=system|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=0..32769,devid=0,vrange=5..2405,limit=4..0,stripes=1831..0
[  129.096310][ T7805] BTRFS info (device loop1): balance: ended with status: 0
[  129.106540][ T7851] netlink: 14 bytes leftover after parsing attributes in process `syz.1.243'.
[  129.606964][ T7853] loop2: detected capacity change from 0 to 32768
[  129.614268][ T7853] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.250 (7853)
[  129.631812][ T7853] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  129.632104][ T7853] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  129.741045][ T7853] BTRFS info (device loop2): rebuilding free space tree
[  129.748873][ T7851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.758964][ T7853] BTRFS info (device loop2): disabling free space tree
[  129.759049][ T7853] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.759078][ T7853] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.786697][ T7851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.823893][ T7851] bond0 (unregistering): Released all slaves
[  130.745025][ T6490] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  130.763826][ T6497] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  131.743178][ T7884] loop0: detected capacity change from 0 to 16
[  131.753129][ T7885] FAULT_INJECTION: forcing a failure.
[  131.753129][ T7885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.753195][ T7885] CPU: 0 UID: 0 PID: 7885 Comm: syz.3.257 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  131.753210][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  131.753218][ T7885] Call trace:
[  131.753222][ T7885]  show_stack+0x2c/0x3c (C)
[  131.753239][ T7885]  __dump_stack+0x30/0x40
[  131.753250][ T7885]  dump_stack_lvl+0xd8/0x12c
[  131.753261][ T7885]  dump_stack+0x1c/0x28
[  131.753271][ T7885]  should_fail_ex+0x41c/0x594
[  131.753283][ T7885]  should_fail+0x14/0x24
[  131.753294][ T7885]  should_fail_usercopy+0x20/0x30
[  131.753306][ T7885]  _copy_from_iter+0x194/0x1284
[  131.753319][ T7885]  netlink_sendmsg+0x548/0x930
[  131.753332][ T7885]  ____sys_sendmsg+0x490/0x7b8
[  131.753346][ T7885]  ___sys_sendmsg+0x204/0x278
[  131.753359][ T7885]  __arm64_sys_sendmsg+0x184/0x238
[  131.753372][ T7885]  invoke_syscall+0x98/0x2b8
[  131.753383][ T7885]  el0_svc_common+0x130/0x23c
[  131.753393][ T7885]  do_el0_svc+0x48/0x58
[  131.753403][ T7885]  el0_svc+0x58/0x17c
[  131.753417][ T7885]  el0t_64_sync_handler+0x78/0x108
[  131.753431][ T7885]  el0t_64_sync+0x198/0x19c
[  131.803821][ T7884] erofs (device loop0): rootino(nid 36) is not a directory(i_mode 66300)
[  131.913707][ T7894] FAULT_INJECTION: forcing a failure.
[  131.913707][ T7894] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.913786][ T7894] CPU: 1 UID: 0 PID: 7894 Comm: syz.4.259 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  131.913801][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  131.913808][ T7894] Call trace:
[  131.913812][ T7894]  show_stack+0x2c/0x3c (C)
[  131.913829][ T7894]  __dump_stack+0x30/0x40
[  131.913841][ T7894]  dump_stack_lvl+0xd8/0x12c
[  131.913851][ T7894]  dump_stack+0x1c/0x28
[  131.913861][ T7894]  should_fail_ex+0x41c/0x594
[  131.913874][ T7894]  should_fail+0x14/0x24
[  131.913884][ T7894]  should_fail_usercopy+0x20/0x30
[  131.913896][ T7894]  _inline_copy_from_user+0x40/0x180
[  131.913909][ T7894]  mctp_ioctl+0x18c/0x858
[  131.913920][ T7894]  sock_do_ioctl+0xf4/0x2b4
[  131.913932][ T7894]  sock_ioctl+0x57c/0x84c
[  131.913945][ T7894]  __arm64_sys_ioctl+0x14c/0x1c4
[  131.913960][ T7894]  invoke_syscall+0x98/0x2b8
[  131.913971][ T7894]  el0_svc_common+0x130/0x23c
[  131.913982][ T7894]  do_el0_svc+0x48/0x58
[  131.913992][ T7894]  el0_svc+0x58/0x17c
[  131.914005][ T7894]  el0t_64_sync_handler+0x78/0x108
[  131.914019][ T7894]  el0t_64_sync+0x198/0x19c
[  131.979937][ T7884] loop0: detected capacity change from 0 to 2048
[  131.994497][ T7884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.262241][ T7899] loop1: detected capacity change from 0 to 8
[  132.272752][ T7899] SQUASHFS error: xz decompression failed, data probably corrupt
[  132.272795][ T7899] SQUASHFS error: Failed to read block 0x108: -5
[  132.272817][ T7899] SQUASHFS error: Unable to read metadata cache entry [106]
[  132.272838][ T7899] SQUASHFS error: Unable to read inode 0x11f
[  133.128674][ T7916] FAULT_INJECTION: forcing a failure.
