last executing test programs:

14.854031808s ago: executing program 2 (id=184):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002ac0)="9514c92ae58f97b0fb4e98af7b3ac662794deb2fde895e2f21845a3424a05d2de53e2606ad88f582226b4e296501f78a907b4875f6fda8cb306a93afec226e", 0x3f}, {&(0x7f0000000080)="6df1ee6abeff8d02648b8f51dae4566d6fb934105597f2befbb8ddd3", 0x1c}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004040)="d07a6022c283cc31771597d10c59c328edd49e3021e55ee8c9961d1bf80739", 0x1f}, {&(0x7f0000004080)="f127d6d43d7d080c8eab4b1d303d7f6ff27b0baad3cbdfbdd747ad0612353d9e2fec51e60d0fef1d713d6a6775", 0x2d}, {&(0x7f0000004200)="3e17319ebba2310f89c4836d319570f14a8a67e4741e724ddb25244810faabce097116b5aa8f3aea8b353efa10", 0x2d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000004380)="0158bf8582b631dc550e90cbde7d545d2e5180fcbcc14fbc3c1f25068673b725cfae663e065ba56fe1564c554bfe7a88051d140efac83f4797dcc4f08622", 0x3e}, {&(0x7f0000000300)="f7afa1233ccfd47b644235cf1b0c56ed8e34fd1d20d325351547d306a8747b", 0x1f}, {&(0x7f00000015c0)="a1230da374c954bf89dc6dcf5675c30d720f2a6f018d18f06e7bc40faa28c55b504b2f644a47cf5c30277cd900f72df02047ea3052196871e26a", 0x3a}], 0x3}}], 0x3, 0x240080c5)
recvmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12102)

14.560593918s ago: executing program 2 (id=185):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xfb, 0x49e, &(0x7f0000000f40)="$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")
creat(0x0, 0x1)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x28008005, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

11.23530133s ago: executing program 2 (id=194):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,check=strict,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c6e6f646f74732c6e6f646f74732c6e66732c6e6f646f74732c646f74732c756d61736b3d30303030303030303030303030303030303030303030362c616c6c6f775f7574696d653d30303030303000000000000000023030303030303030352c6e6f646f74732c6e6f646f74732c6e66733d0704616c655f72772c64656275672c6e6f646f34732c73686f77657865632c666c7573682c646d61736b3d30303030303030303030303030303030303030303030332c646f74732c646f74732c00"], 0x1, 0x1fa, &(0x7f0000000800)="$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")
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
getdents64(r3, &(0x7f0000000080)=""/4096, 0x1000)
statx(r3, 0x0, 0x0, 0x20, 0x0)

8.368558247s ago: executing program 0 (id=205):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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")
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000011c0)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000004})
epoll_pwait(r4, &(0x7f0000000000)=[{}, {}], 0x2, 0x7c0e, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)

6.694140844s ago: executing program 3 (id=210):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000240))
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)={0x2c, r6, 0x227, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'rr\x00', 0x28, 0x5, 0x72}, 0x2c)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
r8 = socket$kcm(0xa, 0x2, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

6.153904972s ago: executing program 3 (id=212):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x80000000, 0x2, 0x7, 0x21f, 0xc, 0xc7}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x400, 0x0, 0x8}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x815}, 0x0)

5.282649822s ago: executing program 0 (id=213):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[], 0xff, 0x1506, &(0x7f0000001ac0)="$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")
syz_emit_ethernet(0x68, &(0x7f0000000080)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "108ec8", 0x0, 0x2c, 0x0, @private0, @private1, [], "40a8"}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10d002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x34, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0}, 0x40)
sendfile(r2, r2, 0x0, 0x800000009)

5.228846923s ago: executing program 3 (id=214):
creat(&(0x7f0000000440)='./file0\x00', 0x103)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000fe}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@sb={'sb', 0x3d, 0x1}}, {@acl}, {@nodiscard}]}, 0x0, 0x475, &(0x7f0000000740)="$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")

4.603226105s ago: executing program 3 (id=217):
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
socket(0x10, 0x3, 0x4)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback, 0xffffffffffffffff, 0x7, 0x6014, 0x0, @value=r4}, 0x20)
ioctl$sock_bt_hci(r0, 0x400448dd, 0x0)

3.758554403s ago: executing program 1 (id=220):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000240))
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)={0x2c, r6, 0x227, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'rr\x00', 0x28, 0x5, 0x72}, 0x2c)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
r8 = socket$kcm(0xa, 0x2, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

3.321146268s ago: executing program 1 (id=221):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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")
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000011c0)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(0x0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x30000004})
epoll_pwait(r6, &(0x7f0000000000)=[{}, {}], 0x2, 0x7c0e, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)

