last executing test programs:

15.771188288s ago: executing program 3 (id=630):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00b\xcd+\x0f\x85\xdd\xfb\x04!\x81\xe2\x81\xf6N\x9cG\xe8\xcd\x13\xc59\xb0\x85Aj6\xdf\x12yT\xb8r\r\xef\xe4\x94\xda')
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)={<r1=>0x0, 0xdb, "747ae0d974152cf9ffdaeee166e859ec8855df0f0e6380492706b1ff152ebb6dc84dd5c1379b43b03adfa32797c0ba7c92c2d70a3fb9b440cd1ad64670b64b9092bc45667b042d24bd229a20238f81ebf9a0a010602d5b45ae9a7a2413fadd6b76745649254b92608769b91176d4670fc23870a1d0452f69dfddf2e13718e075d334c1e297b8ae23aff31e2543f1e127c316f21eb7a80c55d1df233e29acaa344673a5d9706dcc11ceac8032aa560bb5fc1391bc3a157691a709433b030a87bf7954280299314e477ae08c11e08ecb89baad4bd6077649118b4321"}, &(0x7f0000000140)=0xe3)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x80}, 0x8)
syz_mount_image$udf(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x8000, &(0x7f0000002980), 0x1, 0x28d6, &(0x7f00000029c0)="$eJzs3EFrXFUbB/Dn3Jt5k74VzKri7oKbEmlpG63VbqaaDgilSqcjKIIzaVIZbCclbaUrGcFlV36C2bgQXOg3yMKtuPEDZGNxJfMBhMidnJGoxUrbZBr5/cLkz8x9zs1zktWTOUkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFvXrxw6nSadRcAAADAfrrcvnJq2fwPAAAA/2lXvf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAfUpRxP1J8vzlO3cnzXQuX+oO79zorrYcvO5IiRRHlpL5+LJw+s/zKq2dfOzfNf17/tL0Y77SvXqje2rh5a3P99u31taoz6F/bWFv/13d40vV/tTT5BlQ3P7m7dv367erMyeU/Xb63+GD+6LHF8+c+OPvStLaz0mq199TMNR77q/9Nenq3AgAA4BD6X5TxU6T48btfUi8iinjyWfgRvzvYb0disZ6/J5vorLQmG7nR7w3u1BdTkasWI6o9i5rTGfkAZvEnU8Sw/lw3vFRvr32rt9lbvbFevdvbvNO/098YpGK323o/VRRxLkWMImJ7fta9AwAAMCuNKOP/keKLpXFajYhyOge/fLl95dTyo2+weABNPkTdZ9WIGBWHYWYHAACA2ZqPMn6NFL99eDyu1TNzfkSzEc/V+W0jvqpznCKliBil+Nn7yAAAAHCozEUZP0SKjTROa5PzANNz5Zfeq94eXN/YUzs9V37o/z7gIDmbAAAAwDNgIcpYnZz4H6fH/2d3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD770iU8U2kaF37NIb1C4sP5o8ee/78628sX0x76l54xH3q2pMR8WURMSoiYulSf3D3XtVZabXae+rmGrtZR12WivpjHzYGAAAA/GEhyvhsMr2P0+ezbgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjGlfF+pPjoxPE0qp8udVZaVftWb7M/+Li62lu9sT6pSsVco84qr9rZ2dmp0m42c3ZzDnOOcm7l3M4ZRV6fs5mzm3OYc5RzK+d2zijz+pzNnN2cw5yjnFs5t3PGXF6fs5mzm3OYc5RzK+d2zmjM8McFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHqIgyTkSK+1+PU6TdV7r5ytb8rLsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/Zu5/XSO86DuCf786kmZ21dfrDtNgWBuJBQrs02WWdEg9ZGsYqix6yAbtedjaZroOzkzXZSLYsJRfBf6AgCOJlD3rw4h9gDyKCF92TeBELRvBU9VAEceWZeeZHZpNmFu2mG14vSL7f5/O8Z/L9PofAJw/zBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAenVIqxNlI8f5bpe7xT05FXI6I/9y/f7//Ff/ujf+r494rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcIRUiD9FivfOf5iqEbFT2Zs+M1NZrF25MFuIQqQsMpr/xsrli9U3Nm7c3GxubTXXq6ud1trGenPSH1e61Ops76wu1z+RzRzp9Ce8/tOlNzZu3t5sXf/2rQPPl0sXr23d2mysHXw6Tkcl4upoZa674NXlenfR7Vaj031pOnXIAisRS5NuBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMaUUyG+Gil+/vz5tJTXihGRIp7sHRUG2bt3uvWu9tjYt1PZmz4zU1msXbkwO8k8TbrQuUutzvZOdXW5Xl8ZKRenHoxma0qpEL+PFM2nXoil7n7KEZWIpbFslvtzpOj863yeq7yY5Xb3pUpzq8v16tc3Oq9ebLc31hq3GtfazerKzcZac9L1AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGOgnAqxHSkWCr9LV/NaMSJSb4iIwiB798sRp/J5Ke0fByp702dmnlqsXbkw25t/dvH11xdeOaw+/vJDzV1qdbZ3qqvL9frKSLk49WA0W1NKhfhSpPjumy/E1e5+yhGViKtj2Sz390jxg7++lOdOPZHlGv3t9N7x7Va7+VqW/X6k+Nlb/Wx0s+t59tlhdj7LTkeK+cv7s808+9wwu5Blz0aK5lcOzn5umD2XZf8YKTb+Uu1ny1m2lWdnhtmzaxvt9UkvLwAAACdb1v//KFJ87Ydvpn7Pe2j/f6db79odGwce6Pk/fv7/6v8rI7XdvK+v5f1/44j+fylS/PYfL+W5Xu99LT//dPf7sP9/MVL8+t7+7FqefWaYnZ90WwAAAPAoZP3/bKR48pcfFPs9b97/5531wf3/54v7x4Fj6v+fHqlla9q6/c53Gu12c9PExMRkMHmIX44AAHDCZP3/vUjxi58WUv8+dt7/f6Z3NOz/P3p32P8vjo0Dx9T/PzNSW+ytP6aKEaVbN25OPR9R2rr9zqutG43rzevNzkJt4dz8a7VztfmpJ/o394ezia8dAAAAPC6y/v+bkeK9d+8NPsc+yf3/8tg4cEz9/7Oje4rR+/8TXwoAAAA4sbL+/8eR4qNv/WHwvLn9/f+wQ8/6//7z/744u38c/JXgmPr/50ZqlXxdbz/ktQAAAAAAAAAAAAAAAAAAAIDjUk6F+CBSVF9+JbXy2iTP/1sfGweO6fP/MyO19Xg0//9v4osMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAjlVIi/RYqXv/eb2M1rxYhIEVP54Rf62bt3uvWPtVPZmz4zU1msXbkwO8n8qPcbmLvU6mzvVFeX6/WVkXJx6qG2CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8iqUoxD8jxa82P0zvT2fHPf9l325WI6n6AA7/T1X6rQyvi6wEdwVuhoiiyTgGZtNiCAiDipl2IYLpMYk0ZjoxycAse+HSi+iNC3d6B+3XwpW30BvFZV+A0FKd0xB1cMTE9ASeByo/SJ1TOZWsTqp6+W6v//BRZ3Pr8dNupEhRRDkb3xzLr6yt33r19msb8/79/Mv2XLy9fe/1+o3DB0fHeycne7t1p9/76HB37x9f4aLz/2x19guoH3zycHd//6Ree2n9D6cfrfxS/f/ZlTsb799+fj62s7m1tX1uzFLrX//0v0iXdykAAACuof9FGXcixU9f/5q+qSKKuPhe+An/O/iv3YiVZv89u4nO5tbsRg563f5pczIVedRKRH1uUnu+R76CvfjFFDFovjYLXm1ub/uoe9y9f7BXv9M9Pu2d9g77qThbbXM/dRSxkSKGETGuFr12AAAAFqUVZXwaKT5bnaRvq4hyvg9+4a3td19ef/IFVq5gkY/RrLNuRQyL67BnBwAAgMWqooxOpPjtg5vxXRWxFGdHtFvxTNOvWvFF00mKlCJimOJnz5EBAADgWlmKMm5FisM0Sd9XEbNH5rP3yu++V7/Z3z88N3b+Xvm1/3zAVfJuAgAAAE+B5Sjjx9kb/5P0g+f6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBTrYxhpPjwxZtpXEXEamdzq94+6h73+h/X97r3D/Zmo1Kx1Gpa51nT6XRap7O2c3dyB7nD3FHuODeKPD+3nbuTO8gd5o5yx7lR5vm57dyd3EHuMHeUO86NpTw/t527kzvIHeaOcse50Vrk3wsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABaniDLWIsXnX07StDr7zk4+M6oWvToAAADgMvweAAD//94LgGQ=")
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
r3 = syz_open_dev$vim2m(&(0x7f0000001f40), 0x4, 0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1000a, &(0x7f0000002900)={[{@uni_xlateno}, {@shortname_win95}, {@numtail}, {@utf8}, {@utf8}, {@uni_xlateno}, {@shortname_lower}, {@fat=@sys_immutable}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}, {@uni_xlate}]}, 0x2, 0x287, &(0x7f0000000600)="$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")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000380)={{0x6, 0x8}, 'port0\x00', 0x90, 0x2006a, 0xd2c97900, 0x2, 0x7, 0x8, 0x76b, 0x0, 0x2, 0xfe})
getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000)
pwritev(r3, &(0x7f0000001080)=[{&(0x7f0000000440)="a1eacc487990623bce11133568a88ea2b7abbd8df0be2fce3ee01819c295ca032c8b535931efc04bc7b3490654d804eeb43802850b9997c38212d41c73d41b85a01814f5416b4cb7cd672808d50b8393c445d90d802bf16d8bf24be61690ec3695434f1b23", 0x65}, {&(0x7f0000000ac0)="157efda7b8b09af5e584b52c7f448a60671097cd567db61a0e6c8fa31ef3ae2e8e88dd8f28935c5505dd9cecf1f1f341645ef5ba2db81ebf4b34b9949458314ea3995fe9f1134d14385d9ba22bd1c71607a2a9dd132c29fce62edc88471d7fa7d62ed9782148258f", 0x68}, {&(0x7f0000001200)="d0b60a636e79cb0bb5b714e08764d2edf908f0b610b61c273158fbef3541d12122a331f96c99e5f90ca56eac6b198dfae04439f1c1501fb4f3d9eaa5422f47c36327d6d2812a75f0e867821deafc16c1013e041b079ae39d220f1937a5382908fd0219494c48357b4371f07c480ddc9aaa13fc87027dbe8a6a75b55a6702652e1632540955f22c36f872ead05957d61591056b2a756742054c134c90fc60d55b379c4d0c1c18333bde758fcb74bcfe539d3cc5a4dfe935a611162ae8913d856bc6d3f41645e3ee580c2e6d4637df995a05", 0xd1}, {&(0x7f0000000c40)="2ba7143b44d2555bfc837e76f24151b39fa36031d2cbc0b2b26b816f54696486456f13bd59389b417588ab6164eebb1a79da62d25ac8dff1d99658fb254a19752a29284912655b31c8109d828ef042e37a93044fa7bd4e3e9e1123d2700791fe0934", 0x62}], 0x4, 0x1, 0x9)
r6 = accept4(r0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r6, @ANYBLOB=',wfdno=', @ANYRESOCT=r2])

14.857609304s ago: executing program 3 (id=640):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

13.85242147s ago: executing program 3 (id=644):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "b9d937ed86e6e82cc368e7a942ab3545380e271531b049c772d14bb48ff6439f0bb62b2f3ec543ab79a77716b6de9b7959cdabdeee5a17901da1fc8a14b31462", 0x2e}, 0x48, 0xfffffffffffffffe)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @d}, 0x0, r1})

12.973094436s ago: executing program 3 (id=651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f00000004c0)=0xc)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f0000001400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030322c726f6f746469723d30303030303030303030303030303030303030362c696f636861727365743d6d6163637972696c6c69632c6769643d69676e6f726500006d6f64653d30303030303030303030303030300900303030303031312c73686f727461648194efb1710615ffe30e66b46e2c6769643d69676e6f72652c646d6f64653d30303030303030303030303030303030303030313030302c7569643d69676e6f72652c706172746974696f6e3d30303030303030303030303030303030303030382c00fb83470f7ae25cec5bb4f032"], 0x1, 0xc30, &(0x7f0000000180)="$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")
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000dc0)='./file0\x00', 0x2000084c, &(0x7f0000000dc0)=ANY=[], 0x81, 0x14f5, &(0x7f0000001580)="$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")
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00')
syz_mount_image$nilfs2(&(0x7f0000000f40), &(0x7f0000000340)='./bus\x00', 0x2200408, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r1, @ANYBLOB="30ee20e1a957e794e91b842b97123bbe06fa16e5e1909e5f00759b056ddf6679f2dffc360b79ac18682f6e885b624f2f55ad6faf2e4bef46482c3a2a5288336573c737766270d703fe849f071df1ffa070b2a897e0f5621e4841001b8ef959e6a14862e78bd7496e8ad7562547a633888a4ea0968e33d955477a6ec98f92bc554aa040bc8b4dcddbad7167009bdba7985c20f11cd80046d167ae75a123ce8a4044c72ca975c883c6a7736e913fa4c10391ced35881fad28fd7a7a4e38875"], 0x1, 0xaee, &(0x7f0000003940)="$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")
msgget(0x3, 0x710)
msgget(0x2, 0x624)
msgget(0x1, 0x240)
msgctl$IPC_RMID(0x0, 0x0)
msgget(0x3, 0x693)
msgget(0x0, 0x200)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f000000ac40)={0x2020}, 0x2020)

11.321627369s ago: executing program 3 (id=658):
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x840000000002, 0x3, 0xff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

10.478615185s ago: executing program 3 (id=665):
r0 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0)
ftruncate(r0, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000000, 0x2012, r0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)

10.478436455s ago: executing program 32 (id=665):
r0 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0)
ftruncate(r0, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000000, 0x2012, r0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)

7.876910094s ago: executing program 4 (id=677):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="64000000180001002dbd7000fcdbdf2502008020fc00fe020000000008000f0004000000100016800c000100000000000000000608001e000100000008000400", @ANYBLOB="d0"], 0x64}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r3=>0x0})
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f00000003c0)={0xffffffffffffffff})
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x44, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7a}, @NL80211_ATTR_BANDS={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000001)
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000400)='./file1\x00', 0x2000c02, &(0x7f0000000180)={[{@attr2}, {@uquota}, {@grpquota}]}, 0x3, 0x9856, &(0x7f000001c900)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, 0xee01, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230000000000000081d050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x2001cc86)
socket(0x1b, 0x3, 0x7)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0xc020660b, &(0x7f0000001640))
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(r10, 0x40087101, 0x20001100)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000004c0)={'wlan0\x00'})
r12 = syz_io_uring_setup(0x4eee, &(0x7f0000000000)={0x0, 0x90e3, 0x8, 0x400000, 0x170, 0x0, 0x0}, &(0x7f0000000100)=<r13=>0x0, &(0x7f00000001c0)=<r14=>0x0)
r15 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(r13, r14, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x30, 0x0, r15, 0x0, 0x0, 0x0, 0x10040, 0x1})
io_uring_enter(r12, 0x2, 0x0, 0x0, 0x0, 0x0)

6.96365589s ago: executing program 2 (id=678):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000000c0))
timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

6.88015702s ago: executing program 2 (id=680):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000600), 0x2400, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000700)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0]})
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000040)=@fd={0x84, 0x7, 0x4, 0x100, 0x7, {0x77359400}, {0x5, 0x8, 0x9, 0x0, 0x6, 0xff, "794de5e3"}, 0x84, 0x4, {}, 0x9})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000740)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r3, 0xeeeeeeee})
r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0})
io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r9 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xa)
setfsgid(r10)
setfsgid(r10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11, 0x40, 0xa2}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x68}}, 0x0)
r13 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
fsetxattr(r13, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f00000005c0)='ext2\x00', 0x5, 0x3)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_continue}]}, 0xfe, 0x475, &(0x7f0000000140)="$eJzs3MtvG0UYAPBvnSZ9k1DKo6WFQEFUPJImfdADQoBA4gASEhyKkJBC4lahboOaINGqgsChHFEl7ogjEn8BJ7gg4ITEFe6oUoV6aeG0aO1d13FsN03dOK1/P2nbGc/YM593xzu7EzuAvjWa/ZNEbIuIPyNiuJZdWmG09t+1K+en/71yfjqJNH37n6Ra7+qV89NF1eJ5W2uZNM3zG1u0e+G9iKlKpXwmz48vnPpofP7suedmT02dKJ8on548evTQwb1DRyYPdyXOLK6ruz+d27Pr9Xcvvjl97OIHv36f9ff9vLwxjm4Zrb27LT3Z7cZ6bHtDOtnQw45wUwYiIttdg9XxPxwDsbleNhyvfdHTzgG3VZqmaavzc24xBe5iSfS6B0BvFCf67Pq3uqXJGs081ofLL9cugLLYr+VbtSAdrtcZbLq+7abRiDi2+N832Ra36T4EAECjH7P5z7MN87/6/KMUDzTUuydfQxmJiHsjYkdE3BcROyPi/ohq3Qcj4qGlL7/pRu03r5Asn/+ULq06uBXI5n8v5GtbS+Z/USqqjAzkue3V+AeT47OV8oH8Pdkfgxuz/ESHNn569Y+v2pU1zv+yLWu/mAvm/bi0oekG3czUwtStxNzo8ucRu7PXXxZ/EsUyTnZFsCsidq+yjdmnv9vTruzG8XfQhXWm9NuIp2r7fzGa4i8kbdcnJ54/Mnl4fFNUygfGi6Niud9+v/BWu/ZvKf4uyPb/lpbHfz3+kWRTxPzZcyer67XzN9/Ghb++bHtNs9rjfyh5p5oeyh/7ZGph4cxExFDyxvLHJ68/t8gX9bP49+9rPf53xPV34uGIyA7ivRHxSEQ8mvf9sYh4PCL2dYj/l1ee+PDm4+9wV76LsvhnbrT/o3H/Nx8Iiy2KliYGTv78Q7v2V7b/D1VT+/NHVvL516E7rYIAAACAu1opIrZFUhqrp0ulsbHa3/DvjC2lytz8wjPH5z4+PVP7jsBIDJaOz1bKm+v3g2v3Qyfye8NFfrIpfzC/b/z1wOZqfmx6rjLT6+Chz21tM/4zfw/0unfAbef7WtC/jH/oX8Y/9KvE+Ic+ZvxD/2o1/j/rQT+Atef8D/2rxfh/6UwvOgKsOed/6F/GP/Sltt+NL7UvumMSL8a66Ealkg5H3PrrFL/W2PNwqokorYturLdELEaXj7oNK/4xi9UlkmhZ1Plzo79+JRQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiT/R8AAP//xLXdUA==")