[  133.128674][ T7916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.128759][ T7916] CPU: 0 UID: 0 PID: 7916 Comm: syz.1.267 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  133.128773][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  133.128781][ T7916] Call trace:
[  133.128785][ T7916]  show_stack+0x2c/0x3c (C)
[  133.128803][ T7916]  __dump_stack+0x30/0x40
[  133.128815][ T7916]  dump_stack_lvl+0xd8/0x12c
[  133.128826][ T7916]  dump_stack+0x1c/0x28
[  133.128836][ T7916]  should_fail_ex+0x41c/0x594
[  133.128849][ T7916]  should_fail+0x14/0x24
[  133.128860][ T7916]  should_fail_usercopy+0x20/0x30
[  133.128871][ T7916]  _copy_from_iter+0x194/0x1284
[  133.128884][ T7916]  pfkey_sendmsg+0x1f4/0xd74
[  133.128898][ T7916]  ____sys_sendmsg+0x490/0x7b8
[  133.128912][ T7916]  ___sys_sendmsg+0x204/0x278
[  133.128925][ T7916]  __arm64_sys_sendmsg+0x184/0x238
[  133.128939][ T7916]  invoke_syscall+0x98/0x2b8
[  133.128951][ T7916]  el0_svc_common+0x130/0x23c
[  133.128961][ T7916]  do_el0_svc+0x48/0x58
[  133.128971][ T7916]  el0_svc+0x58/0x17c
[  133.128985][ T7916]  el0t_64_sync_handler+0x78/0x108
[  133.128999][ T7916]  el0t_64_sync+0x198/0x19c
[  133.409358][ T7924] syz.2.260: attempt to access beyond end of device
[  133.409358][ T7924] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[  133.409451][ T7924] exFAT-fs (loop2): unable to read boot sector
[  133.409493][ T7924] exFAT-fs (loop2): failed to read boot sector
[  133.409517][ T7924] exFAT-fs (loop2): failed to recognize exfat type
[  134.233931][ T7932] loop1: detected capacity change from 0 to 8
[  135.082555][ T7932] SQUASHFS error: xz decompression failed, data probably corrupt
[  135.082626][ T7932] SQUASHFS error: Failed to read block 0x108: -5
[  135.082664][ T7932] SQUASHFS error: Unable to read metadata cache entry [106]
[  135.082691][ T7932] SQUASHFS error: Unable to read inode 0x11f
[  135.430670][ T7936] loop4: detected capacity change from 0 to 8
[  135.440704][ T7936] SQUASHFS error: xz decompression failed, data probably corrupt
[  135.440776][ T7936] SQUASHFS error: Failed to read block 0x108: -5
[  135.440814][ T7936] SQUASHFS error: Unable to read metadata cache entry [106]
[  135.440841][ T7936] SQUASHFS error: Unable to read inode 0x11f
[  135.592725][ T7944] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  135.620168][ T7914] loop3: detected capacity change from 0 to 32768
[  136.442751][ T7952] loop1: detected capacity change from 0 to 1024
[  136.448699][ T7952] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  136.465269][ T7957] FAULT_INJECTION: forcing a failure.
[  136.465269][ T7957] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.465346][ T7957] CPU: 0 UID: 0 PID: 7957 Comm: syz.2.280 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  136.465360][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  136.465367][ T7957] Call trace:
[  136.465371][ T7957]  show_stack+0x2c/0x3c (C)
[  136.465388][ T7957]  __dump_stack+0x30/0x40
[  136.465400][ T7957]  dump_stack_lvl+0xd8/0x12c
[  136.465410][ T7957]  dump_stack+0x1c/0x28
[  136.465421][ T7957]  should_fail_ex+0x41c/0x594
[  136.465433][ T7957]  should_fail+0x14/0x24
[  136.465444][ T7957]  should_fail_usercopy+0x20/0x30
[  136.465456][ T7957]  _copy_from_iter+0x194/0x1284
[  136.465468][ T7957]  netlink_sendmsg+0x548/0x930
[  136.465481][ T7957]  ____sys_sendmsg+0x490/0x7b8
[  136.465496][ T7957]  ___sys_sendmsg+0x204/0x278
[  136.465509][ T7957]  __arm64_sys_sendmsg+0x184/0x238
[  136.465522][ T7957]  invoke_syscall+0x98/0x2b8
[  136.465533][ T7957]  el0_svc_common+0x130/0x23c
[  136.465544][ T7957]  do_el0_svc+0x48/0x58
[  136.465554][ T7957]  el0_svc+0x58/0x17c
[  136.465568][ T7957]  el0t_64_sync_handler+0x78/0x108
[  136.465581][ T7957]  el0t_64_sync+0x198/0x19c
[  136.518204][ T7952] hfsplus: bad catalog entry used to create inode
[  136.850475][ T7977] loop1: detected capacity change from 0 to 256
[  136.984148][ T7976] loop2: detected capacity change from 0 to 8
[  136.989625][ T7980] loop0: detected capacity change from 0 to 8
[  137.914082][ T7976] SQUASHFS error: xz decompression failed, data probably corrupt
[  137.914160][ T7976] SQUASHFS error: Failed to read block 0x108: -5
[  137.914200][ T7976] SQUASHFS error: Unable to read metadata cache entry [106]
[  137.914226][ T7976] SQUASHFS error: Unable to read inode 0x11f
[  138.097644][ T7980] SQUASHFS error: xz decompression failed, data probably corrupt
[  138.097683][ T7980] SQUASHFS error: Failed to read block 0x108: -5
[  138.097704][ T7980] SQUASHFS error: Unable to read metadata cache entry [106]
[  138.097725][ T7980] SQUASHFS error: Unable to read inode 0x11f
[  139.323436][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'.
[  139.394709][ T8000] loop4: detected capacity change from 0 to 2048
[  139.497799][ T8007] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.607717][ T8013] loop1: detected capacity change from 0 to 8
[  139.617646][ T8013] SQUASHFS error: xz decompression failed, data probably corrupt
[  139.617704][ T8013] SQUASHFS error: Failed to read block 0x108: -5
[  139.617743][ T8013] SQUASHFS error: Unable to read metadata cache entry [106]
[  139.617770][ T8013] SQUASHFS error: Unable to read inode 0x11f
[  139.974044][ T8018] loop4: detected capacity change from 0 to 2048
[  140.023255][ T8018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.096508][ T7996] loop0: detected capacity change from 0 to 40427
[  140.109335][ T7996] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  140.109408][ T7996] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  140.125739][ T7996] F2FS-fs (loop0): invalid crc value
[  140.236207][ T7996] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  140.238448][ T7996] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  140.421451][ T8025] loop3: detected capacity change from 0 to 32768
[  140.424261][ T8025] XFS: attr2 mount option is deprecated.
[  140.904114][ T8025] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  141.331203][ T8025] XFS (loop3): Ending clean mount
[  141.334963][ T8025] XFS (loop3): Quotacheck needed: Please wait.
[  141.443038][ T8053] loop1: detected capacity change from 0 to 256
[  141.576000][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.306'.
[  141.598239][ T8025] XFS (loop3): Quotacheck: Done.
[  141.755629][ T6489] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  141.850464][ T8060] loop2: detected capacity change from 0 to 8
[  141.854082][ T8060] SQUASHFS error: xz decompression failed, data probably corrupt
[  141.854163][ T8060] SQUASHFS error: Failed to read block 0x108: -5
[  141.854191][ T8060] SQUASHFS error: Unable to read metadata cache entry [106]
[  141.854217][ T8060] SQUASHFS error: Unable to read inode 0x11f
[  142.120510][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.664843][ T8076] FAULT_INJECTION: forcing a failure.
[  142.664843][ T8076] name failslab, interval 1, probability 0, space 0, times 0
[  142.664917][ T8076] CPU: 1 UID: 0 PID: 8076 Comm: syz.3.311 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  142.664933][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  142.664941][ T8076] Call trace:
[  142.664945][ T8076]  show_stack+0x2c/0x3c (C)
[  142.664962][ T8076]  __dump_stack+0x30/0x40
[  142.664974][ T8076]  dump_stack_lvl+0xd8/0x12c
[  142.664984][ T8076]  dump_stack+0x1c/0x28
[  142.664994][ T8076]  should_fail_ex+0x41c/0x594
[  142.665007][ T8076]  should_failslab+0xc0/0x128
[  142.665021][ T8076]  kmem_cache_alloc_noprof+0x80/0x3e8
[  142.665036][ T8076]  alloc_empty_file+0x60/0x1c0
[  142.665048][ T8076]  path_openat+0xd0/0x2c40
[  142.665060][ T8076]  do_filp_open+0x18c/0x36c
[  142.665071][ T8076]  do_sys_openat2+0x11c/0x1b4
[  142.665085][ T8076]  __arm64_sys_openat+0x120/0x158
[  142.665100][ T8076]  invoke_syscall+0x98/0x2b8
[  142.665119][ T8076]  el0_svc_common+0x130/0x23c
[  142.665131][ T8076]  do_el0_svc+0x48/0x58
[  142.665141][ T8076]  el0_svc+0x58/0x17c
[  142.665156][ T8076]  el0t_64_sync_handler+0x78/0x108
[  142.665171][ T8076]  el0t_64_sync+0x198/0x19c
[  143.907153][ T8086] loop2: detected capacity change from 0 to 32768
[  143.969009][ T8096] loop1: detected capacity change from 0 to 2048
[  144.053079][ T8086] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  144.057606][ T8096] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  144.500288][ T8106] loop3: detected capacity change from 0 to 8
[  144.504281][ T8111] netlink: 'syz.0.323': attribute type 33 has an invalid length.
[  144.504859][ T8111] netlink: 'syz.0.323': attribute type 10 has an invalid length.
[  144.504896][ T8111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.323'.
[  144.583473][ T8106] SQUASHFS error: xz decompression failed, data probably corrupt
[  144.583542][ T8106] SQUASHFS error: Failed to read block 0x108: -5
[  144.583570][ T8106] SQUASHFS error: Unable to read metadata cache entry [106]
[  144.583596][ T8106] SQUASHFS error: Unable to read inode 0x11f
[  144.906899][ T8086] XFS (loop2): Ending clean mount
[  144.946638][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  144.990135][ T8086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.320'.
[  145.035249][ T8079] loop4: detected capacity change from 0 to 32768
[  145.053060][ T8121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.328'.
[  145.251694][ T8137] loop1: detected capacity change from 0 to 256
[  145.257798][ T8079] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  145.268320][ T6497] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  145.298506][ T8079] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io
[  145.298506][ T8079]   allowing incompatible features above 0.0: (unknown version)
[  145.298664][ T8079] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  145.298790][ T8079] bcachefs (loop4): Version upgrade required:
[  145.298790][ T8079] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  145.298790][ T8079] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  145.298790][ T8079]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  145.299047][ T8079] bcachefs (loop4): dropping and reconstructing all alloc info
[  145.334789][ T8079] bcachefs (loop4): accounting_read...
[  145.341162][ T8140] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  145.401612][ T8140] loop0: detected capacity change from 0 to 1024
[  146.355299][ T8079]  done
[  146.355368][ T8079] bcachefs (loop4): alloc_read... done
[  146.355449][ T8079] bcachefs (loop4): snapshots_read... done
[  146.355937][ T8079] bcachefs (loop4): done starting filesystem
[  146.686193][ T8140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.006507][ T6500] bcachefs (loop4): shutting down
[  147.113756][ T6496] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.224768][ T6500] bcachefs (loop4): shutdown complete
[  147.233262][ T8153] FAULT_INJECTION: forcing a failure.