5.880758615s ago: executing program 2 (id=684):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r1, 0x1)
r2 = dup3(r0, r1, 0x0)
sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000400)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2ffff51f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9973f0243a55be3c402", 0x226}], 0x1}}], 0x1, 0x0)
getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1ff, '\x00', 0x0, r2, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x86, &(0x7f00000001c0)=""/134, 0x40f00, 0x40, '\x00', r3, 0x0, r2, 0x8, &(0x7f00000002c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xb, 0x6, 0xffffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r2, r2, r2, r2, r2, r2, r2, r4, r2], &(0x7f0000000480)=[{0x3, 0x3, 0xa, 0xf}, {0x0, 0x5, 0xc, 0xb}], 0x10, 0x10, @void, @value}, 0x94)

5.218007312s ago: executing program 4 (id=687):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x11f, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
epoll_create1(0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

5.162909852s ago: executing program 0 (id=688):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3e, 0x17d, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8)
syz_create_resource$binfmt(&(0x7f0000000280)='./file3\x00')
read$FUSE(r0, &(0x7f0000003c80)={0x2020}, 0x2020)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)

4.932225131s ago: executing program 2 (id=690):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000000100)="$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")
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="c02102"], 0xfce1) (fail_nth: 2)

4.81056696s ago: executing program 0 (id=692):
r0 = socket(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x10842, 0x120)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fanotify_init(0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x6d)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendfile(r5, r3, 0x0, 0x7fffffff)

3.631929355s ago: executing program 0 (id=693):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3e, 0x17d, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8)
syz_create_resource$binfmt(&(0x7f0000000280)='./file3\x00')
read$FUSE(r0, &(0x7f0000003c80)={0x2020}, 0x2020)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r2, 0x0)
ftruncate(r2, 0xc17a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)

3.615662325s ago: executing program 4 (id=694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000036c362641e79ff68c3d771821f538009000100626f6e640000000014000280080014000000000005000100"], 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$caif_stream(0x25, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
socket(0x11, 0x80a, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r2], 0x398}}, 0x0)

3.497511945s ago: executing program 2 (id=695):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x448, 0x65, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x4, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x418, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x40}, @TCA_ROUTE4_ACT={0x40c, 0x6, [@m_simple={0xc4, 0x1f, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_DATA={0x2d, 0x3, '@-^[\xa5&,.\x00pe\xe9\xb9\xf1Q+=\xdf\xacqd\xb4\xd3\rj6\xb4\xa6fz\x91\xa6\xe9\xdfy\xef\xbcY\xbb[a'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x403, 0xfffffffffffffffe, 0x4, 0x2}}, @TCA_DEF_DATA={0x7, 0x3, '\xfc}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x0, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x184, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x200, 0x8, 0x9, 0xff}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffb, 0x10000000, 0x6357cdec, 0x10000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6d7, 0x5, 0x4, 0x8001}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe0, 0x7, 0xcdb3da5a94de4674, 0x3, 0x1}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x81, 0x10000000, 0x1, 0xc}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x0, 0x0, 0x0, 0x7}, 0x4d}}]}, {0xad, 0x6, "1dc7479808d6c90250d523862380873363ee290289ff44e789cde40973e125f404b7dae756d1e8a04bcc9637b40abe50f02f62b2e8308eb77b659a331ac115d87d73e6232de8f9dad91575b3d6c8cd6762d5298b996754ad8dcb555bf914140ac84d95a4d4a501b1b4ba7c7fba20a003d5334fc0342357ea596bc8072803118c8dbf3be88e493ab4f40b7b3789b7b297cc61ef1488f4c28dbcf2e92f3b73fa308167e351366a76093f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x84, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x55, 0x6, "b785195954bf29eb39a865c5695a7ac46cec065f7db06dbdba2e8cf062693312261bf71915b2d84a074fd931b04b8440933794ba3bc0c3d3302773efdb92a216873b53281af4671231b5fff52cece35cfe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x13c, 0x1b, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x5, 0xb4, 0x40, 0x1f}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0x0, 0xffffffff}}]}, {0xe5, 0x6, "8d3fe574fbc1ca49b619a269038c45853e95bcebaf7809e37533e03d9655c6e3661b66380f0ea5b4dc2df75af2fc5a96b1bcd59b6a7cf20122ebfae4e633f1f61bdf6b44c90c272314e5d9d2042b89088234fdf2e4fb09989c12df538c477b6f5603235328c12c550a6001ad6984c698c84439349bcc53589560f99227ad7bee24787059ac8319efe501f8c325dadd8a36e79e9ea85aa1fd6bc411fd4cec3509d4f3d04f2f8dfc0e5054c21d75cfc4f2585e1407e24c35443d10570147ad700dd5d0059aaf7705bec631dbe6824c17afc7ea430a2915527f9ddaa5841295de7668"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

3.244315994s ago: executing program 0 (id=696):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f00000004c0)=0xc)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f0000001400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030322c726f6f746469723d30303030303030303030303030303030303030362c696f636861727365743d6d6163637972696c6c69632c6769643d69676e6f726500006d6f64653d30303030303030303030303030300900303030303031312c73686f727461648194efb1710615ffe30e66b46e2c6769643d69676e6f72652c646d6f64653d30303030303030303030303030303030303030313030302c7569643d69676e6f72652c706172746974696f6e3d30303030303030303030303030303030303030382c00fb83470f7ae25cec5bb4f032"], 0x1, 0xc30, &(0x7f0000000180)="$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")
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000dc0)='./file0\x00', 0x2000084c, &(0x7f0000000dc0)=ANY=[], 0x81, 0x14f5, &(0x7f0000001580)="$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")
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00')
syz_mount_image$nilfs2(&(0x7f0000000f40), &(0x7f0000000340)='./bus\x00', 0x2200408, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r1, @ANYBLOB="30ee20e1a957e794e91b842b97123bbe06fa16e5e1909e5f00759b056ddf6679f2dffc360b79ac18682f6e885b624f2f55ad6faf2e4bef46482c3a2a5288336573c737766270d703fe849f071df1ffa070b2a897e0f5621e4841001b8ef959e6a14862e78bd7496e8ad7562547a633888a4ea0968e33d955477a6ec98f92bc554aa040bc8b4dcddbad7167009bdba7985c20f11cd80046d167ae75a123ce8a4044c72ca975c883c6a7736e913fa4c10391ced35881fad28fd7a7a4e38875"], 0x1, 0xaee, &(0x7f0000003940)="$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")
msgget(0x3, 0x710)
msgget(0x2, 0x624)
msgget(0x1, 0x240)
msgctl$IPC_RMID(0x0, 0x0)
msgget(0x3, 0x693)
msgget(0x0, 0x200)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f000000ac40)={0x2020}, 0x2020)

2.840265352s ago: executing program 0 (id=698):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=cp737,uni_xlate=0,uni_xlate=1,uni_xlate=0,utf8=0,utf8=0,shortname=mixed,iocharset=macinuit,check=strict,shortname=mixed,utf8=0,discard,codepage=863,umask=00000000000000000000001,rodir,dmask=00000000000000000100000,func=POLICY_CHECK,func=POLICY_CHECK,smackfsroot=uni_xlate=1,fscontext=sysadm_u,fsuuid=40a6c3b2-05bd-c78c-06c8-f62d9bcd,smackfsfloor=uni_xlate=1,permit_directio,uid=', @ANYRESDEC, @ANYBLOB="3e755fe310f5f2a653befb166477ffe9c2a63a5f5b03446d2d168dbc5295b27b70234d288a555f421a4686a87c17263ec8448abf71f9498977d8c361dbf0f5f0d70450876f02f411db3f5dbef1bd4da87768c9bf368d0567d2d473e28fac366accb10895a429f097b7b9faa6842e2525668dcf19df534e737388d412371501a0935d7e92aa2415eaeb472fd4025b26afdeb6f42f696b40cd71746bc2a0b54a4c68cc3a7c8bfcd163c9cbd73c4b37d330fb0c9e0cc1acbec6cd31ac22e2cf11f93ac9095219442b2c041776d57cf43d00", @ANYRESDEC, @ANYBLOB='J\x00'], 0x6, 0x2c6, &(0x7f0000000a40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r2, &(0x7f0000000340)=""/172, 0xfffffffffffffe69)
clock_getres(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4)
getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000100), &(0x7f00000001c0)=0x4)
sendmsg$802154_dgram(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x480c4}, 0x200080c4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78, 0x2}, [@ldst={0x3, 0x0, 0x5, 0x1c10a1, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

2.45490239s ago: executing program 4 (id=700):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet6(0xa, 0x801, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff2, 0xffe0}, {0xf, 0xffe0}, {0xe, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x20048000)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000340)={'c', ' *:* ', 'wm\x00'}, 0x9)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000001c00000000000000000000711212000000000095000000000000001290aa8f3e4f48eaf057b13841784965fb7d411ba4fb75b64ecdf88e3429351336fdd51fc5d358cbb7b6a3bf715d8600a5500a7991ec6f747f64bbfd3e7484a99b79eb56041d9a17e13cd06ef8a29c00199d175b9c4b411b795f48f86c24f8a4af79f096ff357b25c8d54a2820d87b491ae56a1ff015652e0b408f27600ec826ba8b3684c105490af027698a949b519340d497118b717ec468f7567131583787dd5a8d3e9e6adffc8f0c4a8cddee9529fe9b8b4501271f8163d45fbf8050f8de9762"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.45452991s ago: executing program 2 (id=701):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
r3 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f00000000c0))
timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

2.37552485s ago: executing program 0 (id=702):
r0 = socket(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x10842, 0x120)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fanotify_init(0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x6d)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendfile(r5, r3, 0x0, 0x7fffffff)

2.275814179s ago: executing program 33 (id=702):
r0 = socket(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x10842, 0x120)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fanotify_init(0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x6d)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
sendfile(r5, r3, 0x0, 0x7fffffff)

2.246642039s ago: executing program 4 (id=704):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
removexattr(0x0, &(0x7f0000000080)=@known='user.incfs.metadata\x00')

2.182452929s ago: executing program 1 (id=705):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x27f, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0)
pwritev2(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)='\a', 0x1}], 0x1, 0x7fff, 0x2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r2 = getpid()
process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0)
lseek(r4, 0xfffffffffffffff5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x10001, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8c02, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000580)=[{0x2, 0x8, 0xa, 0x6}, {0x3, 0x8000001, 0x7, 0x9}], 0x10, 0xffff, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0x5e, 0x2000007, 0x1, {0x1, @vbi={0x8ba4, 0x9, 0x6, 0x41416770, [0x0, 0xfffffffb], [0x8, 0x9], 0x1}}, 0x2008})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TCFLSH(r8, 0x804c4700, 0x1000000000000)
sendfile(r7, r7, 0x0, 0x7ffff000)

1.164337084s ago: executing program 1 (id=706):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
tkill(r0, 0x12)
ptrace(0x4208, r0)

762.621113ms ago: executing program 4 (id=707):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r0, 0x2000009)
mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000004, 0x30, r0, 0x8000000)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
userfaultfd(0x80800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
ftruncate(r0, 0xf331)

761.638533ms ago: executing program 1 (id=708):
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x840000000002, 0x3, 0xff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

638.649262ms ago: executing program 1 (id=709):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000036c362641e79ff68c3d771821f538009000100626f6e640000000014000280080014000000000005000100"], 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
socket(0x11, 0x80a, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r2], 0x398}}, 0x0)

289.473561ms ago: executing program 1 (id=710):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f00000004c0)=0xc)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f0000001400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030322c726f6f746469723d30303030303030303030303030303030303030362c696f636861727365743d6d6163637972696c6c69632c6769643d69676e6f726500006d6f64653d30303030303030303030303030300900303030303031312c73686f727461648194efb1710615ffe30e66b46e2c6769643d69676e6f72652c646d6f64653d30303030303030303030303030303030303030313030302c7569643d69676e6f72652c706172746974696f6e3d30303030303030303030303030303030303030382c00fb83470f7ae25cec5bb4f032"], 0x1, 0xc30, &(0x7f0000000180)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcZy9S+mYhXOqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgpYzOxbcUWRNi2KEmV9Pjb13Z15b/a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/cvHU6fSwWwEAPEiXx7526oz7PwA8Vq74/38AAAAAAAAAAAAAADjoUhTxZKSYv7yeJqr3HfVL7b6bt8aHR7avdiRVNQ9V5cuf+ukzZ8996YWh89281J79gPr322fjtbErFxsvz92YX5heXJyeaozPtifnpqZ3fYS91t9qsDoBjRuv35y6dm2xceb5s3fsvjXwfv8TxwcuDD178plu2fHhkZGxzSL13vK1e25Ix04zPA5HEScjxXPf/1lqRUQRez8X9Qc79lsdqToxWHVifHik6shMuzW7VO4c7Z6IIqLRU6nZPUfbj0XU+h5oH3bWjFgum182eLDs3th8a6F1dWa6MdpaWGovtedmR1OntWV/GlHE+RSxEhFr/Xcfri+KqEWK7x5bT1cj4lD3PHyxmhi8czuKfezjLpTtbPRFrBSPwJgdYP1RxKuR4ufvnIjJfJ2prjVfiHi1zB9GvFXmSxGp/GKci3hvm+8Rj6ZaFPEX5fhfWE9T1fWge1259PXGV2evzfWU7V5XPuL94a4rxUO6PxzZkg/GAb821aOIVnXFX0/3/psdAAAAAAAAAAAAAAAAAO63I1HEZyLFK//+x9W84qjmpR+7MPQHA7/aO2f86Q85Tln2+YhYLnY3J/dwnhg4mkZTeshziR9n9SjiT/L8v28/7MYAAAAAAAAAAAAAAAAAAAA81or4aaR48d0TaSV61xRvz15vXGldnemsCttd+7e7ZvrGxsZGI3WymXMi53LOlZyrOddyRpHr52zmnMi5nHMl52rOtZxxKNfP2cw5kXM550rO1ZxrOaOW6+ds5pzIuZxzJedqzrWccUDW7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DgpoohfRorvfHM9RYqIZsREdHK1/2G3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo9acifhApGn/YvL2tFhGp+rfjRPnLuWgeLvOT0Rwq86VoXszZqrLW/PZDaD9705eK+Emk6K+/fXvA8/j3dd7d/hrEW9/afPfZWicPdXcOvN//xPFjF4ZGfuPpnV6n7RoweKk9e/NWY3x4ZGSsZ3Mtf/one7YN5M8t7k/XiYjFN958vTUzM71w7y/Kr8Aeqj9CL1LtcempF9WLqB2IZjycvvMYKO//70WK3333P7o3/M79vx6/0nl3+w4fv/jTzfv/i1sPtMv7f21rvXz/L+/p293/n+zZ9mL+3UhfLaK+dGO+73hEffGNN0+2b7SuT1+fnj136tSXh4a+fPZU3+GI+rX2zHTPq/tyugAAAAAAAAAAAAAAAAAenFTEVyJF6yfrqRERt6r5WgMXhp49+cyhOFTNt7pj3vZrY1cuNl6euzG/ML24OD3VGJ9tT85NTe/24+rVdK/x4ZF96cyHOrLP7T9Sf3lu/o2F9vU/Wtp2/9H6xauLSwutye13x5EoIpq9WwarBo8Pj1SNnmm3Zquqo9tOpv/o+lIR/xkpJs810ufztjz/f+sM/zvm/y9vPdA+zf//RM+28jNTKuIXkeJ3/vLp+HzVzqNx1znL5f42Ugye/1wuF4fLct02dJ4r0JkZWJb930jxj7+8s2x3PuSTm2VP7/rEPiLK8T8WKX7w59+L38zb7nz+w/bjf3TrgfZp/J/q2Xb0jucV7Lnr5PE/GSleevLt+K287YOe/9F99saJXPj28zn2afw/1bNtIH/ub9+frgMAAAAAAAAAADzS+lIRfxcpfjRSSy/kbbv5+39TWw+0T3//69M926buz3pFH/pizycVAAAAAA6IvlTETyPF9aW3b8+hvnP+d8/8z9/bnP85nLbsrf6c79eq5wbczz//6zWQP3di790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66lPVPP5p3ZcT301Urzy38/lcul4Wa67DvxA9Wv98tzsyYszM3OTraXW1Znpxth8a3K6rPtUpFj/m8/lukW1vnp3vfnOGu+ba7EvRIqRv++W7azF3l2b/KnNsqfLsp+IFP/1D3eW7a5j/anNsmfKsn8dKb7xz9uXPb5Z9mxZ9nuR4sffaHTLHi3Ldp+P+unNss9PzhX7MCoAAAAAAAAAAAAAAAAAAAA8bvpSEX8WKf7nxsrtufx5/f++nreVt77Vs97/Freqdf4HqvX/d3p9L+v/V88VWN7pUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OMpRRFvRor5y+tptb9831G/1J69eWt8eGT7akdSVfNQVb78qZ8+c/bcl14YOt/ND65/v30mXhu7crHx8tyN+YXpxcXpqcb4bHtybmp610fYa/2tBqsT0Ljx+s2pa9cWG2eeP1ttPpx33xp4v/+J4wMXhp49+Uy37PjwyMhYzyFqfff86XdJO2w/HEX8VaR47vs/Sz/qjyhi7+fiQ747++1I1YnBqhPjwyNVR2bardmlcudo90QUEY2eSs3uOXoAY7EnzYjlsvllgwfL7o3NtxZaV2emG6OthaX2UntudjR1Wlv2pxFFnE8RKxGx1n/34fqiiNcjxXePrad/6Y841D0PX7w89rVTZ3ZuR7GPfdyFsp2NvoiV4hEYswOsP4r4p0jx83dOxL/2R9Si8xNfiHi1zB9GvBWd8U7lF+NcxHvbfI94NNWiiP8rx//Cenqnv7wedK8rl77e+Orstbmest3ryiN/f3iQdr42feWBtmMH9Sjix9UVfz39m/+uAQAAAAAAAAAAAAAAAA6QIn49Urz47olUzQ/Oc4qfynuvznSm9XXn/nXnTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjUK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs5w7xiAAAAAAAAAAAAAAAAAABgHxTVPym+8831tNHfWV96Ijq5aj3Qj73/DwAA//8H5/Ye")
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000dc0)='./file0\x00', 0x2000084c, &(0x7f0000000dc0)=ANY=[], 0x81, 0x14f5, &(0x7f0000001580)="$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")
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00')
syz_mount_image$nilfs2(&(0x7f0000000f40), &(0x7f0000000340)='./bus\x00', 0x2200408, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r1, @ANYBLOB="30ee20e1a957e794e91b842b97123bbe06fa16e5e1909e5f00759b056ddf6679f2dffc360b79ac18682f6e885b624f2f55ad6faf2e4bef46482c3a2a5288336573c737766270d703fe849f071df1ffa070b2a897e0f5621e4841001b8ef959e6a14862e78bd7496e8ad7562547a633888a4ea0968e33d955477a6ec98f92bc554aa040bc8b4dcddbad7167009bdba7985c20f11cd80046d167ae75a123ce8a4044c72ca975c883c6a7736e913fa4c10391ced35881fad28fd7a7a4e38875"], 0x1, 0xaee, &(0x7f0000003940)="$eJzs3U2MW0cBAOCxd72b7Q9xSkKXNLQJhbb8dNPsbsNPBEmVCImoqRCXShEcojQtESEgigRURSQ5cUG0qoLEiR9x6qUqCIleUNQTl0o0UoTUU+HAgSiISBwgkBjt7ozXnth93j8/e/190nj83rznmXl+fn6/MwEYWdXF1/n56UoIF9945cjfH/rb1MKYg80p6ouv4y1DtRBCJQ6PZ5/37thSfPP6iyc7xZUwu/iahsNT15rz3hlCOBd2h0uhHnZevPzyW7NPHjt/9MKet189cHVjag8AAKPlS5cOzO/4y5/u23bjtfsPhck0euHN4v55PY64K+73H4o7/mn/vxrahystodVENt14DNWp9unGOkzXmk8tm268S/4TWf61LtNNhvfOf6xlXKd6wzBL63E9VKozbcPV6szM0jF5WDyun6jMnD195tnnSyoosO7+9UAIYXdLOHyhfXi14atxy7Een9UaDm7AZ64x1HqsZ2MAyjqU4VD/8rrRWFJ6nfsUGltL3gABRPn1wtucy88srE3z08Z7y//aE9XO88M66LT+VVovsq/z+t9L/k0TJecf5P/r87Y4rJ/NujaleqXf0V1xOL+OkN+/1P33l1/paB+bX4+o9VjObtcRhuX6QrdyjvW5HKvVrfz5erFZfS7GaTl8Pktv/f3k3+mwfMdAZ//Oz/8LgjDYIbQN19byWY2Stz/A4Mrvm2uk66NRfl9fnj5ZkL6lIH2qIP2OgvQ7C9JhlP32Oz8JL1WWj/PzY/qVng9P59nujvH7Vlie/HzkSvPP7/tdqbXmn99PDIPs9yeePvXpZ45fXrr/v9Jc/2/F9T0dbtTjb+tSnCCdL8zPqzfv/a+351PtMt09WXnu7jD94vvt7dNVti9/TmjZztxWjun2+bZ2m25X+3T1bLqpGLZk5c33T+7I5kv7H2m7mpbXeFbfWlaPiawcabuyLcZ5OWA10vrY7f7/tH5Oh1rl2dNnTj0Wh9N6+sex2uTC+H19Ljewdr0+/zMd2p//uas5vlZt3S5sXR5fWdouvB4/r338bDOf9vFzcTj9z31tbGpx/MzJb555Zv2rDyPt+e+/8PUTZ86c+vZ6vKmFNcw+NxXWMnuJb74wGMVYyZt02DIo5Vn1m4WKDEAxNuGbkjdMwIbb+8OlnYBHT3/jxHOnnjt1dm7//rnZ2f2fmZvfu7hfv7d1777VuRJKC6yn5T/9sksCAAAAAAAAAAAA9Oq7R49cvvLmp95Zev5/+fm/9Px/uvM3Pf//o+z5//w5+fQcfHoOcFuH9MVpsgZWJ7LpajG8Pyvv9iyfHdl8H4hxsx+/+Px/yi5v1zWV595sfK3LYNacwG3tpUxkbZDk/QV+OMYXYvyrACWqTHUeHeOi9q3Tup7ap2hpl6KhfeDhkb63tDakdkzS898d23Vq+bK39aGMrL9+PE5Ydh2Bzv4xUu1//3O54qWXRegexvub389Gd51odN1L77UHG4D1UXb/n+m8Z4rP/uGLWxZCmuzaE+3by7z9UliJP19pHx70/ic3Ov+8375+5192/fvd/2ez/7uet39Zj3n11eX7n59ffacl27Cz1/zz+qd2oLevLP8bMf9Um4dDb/k3fpnln18Q6tF/s/zv6DH/2+q/a3X5/y/mnxbbIw/2mn916ZpZtb0c+XnjdP0vP2+c3Mzqn9r2fI/8v/xCp/qvsqPGWzF/GGXD0s/sSmX7Ec2d9tX3/xudW9/+f5uFzTZr+X0Yj8cxaUOc7nPI+ztZafnT/RXpf2BH9vmVgv83/f8Ot8/GuOj3kPr/vXV96XJePf7lp/WzHpdlGq51WLabdVsDw+rd/l3/WzpSHIBrHmsKxzc8jy2l13Hgw6EBKEMzNMZWMV+zn7iSy99oNDb2hFaBUjOn9OVf9nFC2fmXvfyL5P3/5vvwef+/eXre/2+envf/m6dPxW+oW3re/2++PPP+f/P0e7PPzfsHni5I/2BB+s7O6c3D9vsK5t9VkP6hgvQ9zfSDbVOk9PsL5n+gIP2e9vTJPP3Bgvk/UpD+0YL0hwrSH2lJb+0DOqV/rGD+zS49jzKq9YdRlj+f5/cPoyNd/+n2+99ekA4Mr5++tu/w8d98pb70/P9E83xIuo53KA7X4vHT9+Jwft07tAwvpL0Zh/+apQ/6+Q4YJXn7Gfn/+8MF6cDwSvd5+X3DCKps6Tw6xkXtVnXbz2e4fDzGn4jxJ2P8aIxnYrw3xvtiPNun8rExDr/+uwMvVZaP97dm6b3eT54/D9TWTlQIYa7H8uTnB1Z6P3vejl/y48n+5L/Kx8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKU118nZ+froRw8Y1Xjjx97PTehTEHm1PUF1/HW4ZqzflCeCzGYzH+RXxz8/qLJ1vjWzGuhNlQCZXm+PDUtfCDK996fOHtnSGEc2F3uBTqYefFyy+/NfvksfNHL+x5+9UDVzd4MQAAAMCm9v8AAAD//2GuC3I=")
msgget(0x3, 0x710)
msgget(0x2, 0x624)
msgget(0x1, 0x240)
msgctl$IPC_RMID(0x0, 0x0)
msgget(0x3, 0x693)
msgget(0x0, 0x200)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f000000ac40)={0x2020}, 0x2020)