[  147.233262][ T8153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.236983][ T8153] CPU: 1 UID: 0 PID: 8153 Comm: syz.3.339 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  147.237005][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  147.237013][ T8153] Call trace:
[  147.237017][ T8153]  show_stack+0x2c/0x3c (C)
[  147.237034][ T8153]  __dump_stack+0x30/0x40
[  147.237047][ T8153]  dump_stack_lvl+0xd8/0x12c
[  147.237057][ T8153]  dump_stack+0x1c/0x28
[  147.237067][ T8153]  should_fail_ex+0x41c/0x594
[  147.237080][ T8153]  should_fail+0x14/0x24
[  147.237091][ T8153]  should_fail_usercopy+0x20/0x30
[  147.237103][ T8153]  _copy_from_iter+0x194/0x1284
[  147.237123][ T8153]  netlink_sendmsg+0x548/0x930
[  147.237136][ T8153]  ____sys_sendmsg+0x490/0x7b8
[  147.237151][ T8153]  ___sys_sendmsg+0x204/0x278
[  147.237164][ T8153]  __arm64_sys_sendmsg+0x184/0x238
[  147.237177][ T8153]  invoke_syscall+0x98/0x2b8
[  147.237189][ T8153]  el0_svc_common+0x130/0x23c
[  147.237199][ T8153]  do_el0_svc+0x48/0x58
[  147.237209][ T8153]  el0_svc+0x58/0x17c
[  147.237223][ T8153]  el0t_64_sync_handler+0x78/0x108
[  147.237237][ T8153]  el0t_64_sync+0x198/0x19c
[  147.328700][ T8158] loop1: detected capacity change from 0 to 1024
[  147.493079][ T8158] EXT4-fs: Ignoring removed nomblk_io_submit option
[  147.493174][ T8158] EXT4-fs: Ignoring removed nomblk_io_submit option
[  147.530255][ T8158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.615647][ T8165] netlink: 'syz.0.338': attribute type 33 has an invalid length.
[  147.622015][ T8165] netlink: 'syz.0.338': attribute type 10 has an invalid length.
[  147.622182][ T8165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.338'.
[  148.236298][ T8155] loop2: detected capacity change from 0 to 32768
[  148.239469][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'.
[  148.258973][ T8158] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  148.266160][ T8155] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.333 (8155)
[  148.281200][ T8155] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.281325][ T8155] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  148.370652][ T8155] BTRFS info (device loop2): rebuilding free space tree
[  148.374957][ T8155] BTRFS info (device loop2): disabling free space tree
[  148.375009][ T8155] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  148.375038][ T8155] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  148.486413][ T6490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.478338][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.481265][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.595872][ T6497] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  150.245359][ T8203] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  150.267681][ T8203] loop0: detected capacity change from 0 to 1024
[  150.282184][ T8213] loop1: detected capacity change from 0 to 256
[  150.383002][ T8203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.613178][ T8219] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  150.620973][ T8219] EXT4-fs (loop0): Remounting filesystem read-only
[  150.719721][ T8229] netlink: 'syz.2.353': attribute type 33 has an invalid length.
[  150.727965][ T8229] netlink: 'syz.2.353': attribute type 10 has an invalid length.
[  150.728107][ T8229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'.
[  151.586588][ T6496] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.752363][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'.
[  152.295512][ T8245] syz.2.357: attempt to access beyond end of device
[  152.295512][ T8245] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[  152.295860][ T8245] exFAT-fs (loop2): unable to read boot sector
[  152.295961][ T8245] exFAT-fs (loop2): failed to read boot sector
[  152.296050][ T8245] exFAT-fs (loop2): failed to recognize exfat type
[  152.388848][ T6539] libceph: connect (1)[c::]:6789 error -101
[  152.390128][ T6539] libceph: mon0 (1)[c::]:6789 connect error
[  152.693425][ T6539] libceph: connect (1)[c::]:6789 error -101
[  152.693585][ T6539] libceph: mon0 (1)[c::]:6789 connect error
[  152.723142][ T8242] ceph: No mds server is up or the cluster is laggy
[  152.912685][ T8258] FAULT_INJECTION: forcing a failure.
[  152.912685][ T8258] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.912756][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz.2.363 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  152.912773][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  152.912780][ T8258] Call trace:
[  152.912784][ T8258]  show_stack+0x2c/0x3c (C)
[  152.912801][ T8258]  __dump_stack+0x30/0x40
[  152.912814][ T8258]  dump_stack_lvl+0xd8/0x12c
[  152.912824][ T8258]  dump_stack+0x1c/0x28
[  152.912834][ T8258]  should_fail_ex+0x41c/0x594
[  152.912847][ T8258]  should_fail+0x14/0x24
[  152.912858][ T8258]  should_fail_usercopy+0x20/0x30
[  152.912870][ T8258]  _inline_copy_from_user+0x40/0x180
[  152.912885][ T8258]  ____sys_sendmsg+0x26c/0x7b8
[  152.912898][ T8258]  ___sys_sendmsg+0x204/0x278
[  152.912912][ T8258]  __arm64_sys_sendmsg+0x184/0x238
[  152.912925][ T8258]  invoke_syscall+0x98/0x2b8
[  152.912936][ T8258]  el0_svc_common+0x130/0x23c
[  152.912947][ T8258]  do_el0_svc+0x48/0x58
[  152.912957][ T8258]  el0_svc+0x58/0x17c
[  152.912971][ T8258]  el0t_64_sync_handler+0x78/0x108
[  152.912984][ T8258]  el0t_64_sync+0x198/0x19c
[  153.202864][ T8255] loop0: detected capacity change from 0 to 32768
[  153.401814][    C0] vcan0: j1939_tp_rxtimer: 0x00000000ef809504: rx timeout, send abort
[  153.902892][    C0] vcan0: j1939_tp_rxtimer: 0x00000000ef809504: abort rx timeout. Force session deactivation
[  154.301974][ T8265] loop3: detected capacity change from 0 to 8
[  154.392956][ T8269] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  155.293882][ T8269] loop1: detected capacity change from 0 to 1024
[  155.344177][ T8273] loop4: detected capacity change from 0 to 8
[  155.392365][ T8265] SQUASHFS error: xz decompression failed, data probably corrupt
[  155.392420][ T8265] SQUASHFS error: Failed to read block 0x108: -5
[  155.392470][ T8265] SQUASHFS error: Unable to read metadata cache entry [106]
[  155.392497][ T8265] SQUASHFS error: Unable to read inode 0x11f
[  155.402556][ T8273] SQUASHFS error: xz decompression failed, data probably corrupt
[  155.402614][ T8273] SQUASHFS error: Failed to read block 0x108: -5
[  155.402666][ T8273] SQUASHFS error: Unable to read metadata cache entry [106]
[  155.402693][ T8273] SQUASHFS error: Unable to read inode 0x11f
[  155.878737][ T8269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.969148][ T8279] loop3: detected capacity change from 0 to 256
[  155.989500][ T6490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.149662][ T8293] loop2: detected capacity change from 0 to 8
[  157.684785][ T8293] SQUASHFS error: xz decompression failed, data probably corrupt
[  157.684862][ T8293] SQUASHFS error: Failed to read block 0x108: -5
[  157.684892][ T8293] SQUASHFS error: Unable to read metadata cache entry [106]
[  157.684920][ T8293] SQUASHFS error: Unable to read inode 0x11f
[  157.800951][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.801311][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.486364][ T8299] FAULT_INJECTION: forcing a failure.
[  158.486364][ T8299] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.486434][ T8299] CPU: 0 UID: 0 PID: 8299 Comm: syz.0.373 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  158.486450][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  158.486458][ T8299] Call trace:
[  158.486461][ T8299]  show_stack+0x2c/0x3c (C)
[  158.486479][ T8299]  __dump_stack+0x30/0x40
[  158.486490][ T8299]  dump_stack_lvl+0xd8/0x12c
[  158.486501][ T8299]  dump_stack+0x1c/0x28
[  158.486511][ T8299]  should_fail_ex+0x41c/0x594
[  158.486523][ T8299]  should_fail+0x14/0x24
[  158.486534][ T8299]  should_fail_usercopy+0x20/0x30
[  158.486546][ T8299]  _copy_from_iter+0x194/0x1284
[  158.486559][ T8299]  netlink_sendmsg+0x548/0x930
[  158.486572][ T8299]  ____sys_sendmsg+0x490/0x7b8
[  158.486586][ T8299]  ___sys_sendmsg+0x204/0x278
[  158.486606][ T8299]  __arm64_sys_sendmsg+0x184/0x238
[  158.486620][ T8299]  invoke_syscall+0x98/0x2b8
[  158.486631][ T8299]  el0_svc_common+0x130/0x23c
[  158.486642][ T8299]  do_el0_svc+0x48/0x58
[  158.486652][ T8299]  el0_svc+0x58/0x17c
[  158.486666][ T8299]  el0t_64_sync_handler+0x78/0x108
[  158.486681][ T8299]  el0t_64_sync+0x198/0x19c
[  158.680464][ T8305] IPVS: length: 109 != 24
[  158.836765][ T8315] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  159.656522][ T8315] loop3: detected capacity change from 0 to 1024
[  160.203446][ T8319] loop0: detected capacity change from 0 to 8
[  160.856417][ T8326] [U] 
[  160.856558][ T8326] [U] 
[  160.856584][ T8326] [U] 
[  160.860619][ T8326] [U] 
[  160.862861][ T8326] [U] 
[  160.863037][ T8326] [U] 
[  160.863066][ T8326] [U] 
[  160.863092][ T8326] [U] 
[  160.863128][ T8326] [U] 
[  160.863210][ T8326] [U] 
[  160.863239][ T8326] [U] 
[  160.863263][ T8326] [U] 
[  161.249855][ T8325] [U] 
[  161.264625][ T8315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.394153][ T8324] netlink: 'syz.2.380': attribute type 33 has an invalid length.
[  161.394329][ T8319] SQUASHFS error: xz decompression failed, data probably corrupt
[  161.394367][ T8319] SQUASHFS error: Failed to read block 0x108: -5
[  161.394388][ T8319] SQUASHFS error: Unable to read metadata cache entry [106]
[  161.394409][ T8319] SQUASHFS error: Unable to read inode 0x11f
[  161.398404][ T8323] netlink: 'syz.2.380': attribute type 10 has an invalid length.
[  161.398755][ T8323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.380'.
[  161.750774][ T6489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.960374][ T8343] loop3: detected capacity change from 0 to 256
[  163.340728][ T8345] loop4: detected capacity change from 0 to 8
[  163.368208][ T8345] SQUASHFS error: xz decompression failed, data probably corrupt
[  163.368269][ T8345] SQUASHFS error: Failed to read block 0x108: -5
[  163.368311][ T8345] SQUASHFS error: Unable to read metadata cache entry [106]
[  163.368338][ T8345] SQUASHFS error: Unable to read inode 0x11f
[  163.581807][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.690022][ T8360] netlink: 700 bytes leftover after parsing attributes in process `syz.4.390'.
[  163.690671][ T8360] netlink: 384 bytes leftover after parsing attributes in process `syz.4.390'.
[  163.691044][ T8360] netlink: 700 bytes leftover after parsing attributes in process `syz.4.390'.
[  163.691093][ T8360] netlink: 384 bytes leftover after parsing attributes in process `syz.4.390'.
[  164.845699][ T8375] netlink: 'syz.1.393': attribute type 33 has an invalid length.
[  164.847299][ T8375] netlink: 'syz.1.393': attribute type 10 has an invalid length.
[  164.847372][ T8375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.393'.