0s ago: executing program 1 (id=711):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x448, 0x65, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x4, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x418, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x40}, @TCA_ROUTE4_ACT={0x40c, 0x6, [@m_simple={0xc4, 0x1f, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_DATA={0x2d, 0x3, '@-^[\xa5&,.\x00pe\xe9\xb9\xf1Q+=\xdf\xacqd\xb4\xd3\rj6\xb4\xa6fz\x91\xa6\xe9\xdfy\xef\xbcY\xbb[a'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x403, 0xfffffffffffffffe, 0x4, 0x2}}, @TCA_DEF_DATA={0x7, 0x3, '\xfc}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x0, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x184, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x200, 0x8, 0x9, 0xff}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffb, 0x10000000, 0x6357cdec, 0x10000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6d7, 0x5, 0x4, 0x8001}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe0, 0x7, 0xcdb3da5a94de4674, 0x3, 0x1}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x81, 0x10000000, 0x1, 0xc}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x0, 0x0, 0x0, 0x7}, 0x4d}}]}, {0xad, 0x6, "1dc7479808d6c90250d523862380873363ee290289ff44e789cde40973e125f404b7dae756d1e8a04bcc9637b40abe50f02f62b2e8308eb77b659a331ac115d87d73e6232de8f9dad91575b3d6c8cd6762d5298b996754ad8dcb555bf914140ac84d95a4d4a501b1b4ba7c7fba20a003d5334fc0342357ea596bc8072803118c8dbf3be88e493ab4f40b7b3789b7b297cc61ef1488f4c28dbcf2e92f3b73fa308167e351366a76093f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x84, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x55, 0x6, "b785195954bf29eb39a865c5695a7ac46cec065f7db06dbdba2e8cf062693312261bf71915b2d84a074fd931b04b8440933794ba3bc0c3d3302773efdb92a216873b53281af4671231b5fff52cece35cfe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x13c, 0x1b, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x5, 0xb4, 0x40, 0x1f}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0x0, 0xffffffff}}]}, {0xe5, 0x6, "8d3fe574fbc1ca49b619a269038c45853e95bcebaf7809e37533e03d9655c6e3661b66380f0ea5b4dc2df75af2fc5a96b1bcd59b6a7cf20122ebfae4e633f1f61bdf6b44c90c272314e5d9d2042b89088234fdf2e4fb09989c12df538c477b6f5603235328c12c550a6001ad6984c698c84439349bcc53589560f99227ad7bee24787059ac8319efe501f8c325dadd8a36e79e9ea85aa1fd6bc411fd4cec3509d4f3d04f2f8dfc0e5054c21d75cfc4f2585e1407e24c35443d10570147ad700dd5d0059aaf7705bec631dbe6824c17afc7ea430a2915527f9ddaa5841295de7668"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

kernel console output (not intermixed with test programs):