[  165.003639][ T8348] Bluetooth: hci4: command 0x0406 tx timeout
[  165.003720][ T8348] Bluetooth: hci1: command 0x0406 tx timeout
[  165.003765][ T8348] Bluetooth: hci2: command 0x0406 tx timeout
[  165.003808][ T8348] Bluetooth: hci3: command 0x0406 tx timeout
[  165.479821][ T8377] loop4: detected capacity change from 0 to 8
[  165.817654][ T8377] SQUASHFS error: xz decompression failed, data probably corrupt
[  165.817722][ T8377] SQUASHFS error: Failed to read block 0x108: -5
[  165.817764][ T8377] SQUASHFS error: Unable to read metadata cache entry [106]
[  165.817791][ T8377] SQUASHFS error: Unable to read inode 0x11f
[  166.355705][ T8380] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  166.363202][ T8380] loop1: detected capacity change from 0 to 1024
[  167.312839][ T8380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.459511][ T6490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.775453][ T8400] loop4: detected capacity change from 0 to 8
[  167.841703][ T8400] SQUASHFS error: xz decompression failed, data probably corrupt
[  167.841966][ T8400] SQUASHFS error: Failed to read block 0x108: -5
[  167.842063][ T8400] SQUASHFS error: Unable to read metadata cache entry [106]
[  167.842165][ T8400] SQUASHFS error: Unable to read inode 0x11f
[  168.616747][ T8409] loop1: detected capacity change from 0 to 4096
[  168.794398][ T8409] xt_CT: No such helper "snmp"
[  168.849078][ T8407] loop4: detected capacity change from 0 to 32768
[  168.856894][ T8407] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.405 (8407)
[  168.864168][ T8407] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  168.867335][ T8407] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  168.985324][ T8407] BTRFS info (device loop4): rebuilding free space tree
[  169.042433][ T8407] BTRFS info (device loop4): disabling free space tree
[  169.045564][ T8407] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  169.048997][ T8407] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  169.370128][ T8433] netlink: 'syz.1.406': attribute type 33 has an invalid length.
[  169.378199][ T8433] netlink: 'syz.1.406': attribute type 10 has an invalid length.
[  169.378359][ T8433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.406'.
[  170.843658][ T8439] loop3: detected capacity change from 0 to 8
[  170.929930][ T6500] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  170.959705][ T8439] SQUASHFS error: xz decompression failed, data probably corrupt
[  170.959789][ T8439] SQUASHFS error: Failed to read block 0x108: -5
[  170.959811][ T8439] SQUASHFS error: Unable to read metadata cache entry [106]
[  170.959832][ T8439] SQUASHFS error: Unable to read inode 0x11f
[  171.085456][ T8436] loop1: detected capacity change from 0 to 32768
[  171.089677][ T8436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.408 (8436)
[  171.100218][ T8436] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.103788][ T8436] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[  171.107796][ T8436] BTRFS info (device loop1): using free-space-tree
[  171.209018][ T8436] BTRFS info (device loop1): rebuilding free space tree
[  171.370661][ T8463] loop2: detected capacity change from 0 to 512
[  171.375032][ T8463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  171.440286][ T8463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.528047][ T8468] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  171.558133][ T8468] loop4: detected capacity change from 0 to 1024
[  171.587458][ T6490] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.600626][ T6497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.620305][ T8468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.796992][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.856728][ T8486] loop0: detected capacity change from 0 to 256
[  173.476196][ T8496] netlink: 'syz.3.418': attribute type 33 has an invalid length.
[  173.484203][ T8496] netlink: 'syz.3.418': attribute type 10 has an invalid length.
[  173.484349][ T8496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.418'.
[  174.155515][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.419'.
[  174.225606][ T8503] loop4: detected capacity change from 0 to 8
[  174.240040][ T8503] SQUASHFS error: xz decompression failed, data probably corrupt
[  174.240099][ T8503] SQUASHFS error: Failed to read block 0x108: -5
[  174.240136][ T8503] SQUASHFS error: Unable to read metadata cache entry [106]
[  174.240164][ T8503] SQUASHFS error: Unable to read inode 0x11f
[  174.494170][ T8508] capability: warning: `syz.3.423' uses 32-bit capabilities (legacy support in use)
[  174.705635][ T8499] loop1: detected capacity change from 0 to 32768
[  174.803676][ T8499] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  174.845986][ T8499] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  174.845986][ T8499]   allowing incompatible features above 0.0: (unknown version)
[  174.855599][ T8499] bcachefs (loop1): initializing new filesystem
[  174.858457][ T8499] bcachefs (loop1): going read-write
[  174.903330][ T8499] bcachefs (loop1): marking superblocks
[  174.936614][ T8499] bcachefs (loop1): initializing freespace
[  174.941347][ T8499] bcachefs (loop1): done initializing freespace
[  174.952472][ T8499] bcachefs (loop1): reading snapshots table
[  174.954449][ T8499] bcachefs (loop1): reading snapshots done
[  174.986457][ T8499] bcachefs (loop1): done starting filesystem
[  176.075491][ T8523] bcachefs (loop1): shutdown by ioctl type 1
[  176.733136][ T6480] bcachefs (loop1): going read-only
[  176.733297][ T6480] bcachefs (loop1): finished waiting for writes to stop
[  176.907052][ T8530] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  176.915686][ T6480] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  176.919307][ T6480] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  176.919698][ T6490] bcachefs (loop1): shutting down
[  176.924186][ T6480] bcachefs (loop1): unclean shutdown complete, journal seq 3
[  176.951651][ T8530] loop3: detected capacity change from 0 to 1024
[  177.000817][ T6480] bcachefs (loop1): done going read-only, filesystem not clean
[  177.072228][ T8530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.177406][ T6490] bcachefs (loop1): shutdown complete
[  177.318909][ T6489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.670447][ T8544] netlink: 'syz.4.430': attribute type 33 has an invalid length.
[  177.678778][ T8544] netlink: 'syz.4.430': attribute type 10 has an invalid length.