p3: detected capacity change from 0 to 512
[   96.129505][ T4429] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   96.179882][ T4429] EXT4-fs (loop3): 1 truncate cleaned up
[   96.183369][ T4429] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none.
[   96.252265][ T4438] loop1: detected capacity change from 0 to 8192
[   96.256628][ T4436] loop0: detected capacity change from 0 to 764
[   96.292249][ T4438] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   96.295700][ T4438] REISERFS (device loop1): using ordered data mode
[   96.297173][ T4438] reiserfs: using flush barriers
[   96.310300][ T4443] loop2: detected capacity change from 0 to 512
[   96.401304][ T4441] loop4: detected capacity change from 0 to 1024
[   96.420448][ T4438] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   96.426252][ T4443] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   96.427913][ T4443] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value
[   96.431737][ T4438] REISERFS (device loop1): checking transaction log (loop1)
[   96.479081][ T4441] EXT4-fs (loop4): Ignoring removed nobh option
[   96.480476][ T4441] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   96.482665][ T4441] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   96.511002][ T4441] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.100: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   96.755831][ T4447] rock: directory entry would overflow storage
[   96.757527][ T4447] rock: sig=0x4f50, size=4, remaining=3
[   96.758841][ T4447] iso9660: Corrupted directory entry in block 6 of inode 1792
[   97.479063][ T4441] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.100: couldn't read orphan inode 11 (err -117)
[   97.488455][ T4441] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noload,nobh,jqfmt=vfsv0,journal_dev=0x0000000000000017,norecovery,barrier=0x0000000000000004,nouid32,,errors=continue. Quota mode: writeback.
[   97.597496][ T4438] REISERFS (device loop1): Using tea hash to sort names
[   97.600280][ T4438] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   97.658814][ T4438] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   98.724310][ T4450] loop0: detected capacity change from 0 to 256
[   99.335729][ T4450] FAT-fs (loop0): Directory bread(block 64) failed
[   99.341267][ T4450] FAT-fs (loop0): Directory bread(block 65) failed
[   99.381042][ T4450] FAT-fs (loop0): Directory bread(block 66) failed
[   99.382443][ T4450] FAT-fs (loop0): Directory bread(block 67) failed
[   99.390857][ T4450] FAT-fs (loop0): Directory bread(block 68) failed
[   99.392274][ T4450] FAT-fs (loop0): Directory bread(block 69) failed
[   99.393856][ T4450] FAT-fs (loop0): Directory bread(block 70) failed
[   99.395223][ T4450] FAT-fs (loop0): Directory bread(block 71) failed
[   99.396677][ T4450] FAT-fs (loop0): Directory bread(block 72) failed
[   99.398518][ T4450] FAT-fs (loop0): Directory bread(block 73) failed
[   99.519475][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   99.904893][ T4462] loop2: detected capacity change from 0 to 1024
[  100.340776][ T4462] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,noload,resuid=0x0000000000000000,auto_da_alloc=0x0000000000000002,resgid=0x0000000000000000,usrquota,data_err=abort,errors=remount-ro,. Quota mode: writeback.
[  103.809560][ T4476] loop1: detected capacity change from 0 to 512
[  103.822574][ T4476] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  103.884207][ T4476] EXT4-fs error (device loop1): __ext4_iget:4872: inode #11: block 16: comm syz.1.94: invalid block
[  103.886852][ T4476] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.94: couldn't read orphan inode 11 (err -117)
[  103.889539][ T4476] EXT4-fs (loop1): 1 truncate cleaned up
[  103.890747][ T4476] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback.
[  103.922150][ T4480] loop0: detected capacity change from 0 to 512
[  103.994208][ T4482] loop4: detected capacity change from 0 to 8192
[  104.001617][ T4480] EXT4-fs (loop0): #blocks per group too big: 16384
[  105.666189][ T4491] loop3: detected capacity change from 0 to 512
[  106.241460][ T4482] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  106.243670][ T4482] REISERFS (device loop4): using ordered data mode
[  106.245596][ T4482] reiserfs: using flush barriers
[  106.254490][ T4482] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  106.263593][ T4482] REISERFS (device loop4): checking transaction log (loop4)
[  106.364616][ T4491] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  106.393762][ T4491] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 16: comm syz.3.104: invalid block
[  106.396682][ T4491] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.104: couldn't read orphan inode 11 (err -117)
[  106.401602][ T4491] EXT4-fs (loop3): 1 truncate cleaned up
[  106.402911][ T4491] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback.
[  106.450473][ T4497] loop1: detected capacity change from 0 to 764
[  107.025867][ T4506] rock: directory entry would overflow storage
[  107.027344][ T4506] rock: sig=0x4f50, size=4, remaining=3
[  107.028607][ T4506] iso9660: Corrupted directory entry in block 6 of inode 1792
[  107.424248][ T4482] REISERFS (device loop4): Using tea hash to sort names
[  107.426136][ T4482] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  107.613833][ T4515] loop3: detected capacity change from 0 to 512
[  107.664010][ T4515] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  107.665534][ T4515] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value
[  108.323256][ T4523] loop3: detected capacity change from 0 to 1024
[  108.725315][ T4523] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,noload,resuid=0x0000000000000000,auto_da_alloc=0x0000000000000002,resgid=0x0000000000000000,usrquota,data_err=abort,errors=remount-ro,. Quota mode: writeback.
[  108.772971][ T4501] loop2: detected capacity change from 0 to 40427
[  108.830551][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  108.845218][ T4501] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  108.846854][ T4501] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  108.850782][ T4501] F2FS-fs (loop2): invalid crc value
[  108.872782][ T4501] F2FS-fs (loop2): Found nat_bits in checkpoint
[  109.774758][ T4501] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  109.777659][ T4501] F2FS-fs (loop2): Start checkpoint disabled!
[  110.265557][ T4555] loop2: detected capacity change from 0 to 512
[  112.097756][ T4560] ODEBUG: Out of memory. ODEBUG disabled
[  112.236019][ T4555] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  112.270112][ T4555] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 16: comm syz.2.114: invalid block
[  112.272780][ T4555] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.114: couldn't read orphan inode 11 (err -117)
[  112.278937][ T4555] EXT4-fs (loop2): 1 truncate cleaned up
[  112.280068][ T4555] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback.
[  112.828105][ T4563] loop3: detected capacity change from 0 to 764
[  113.484218][ T4577] rock: directory entry would overflow storage
[  113.485706][ T4577] rock: sig=0x4f50, size=4, remaining=3
[  113.486881][ T4577] iso9660: Corrupted directory entry in block 6 of inode 1792
[  113.651414][ T4582] loop0: detected capacity change from 0 to 2048
[  114.427482][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  114.965128][ T4589] loop3: detected capacity change from 0 to 32768
[  115.014435][ T4589] XFS: ikeep mount option is deprecated.
[  115.020405][ T4589] XFS: ikeep mount option is deprecated.
[  115.087085][ T4589] XFS (loop3): Mounting V5 Filesystem
[  115.179715][ T4589] XFS (loop3): Ending clean mount
[  115.194940][ T4589] XFS (loop3): Quotacheck needed: Please wait.
[  115.266665][ T4589] XFS (loop3): Quotacheck: Done.
[  115.323828][ T4589] XFS (loop3): Unmounting Filesystem
[  116.460174][ T4615] loop0: detected capacity change from 0 to 128
[  116.498412][ T4615] EXT4-fs (loop0): Ignoring removed bh option
[  116.499826][ T4615] EXT4-fs (loop0): Ignoring removed orlov option
[  116.501260][ T4615] EXT4-fs (loop0): Ignoring removed nobh option
[  116.505047][ T4615] EXT4-fs (loop0): Ignoring removed oldalloc option
[  116.517650][ T4615] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,bh,resuid=0x0000000000000000,orlov,norecovery,nobh,oldalloc,data_err=abort,,errors=continue. Quota mode: none.
[  119.090364][ T4623] loop3: detected capacity change from 0 to 512
[  119.167087][ T4623] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  119.268357][ T4623] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 16: comm syz.3.136: invalid block
[  119.271360][ T4623] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.136: couldn't read orphan inode 11 (err -117)
[  119.274672][ T4623] EXT4-fs (loop3): 1 truncate cleaned up
[  119.275893][ T4623] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback.
[  122.067620][ T4641] loop4: detected capacity change from 0 to 764
[  122.084951][ T4643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'.
[  122.199942][ T4645] netlink: 'syz.2.142': attribute type 4 has an invalid length.
[  122.547217][ T4652] rock: directory entry would overflow storage
[  122.548678][ T4652] rock: sig=0x4f50, size=4, remaining=3
[  122.549832][ T4652] iso9660: Corrupted directory entry in block 6 of inode 1792
[  123.675967][ T4538] Set syz1 is full, maxelem 65536 reached
[  128.529078][ T4714] tipc: Started in network mode
[  128.530264][ T4714] tipc: Node identity f7, cluster identity 4711
[  128.531478][ T4714] tipc: Node number set to 247
[  128.637112][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'.
[  128.721905][ T4725] IPVS: Error joining to the multicast group
[  131.074585][ T2057] ieee802154 phy0 wpan0: encryption failed: -22
[  131.076023][ T2057] ieee802154 phy1 wpan1: encryption failed: -22
[  131.219998][ T4764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.187'.
[  131.230222][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'.
[  132.453419][ T4799] syz.0.195 uses obsolete (PF_INET,SOCK_PACKET)
[  132.589307][ T4805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.197'.
[  132.644971][ T4039] Bluetooth: hci4: link tx timeout
[  132.646189][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.752669][ T4039] Bluetooth: hci4: link tx timeout
[  132.754362][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.757619][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'.
[  132.759661][ T4808] Zero length message leads to an empty skb
[  132.784582][ T4039] Bluetooth: hci4: link tx timeout
[  132.785640][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.956858][ T4819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.201'.
[  133.011500][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'.
[  133.852747][ T4039] Bluetooth: hci4: link tx timeout
[  133.853848][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  133.857077][ T4039] Bluetooth: hci4: link tx timeout
[  133.858187][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.174426][ T4039] Bluetooth: hci4: link tx timeout
[  134.175685][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.307452][ T4847] loop2: detected capacity change from 0 to 8192
[  134.409637][ T4847] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  134.411921][ T4847] REISERFS (device loop2): using ordered data mode
[  134.414323][ T4847] reiserfs: using flush barriers
[  134.418733][ T4847] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.424019][ T4847] REISERFS (device loop2): checking transaction log (loop2)
[  134.573426][ T4847] REISERFS (device loop2): Using tea hash to sort names
[  134.575342][ T4847] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  134.673453][ T4038] Bluetooth: hci4: command 0x0406 tx timeout
[  135.143413][ T4039] Bluetooth: hci4: link tx timeout
[  135.145249][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.150680][ T4039] Bluetooth: hci4: link tx timeout
[  135.151813][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.482704][ T4039] Bluetooth: hci4: link tx timeout
[  135.484070][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  136.520602][ T4861] syz.3.210 sent an empty control message without MSG_MORE.
[  136.695917][ T4705] Set syz1 is full, maxelem 65536 reached
[  136.709205][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.215'.
[  136.743418][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'.
[  137.984649][ T4039] Bluetooth: hci4: link tx timeout
[  137.985988][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  138.315848][ T4916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'.
[  138.502944][ T4922] netlink: 36 bytes leftover after parsing attributes in process `syz.4.232'.
[  138.525794][ T4923] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  138.549894][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'.
[  139.150377][ T4039] Bluetooth: hci4: link tx timeout
[  139.151880][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  139.157754][ T4039] Bluetooth: hci4: link tx timeout
[  139.159060][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.151346][ T4977] "syz.3.253" (4977) uses obsolete ecb(arc4) skcipher
[  140.211764][ T4982] tipc: Can't bind to reserved service type 0
[  140.755405][ T4039] Bluetooth: hci4: link tx timeout
[  140.757113][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.125492][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  142.289073][ T4039] Bluetooth: hci4: link tx timeout
[  142.290295][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.178644][ T4039] Bluetooth: hci4: link tx timeout
[  143.180359][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.365966][ T5027] team0: No ports can be present during mode change
[  143.655226][ T5043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.277'.
[  143.972346][ T4913] Set syz1 is full, maxelem 65536 reached
[  144.265906][ T5041] loop1: detected capacity change from 0 to 32768
[  144.289817][ T5041] XFS: ikeep mount option is deprecated.
[  144.291046][ T5041] XFS: ikeep mount option is deprecated.
[  144.293856][ T4039] Bluetooth: hci4: link tx timeout
[  144.295042][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.565173][ T5041] XFS (loop1): Mounting V5 Filesystem
[  146.328582][ T5041] XFS (loop1): Ending clean mount
[  146.335026][ T5041] XFS (loop1): Quotacheck needed: Please wait.
[  146.401643][ T5041] XFS (loop1): Quotacheck: Done.
[  146.402937][ T5096] netlink: 168 bytes leftover after parsing attributes in process `syz.3.289'.
[  146.519895][ T5041] XFS (loop1): Unmounting Filesystem
[  146.805934][ T4039] Bluetooth: hci4: link tx timeout
[  146.807284][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  146.809409][ T4039] Bluetooth: hci4: link tx timeout
[  146.810683][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.254649][ T4039] Bluetooth: hci4: link tx timeout
[  147.255972][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.786017][ T5123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  148.926064][ T5132] loop1: detected capacity change from 0 to 8192
[  148.960438][ T5132] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  148.977110][ T5132] REISERFS (device loop1): using ordered data mode
[  149.002922][ T5132] reiserfs: using flush barriers
[  149.028017][ T5132] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  149.071642][ T5132] REISERFS (device loop1): checking transaction log (loop1)
[  149.355101][ T5132] REISERFS (device loop1): Using tea hash to sort names
[  149.357187][ T5132] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  151.300060][ T5180] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  151.502787][ T5191] netlink: 'syz.1.313': attribute type 10 has an invalid length.
[  151.778556][ T5198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  152.219128][ T5214] loop1: detected capacity change from 0 to 8192
[  152.253704][ T5214] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  152.256091][ T5214] REISERFS (device loop1): using ordered data mode
[  152.257535][ T5214] reiserfs: using flush barriers
[  152.260941][ T5214] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  152.272828][ T5214] REISERFS (device loop1): checking transaction log (loop1)
[  152.467902][ T5214] REISERFS (device loop1): Using tea hash to sort names
[  152.469697][ T5214] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  153.977609][ T5224] loop3: detected capacity change from 0 to 8192
[  153.999969][ T5224] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  154.002154][ T5224] REISERFS (device loop3): using ordered data mode
[  154.006944][ T5224] reiserfs: using flush barriers
[  154.024522][ T5224] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  154.040076][ T5224] REISERFS (device loop3): checking transaction log (loop3)
[  154.154164][ T5102] Set syz1 is full, maxelem 65536 reached
[  154.306886][ T5224] REISERFS (device loop3): Using tea hash to sort names
[  154.308861][ T5224] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  154.309535][ T5242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  154.975949][ T5250] netlink: 'syz.0.332': attribute type 10 has an invalid length.
[  156.701311][ T5283] loop3: detected capacity change from 0 to 8192
[  157.204496][ T5283] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  157.207683][ T5283] REISERFS (device loop3): using ordered data mode
[  157.209443][ T5283] reiserfs: using flush barriers
[  157.397744][ T5283] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  157.633462][ T5283] REISERFS (device loop3): checking transaction log (loop3)
[  158.931892][ T5283] REISERFS (device loop3): Using tea hash to sort names
[  158.939755][ T5283] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  160.981568][ T5312] loop0: detected capacity change from 0 to 256
[  160.994211][ T5314] netlink: 'syz.2.352': attribute type 10 has an invalid length.
[  163.743663][ T4039] Bluetooth: hci4: link tx timeout
[  163.744938][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.223271][ T5341] loop4: detected capacity change from 0 to 256
[  165.353726][ T5364] loop3: detected capacity change from 0 to 256
[  165.369890][ T5352] loop2: detected capacity change from 0 to 8192
[  165.390858][ T5352] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  165.393153][ T5352] REISERFS (device loop2): using ordered data mode
[  165.396570][ T5352] reiserfs: using flush barriers
[  165.402017][ T5352] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  165.410299][ T5352] REISERFS (device loop2): checking transaction log (loop2)
[  166.940771][ T5352] REISERFS (device loop2): Using tea hash to sort names
[  166.942420][ T5352] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  167.332142][ T5375] loop1: detected capacity change from 0 to 256
[  169.106280][ T1535] Bluetooth: hci0: command 0x0406 tx timeout
[  169.107768][ T1535] Bluetooth: hci2: command 0x0406 tx timeout
[  169.109154][ T1535] Bluetooth: hci3: command 0x0406 tx timeout
[  169.110538][ T1535] Bluetooth: hci1: command 0x0406 tx timeout
[  172.452573][ T5417] loop1: detected capacity change from 0 to 512
[  172.463841][ T5419] loop0: detected capacity change from 0 to 256
[  172.495749][ T5417] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  172.495749][ T5417] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  172.495749][ T5417] 
[  172.825201][ T5417] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.380: casefold flag without casefold feature
[  172.850620][ T5417] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.380: couldn't read orphan inode 15 (err -117)
[  172.921594][ T5417] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000080,min_batch_time=0x0000000000000005,nouser_xattr,grpquota,delalloc,,errors=continue. Quota mode: writeback.
[  174.689610][ T5435] loop3: detected capacity change from 0 to 512
[  174.766457][ T5435] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  174.766457][ T5435] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  174.766457][ T5435] 
[  174.896349][ T5435] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.395: casefold flag without casefold feature
[  174.920456][ T5435] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.395: couldn't read orphan inode 15 (err -117)
[  174.930614][ T5435] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000080,min_batch_time=0x0000000000000005,nouser_xattr,grpquota,delalloc,,errors=continue. Quota mode: writeback.
[  175.828415][ T5449] loop4: detected capacity change from 0 to 256
[  175.979454][ T5447] loop0: detected capacity change from 0 to 8192
[  176.102914][ T5434] loop1: detected capacity change from 0 to 32768
[  176.135736][ T5447] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  176.160948][ T5447] REISERFS (device loop0): using ordered data mode
[  176.550224][ T5447] reiserfs: using flush barriers
[  176.682891][ T5434] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.385 (5434)
[  176.709247][ T5447] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  176.712998][ T5447] REISERFS (device loop0): checking transaction log (loop0)
[  176.826042][ T5453] loop3: detected capacity change from 0 to 8192
[  176.871869][ T5453] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  176.873953][ T5453] REISERFS (device loop3): using ordered data mode
[  176.875127][ T5453] reiserfs: using flush barriers
[  176.882036][ T5453] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  176.886597][ T5453] REISERFS (device loop3): checking transaction log (loop3)
[  176.900544][ T5434] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  176.947850][ T5434] BTRFS info (device loop1): setting nodatacow, compression disabled
[  176.949595][ T5434] BTRFS info (device loop1): setting datacow
[  176.950812][ T5434] BTRFS info (device loop1): doing ref verification
[  176.952129][ T5434] BTRFS info (device loop1): force clearing of disk cache
[  176.986202][ T5434] BTRFS info (device loop1): turning off barriers
[  176.987777][ T5434] BTRFS info (device loop1): enabling ssd optimizations
[  177.009105][ T5434] BTRFS info (device loop1): using spread ssd allocation scheme
[  177.010872][ T5434] BTRFS info (device loop1): not using ssd optimizations
[  177.012359][ T5434] BTRFS info (device loop1): not using spread ssd allocation scheme
[  177.066490][ T5434] BTRFS info (device loop1): using free space tree
[  177.067878][ T5434] BTRFS info (device loop1): has skinny extents
[  177.175220][ T5447] REISERFS (device loop0): Using tea hash to sort names
[  177.616232][ T5447] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  178.078631][ T5434] BTRFS error (device loop1): open_ctree failed
[  178.987753][ T5453] REISERFS (device loop3): Using tea hash to sort names
[  178.989821][ T5453] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  179.219664][ T5501] loop1: detected capacity change from 0 to 8192
[  179.267646][ T5501] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  179.269464][ T5501] REISERFS (device loop1): using ordered data mode
[  179.270915][ T5501] reiserfs: using flush barriers
[  179.272916][ T5501] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  179.281902][ T5501] REISERFS (device loop1): checking transaction log (loop1)
[  179.408950][ T5512] loop3: detected capacity change from 0 to 256
[  179.418660][ T5510] loop0: detected capacity change from 0 to 8192
[  179.457841][ T5510] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  179.460417][ T5510] REISERFS (device loop0): using ordered data mode
[  179.462978][ T5510] reiserfs: using flush barriers
[  179.470141][ T5510] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  179.486720][ T5510] REISERFS (device loop0): checking transaction log (loop0)
[  179.562468][ T5501] REISERFS (device loop1): Using tea hash to sort names
[  179.570758][ T5501] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  180.327277][ T5510] REISERFS (device loop0): Using tea hash to sort names
[  180.336767][ T5510] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  180.427933][ T5518] loop2: detected capacity change from 0 to 512
[  180.485986][ T5518] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5
[  180.485986][ T5518] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  180.485986][ T5518] 
[  180.509139][ T5518] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.401: casefold flag without casefold feature
[  180.516124][ T5518] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.401: couldn't read orphan inode 15 (err -117)
[  180.561357][ T5518] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000080,min_batch_time=0x0000000000000005,nouser_xattr,grpquota,delalloc,,errors=continue. Quota mode: writeback.
[  181.642240][ T5537] loop1: detected capacity change from 0 to 8192
[  181.692153][ T5537] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  181.696175][ T5537] REISERFS (device loop1): using ordered data mode
[  181.698840][ T5537] reiserfs: using flush barriers
[  181.701067][ T5537] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  181.709066][ T5537] REISERFS (device loop1): checking transaction log (loop1)
[  181.809761][ T5544] loop0: detected capacity change from 0 to 8192
[  181.846502][ T5537] REISERFS (device loop1): Using tea hash to sort names
[  181.848516][ T5537] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  181.858174][ T5544] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  181.860383][ T5544] REISERFS (device loop0): using ordered data mode
[  181.861781][ T5544] reiserfs: using flush barriers
[  181.864992][ T5544] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  181.873141][ T5544] REISERFS (device loop0): checking transaction log (loop0)
[  182.008760][ T5544] REISERFS (device loop0): Using tea hash to sort names
[  182.010824][ T5544] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  184.440312][ T5555] loop2: detected capacity change from 0 to 8192
[  184.508057][ T5555] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  184.510138][ T5555] REISERFS (device loop2): using ordered data mode
[  184.511397][ T5555] reiserfs: using flush barriers
[  184.520247][ T5560] loop4: detected capacity change from 0 to 256
[  184.539504][ T5555] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.543434][ T5555] REISERFS (device loop2): checking transaction log (loop2)
[  184.658427][ T5555] REISERFS (device loop2): Using tea hash to sort names
[  184.667024][ T5555] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  187.071200][ T5581] loop1: detected capacity change from 0 to 8192
[  187.237311][ T5581] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  187.239343][ T5581] REISERFS (device loop1): using ordered data mode
[  187.240888][ T5581] reiserfs: using flush barriers
[  187.242936][ T5581] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  187.263588][ T5581] REISERFS (device loop1): checking transaction log (loop1)
[  187.295798][ T5587] loop2: detected capacity change from 0 to 8192
[  187.328609][ T5591] loop3: detected capacity change from 0 to 8192
[  187.380056][ T5587] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  187.383115][ T5587] REISERFS (device loop2): using ordered data mode
[  187.388096][ T5587] reiserfs: using flush barriers
[  187.397577][ T5587] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  187.401543][ T5587] REISERFS (device loop2): checking transaction log (loop2)
[  187.587903][ T5581] REISERFS (device loop1): Using tea hash to sort names
[  187.589901][ T5581] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  187.643685][ T5587] REISERFS (device loop2): Using tea hash to sort names
[  187.652087][ T5587] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  187.944050][ T5591] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  187.946454][ T5591] REISERFS (device loop3): using ordered data mode
[  187.947912][ T5591] reiserfs: using flush barriers
[  188.775986][ T5591] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  188.779748][ T5591] REISERFS (device loop3): checking transaction log (loop3)
[  188.921595][ T5591] REISERFS (device loop3): Using tea hash to sort names
[  188.923884][ T5591] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  192.319702][ T5608] loop2: detected capacity change from 0 to 8192
[  192.415411][ T5620] loop4: detected capacity change from 0 to 256
[  192.453773][ T5608] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  192.455896][ T5608] REISERFS (device loop2): using ordered data mode
[  192.457270][ T5608] reiserfs: using flush barriers
[  192.463184][ T5608] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  192.467957][ T5608] REISERFS (device loop2): checking transaction log (loop2)
[  192.557511][ T2057] ieee802154 phy0 wpan0: encryption failed: -22
[  192.674343][ T2057] ieee802154 phy1 wpan1: encryption failed: -22
[  195.174961][ T5608] REISERFS (device loop2): Using tea hash to sort names
[  195.176688][ T5608] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  195.803927][ T4044] Bluetooth: hci4: link tx timeout
[  195.805371][ T4044] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  195.808188][ T4044] Bluetooth: hci4: link tx timeout
[  195.809586][ T4044] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  196.017269][ T5650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  196.111475][ T5641] loop0: detected capacity change from 0 to 8192
[  196.956484][ T5644] loop3: detected capacity change from 0 to 8192
[  197.054379][ T5644] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  197.056409][ T5644] REISERFS (device loop3): using ordered data mode
[  197.057690][ T5644] reiserfs: using flush barriers
[  197.059606][ T5644] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  197.063125][ T5644] REISERFS (device loop3): checking transaction log (loop3)
[  197.102824][ T5659] loop4: detected capacity change from 0 to 8192
[  197.277055][ T5660] loop1: detected capacity change from 0 to 8192
[  197.295325][ T5659] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  197.298155][ T5659] REISERFS (device loop4): using ordered data mode
[  197.299643][ T5659] reiserfs: using flush barriers
[  197.302413][ T5659] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  197.312907][ T5659] REISERFS (device loop4): checking transaction log (loop4)
[  197.384698][ T5644] REISERFS (device loop3): Using tea hash to sort names
[  197.392711][ T5660] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  197.395019][ T5660] REISERFS (device loop1): using ordered data mode
[  197.396491][ T5660] reiserfs: using flush barriers
[  197.399933][ T5660] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  197.404298][ T5644] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  197.414837][ T5660] REISERFS (device loop1): checking transaction log (loop1)
[  197.647747][ T5659] REISERFS (device loop4): Using tea hash to sort names
[  197.655897][ T5659] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  197.783928][ T5660] REISERFS (device loop1): Using tea hash to sort names
[  197.793147][ T5660] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  197.996347][ T5493] Bluetooth: hci4: command 0x0406 tx timeout
[  201.516778][ T5679] loop2: detected capacity change from 0 to 256
[  203.213617][ T5691] loop3: detected capacity change from 0 to 256
[  203.556794][ T5703] loop0: detected capacity change from 0 to 256
[  203.947334][ T5695] loop4: detected capacity change from 0 to 8192
[  204.261553][ T5695] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  204.265834][ T5695] REISERFS (device loop4): using ordered data mode
[  204.267348][ T5695] reiserfs: using flush barriers
[  204.269585][ T5695] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  204.306646][ T5686] loop1: detected capacity change from 0 to 32768
[  204.316452][ T5695] REISERFS (device loop4): checking transaction log (loop4)
[  204.468487][ T5686] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.445 (5686)
[  204.491484][ T5710] loop3: detected capacity change from 0 to 8192
[  204.805770][ T5710] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  204.807891][ T5710] REISERFS (device loop3): using ordered data mode
[  204.809425][ T5710] reiserfs: using flush barriers
[  204.811908][ T5710] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  204.837987][ T5710] REISERFS (device loop3): checking transaction log (loop3)
[  204.911099][ T5695] REISERFS (device loop4): Using tea hash to sort names
[  204.919593][ T5695] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  205.104006][ T5686] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  205.105912][ T5686] BTRFS info (device loop1): setting nodatacow, compression disabled
[  205.107706][ T5686] BTRFS info (device loop1): setting datacow
[  205.109012][ T5686] BTRFS info (device loop1): doing ref verification
[  205.110391][ T5686] BTRFS info (device loop1): force clearing of disk cache
[  205.111892][ T5686] BTRFS info (device loop1): turning off barriers
[  205.163585][ T5686] BTRFS info (device loop1): enabling ssd optimizations
[  205.165155][ T5686] BTRFS info (device loop1): using spread ssd allocation scheme
[  205.166704][ T5686] BTRFS info (device loop1): not using ssd optimizations
[  205.168181][ T5686] BTRFS info (device loop1): not using spread ssd allocation scheme
[  205.169743][ T5686] BTRFS info (device loop1): using free space tree
[  205.171128][ T5686] BTRFS info (device loop1): has skinny extents
[  205.551549][ T5710] REISERFS (device loop3): Using tea hash to sort names
[  205.822541][ T5710] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  205.853528][ T5686] BTRFS error (device loop1): open_ctree failed
[  207.470516][ T5753] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  207.570611][ T5742] loop0: detected capacity change from 0 to 32768
[  207.589520][ T5761] loop4: detected capacity change from 0 to 256
[  207.607615][ T5742] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.469 (5742)
[  208.513525][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  208.612531][ T5742] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  208.615890][ T5742] BTRFS info (device loop0): setting nodatacow, compression disabled
[  208.617699][ T5742] BTRFS info (device loop0): setting datacow
[  208.619022][ T5742] BTRFS info (device loop0): doing ref verification
[  208.620497][ T5742] BTRFS info (device loop0): force clearing of disk cache
[  208.622045][ T5742] BTRFS info (device loop0): turning off barriers
[  208.654190][ T5742] BTRFS info (device loop0): enabling ssd optimizations
[  208.655767][ T5742] BTRFS info (device loop0): using spread ssd allocation scheme
[  208.657307][ T5742] BTRFS info (device loop0): not using ssd optimizations
[  208.658712][ T5742] BTRFS info (device loop0): not using spread ssd allocation scheme
[  208.660321][ T5742] BTRFS info (device loop0): using free space tree
[  208.661624][ T5742] BTRFS info (device loop0): has skinny extents
[  208.802992][ T5770] loop3: detected capacity change from 0 to 256
[  208.916075][ T5742] BTRFS info (device loop0): clearing free space tree
[  208.918083][ T5742] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  208.920436][ T5742] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  208.991033][ T5742] BTRFS info (device loop0): creating free space tree
[  208.999216][ T5742] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  209.001518][ T5742] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  209.728586][ T5803] loop2: detected capacity change from 0 to 256
[  209.741349][ T5800] loop4: detected capacity change from 0 to 8192
[  209.892643][ T5805] loop1: detected capacity change from 0 to 256
[  210.017239][ T5800] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  210.019301][ T5800] REISERFS (device loop4): using ordered data mode
[  210.031646][ T5800] reiserfs: using flush barriers
[  210.043898][ T5800] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  210.075595][ T5800] REISERFS (device loop4): checking transaction log (loop4)
[  210.959555][ T5822] loop3: detected capacity change from 0 to 16
[  211.021638][ T5821] loop0: detected capacity change from 0 to 8192
[  211.043703][ T5822] erofs: (device loop3): mounted with root inode @ nid 36.
[  211.051771][ T5821] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  211.055561][ T5821] REISERFS (device loop0): using ordered data mode
[  211.056929][ T5821] reiserfs: using flush barriers
[  211.081124][ T5821] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  211.084707][ T4039] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  211.102544][ T5822] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  211.135869][ T5821] REISERFS (device loop0): checking transaction log (loop0)
[  211.265973][ T5800] REISERFS (device loop4): Using tea hash to sort names
[  211.287155][ T5800] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  212.200630][ T5838] loop3: detected capacity change from 0 to 256
[  212.232489][ T5821] REISERFS (device loop0): Using tea hash to sort names
[  212.234567][ T5821] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  212.758517][ T5847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.481'.
[  213.521774][ T5857] loop4: detected capacity change from 0 to 256
[  213.551677][ T5863] loop2: detected capacity change from 0 to 128
[  213.794479][ T5863] loop2: detected capacity change from 0 to 128
[  213.819489][ T5859] loop0: detected capacity change from 0 to 32768
[  214.371911][ T5859] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.482 (5859)
[  214.457603][ T5870] loop3: detected capacity change from 0 to 16
[  214.542381][ T5870] erofs: (device loop3): mounted with root inode @ nid 36.
[  214.557886][ T5859] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  214.559750][ T5859] BTRFS info (device loop0): setting nodatacow, compression disabled
[  214.567012][ T5859] BTRFS info (device loop0): setting datacow
[  214.568376][ T5859] BTRFS info (device loop0): doing ref verification
[  214.569839][ T5859] BTRFS info (device loop0): force clearing of disk cache
[  214.571259][ T5859] BTRFS info (device loop0): turning off barriers
[  214.589641][ T4039] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  214.614565][ T5870] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  214.627082][ T5859] BTRFS info (device loop0): enabling ssd optimizations
[  214.628646][ T5859] BTRFS info (device loop0): using spread ssd allocation scheme
[  214.630187][ T5859] BTRFS info (device loop0): not using ssd optimizations
[  214.631723][ T5859] BTRFS info (device loop0): not using spread ssd allocation scheme
[  214.668566][ T5859] BTRFS info (device loop0): using free space tree
[  214.669911][ T5859] BTRFS info (device loop0): has skinny extents
[  214.727440][ T5879] loop4: detected capacity change from 0 to 256
[  216.841350][ T5859] BTRFS error (device loop0): open_ctree failed
[  217.138184][ T5905] loop1: detected capacity change from 0 to 8192
[  217.239675][ T5899] loop3: detected capacity change from 0 to 32768
[  217.243191][ T5905] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  217.245825][ T5905] REISERFS (device loop1): using ordered data mode
[  217.247255][ T5905] reiserfs: using flush barriers
[  217.249042][ T5905] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  217.259667][ T5905] REISERFS (device loop1): checking transaction log (loop1)
[  217.294301][ T5910] loop0: detected capacity change from 0 to 8192
[  217.383139][ T5905] REISERFS (device loop1): Using tea hash to sort names
[  217.387897][ T5910] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  217.389742][ T5910] REISERFS (device loop0): using ordered data mode
[  217.391156][ T5910] reiserfs: using flush barriers
[  217.396404][ T5914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.498'.
[  217.398764][ T5905] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  217.401505][ T5910] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  217.410359][ T5910] REISERFS (device loop0): checking transaction log (loop0)
[  217.573787][ T5910] REISERFS (device loop0): Using tea hash to sort names
[  217.575452][ T5910] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  217.732461][ T5917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  217.935262][ T5922] loop2: detected capacity change from 0 to 16
[  217.970950][ T5922] erofs: (device loop2): mounted with root inode @ nid 36.
[  217.989371][ T4039] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  218.001641][ T5922] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  218.753553][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  221.775620][ T5944] loop2: detected capacity change from 0 to 256
[  222.704535][ T5951] FAULT_INJECTION: forcing a failure.
[  222.704535][ T5951] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  222.707196][ T5951] CPU: 1 PID: 5951 Comm: syz.0.509 Not tainted 5.15.173-syzkaller #0
[  222.708890][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  222.710898][ T5951] Call trace:
[  222.711567][ T5951]  dump_backtrace+0x0/0x530
[  222.712467][ T5951]  show_stack+0x2c/0x3c
[  222.713295][ T5951]  dump_stack_lvl+0x108/0x170
[  222.714316][ T5951]  dump_stack+0x1c/0x58
[  222.715148][ T5951]  should_fail+0x3b8/0x514
[  222.716028][ T5951]  should_fail_usercopy+0x20/0x30
[  222.717079][ T5951]  iovec_from_user+0xcc/0x630
[  222.718097][ T5951]  __import_iovec+0x80/0x414
[  222.719062][ T5951]  import_iovec+0x88/0xa4
[  222.719968][ T5951]  ___sys_sendmsg+0x1dc/0x294
[  222.721131][ T5951]  __arm64_sys_sendmsg+0x1ac/0x25c
[  222.722175][ T5951]  invoke_syscall+0x98/0x2b8
[  222.723212][ T5951]  el0_svc_common+0x138/0x258
[  222.724277][ T5951]  do_el0_svc+0x58/0x14c
[  222.725314][ T5951]  el0_svc+0x7c/0x1f0
[  222.726124][ T5951]  el0t_64_sync_handler+0x84/0xe4
[  222.727130][ T5951]  el0t_64_sync+0x1a0/0x1a4
[  223.259491][ T5960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.513'.
[  223.515030][ T5964] loop1: detected capacity change from 0 to 16
[  223.521982][ T5962] loop4: detected capacity change from 0 to 8192
[  223.575502][ T5962] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  223.577642][ T5942] loop3: detected capacity change from 0 to 32768
[  223.577932][ T5962] REISERFS (device loop4): using ordered data mode
[  223.580521][ T5962] reiserfs: using flush barriers
[  223.581645][ T5966] loop2: detected capacity change from 0 to 256
[  223.582628][ T5962] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  223.592928][ T5962] REISERFS (device loop4): checking transaction log (loop4)
[  223.602018][ T5964] erofs: (device loop1): mounted with root inode @ nid 36.
[  223.610149][ T4039] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  223.628691][ T5942] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.508 (5942)
[  223.664385][ T5964] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  223.831158][ T5942] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  223.833083][ T5942] BTRFS info (device loop3): setting nodatacow, compression disabled
[  223.841653][ T5942] BTRFS info (device loop3): setting datacow
[  223.843017][ T5942] BTRFS info (device loop3): doing ref verification
[  223.851480][ T5962] REISERFS (device loop4): Using tea hash to sort names
[  223.853179][ T5962] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  223.856272][ T5942] BTRFS info (device loop3): force clearing of disk cache
[  223.857998][ T5942] BTRFS info (device loop3): turning off barriers
[  223.865175][ T5942] BTRFS info (device loop3): enabling ssd optimizations
[  223.975850][ T5942] BTRFS info (device loop3): using spread ssd allocation scheme
[  224.116939][ T5942] BTRFS info (device loop3): not using ssd optimizations
[  224.157023][ T5942] BTRFS info (device loop3): not using spread ssd allocation scheme
[  224.301490][ T5942] BTRFS info (device loop3): using free space tree
[  224.363882][ T5942] BTRFS info (device loop3): has skinny extents
[  224.872699][ T5942] BTRFS error (device loop3): open_ctree failed
[  224.992384][ T4583] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4583)
[  225.104922][ T5979] loop0: detected capacity change from 0 to 32768
[  225.180334][ T5979] XFS (loop0): Mounting V5 Filesystem
[  225.250232][ T5979] XFS (loop0): Ending clean mount
[  225.257618][ T5979] XFS (loop0): Quotacheck needed: Please wait.
[  225.279279][ T5979] XFS (loop0): Quotacheck: Done.
[  225.339608][ T4030] XFS (loop0): Unmounting Filesystem
[  225.371920][ T6013] loop3: detected capacity change from 0 to 1024
[  226.411153][ T6027] loop1: detected capacity change from 0 to 16
[  226.431249][ T6024] loop4: detected capacity change from 0 to 1024
[  226.433798][ T6028] netlink: 36 bytes leftover after parsing attributes in process `syz.3.528'.
[  226.483526][ T6027] erofs: (device loop1): mounted with root inode @ nid 36.
[  226.491990][ T4039] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  226.503867][ T6027] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  227.683877][ T6024] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  227.690300][ T6022] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.529: corrupted in-inode xattr
[  227.702481][ T6023] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.529: corrupted in-inode xattr
[  227.708137][ T6046] FAULT_INJECTION: forcing a failure.
[  227.708137][ T6046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.711431][ T6046] CPU: 1 PID: 6046 Comm: syz.0.534 Not tainted 5.15.173-syzkaller #0
[  227.713229][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  227.715291][ T6046] Call trace:
[  227.716027][ T6046]  dump_backtrace+0x0/0x530
[  227.716974][ T6046]  show_stack+0x2c/0x3c
[  227.717921][ T6046]  dump_stack_lvl+0x108/0x170
[  227.718851][ T6046]  dump_stack+0x1c/0x58
[  227.719699][ T6046]  should_fail+0x3b8/0x514
[  227.720670][ T6046]  should_fail_usercopy+0x20/0x30
[  227.721713][ T6046]  kstrtouint_from_user+0xd8/0x384
[  227.722781][ T6046]  proc_fail_nth_write+0xa8/0x288
[  227.723881][ T6046]  vfs_write+0x280/0xb44
[  227.724717][ T6046]  ksys_write+0x15c/0x26c
[  227.725652][ T6046]  __arm64_sys_write+0x7c/0x90
[  227.726638][ T6046]  invoke_syscall+0x98/0x2b8
[  227.727642][ T6046]  el0_svc_common+0x138/0x258
[  227.728552][ T6046]  do_el0_svc+0x58/0x14c
[  227.729472][ T6046]  el0_svc+0x7c/0x1f0
[  227.730360][ T6046]  el0t_64_sync_handler+0x84/0xe4
[  227.731518][ T6046]  el0t_64_sync+0x1a0/0x1a4
[  227.788256][ T6049] loop1: detected capacity change from 0 to 1024
[  227.852888][ T6049] EXT4-fs (loop1): inline encryption not supported
[  227.855056][ T6049] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  227.856657][ T6049] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  227.913817][ T6049] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,user_xattr,inlinecrypt,i_version,dioread_nolock,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000000,nolazytime,nomblk_io_submit,,errors=continue. Quota mode: none.
[  228.237973][ T6050] loop3: detected capacity change from 0 to 32768
[  228.503515][ T6050] XFS (loop3): Mounting V5 Filesystem
[  228.591816][ T6050] XFS (loop3): Ending clean mount
[  228.605307][ T6050] XFS (loop3): Quotacheck needed: Please wait.
[  228.645652][ T6050] XFS (loop3): Quotacheck: Done.
[  228.744347][ T6075] loop2: detected capacity change from 0 to 16
[  228.766107][ T6076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.543'.
[  228.769303][ T6078] loop4: detected capacity change from 0 to 16
[  228.780049][ T6075] erofs: (device loop2): mounted with root inode @ nid 36.
[  228.796091][ T4039] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  228.809668][ T4033] XFS (loop3): Unmounting Filesystem
[  228.821765][ T6075] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  228.884023][ T6078] erofs: (device loop4): mounted with root inode @ nid 36.
[  228.919348][ T4039] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  228.933213][ T6078] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  229.142430][ T6084] FAULT_INJECTION: forcing a failure.
[  229.142430][ T6084] name failslab, interval 1, probability 0, space 0, times 1
[  229.163483][ T6084] CPU: 1 PID: 6084 Comm: syz.2.547 Not tainted 5.15.173-syzkaller #0
[  229.165198][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  229.167314][ T6084] Call trace:
[  229.168067][ T6084]  dump_backtrace+0x0/0x530
[  229.169097][ T6084]  show_stack+0x2c/0x3c
[  229.170112][ T6084]  dump_stack_lvl+0x108/0x170
[  229.171099][ T6084]  dump_stack+0x1c/0x58
[  229.171999][ T6084]  should_fail+0x3b8/0x514
[  229.173079][ T6084]  __should_failslab+0xbc/0x110
[  229.174030][ T6084]  should_failslab+0x10/0x28
[  229.174909][ T6084]  slab_pre_alloc_hook+0x64/0xe8
[  229.175926][ T6084]  __kmalloc+0xc0/0x4c8