[  177.678921][ T8544] netlink: 40 bytes leftover after parsing attributes in process `syz.4.430'.
[  178.584634][ T8548] FAULT_INJECTION: forcing a failure.
[  178.584634][ T8548] name failslab, interval 1, probability 0, space 0, times 0
[  178.584834][ T8548] CPU: 0 UID: 0 PID: 8548 Comm: syz.4.431 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  178.584853][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  178.584861][ T8548] Call trace:
[  178.584865][ T8548]  show_stack+0x2c/0x3c (C)
[  178.584883][ T8548]  __dump_stack+0x30/0x40
[  178.584896][ T8548]  dump_stack_lvl+0xd8/0x12c
[  178.584907][ T8548]  dump_stack+0x1c/0x28
[  178.584918][ T8548]  should_fail_ex+0x41c/0x594
[  178.584931][ T8548]  should_failslab+0xc0/0x128
[  178.584946][ T8548]  __kmalloc_noprof+0xf4/0x4c8
[  178.584958][ T8548]  tomoyo_realpath_from_path+0xc4/0x4d4
[  178.584973][ T8548]  tomoyo_path_number_perm+0x1a0/0x47c
[  178.584986][ T8548]  tomoyo_file_ioctl+0x2c/0x3c
[  178.584999][ T8548]  security_file_ioctl+0xe8/0x2f0
[  178.585012][ T8548]  __arm64_sys_ioctl+0xa8/0x1c4
[  178.585027][ T8548]  invoke_syscall+0x98/0x2b8
[  178.585040][ T8548]  el0_svc_common+0x130/0x23c
[  178.585051][ T8548]  do_el0_svc+0x48/0x58
[  178.585062][ T8548]  el0_svc+0x58/0x17c
[  178.585077][ T8548]  el0t_64_sync_handler+0x78/0x108
[  178.585092][ T8548]  el0t_64_sync+0x198/0x19c
[  178.585261][ T8548] ERROR: Out of memory at tomoyo_realpath_from_path.
[  178.755972][ T8550] loop3: detected capacity change from 0 to 8
[  178.776335][ T8554] FAULT_INJECTION: forcing a failure.
[  178.776335][ T8554] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.780582][ T8550] SQUASHFS error: xz decompression failed, data probably corrupt
[  178.780636][ T8550] SQUASHFS error: Failed to read block 0x108: -5
[  178.780657][ T8550] SQUASHFS error: Unable to read metadata cache entry [106]
[  178.780678][ T8550] SQUASHFS error: Unable to read inode 0x11f
[  178.789096][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.0.433 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  178.789129][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  178.789137][ T8554] Call trace:
[  178.789141][ T8554]  show_stack+0x2c/0x3c (C)
[  178.789159][ T8554]  __dump_stack+0x30/0x40
[  178.789172][ T8554]  dump_stack_lvl+0xd8/0x12c
[  178.789183][ T8554]  dump_stack+0x1c/0x28
[  178.789194][ T8554]  should_fail_ex+0x41c/0x594
[  178.789207][ T8554]  should_fail+0x14/0x24
[  178.789218][ T8554]  should_fail_usercopy+0x20/0x30
[  178.789231][ T8554]  simple_read_from_buffer+0xc4/0x254
[  178.789245][ T8554]  proc_fail_nth_read+0x130/0x19c
[  178.789258][ T8554]  vfs_read+0x22c/0x898
[  178.789269][ T8554]  ksys_read+0x120/0x210
[  178.789280][ T8554]  __arm64_sys_read+0x7c/0x90
[  178.789291][ T8554]  invoke_syscall+0x98/0x2b8
[  178.789302][ T8554]  el0_svc_common+0x130/0x23c
[  178.789314][ T8554]  do_el0_svc+0x48/0x58
[  178.789325][ T8554]  el0_svc+0x58/0x17c
[  178.789340][ T8554]  el0t_64_sync_handler+0x78/0x108
[  178.789354][ T8554]  el0t_64_sync+0x198/0x19c
[  179.042618][    C1] ------------[ cut here ]------------
[  179.042776][    C1] WARNING: CPU: 1 PID: 8537 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x534/0x62c
[  179.047078][    C1] Modules linked in:
[  179.048355][    C1] CPU: 1 UID: 0 PID: 8537 Comm: syz.2.429 Not tainted 6.15.0-rc6-syzkaller-gc919f08732cc #0 PREEMPT 
[  179.051579][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  179.054462][    C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  179.056686][    C1] pc : inet_sock_destruct+0x534/0x62c
[  179.058238][    C1] lr : inet_sock_destruct+0x534/0x62c
[  179.059755][    C1] sp : ffff800080017c30
[  179.060952][    C1] x29: ffff800080017c40 x28: ffff800089044e20 x27: 0000000000000005
[  179.063197][    C1] x26: 1fffe0001df36012 x25: dfff800000000000 x24: ffff0000ef9b04e8
[  179.065427][    C1] x23: ffff0000ef9b0000 x22: ffff0000ef9b0090 x21: 0000000000000007
[  179.067743][    C1] x20: 0000000000000fff x19: 0000000000800301 x18: ffff800090e69640
[  179.070005][    C1] x17: ffff80010d10c000 x16: ffff80008adb9a34 x15: 0000000000000001
[  179.072251][    C1] x14: 1fffe0001df36053 x13: 0000000000000000 x12: 0000000000000000
[  179.074470][    C1] x11: ffff60001df36054 x10: 0000000000ff0100 x9 : 0000000000000000
[  179.076719][    C1] x8 : ffff0000cdc48000 x7 : ffff8000805c5044 x6 : 0000000000000000
[  179.078975][    C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008994b674
[  179.081211][    C1] x2 : 0000000000000000 x1 : 0000000000000fff x0 : 0000000000000000
[  179.083375][    C1] Call trace:
[  179.084264][    C1]  inet_sock_destruct+0x534/0x62c (P)
[  179.085759][    C1]  inet6_sock_destruct+0x28/0x38
[  179.087126][    C1]  __sk_destruct+0x80/0x760