[  229.176763][ T6084]  tomoyo_encode+0x270/0x4b0
[  229.177821][ T6084]  tomoyo_realpath_from_path+0x4b4/0x508
[  229.178996][ T6084]  tomoyo_path_number_perm+0x1f8/0x6b0
[  229.180218][ T6084]  tomoyo_file_ioctl+0x2c/0x3c
[  229.181264][ T6084]  security_file_ioctl+0x80/0xbc
[  229.182437][ T6084]  __arm64_sys_ioctl+0xa8/0x1c8
[  229.183622][ T6084]  invoke_syscall+0x98/0x2b8
[  229.184521][ T6084]  el0_svc_common+0x138/0x258
[  229.185436][ T6084]  do_el0_svc+0x58/0x14c
[  229.186436][ T6084]  el0_svc+0x7c/0x1f0
[  229.187289][ T6084]  el0t_64_sync_handler+0x84/0xe4
[  229.188422][ T6084]  el0t_64_sync+0x1a0/0x1a4
[  229.241069][ T6084] ERROR: Out of memory at tomoyo_realpath_from_path.
[  229.248106][ T6087] loop1: detected capacity change from 0 to 512
[  229.313979][ T6087] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2
[  229.583078][ T6105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.556'.
[  229.604066][ T6107] loop3: detected capacity change from 0 to 16
[  229.665606][ T6107] erofs: (device loop3): mounted with root inode @ nid 36.
[  229.674026][ T4039] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  229.697949][ T6107] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  229.897767][ T6092] loop2: detected capacity change from 0 to 32768
[  229.958936][ T6092] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  229.960726][ T6092] BTRFS info (device loop2): setting nodatacow, compression disabled
[  229.962638][ T6092] BTRFS info (device loop2): setting datacow
[  229.974258][ T6092] BTRFS info (device loop2): doing ref verification
[  229.975673][ T6092] BTRFS info (device loop2): force clearing of disk cache
[  229.987637][ T6092] BTRFS info (device loop2): turning off barriers
[  229.989169][ T6092] BTRFS info (device loop2): enabling ssd optimizations
[  229.990536][ T6092] BTRFS info (device loop2): using spread ssd allocation scheme
[  229.992265][ T6092] BTRFS info (device loop2): not using ssd optimizations
[  230.015694][ T6092] BTRFS info (device loop2): not using spread ssd allocation scheme
[  230.017463][ T6092] BTRFS info (device loop2): using free space tree
[  230.018737][ T6092] BTRFS info (device loop2): has skinny extents
[  230.402701][ T6139] loop1: detected capacity change from 0 to 1024
[  230.413027][ T6092] BTRFS info (device loop2): clearing free space tree
[  230.415448][ T6092] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  230.417679][ T6092] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  230.427991][ T6092] BTRFS info (device loop2): creating free space tree
[  230.430241][ T6092] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  230.432231][ T6092] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  230.456282][ T6139] EXT4-fs (loop1): Invalid log cluster size: 4287168516
[  230.911198][ T6152] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  230.956462][ T6119] loop4: detected capacity change from 0 to 32768
[  230.982175][ T6150] loop1: detected capacity change from 0 to 8192
[  231.059931][ T6150] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  231.060884][ T6158] loop2: detected capacity change from 0 to 16
[  231.062038][ T6150] REISERFS (device loop1): using ordered data mode
[  231.065699][ T6150] reiserfs: using flush barriers
[  231.073779][ T6150] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  231.077602][ T6150] REISERFS (device loop1): checking transaction log (loop1)
[  231.121554][ T6158] erofs: (device loop2): mounted with root inode @ nid 36.
[  231.124795][ T6119] XFS (loop4): Mounting V5 Filesystem
[  231.125663][ T6150] REISERFS (device loop1): Using rupasov hash to sort names
[  231.127938][ T6150] REISERFS (device loop1): using 3.5.x disk format
[  231.129431][ T6150] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  231.139927][ T4044] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  231.154607][ T6158] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  231.202089][ T6150] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  231.224203][ T6150] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  231.226421][ T6150] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  231.309632][ T6119] XFS (loop4): Ending clean mount
[  231.312561][ T6119] XFS (loop4): Quotacheck needed: Please wait.
[  231.345080][ T6166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  231.347775][ T6166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  231.361492][ T6150] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  231.364166][ T6150] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  231.368999][ T6166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  231.372321][ T6166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  231.381230][ T6166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  231.391666][ T6119] XFS (loop4): Quotacheck: Done.
[  231.573486][ T4032] XFS (loop4): Unmounting Filesystem
[  231.676427][ T6174] loop2: detected capacity change from 0 to 16
[  231.753136][ T6174] erofs: (device loop2): mounted with root inode @ nid 36.
[  231.772935][ T4044] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  231.802481][ T6174] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  231.829754][ T6176] netlink: 36 bytes leftover after parsing attributes in process `syz.1.568'.
[  231.869932][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'.
[  232.025895][ T6182] tmpfs: Bad value for 'mpol'
[  232.258825][ T6191] loop1: detected capacity change from 0 to 1024
[  232.368025][ T6191] EXT4-fs (loop1): inline encryption not supported
[  232.369424][ T6191] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  232.370899][ T6191] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  232.374847][ T6197] loop4: detected capacity change from 0 to 128
[  232.425725][ T6191] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,user_xattr,inlinecrypt,i_version,dioread_nolock,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000000,nolazytime,nomblk_io_submit,,errors=continue. Quota mode: none.
[  232.454124][ T6197] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  232.618873][ T6204] loop3: detected capacity change from 0 to 16
[  232.683775][ T6204] erofs: (device loop3): mounted with root inode @ nid 36.
[  232.713289][ T4044] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  232.730204][ T6204] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  232.841337][ T6206] loop1: detected capacity change from 0 to 512
[  232.923090][ T6206] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  232.925185][ T6206] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002]
[  232.927211][ T6206] System zones: 0-2, 18-18, 34-35
[  232.941038][ T6206] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback.
[  232.989254][ T6206] EXT4-fs (loop1): shut down requested (0)
[  233.016968][ T6214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  233.027704][ T6181] loop2: detected capacity change from 0 to 32768
[  233.042367][ T6206] FAULT_INJECTION: forcing a failure.
[  233.042367][ T6206] name failslab, interval 1, probability 0, space 0, times 0
[  233.045893][ T6206] CPU: 1 PID: 6206 Comm: syz.1.580 Not tainted 5.15.173-syzkaller #0
[  233.047707][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  233.049763][ T6206] Call trace:
[  233.050375][ T6206]  dump_backtrace+0x0/0x530
[  233.051477][ T6206]  show_stack+0x2c/0x3c
[  233.052220][ T6206]  dump_stack_lvl+0x108/0x170
[  233.053204][ T6206]  dump_stack+0x1c/0x58
[  233.054076][ T6206]  should_fail+0x3b8/0x514
[  233.055110][ T6206]  __should_failslab+0xbc/0x110
[  233.056118][ T6206]  should_failslab+0x10/0x28
[  233.057109][ T6206]  slab_pre_alloc_hook+0x64/0xe8
[  233.058130][ T6206]  kmem_cache_alloc+0x98/0x45c
[  233.059223][ T6206]  __es_insert_extent+0x538/0x12c0
[  233.060362][ T6206]  ext4_es_cache_extent+0x40c/0x6f0
[  233.061394][ T6206]  ext4_find_extent+0x47c/0xbdc
[  233.062515][ T6206]  ext4_ext_map_blocks+0x2bc/0x6418
[  233.063727][ T6206]  ext4_map_blocks+0x320/0x1a44
[  233.064758][ T6206]  ext4_readdir+0x768/0x32b4
[  233.065623][ T6206]  iterate_dir+0x1f4/0x4ec
[  233.066491][ T6206]  __arm64_sys_getdents64+0x1c4/0x4c4
[  233.067479][ T6206]  invoke_syscall+0x98/0x2b8
[  233.068437][ T6206]  el0_svc_common+0x138/0x258
[  233.069423][ T6206]  do_el0_svc+0x58/0x14c
[  233.070288][ T6206]  el0_svc+0x7c/0x1f0
[  233.071122][ T6206]  el0t_64_sync_handler+0x84/0xe4
[  233.072156][ T6206]  el0t_64_sync+0x1a0/0x1a4
[  233.090473][ T6181] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.573 (6181)
[  233.165855][ T6181] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  233.167833][ T6181] BTRFS info (device loop2): setting nodatacow, compression disabled
[  233.169747][ T6181] BTRFS info (device loop2): setting datacow
[  233.175632][ T6181] BTRFS info (device loop2): doing ref verification
[  233.180322][ T6181] BTRFS info (device loop2): force clearing of disk cache
[  233.185771][ T6181] BTRFS info (device loop2): turning off barriers
[  233.189709][ T6218] loop4: detected capacity change from 0 to 16
[  233.193098][ T6181] BTRFS info (device loop2): enabling ssd optimizations
[  233.201758][ T6181] BTRFS info (device loop2): using spread ssd allocation scheme
[  233.209595][ T6181] BTRFS info (device loop2): not using ssd optimizations
[  233.216726][ T6181] BTRFS info (device loop2): not using spread ssd allocation scheme
[  233.221687][ T6181] BTRFS info (device loop2): using free space tree
[  233.231930][ T6181] BTRFS info (device loop2): has skinny extents
[  233.244153][ T6218] erofs: (device loop4): mounted with root inode @ nid 36.
[  233.258588][ T4044] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  233.271356][ T6218] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  233.325985][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.584'.
[  233.338883][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'.
[  233.523795][ T6181] BTRFS info (device loop2): clearing free space tree
[  233.525506][ T6181] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  233.536994][ T6181] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  233.553804][ T6181] BTRFS info (device loop2): creating free space tree
[  233.556149][ T6181] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  233.558144][ T6181] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  233.621919][ T6250] FAULT_INJECTION: forcing a failure.
[  233.621919][ T6250] name failslab, interval 1, probability 0, space 0, times 0
[  233.630713][ T6250] CPU: 0 PID: 6250 Comm: syz.4.588 Not tainted 5.15.173-syzkaller #0
[  233.632364][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  233.634500][ T6250] Call trace:
[  233.635270][ T6250]  dump_backtrace+0x0/0x530
[  233.636322][ T6250]  show_stack+0x2c/0x3c
[  233.637255][ T6250]  dump_stack_lvl+0x108/0x170
[  233.638142][ T6250]  dump_stack+0x1c/0x58
[  233.639069][ T6250]  should_fail+0x3b8/0x514
[  233.640018][ T6250]  __should_failslab+0xbc/0x110
[  233.641104][ T6250]  should_failslab+0x10/0x28
[  233.642019][ T6250]  slab_pre_alloc_hook+0x64/0xe8
[  233.642991][ T6250]  __kmalloc+0xc0/0x4c8
[  233.643833][ T6250]  tomoyo_encode+0x270/0x4b0
[  233.644837][ T6250]  tomoyo_realpath_from_path+0x4b4/0x508
[  233.646028][ T6250]  tomoyo_path_number_perm+0x1f8/0x6b0
[  233.647274][ T6250]  tomoyo_file_ioctl+0x2c/0x3c
[  233.648335][ T6250]  security_file_ioctl+0x80/0xbc
[  233.649328][ T6250]  __arm64_sys_ioctl+0xa8/0x1c8
[  233.650309][ T6250]  invoke_syscall+0x98/0x2b8
[  233.651243][ T6250]  el0_svc_common+0x138/0x258
[  233.652197][ T6250]  do_el0_svc+0x58/0x14c
[  233.653100][ T6250]  el0_svc+0x7c/0x1f0
[  233.653923][ T6250]  el0t_64_sync_handler+0x84/0xe4
[  233.655045][ T6250]  el0t_64_sync+0x1a0/0x1a4
[  233.709759][ T6252] loop0: detected capacity change from 0 to 1024
[  233.716721][ T6252] EXT4-fs (loop0): Ignoring removed orlov option
[  233.718102][ T6252] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  233.738084][ T6250] ERROR: Out of memory at tomoyo_realpath_from_path.
[  233.764690][ T6248] loop1: detected capacity change from 0 to 4096
[  233.775312][ T6252] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  233.820343][ T6248] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  233.820540][ T6257] loop4: detected capacity change from 0 to 1024
[  233.852645][ T6257] EXT4-fs (loop4): Ignoring removed orlov option
[  233.860056][ T6257] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  233.944191][ T6257] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  234.002586][ T6252] Process accounting resumed
[  234.055005][ T6266] FAULT_INJECTION: forcing a failure.
[  234.055005][ T6266] name failslab, interval 1, probability 0, space 0, times 0
[  234.094701][ T6248] ntfs3: loop1: MftZone: unavailable
[  234.098771][ T6266] CPU: 1 PID: 6266 Comm: syz.4.592 Not tainted 5.15.173-syzkaller #0
[  234.100372][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  234.102406][ T6266] Call trace:
[  234.103175][ T6266]  dump_backtrace+0x0/0x530
[  234.104108][ T6266]  show_stack+0x2c/0x3c
[  234.104939][ T6266]  dump_stack_lvl+0x108/0x170
[  234.105915][ T6266]  dump_stack+0x1c/0x58
[  234.106822][ T6266]  should_fail+0x3b8/0x514
[  234.107739][ T6266]  __should_failslab+0xbc/0x110
[  234.108696][ T6266]  should_failslab+0x10/0x28
[  234.109699][ T6266]  slab_pre_alloc_hook+0x64/0xe8
[  234.110749][ T6266]  __kmalloc+0xc0/0x4c8
[  234.111605][ T6266]  tomoyo_encode+0x270/0x4b0
[  234.112484][ T6266]  tomoyo_realpath_from_path+0x4b4/0x508
[  234.113657][ T6266]  tomoyo_path_number_perm+0x1f8/0x6b0
[  234.114801][ T6266]  tomoyo_file_ioctl+0x2c/0x3c
[  234.115874][ T6266]  security_file_ioctl+0x80/0xbc
[  234.116947][ T6266]  __arm64_sys_ioctl+0xa8/0x1c8
[  234.117927][ T6266]  invoke_syscall+0x98/0x2b8
[  234.118946][ T6266]  el0_svc_common+0x138/0x258
[  234.120061][ T6266]  do_el0_svc+0x58/0x14c
[  234.120906][ T6266]  el0_svc+0x7c/0x1f0
[  234.121703][ T6266]  el0t_64_sync_handler+0x84/0xe4
[  234.122861][ T6266]  el0t_64_sync+0x1a0/0x1a4
[  234.134798][ T6268] loop3: detected capacity change from 0 to 16
[  234.152572][ T6268] erofs: (device loop3): mounted with root inode @ nid 36.
[  234.165379][ T6248] ntfs3: loop1: MftZone: unavailable
[  234.166871][ T6248] ntfs3: loop1: no free space to extend mft
[  234.173036][ T4044] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  234.186984][ T6268] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  234.209288][ T6266] ERROR: Out of memory at tomoyo_realpath_from_path.
[  234.228250][ T6271] netlink: 36 bytes leftover after parsing attributes in process `syz.2.596'.
[  234.280432][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'.
[  235.445413][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  235.449725][ T6294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  235.499367][ T6294] loop4: detected capacity change from 0 to 2048
[  235.556185][ T6294] UDF-fs: bad mount option "volumeÀ +–êMâf�=00000000000000000001" or missing value
[  235.714583][ T6294] loop4: detected capacity change from 0 to 2048
[  235.761154][ T6294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  235.831801][ T6303] loop1: detected capacity change from 0 to 128
[  235.938996][ T6303] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  236.031622][ T6291] loop2: detected capacity change from 0 to 32768
[  236.052714][ T6305] loop3: detected capacity change from 0 to 8192
[  236.055258][ T6303] EXT4-fs warning (device loop1): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled.
[  236.067905][ T6291] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.601 (6291)
[  236.101302][ T6291] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  236.103731][ T6291] BTRFS info (device loop2): setting nodatacow, compression disabled
[  236.105687][ T6291] BTRFS info (device loop2): setting datacow
[  236.107039][ T6305] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  236.108911][ T6305] REISERFS (device loop3): using ordered data mode
[  236.110269][ T6305] reiserfs: using flush barriers
[  236.111462][ T6291] BTRFS info (device loop2): doing ref verification
[  236.112977][ T6291] BTRFS info (device loop2): force clearing of disk cache
[  236.121605][ T6291] BTRFS info (device loop2): turning off barriers
[  236.123027][ T6291] BTRFS info (device loop2): enabling ssd optimizations
[  236.140661][ T6291] BTRFS info (device loop2): using spread ssd allocation scheme
[  236.142342][ T6291] BTRFS info (device loop2): not using ssd optimizations
[  236.145011][ T6291] BTRFS info (device loop2): not using spread ssd allocation scheme
[  236.146630][ T6291] BTRFS info (device loop2): using free space tree
[  236.147920][ T6291] BTRFS info (device loop2): has skinny extents
[  236.149580][ T6305] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  236.153579][ T6305] REISERFS (device loop3): checking transaction log (loop3)
[  236.232833][ T6308] loop4: detected capacity change from 0 to 8192
[  236.356868][ T6308] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  236.359065][ T6308] REISERFS (device loop4): using ordered data mode
[  236.360401][ T6308] reiserfs: using flush barriers
[  236.363764][ T6308] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  236.378405][ T6308] REISERFS (device loop4): checking transaction log (loop4)
[  236.402712][ T6322] loop1: detected capacity change from 0 to 16
[  236.412575][ T6305] REISERFS (device loop3): Using tea hash to sort names
[  236.414940][ T6305] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  236.601252][ T6322] erofs: (device loop1): mounted with root inode @ nid 36.
[  236.608151][ T4044] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  236.627619][ T6322] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  236.640871][ T6291] BTRFS info (device loop2): clearing free space tree
[  236.642317][ T6291] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  236.653288][ T6291] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  236.661381][ T6291] BTRFS info (device loop2): creating free space tree
[  236.673859][ T6291] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  236.676165][ T6291] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  236.734168][ T6308] REISERFS (device loop4): Using tea hash to sort names
[  236.735988][ T6308] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  237.181743][ T6338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.611'.
[  237.191415][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'.
[  238.316696][ T6349] loop2: detected capacity change from 0 to 2048
[  238.338240][ T6362] loop3: detected capacity change from 0 to 16
[  238.350052][ T6365] loop4: detected capacity change from 0 to 16
[  238.361149][ T6366] loop1: detected capacity change from 0 to 16
[  238.367553][ T6349]  loop2: p1 < > p3 p4 < >
[  238.371981][ T6362] erofs: (device loop3): mounted with root inode @ nid 36.
[  238.386408][ T6365] erofs: (device loop4): mounted with root inode @ nid 36.
[  238.392469][ T6366] erofs: (device loop1): mounted with root inode @ nid 36.
[  238.394221][ T6349] loop2: p3 start 4284289 is beyond EOD, truncated
[  238.398754][ T4044] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  238.410057][ T4044] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  238.410686][ T6362] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  238.435622][ T6365] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  238.456779][ T4044] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  238.468097][ T6366] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  238.531585][ T3642]  loop2: p1 < > p3 p4 < >
[  238.565194][ T3642] loop2: p3 start 4284289 is beyond EOD, truncated
[  238.750020][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  238.806615][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  238.880286][ T6377] loop1: detected capacity change from 0 to 256
[  238.912622][ T6377] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  239.020876][ T6375] loop2: detected capacity change from 0 to 8192
[  239.075717][ T6375] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  239.077991][ T6375] REISERFS (device loop2): using ordered data mode
[  239.079346][ T6375] reiserfs: using flush barriers
[  239.081131][ T6375] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  239.095214][ T6375] REISERFS (device loop2): checking transaction log (loop2)
[  239.182530][ T6380] loop1: detected capacity change from 0 to 8
[  239.355830][ T6373] loop4: detected capacity change from 0 to 32768
[  239.356252][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  239.362979][ T4583] udevd[4583]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  239.400175][ T6373] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.622 (6373)
[  239.461881][ T6375] REISERFS (device loop2): Using tea hash to sort names
[  239.464351][ T6375] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  239.470411][ T6382] netlink: 36 bytes leftover after parsing attributes in process `syz.0.626'.
[  239.480870][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'.
[  239.564302][ T6369] loop3: detected capacity change from 0 to 32768
[  239.647751][ T6373] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  239.651990][ T6373] BTRFS info (device loop4): setting nodatacow, compression disabled
[  239.659499][ T6369] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.621 (6369)
[  239.662284][ T6373] BTRFS info (device loop4): setting datacow
[  239.663747][ T6373] BTRFS info (device loop4): doing ref verification
[  239.665278][ T6373] BTRFS info (device loop4): force clearing of disk cache
[  239.666599][ T6373] BTRFS info (device loop4): turning off barriers
[  239.667885][ T6373] BTRFS info (device loop4): enabling ssd optimizations
[  239.669409][ T6373] BTRFS info (device loop4): using spread ssd allocation scheme
[  239.670906][ T6373] BTRFS info (device loop4): not using ssd optimizations
[  239.672240][ T6373] BTRFS info (device loop4): not using spread ssd allocation scheme
[  239.673930][ T6373] BTRFS info (device loop4): using free space tree
[  239.675187][ T6373] BTRFS info (device loop4): has skinny extents
[  239.688729][ T6380] SQUASHFS error: Failed to read block 0x6e6: -5
[  239.690676][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.692617][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.700869][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.702444][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.704755][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.706449][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.708022][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.709523][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.711052][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.712933][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.718555][ T6373] BTRFS info (device loop4): clearing free space tree
[  239.719530][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.720147][ T6373] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  239.721618][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.724218][ T6373] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  239.733517][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.736006][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.741127][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.745229][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.747018][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.751187][ T6373] BTRFS info (device loop4): creating free space tree
[  239.762157][ T6373] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  239.764824][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.769701][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.774736][ T6373] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  239.778008][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.780769][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.790038][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  239.797408][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  239.802473][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.081106][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.140383][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.648576][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.650553][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.652300][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.653915][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.655390][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.657003][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.658472][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.659913][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.662764][ T6379] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.664594][ T6379] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.666283][ T6379] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.668124][ T6379] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.669608][ T6379] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.671144][ T6379] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.672531][ T6379] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.675451][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.676951][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.678541][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.679979][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.681377][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.683000][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.684621][ T6379] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.686435][ T6379] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.687838][ T6379] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.689236][ T6379] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.690913][ T6379] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.692447][ T6379] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.694062][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.695473][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.696841][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.698314][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.699756][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.701259][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.704487][ T6379] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.706146][ T6379] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.707523][ T6379] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.709802][ T6379] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.711255][ T6379] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.712763][ T6379] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.714429][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.716133][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.717509][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.718965][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.720400][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.721922][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.723439][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.725051][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.726447][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.727963][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.729403][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.730911][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.732264][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.740247][ T6379] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.744740][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.746323][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.748010][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.749508][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.751074][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.752817][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.754060][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.757058][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.762855][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.778084][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.779771][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.781340][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.782791][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.801357][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.802853][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.813182][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.817433][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.829795][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.830537][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.831222][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.835153][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.836657][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.837962][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.839511][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.862114][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.893051][ T6414] FAULT_INJECTION: forcing a failure.
[  240.893051][ T6414] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.896360][ T6414] CPU: 0 PID: 6414 Comm: syz.0.629 Not tainted 5.15.173-syzkaller #0
[  240.898099][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  240.900142][ T6414] Call trace:
[  240.900869][ T6414]  dump_backtrace+0x0/0x530
[  240.901876][ T6414]  show_stack+0x2c/0x3c
[  240.902823][ T6414]  dump_stack_lvl+0x108/0x170
[  240.903869][ T6414]  dump_stack+0x1c/0x58
[  240.904761][ T6414]  should_fail+0x3b8/0x514
[  240.905725][ T6414]  should_fail_usercopy+0x20/0x30
[  240.906877][ T6414]  simple_read_from_buffer+0xd8/0x26c
[  240.908144][ T6414]  proc_fail_nth_read+0x1a0/0x248
[  240.909136][ T6414]  vfs_read+0x278/0xb18
[  240.910074][ T6414]  ksys_read+0x15c/0x26c
[  240.910957][ T6414]  __arm64_sys_read+0x7c/0x90
[  240.911942][ T6414]  invoke_syscall+0x98/0x2b8
[  240.913017][ T6414]  el0_svc_common+0x138/0x258
[  240.913906][ T6414]  do_el0_svc+0x58/0x14c
[  240.914886][ T6414]  el0_svc+0x7c/0x1f0
[  240.915733][ T6414]  el0t_64_sync_handler+0x84/0xe4
[  240.916849][ T6414]  el0t_64_sync+0x1a0/0x1a4
[  240.980459][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.982593][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  240.985341][ T6416] loop0: detected capacity change from 0 to 16
[  240.992567][ T6380] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  240.994937][ T6380] SQUASHFS error: read_indexes: reading block [6e4:0]
[  241.009755][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  241.011308][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  241.018881][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  241.020477][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  241.022551][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  241.032724][ T6416] erofs: (device loop0): mounted with root inode @ nid 36.
[  241.039077][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  241.040776][ T6409] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  241.042327][ T6409] SQUASHFS error: read_indexes: reading block [6e4:0]
[  241.053518][ T4039] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  241.064943][ T6416] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  241.260944][ T6426] loop4: detected capacity change from 0 to 16
[  241.286006][ T6426] erofs: (device loop4): mounted with root inode @ nid 36.
[  241.326471][ T4039] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  241.338050][ T6426] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  241.340522][ T6429] loop0: detected capacity change from 0 to 256
[  241.346926][ T6413] loop3: detected capacity change from 0 to 16384
[  241.398061][ T6429] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  241.411309][ T6429] FAULT_INJECTION: forcing a failure.
[  241.411309][ T6429] name failslab, interval 1, probability 0, space 0, times 0
[  241.437528][ T6429] CPU: 1 PID: 6429 Comm: syz.0.636 Not tainted 5.15.173-syzkaller #0
[  241.439519][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  241.441641][ T6429] Call trace:
[  241.442304][ T6429]  dump_backtrace+0x0/0x530
[  241.443312][ T6429]  show_stack+0x2c/0x3c
[  241.444229][ T6429]  dump_stack_lvl+0x108/0x170
[  241.445199][ T6429]  dump_stack+0x1c/0x58
[  241.445998][ T6429]  should_fail+0x3b8/0x514
[  241.446853][ T6429]  __should_failslab+0xbc/0x110
[  241.447780][ T6429]  should_failslab+0x10/0x28
[  241.448698][ T6429]  slab_pre_alloc_hook+0x64/0xe8
[  241.449650][ T6429]  kmem_cache_alloc_trace+0x9c/0x47c
[  241.450823][ T6429]  cgroup_show_path+0xbc/0x19c
[  241.451811][ T6429]  kernfs_sop_show_path+0x104/0x144
[  241.452854][ T6429]  show_mountinfo+0x1e4/0x760
[  241.453751][ T6429]  m_show+0x6c/0x80
[  241.454578][ T6429]  seq_read_iter+0x894/0xc44
[  241.455500][ T6429]  vfs_read+0x874/0xb18
[  241.456360][ T6429]  ksys_read+0x15c/0x26c
[  241.457265][ T6429]  __arm64_sys_read+0x7c/0x90
[  241.458304][ T6429]  invoke_syscall+0x98/0x2b8
[  241.459188][ T6429]  el0_svc_common+0x138/0x258
[  241.460272][ T6429]  do_el0_svc+0x58/0x14c
[  241.461114][ T6429]  el0_svc+0x7c/0x1f0
[  241.461987][ T6429]  el0t_64_sync_handler+0x84/0xe4
[  241.462974][ T6429]  el0t_64_sync+0x1a0/0x1a4
[  241.504213][ T6435] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  241.525221][ T6435] loop1: detected capacity change from 0 to 512
[  241.577491][ T6435] EXT2-fs (loop1): error: corrupt root inode, run e2fsck
[  241.681327][ T6440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.638'.
[  242.607685][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'.
[  242.762018][ T6454] loop3: detected capacity change from 0 to 128
[  242.794530][ T6457] loop4: detected capacity change from 0 to 16
[  242.872338][ T6457] erofs: (device loop4): mounted with root inode @ nid 36.
[  242.880704][ T4039] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  242.914730][ T6457] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  242.969669][ T6454] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  243.211162][ T6469] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6
[  243.346477][ T6448] loop2: detected capacity change from 0 to 32768
[  243.407045][ T6448] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.641 (6448)
[  243.419194][ T6448] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  243.422278][ T6448] BTRFS info (device loop2): setting nodatacow, compression disabled
[  243.427838][ T6448] BTRFS info (device loop2): setting datacow
[  243.431436][ T6448] BTRFS info (device loop2): doing ref verification
[  243.436148][ T6448] BTRFS info (device loop2): force clearing of disk cache
[  243.440096][ T6448] BTRFS info (device loop2): turning off barriers
[  243.442761][ T6448] BTRFS info (device loop2): enabling ssd optimizations
[  243.446264][ T6448] BTRFS info (device loop2): using spread ssd allocation scheme
[  243.448843][ T6466] binder: 6465:6466 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  243.450076][ T6448] BTRFS info (device loop2): not using ssd optimizations
[  243.457709][ T6448] BTRFS info (device loop2): not using spread ssd allocation scheme
[  243.459509][ T6448] BTRFS info (device loop2): using free space tree
[  243.479427][ T6448] BTRFS info (device loop2): has skinny extents
[  243.500582][ T6476] loop0: detected capacity change from 0 to 16
[  243.526184][ T6476] erofs: (device loop0): mounted with root inode @ nid 36.
[  243.533328][ T4039] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  243.547880][ T6476] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  243.798287][ T6497] loop0: detected capacity change from 0 to 256
[  243.804152][ T6448] BTRFS info (device loop2): clearing free space tree
[  243.805662][ T6448] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  243.807631][ T6448] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  243.825335][ T6471] loop4: detected capacity change from 0 to 32768
[  244.661629][ T6448] BTRFS info (device loop2): creating free space tree
[  244.662525][ T6498] loop3: detected capacity change from 0 to 2048
[  244.663861][ T6448] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  244.666280][ T6448] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  244.724917][ T6498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  244.782144][ T6471] XFS (loop4): Mounting V5 Filesystem
[  245.182452][ T6471] XFS (loop4): Ending clean mount
[  245.250468][ T4033] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  245.253132][ T4033] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  245.261313][ T6518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'.
[  245.285820][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'.
[  245.510625][ T4032] XFS (loop4): Unmounting Filesystem
[  245.588184][ T6521] loop0: detected capacity change from 0 to 16
[  245.597632][ T6521] erofs: (device loop0): mounted with root inode @ nid 36.
[  245.613551][ T4039] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  245.647821][ T6521] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  245.734640][ T6526] loop1: detected capacity change from 0 to 16
[  245.766869][ T6526] erofs: (device loop1): mounted with root inode @ nid 36.
[  245.772801][ T4039] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  245.803614][ T6526] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  245.979899][ T6532] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  246.026075][ T6532] loop0: detected capacity change from 0 to 512
[  246.099116][ T6532] EXT2-fs (loop0): error: corrupt root inode, run e2fsck
[  247.147096][  T301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.147995][ T6542] loop2: detected capacity change from 0 to 128
[  247.231150][ T6542] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  247.274915][  T301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.318672][ T6547] loop4: detected capacity change from 0 to 256
[  247.371453][  T301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.439499][  T301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.485186][ T6553] FAULT_INJECTION: forcing a failure.
[  247.485186][ T6553] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  247.501412][ T6553] CPU: 1 PID: 6553 Comm: syz.0.670 Not tainted 5.15.173-syzkaller #0
[  247.503245][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  247.505348][ T6553] Call trace:
[  247.506042][ T6553]  dump_backtrace+0x0/0x530
[  247.506878][ T6553]  show_stack+0x2c/0x3c
[  247.507702][ T6553]  dump_stack_lvl+0x108/0x170
[  247.508584][ T6553]  dump_stack+0x1c/0x58
[  247.509501][ T6553]  should_fail+0x3b8/0x514
[  247.510405][ T6553]  should_fail_usercopy+0x20/0x30
[  247.511422][ T6553]  iovec_from_user+0xcc/0x630
[  247.512327][ T6553]  __import_iovec+0x80/0x414
[  247.513321][ T6553]  import_iovec+0x88/0xa4
[  247.514213][ T6553]  ___sys_sendmsg+0x1dc/0x294
[  247.515321][ T6553]  __arm64_sys_sendmsg+0x1ac/0x25c
[  247.516419][ T6553]  invoke_syscall+0x98/0x2b8
[  247.517375][ T6553]  el0_svc_common+0x138/0x258
[  247.518426][ T6553]  do_el0_svc+0x58/0x14c
[  247.519428][ T6553]  el0_svc+0x7c/0x1f0
[  247.520355][ T6553]  el0t_64_sync_handler+0x84/0xe4
[  247.521354][ T6553]  el0t_64_sync+0x1a0/0x1a4
[  248.226501][ T6541] loop1: detected capacity change from 0 to 32768
[  248.282455][ T6561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.671'.
[  248.301686][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'.
[  248.333301][ T6541] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.667 (6541)
[  248.373573][ T6541] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  248.375495][ T6541] BTRFS info (device loop1): setting nodatacow, compression disabled
[  248.377117][ T6541] BTRFS info (device loop1): setting datacow
[  248.378428][ T6541] BTRFS info (device loop1): doing ref verification
[  248.379653][ T6541] BTRFS info (device loop1): force clearing of disk cache
[  248.381169][ T6541] BTRFS info (device loop1): turning off barriers
[  248.382487][ T6541] BTRFS info (device loop1): enabling ssd optimizations
[  248.390055][ T6541] BTRFS info (device loop1): using spread ssd allocation scheme
[  248.391481][ T6541] BTRFS info (device loop1): not using ssd optimizations
[  248.392823][ T6541] BTRFS info (device loop1): not using spread ssd allocation scheme
[  248.395337][ T6541] BTRFS info (device loop1): using free space tree
[  248.396804][ T6541] BTRFS info (device loop1): has skinny extents
[  248.398511][ T6548] chnl_net:caif_netlink_parms(): no params data found
[  248.439136][ T6569] loop2: detected capacity change from 0 to 16
[  248.496863][ T6575] loop0: detected capacity change from 0 to 16
[  248.506390][ T6569] erofs: (device loop2): mounted with root inode @ nid 36.
[  248.516133][ T4039] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  248.542261][ T6569] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  248.568391][ T6575] erofs: (device loop0): mounted with root inode @ nid 36.
[  248.586436][ T4039] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  248.598615][ T6575] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  248.780321][ T6541] BTRFS info (device loop1): clearing free space tree
[  248.781704][ T6541] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  248.787865][ T6541] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  248.790379][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.792990][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.313800][ T6417] Bluetooth: hci3: command 0x0409 tx timeout
[  249.634343][ T6548] device bridge_slave_0 entered promiscuous mode
[  249.646070][ T6541] BTRFS info (device loop1): creating free space tree
[  249.648049][ T6541] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  249.683584][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.702706][ T6541] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  249.711421][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.722651][ T6548] device bridge_slave_1 entered promiscuous mode
[  249.771267][ T6616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.677'.
[  249.830258][ T6622] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  249.845570][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.849388][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.862196][ T6622] loop2: detected capacity change from 0 to 512
[  249.933180][ T6548] team0: Port device team_slave_0 added
[  249.948731][ T6548] team0: Port device team_slave_1 added
[  250.029916][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.031492][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.039641][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.043216][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.045210][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.056375][ T6622] EXT2-fs (loop2): error: corrupt root inode, run e2fsck
[  250.061561][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.367040][ T6548] device hsr_slave_0 entered promiscuous mode
[  250.413636][ T6548] device hsr_slave_1 entered promiscuous mode
[  250.443585][ T6548] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  250.445467][ T6548] Cannot create hsr debugfs directory
[  250.717720][ T6548] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  250.722036][ T6640] loop1: detected capacity change from 0 to 256
[  250.747596][ T6620] loop4: detected capacity change from 0 to 32768
[  250.784238][ T6620] XFS: attr2 mount option is deprecated.
[  250.786716][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'.
[  250.833492][ T6644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.683'.
[  250.839644][ T6548] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  250.905393][ T6548] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  250.947341][ T6620] XFS (loop4): Mounting V5 Filesystem
[  250.999102][ T6620] XFS (loop4): Ending clean mount
[  251.023775][ T6620] XFS (loop4): Quotacheck needed: Please wait.
[  251.030499][ T6548] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  251.097508][ T6620] XFS (loop4): Quotacheck: Done.
[  251.126578][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'.
[  251.213802][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.270786][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  251.273014][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  251.331338][ T6548] 8021q: adding VLAN 0 to HW filter on device team0
[  251.354057][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  251.356706][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  251.359298][ T4135] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.360833][ T4135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.384189][ T4032] XFS (loop4): Unmounting Filesystem
[  251.402100][ T6422] Bluetooth: hci3: command 0x041b tx timeout
[  251.434938][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  251.437239][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  251.439667][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  251.442921][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.445044][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.499175][ T6548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  251.501332][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  251.511047][ T6680] loop0: detected capacity change from 0 to 16
[  251.520591][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  251.523125][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  251.551364][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  251.557325][ T6680] erofs: (device loop0): mounted with root inode @ nid 36.
[  251.571304][ T4044] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  251.582802][ T6680] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  251.663088][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  251.665877][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  251.668410][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  251.675081][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  251.677383][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  251.684028][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  251.729269][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  251.791521][ T6689] loop2: detected capacity change from 0 to 512
[  251.820506][ T6686] loop1: detected capacity change from 0 to 8192
[  251.856323][  T301] device hsr_slave_0 left promiscuous mode
[  251.909769][  T301] device hsr_slave_1 left promiscuous mode
[  251.916905][ T6686] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  251.918930][ T6686] REISERFS (device loop1): using ordered data mode
[  251.920205][ T6686] reiserfs: using flush barriers
[  251.926202][ T6686] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  251.929937][ T6686] REISERFS (device loop1): checking transaction log (loop1)
[  251.936403][ T6689] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.690: corrupted inode contents
[  251.963985][  T301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.965554][  T301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.968423][  T301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.970043][  T301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.972107][  T301] device bridge_slave_1 left promiscuous mode
[  251.976888][ T6689] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.690: mark_inode_dirty error
[  251.981321][ T6689] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.690: corrupted inode contents
[  251.991719][ T6689] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.690: mark_inode_dirty error
[  252.003673][  T301] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.031724][ T6689] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.690: corrupted inode contents
[  252.072891][ T6689] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  252.088402][  T301] device bridge_slave_0 left promiscuous mode
[  252.097253][ T6689] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.690: corrupted inode contents
[  252.100242][  T301] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.117893][ T6689] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.690: mark_inode_dirty error
[  252.943962][ T6689] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  252.953006][ T6689] EXT4-fs (loop2): 1 truncate cleaned up
[  252.971776][ T6689] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  252.976143][ T6705] loop0: detected capacity change from 0 to 16
[  252.992155][ T6686] REISERFS (device loop1): Using tea hash to sort names
[  252.994614][ T6686] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  253.008232][ T6689] FAULT_INJECTION: forcing a failure.