[  179.088373][    C1]  rcu_core+0x848/0x17a4
[  179.089551][    C1]  rcu_core_si+0x10/0x1c
[  179.090719][    C1]  handle_softirqs+0x328/0xc88
[  179.092130][    C1]  __do_softirq+0x14/0x20
[  179.093305][    C1]  ____do_softirq+0x14/0x20
[  179.094559][    C1]  call_on_irq_stack+0x24/0x30
[  179.095888][    C1]  do_softirq_own_stack+0x20/0x2c
[  179.097229][    C1]  __irq_exit_rcu+0x1b0/0x478
[  179.098546][    C1]  irq_exit_rcu+0x14/0x84
[  179.099797][    C1]  el1_interrupt+0x38/0x54
[  179.101005][    C1]  el1h_64_irq_handler+0x18/0x24
[  179.102362][    C1]  el1h_64_irq+0x6c/0x70
[  179.103487][    C1]  __sanitizer_cov_trace_pc+0x78/0x84 (P)
[  179.105096][    C1]  filemap_get_entry+0x150/0x2b8
[  179.106398][    C1]  shmem_get_folio_gfp+0x1c4/0x159c
[  179.107858][    C1]  shmem_fault+0x15c/0x32c
[  179.109036][    C1]  __do_fault+0xf8/0x498
[  179.110196][    C1]  handle_mm_fault+0x2c00/0x4cf0
[  179.111539][    C1]  __get_user_pages+0x1da4/0x30cc
[  179.112879][    C1]  populate_vma_page_range+0x218/0x2e8
[  179.114375][    C1]  __mm_populate+0x208/0x330
[  179.115609][    C1]  vm_mmap_pgoff+0x378/0x43c
[  179.116867][    C1]  ksys_mmap_pgoff+0xd0/0x5b8
[  179.118130][    C1]  __arm64_sys_mmap+0xf8/0x110
[  179.119436][    C1]  invoke_syscall+0x98/0x2b8
[  179.120774][    C1]  el0_svc_common+0x130/0x23c
[  179.122131][    C1]  do_el0_svc+0x48/0x58
[  179.123225][    C1]  el0_svc+0x58/0x17c
[  179.124308][    C1]  el0t_64_sync_handler+0x78/0x108
[  179.125689][    C1]  el0t_64_sync+0x198/0x19c
[  179.126943][    C1] irq event stamp: 32729
[  179.128127][    C1] hardirqs last  enabled at (32728): [<ffff80008adda980>] _raw_spin_unlock_irqrestore+0x38/0x98
[  179.130944][    C1] hardirqs last disabled at (32729): [<ffff80008adb4df8>] el1_dbg+0x24/0x80
[  179.133365][    C1] softirqs last  enabled at (31512): [<ffff8000803cef1c>] handle_softirqs+0xaf8/0xc88
[  179.136241][    C1] softirqs last disabled at (32663): [<ffff800080020efc>] __do_softirq+0x14/0x20
[  179.139616][    C1] ---[ end trace 0000000000000000 ]---
[  179.372832][ T8560] loop0: detected capacity change from 0 to 32768
[  179.678224][ T8560] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  179.690306][ T8560] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=gzip,norecovery,reconstruct_alloc,no_data_io
[  179.690306][ T8560]   allowing incompatible features above 0.0: (unknown version)
[  179.690481][ T8560] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  179.690618][ T8560] bcachefs (loop0): Version upgrade required:
[  179.690618][ T8560] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  179.690618][ T8560] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  179.690618][ T8560]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  179.690824][ T8560] bcachefs (loop0): dropping and reconstructing all alloc info
[  179.724388][ T8560] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  179.725289][ T8560] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0
[  179.725316][ T8560]   u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  179.725330][ T8560]   node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: 
[  179.725735][ T8560] bcachefs (loop0): flagging btree extents lost data
[  179.725827][ T8560] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[  179.728263][ T8560] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing
[  179.735077][ T8560] bcachefs (loop0): scan_for_btree_nodes...
[  179.776559][ T8560] bcachefs (loop0): btree node scan found 7 nodes after overwrites
[  179.776644][ T8560]  done
[  179.776855][ T8560] bcachefs (loop0): check_topology...
[  179.777339][ T8560] bcachefs (loop0): btree root extents unreadable, must recover from scan
[  179.777594][ T8560] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX
[  179.777743][ T8560] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  179.784580][ T8560]  done
[  179.784758][ T8560] bcachefs (loop0): accounting_read... done
[  179.822204][ T8560] bcachefs (loop0): alloc_read... done
[  179.822278][ T8560] bcachefs (loop0): snapshots_read... done
[  179.822376][ T8560] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[  179.822779][ T8560] bcachefs (loop0): done starting filesystem
[  179.839446][ T8560] bcachefs (loop0): btree_path_down(): fatal error node not found at pos 536870912:1:U32_MAX within parent node u64s 5 type btree_ptr SPOS_MAX len 0 ver 0
[  179.849712][ T8560] bcachefs (loop0): fatal error - emergency read only
[  179.903523][ T6496] bcachefs (loop0): shutting down
[  179.956465][ T8573] loop1: detected capacity change from 0 to 64
[  179.965139][ T6496] bcachefs (loop0): shutdown complete
[  187.625490][ T2392] ieee802154 phy0 wpan0: encryption failed: -22
[  187.627601][ T2392] ieee802154 phy1 wpan1: encryption failed: -22