[  253.008232][ T6689] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  253.010975][ T6689] CPU: 0 PID: 6689 Comm: syz.2.690 Not tainted 5.15.173-syzkaller #0
[  253.012541][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  253.014516][ T6689] Call trace:
[  253.015225][ T6689]  dump_backtrace+0x0/0x530
[  253.016105][ T6689]  show_stack+0x2c/0x3c
[  253.016290][ T6705] erofs: (device loop0): mounted with root inode @ nid 36.
[  253.016933][ T6689]  dump_stack_lvl+0x108/0x170
[  253.019365][ T6689]  dump_stack+0x1c/0x58
[  253.020197][ T6689]  should_fail+0x3b8/0x514
[  253.021074][ T6689]  should_fail_alloc_page+0x74/0xa8
[  253.022107][ T6689]  prepare_alloc_pages+0x160/0x460
[  253.023107][ T6689]  __alloc_pages+0x138/0x674
[  253.024019][ T6689]  kmalloc_large_node+0x8c/0x190
[  253.025039][ T6689]  __kmalloc_node_track_caller+0x2dc/0x448
[  253.026380][ T6689]  kmalloc_reserve+0xe8/0x270
[  253.027279][ T6689]  __alloc_skb+0x1a4/0x584
[  253.028414][ T6689]  ppp_write+0xb0/0x454
[  253.029307][ T6689]  vfs_write+0x280/0xb44
[  253.030138][ T6689]  ksys_write+0x15c/0x26c
[  253.030979][ T6689]  __arm64_sys_write+0x7c/0x90
[  253.031980][ T6689]  invoke_syscall+0x98/0x2b8
[  253.032887][ T6689]  el0_svc_common+0x138/0x258
[  253.033779][ T6689]  do_el0_svc+0x58/0x14c
[  253.034617][ T6689]  el0_svc+0x7c/0x1f0
[  253.035395][ T6689]  el0t_64_sync_handler+0x84/0xe4
[  253.036388][ T6689]  el0t_64_sync+0x1a0/0x1a4
[  253.096970][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.694'.
[  253.103997][  T301] device veth1_macvtap left promiscuous mode
[  253.105980][  T301] device veth0_macvtap left promiscuous mode
[  253.107296][  T301] device veth1_vlan left promiscuous mode
[  253.108516][  T301] device veth0_vlan left promiscuous mode
[  253.114416][ T4044] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  253.137775][ T6705] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  253.469074][ T6714] loop0: detected capacity change from 0 to 2048
[  253.473571][ T6421] Bluetooth: hci3: command 0x040f tx timeout
[  253.542446][ T6714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.666094][  T301] team0 (unregistering): Port device team_slave_1 removed
[  253.711766][  T301] team0 (unregistering): Port device team_slave_0 removed
[  253.729651][  T301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.748915][ T4030] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  253.750963][ T4030] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  253.769862][  T301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.912083][ T6718] loop1: detected capacity change from 0 to 512
[  253.948577][  T301] bond0 (unregistering): Released all slaves
[  253.954170][ T2057] ieee802154 phy0 wpan0: encryption failed: -22
[  253.955466][ T2057] ieee802154 phy1 wpan1: encryption failed: -22
[  254.006495][ T6718] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.699: corrupted inode contents
[  254.009371][ T6718] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #16: comm syz.1.699: mark_inode_dirty error
[  254.012289][ T6718] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.699: corrupted inode contents
[  254.015512][ T6718] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.699: mark_inode_dirty error
[  254.018073][ T6718] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.699: corrupted inode contents
[  254.020755][ T6718] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  254.022998][ T6718] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.699: corrupted inode contents
[  254.026303][ T6718] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.699: mark_inode_dirty error
[  254.029866][ T6718] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  254.032840][ T6718] EXT4-fs (loop1): 1 truncate cleaned up
[  254.034619][ T6718] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  254.070293][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  254.072373][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  254.089473][ T6707] netlink: 36 bytes leftover after parsing attributes in process `syz.4.694'.
[  254.321713][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  254.323655][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  254.364436][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.521579][ T6740] loop1: detected capacity change from 0 to 64
[  254.940436][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  254.942722][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  255.017570][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  255.020005][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  255.024035][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  255.037090][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  255.119407][ T6733] loop4: detected capacity change from 0 to 32768
[  255.165109][ T6733] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.704 (6733)
[  255.195791][ T6733] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  255.197524][ T6733] BTRFS info (device loop4): setting nodatacow, compression disabled
[  255.199165][ T6733] BTRFS info (device loop4): setting datacow
[  255.200538][ T6733] BTRFS info (device loop4): doing ref verification
[  255.201870][ T6733] BTRFS info (device loop4): force clearing of disk cache
[  255.263415][ T6733] BTRFS info (device loop4): turning off barriers
[  255.264955][ T6733] BTRFS info (device loop4): enabling ssd optimizations
[  255.266314][ T6733] BTRFS info (device loop4): using spread ssd allocation scheme
[  255.268057][ T6733] BTRFS info (device loop4): not using ssd optimizations
[  255.269616][ T6733] BTRFS info (device loop4): not using spread ssd allocation scheme
[  255.271118][ T6733] BTRFS info (device loop4): using free space tree
[  255.272461][ T6733] BTRFS info (device loop4): has skinny extents
[  255.281099][ T6548] device veth0_vlan entered promiscuous mode
[  255.301363][ T6548] device veth1_vlan entered promiscuous mode
[  255.326899][ T6745] chnl_net:caif_netlink_parms(): no params data found
[  255.380772][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  255.383051][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  255.428579][ T6548] device veth0_macvtap entered promiscuous mode
[  255.553944][ T6420] Bluetooth: hci3: command 0x0419 tx timeout
[  255.597762][ T6548] device veth1_macvtap entered promiscuous mode
[  255.612805][ T6733] BTRFS info (device loop4): clearing free space tree
[  255.614803][ T6733] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  255.616934][ T6733] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  255.651146][ T6733] BTRFS info (device loop4): creating free space tree
[  255.654856][ T6733] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  255.657005][ T6733] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  255.716281][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.748584][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.750713][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.752745][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.783419][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.785530][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.787447][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.789577][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.827306][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.830958][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.832467][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.847834][ T6745] device bridge_slave_0 entered promiscuous mode
[  255.994855][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.004848][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.027626][ T6745] device bridge_slave_1 entered promiscuous mode
[  256.041161][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'.
[  256.047330][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  256.049590][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  256.051678][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  256.056111][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  256.066981][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.069203][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.071204][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.089856][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.091875][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.111474][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.114502][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.116518][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.144674][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.153392][ T6806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.709'.
[  256.158548][ T6548] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.160379][ T6548] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.162011][ T6548] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.173488][ T6548] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.231588][  T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  256.234024][  T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  256.268943][ T6808] loop4: detected capacity change from 0 to 8192
[  256.276133][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.320718][ T6812] loop1: detected capacity change from 0 to 2048
[  256.355436][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.380982][ T6808] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  256.382974][ T6808] REISERFS (device loop4): using ordered data mode
[  256.392517][ T6808] reiserfs: using flush barriers
[  256.395880][ T6808] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  256.405681][ T6812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  256.417366][ T6808] REISERFS (device loop4): checking transaction log (loop4)
[  256.437267][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.439489][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.442471][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  256.609783][ T4036] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  256.611788][ T4036] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  256.675286][ T6745] team0: Port device team_slave_0 added
[  256.678579][ T6745] team0: Port device team_slave_1 added
[  256.690358][ T1535] Bluetooth: hci0: command 0x0409 tx timeout
[  256.760637][ T6808] REISERFS (device loop4): Using tea hash to sort names
[  256.762271][ T6808] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  256.802031][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.804739][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.810023][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.064613][ T4774] ------------[ cut here ]------------
[  257.066479][ T4774] sysfs group 'byte_queue_limits' not found for kobject 'tx-0'
[  257.068127][ T4774] WARNING: CPU: 0 PID: 4774 at fs/sysfs/group.c:281 sysfs_remove_group+0x174/0x288
[  257.069880][ T4774] Modules linked in:
[  257.070619][ T4774] CPU: 0 PID: 4774 Comm: kbnepd bnep0 Not tainted 5.15.173-syzkaller #0
[  257.072451][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  257.074527][ T4774] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  257.076242][ T4774] pc : sysfs_remove_group+0x174/0x288
[  257.077504][ T4774] lr : sysfs_remove_group+0x174/0x288
[  257.078620][ T4774] sp : ffff800020af7830
[  257.079429][ T4774] x29: ffff800020af7830 x28: 1fffe0001ae4ecbb x27: 0000000000000000
[  257.081192][ T4774] x26: 0000000000000000 x25: 1fffe0001ae4ec88 x24: 1ffff000026d8f14
[  257.082903][ T4774] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c94b4018
[  257.084896][ T4774] x20: ffff0000e6050570 x19: ffff8000136c7f80 x18: 0000000000000001
[  257.086613][ T4774] x17: 0000000000000000 x16: ffff800011b4c108 x15: 00000000ffffffff
[  257.088555][ T4774] x14: ffff0000cc69b680 x13: 0000000000208ee8 x12: 0000000000000001
[  257.090263][ T4774] x11: 0000000000000000 x10: 0000000000000000 x9 : c7567854b12ed300
[  257.091918][ T4774] x8 : c7567854b12ed300 x7 : 0000000000208ee8 x6 : 0000000000208e88
[  257.093551][ T4774] x5 : ffff800020af6f98 x4 : ffff800014c17b88 x3 : ffff800008555e80
[  257.095541][ T4774] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003c
[  257.097249][ T4774] Call trace:
[  257.097949][ T4774]  sysfs_remove_group+0x174/0x288
[  257.098973][ T4774]  netdev_queue_update_kobjects+0x388/0x404
[  257.100161][ T4774]  netdev_unregister_kobject+0x100/0x204
[  257.101297][ T4774]  unregister_netdevice_many+0x12c8/0x189c
[  257.102548][ T4774]  unregister_netdev+0x178/0x1f0
[  257.103604][ T4774]  bnep_session+0x2274/0x2424
[  257.104559][ T4774]  kthread+0x37c/0x45c
[  257.105402][ T4774]  ret_from_fork+0x10/0x20
[  257.106410][ T4774] irq event stamp: 6060
[  257.107294][ T4774] hardirqs last  enabled at (6059): [<ffff80000832c128>] __up_console_sem+0xb4/0x100
[  257.109305][ T4774] hardirqs last disabled at (6060): [<ffff800011b47794>] el1_dbg+0x24/0x80
[  257.111195][ T4774] softirqs last  enabled at (6004): [<ffff80000ffba2fc>] dev_mc_flush+0x1b4/0x1f8
[  257.113501][ T4774] softirqs last disabled at (6002): [<ffff80000ffba914>] local_bh_disable+0x10/0x34
[  257.115457][ T4774] ---[ end trace 47953a7d1dabe03f ]---
[  257.121405][ T4774] ==================================================================
[  257.123671][ T4774] BUG: KASAN: use-after-free in device_for_each_child+0xa8/0x174
[  257.125278][ T4774] Read of size 8 at addr ffff0000c9cfd388 by task kbnepd bnep0/4774
[  257.126893][ T4774] 
[  257.127360][ T4774] CPU: 0 PID: 4774 Comm: kbnepd bnep0 Tainted: G        W         5.15.173-syzkaller #0
[  257.129424][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  257.131597][ T4774] Call trace:
[  257.132239][ T4774]  dump_backtrace+0x0/0x530
[  257.133140][ T4774]  show_stack+0x2c/0x3c
[  257.134018][ T4774]  dump_stack_lvl+0x108/0x170
[  257.135028][ T4774]  print_address_description+0x7c/0x3f0
[  257.136138][ T4774]  kasan_report+0x174/0x1e4
[  257.137012][ T4774]  __asan_report_load8_noabort+0x44/0x50
[  257.138262][ T4774]  device_for_each_child+0xa8/0x174
[  257.139409][ T4774]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  257.140580][ T4774]  netdev_unregister_kobject+0x144/0x204
[  257.141787][ T4774]  unregister_netdevice_many+0x12c8/0x189c
[  257.143156][ T4774]  unregister_netdev+0x178/0x1f0
[  257.144112][ T4774]  bnep_session+0x2274/0x2424
[  257.145024][ T4774]  kthread+0x37c/0x45c
[  257.145793][ T4774]  ret_from_fork+0x10/0x20
[  257.146655][ T4774] 
[  257.147107][ T4774] Allocated by task 4036:
[  257.147924][ T4774]  ____kasan_kmalloc+0xbc/0xfc
[  257.148963][ T4774]  __kasan_kmalloc+0x10/0x1c
[  257.149859][ T4774]  __kmalloc+0x29c/0x4c8
[  257.150686][ T4774]  hci_alloc_dev_priv+0x30/0x18b0
[  257.151793][ T4774]  vhci_create_device+0xf8/0x568
[  257.152913][ T4774]  vhci_write+0x318/0x3b8
[  257.153779][ T4774]  vfs_write+0x884/0xb44
[  257.154583][ T4774]  ksys_write+0x15c/0x26c
[  257.155492][ T4774]  __arm64_sys_write+0x7c/0x90
[  257.156442][ T4774]  invoke_syscall+0x98/0x2b8
[  257.157303][ T4774]  el0_svc_common+0x138/0x258
[  257.158342][ T4774]  do_el0_svc+0x58/0x14c
[  257.159195][ T4774]  el0_svc+0x7c/0x1f0
[  257.160046][ T4774]  el0t_64_sync_handler+0x84/0xe4
[  257.161102][ T4774]  el0t_64_sync+0x1a0/0x1a4
[  257.162024][ T4774] 
[  257.162444][ T4774] Freed by task 4036:
[  257.163294][ T4774]  kasan_set_track+0x4c/0x84
[  257.164248][ T4774]  kasan_set_free_info+0x28/0x4c
[  257.165337][ T4774]  ____kasan_slab_free+0x118/0x164
[  257.166402][ T4774]  __kasan_slab_free+0x18/0x28
[  257.167362][ T4774]  slab_free_freelist_hook+0x128/0x1ec
[  257.168488][ T4774]  kfree+0x178/0x410
[  257.169298][ T4774]  hci_release_dev+0x1004/0x116c
[  257.170379][ T4774]  bt_host_release+0x70/0x88
[  257.171509][ T4774]  device_release+0x8c/0x1ac
[  257.172505][ T4774]  kobject_put+0x2c4/0x438
[  257.173461][ T4774]  put_device+0x28/0x40
[  257.174407][ T4774]  hci_free_dev+0x24/0x34
[  257.175527][ T4774]  vhci_release+0x7c/0xc4
[  257.176443][ T4774]  __fput+0x1c4/0x800
[  257.177316][ T4774]  ____fput+0x20/0x30
[  257.178344][ T4774]  task_work_run+0x130/0x1e4
[  257.179230][ T4774]  do_exit+0x670/0x20bc
[  257.180101][ T4774]  do_group_exit+0x110/0x268
[  257.180963][ T4774]  __wake_up_parent+0x0/0x60
[  257.181849][ T4774]  invoke_syscall+0x98/0x2b8
[  257.182736][ T4774]  el0_svc_common+0x138/0x258
[  257.183615][ T4774]  do_el0_svc+0x58/0x14c
[  257.184472][ T4774]  el0_svc+0x7c/0x1f0
[  257.185250][ T4774]  el0t_64_sync_handler+0x84/0xe4
[  257.186296][ T4774]  el0t_64_sync+0x1a0/0x1a4
[  257.187223][ T4774] 
[  257.187730][ T4774] Last potentially related work creation:
[  257.188889][ T4774]  kasan_save_stack+0x38/0x68
[  257.189855][ T4774]  kasan_record_aux_stack+0xd4/0x11c
[  257.190964][ T4774]  insert_work+0x64/0x394
[  257.191800][ T4774]  __queue_work+0xb84/0x114c
[  257.192691][ T4774]  queue_work_on+0xc4/0x17c
[  257.193715][ T4774]  hci_cmd_timeout+0x1d0/0x204
[  257.194873][ T4774]  process_one_work+0x790/0x11b8
[  257.195886][ T4774]  worker_thread+0x910/0x1034
[  257.196910][ T4774]  kthread+0x37c/0x45c
[  257.197752][ T4774]  ret_from_fork+0x10/0x20
[  257.198609][ T4774] 
[  257.199123][ T4774] Second to last potentially related work creation:
[  257.200520][ T4774]  kasan_save_stack+0x38/0x68
[  257.201513][ T4774]  kasan_record_aux_stack+0xd4/0x11c
[  257.202715][ T4774]  insert_work+0x64/0x394
[  257.203586][ T4774]  __queue_work+0xb84/0x114c
[  257.204524][ T4774]  delayed_work_timer_fn+0x74/0x90
[  257.205676][ T4774]  call_timer_fn+0x19c/0x8f0
[  257.206661][ T4774]  __run_timers+0x584/0x718
[  257.207627][ T4774]  run_timer_softirq+0x7c/0x114
[  257.208732][ T4774]  handle_softirqs+0x384/0xdbc
[  257.209812][ T4774]  __irq_exit_rcu+0x268/0x4d8
[  257.210816][ T4774]  irq_exit+0x14/0x88
[  257.211692][ T4774]  handle_domain_irq+0xf4/0x178
[  257.212733][ T4774]  gic_handle_irq+0x78/0x1c8
[  257.213667][ T4774] 
[  257.214114][ T4774] The buggy address belongs to the object at ffff0000c9cfc000
[  257.214114][ T4774]  which belongs to the cache kmalloc-8k of size 8192
[  257.216954][ T4774] The buggy address is located 5000 bytes inside of
[  257.216954][ T4774]  8192-byte region [ffff0000c9cfc000, ffff0000c9cfe000)
[  257.219733][ T4774] The buggy address belongs to the page:
[  257.220929][ T4774] page:0000000033c85a9e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109cf8
[  257.223008][ T4774] head:0000000033c85a9e order:3 compound_mapcount:0 compound_pincount:0
[  257.224640][ T4774] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  257.226375][ T4774] raw: 05ffc00000010200 0000000000000000 0000000100000001 ffff0000c0002c00
[  257.228098][ T4774] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  257.229874][ T4774] page dumped because: kasan: bad access detected
[  257.231107][ T4774] 
[  257.231591][ T4774] Memory state around the buggy address:
[  257.232753][ T4774]  ffff0000c9cfd280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.234415][ T4774]  ffff0000c9cfd300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.235997][ T4774] >ffff0000c9cfd380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.237777][ T4774]                       ^
[  257.238664][ T4774]  ffff0000c9cfd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.240446][ T4774]  ffff0000c9cfd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  257.242057][ T4774] ==================================================================
[  257.243712][ T4774] Disabling lock debugging due to kernel taint
[  257.248054][ T4774] ================================================================================
[  257.250018][ T4774] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9
[  257.251577][ T4774] index 13105 is out of range for type 'unsigned long[8]'
[  257.252973][ T4774] CPU: 0 PID: 4774 Comm: kbnepd bnep0 Tainted: G    B   W         5.15.173-syzkaller #0
[  257.255051][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  257.257050][ T4774] Call trace:
[  257.257750][ T4774]  dump_backtrace+0x0/0x530
[  257.258645][ T4774]  show_stack+0x2c/0x3c
[  257.259477][ T4774]  dump_stack_lvl+0x108/0x170
[  257.260434][ T4774]  dump_stack+0x1c/0x58
[  257.261358][ T4774]  __ubsan_handle_out_of_bounds+0x108/0x15c
[  257.262491][ T4774]  queued_spin_lock_slowpath+0x854/0x938
[  257.263683][ T4774]  do_raw_spin_lock+0x334/0x35c
[  257.264777][ T4774]  _raw_spin_lock_irqsave+0xcc/0x14c
[  257.266059][ T4774]  klist_next+0x8c/0x2f4
[  257.266923][ T4774]  device_for_each_child+0xc0/0x174
[  257.268036][ T4774]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  257.269222][ T4774]  netdev_unregister_kobject+0x144/0x204
[  257.270358][ T4774]  unregister_netdevice_many+0x12c8/0x189c
[  257.271485][ T4774]  unregister_netdev+0x178/0x1f0
[  257.272561][ T4774]  bnep_session+0x2274/0x2424
[  257.273557][ T4774]  kthread+0x37c/0x45c
[  257.274401][ T4774]  ret_from_fork+0x10/0x20
[  257.275545][ T4774] ================================================================================
[  257.277469][ T4774] Unable to handle kernel paging request at virtual address ffff800014ac7710
[  257.279164][ T4774] Mem abort info:
[  257.279848][ T4774]   ESR = 0x0000000096000047
[  257.280716][ T4774]   EC = 0x25: DABT (current EL), IL = 32 bits
[  257.281932][ T4774]   SET = 0, FnV = 0
[  257.282793][ T4774]   EA = 0, S1PTW = 0
[  257.283588][ T4774]   FSC = 0x07: level 3 translation fault
[  257.284682][ T4774] Data abort info:
[  257.285407][ T4774]   ISV = 0, ISS = 0x00000047
[  257.286321][ T4774]   CM = 0, WnR = 1
[  257.287037][ T4774] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ae184000
[  257.288516][ T4774] [ffff800014ac7710] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fff9003, pte=0000000000000000
[  257.291653][ T4774] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP
[  257.293233][ T4774] Modules linked in:
[  257.293971][ T4774] CPU: 0 PID: 4774 Comm: kbnepd bnep0 Tainted: G    B   W         5.15.173-syzkaller #0
[  257.295854][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  257.298110][ T4774] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  257.299750][ T4774] pc : queued_spin_lock_slowpath+0x36c/0x938
[  257.301055][ T4774] lr : queued_spin_lock_slowpath+0x854/0x938
[  257.302195][ T4774] sp : ffff800020af7580
[  257.303066][ T4774] x29: ffff800020af7620 x28: 1ffff0000415eebc x27: 0000000000000000
[  257.304711][ T4774] x26: dfff800000000000 x25: ffff70000415eeb4 x24: 0000000000040000
[  257.306385][ T4774] x23: ffff800014ac7710 x22: ffff0001b418b708 x21: ffff0001b418b700
[  257.307910][ T4774] x20: ffff800014ac7710 x19: ffff0000d63b6c00 x18: 0000000000000002
[  257.309609][ T4774] x17: 0000000000000000 x16: ffff800011b4c108 x15: 00000000ffffffff
[  257.311329][ T4774] x14: ffff0000cc69b680 x13: 000000000020ce48 x12: ffff700002e38164
[  257.312885][ T4774] x11: 0000000000000001 x10: ffff800014ac7700 x9 : 0000000000000001
[  257.314503][ T4774] x8 : 0000000000000000 x7 : 000000000020ce48 x6 : 000000000020cde8
[  257.316340][ T4774] x5 : ffff800020af6c78 x4 : ffff800014c18b60 x3 : ffff80000819c3ec
[  257.318119][ T4774] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff0001b418b708
[  257.319781][ T4774] Call trace:
[  257.320487][ T4774]  queued_spin_lock_slowpath+0x36c/0x938
[  257.321607][ T4774]  do_raw_spin_lock+0x334/0x35c
[  257.322563][ T4774]  _raw_spin_lock_irqsave+0xcc/0x14c
[  257.323655][ T4774]  klist_next+0x8c/0x2f4
[  257.324579][ T4774]  device_for_each_child+0xc0/0x174
[  257.325611][ T4774]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  257.326828][ T4774]  netdev_unregister_kobject+0x144/0x204
[  257.327969][ T4774]  unregister_netdevice_many+0x12c8/0x189c
[  257.329167][ T4774]  unregister_netdev+0x178/0x1f0
[  257.330139][ T4774]  bnep_session+0x2274/0x2424
[  257.331107][ T4774]  kthread+0x37c/0x45c
[  257.331921][ T4774]  ret_from_fork+0x10/0x20
[  257.332843][ T4774] Code: aa1703e0 9417451d aa1603e0 52800081 (f90002f5) 
[  257.334173][ T4774] ---[ end trace 47953a7d1dabe040 ]---
[  257.851826][ T4774] Kernel panic - not syncing: Oops: Fatal exception
[  257.853354][ T4774] SMP: stopping secondary CPUs
[  257.854387][ T4774] Kernel Offset: disabled
[  257.855295][ T4774] CPU features: 0x8,000081c1,21302e40
[  257.856457][ T4774] Memory Limit: none
[  258.363658][ T4774] Rebooting in 86400 seconds..