3.113692715s ago: executing program 0 (id=222):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000140))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)

1.587149477s ago: executing program 0 (id=223):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xfb, 0x49e, &(0x7f0000000f40)="$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")
creat(0x0, 0x1)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x28008005, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14)

1.586385087s ago: executing program 1 (id=224):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002ac0)="9514c92ae58f97b0fb4e98af7b3ac662794deb2fde895e2f21845a3424a05d2de53e2606ad88f582226b4e296501f78a907b4875f6fda8cb306a93afec226e", 0x3f}, {&(0x7f0000000080)="6df1ee6abeff8d02648b8f51dae4566d6fb934105597f2befbb8ddd33015", 0x1e}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004040)="d07a6022c283cc31771597d10c59c328edd49e3021e55ee8c9961d1bf80739", 0x1f}, {&(0x7f0000004080)="f127d6d43d7d080c8eab4b1d303d7f6ff27b0baad3cbdfbdd747ad0612353d9e2fec51e60d0fef1d713d6a6775", 0x2d}, {&(0x7f0000004200)="3e17319ebba2310f89c4836d319570f14a8a67e4741e724ddb25244810faabce097116b5aa8f3aea8b353efa10", 0x2d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000004380)="0158bf8582b631dc550e90cbde7d545d2e5180fcbcc14fbc3c1f25068673b725cfae663e065ba56fe1564c554bfe7a88051d140efac83f4797dcc4f08622", 0x3e}, {&(0x7f0000000300)="f7afa1233ccfd47b644235cf1b0c56ed8e34fd1d20d325351547d306a8747b", 0x1f}, {&(0x7f00000015c0)="a1230da374c954bf89dc6dcf5675c30d720f2a6f018d18f06e7bc40faa28c55b504b2f644a47cf5c30277cd900f72df02047ea3052196871e26a", 0x3a}], 0x3}}], 0x3, 0x240080c5)
recvmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12102)

1.242294848s ago: executing program 1 (id=225):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
capset(0x0, &(0x7f0000000080))
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040))

1.238630179s ago: executing program 3 (id=226):
unshare(0x64000600)
r0 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44)

1.055340135s ago: executing program 1 (id=227):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xa, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x2, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x14, 0x2, 0x6, 0x10000, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x40, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x6, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r5, 0x0, 0x4)

957.123388ms ago: executing program 0 (id=228):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x5, 0x21, 0x5, 0x8, 0x1, 0x5, 0x1, 0x0, [{0x8, 0x1, 0x5, 0xa}, {0x8, 0x7, 0x787, 0x3}, {0x4, 0x9105, 0x1, 0x7ffffff7}, {0xffff, 0x8, 0x80000001, 0x6}, {0x3, 0x2, 0x2}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r4)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

773.434554ms ago: executing program 2 (id=229):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000240))
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, 0x0, 0x20000010)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'rr\x00', 0x28, 0x5, 0x72}, 0x2c)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
r7 = socket$kcm(0xa, 0x2, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

773.153644ms ago: executing program 3 (id=230):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[], 0xff, 0x1506, &(0x7f0000001ac0)="$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")
syz_emit_ethernet(0x68, &(0x7f0000000080)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "108ec8", 0x0, 0x2c, 0x0, @private0, @private1, [], "40a8"}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10d002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x34, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0}, 0x40)
sendfile(r2, r2, 0x0, 0x800000009)

595.344021ms ago: executing program 1 (id=231):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x80, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18})

263.398111ms ago: executing program 0 (id=232):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000404e040c12000000000001090224000100005000090400fefd0300000009210400080122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="002208000000a3"], 0x0}, 0x0)

68.714078ms ago: executing program 2 (id=233):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002ac0)="9514c92ae58f97b0fb4e98af7b3ac662794deb2fde895e2f21845a3424a05d2de53e2606ad88f582226b4e296501f78a907b4875f6fda8cb306a93afec226e", 0x3f}, {&(0x7f0000000080)="6df1ee6abeff8d02648b8f51dae4566d6fb934105597f2befbb8ddd33015", 0x1e}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004040)="d07a6022c283cc31771597d10c59c328edd49e3021e55ee8c9961d1bf80739", 0x1f}, {&(0x7f0000004080)="f127d6d43d7d080c8eab4b1d303d7f6ff27b0baad3cbdfbdd747ad0612353d9e2fec51e60d0fef1d713d6a6775", 0x2d}, {&(0x7f0000004200)="3e17319ebba2310f89c4836d319570f14a8a67e4741e724ddb25244810faabce097116b5aa8f3aea8b353efa10", 0x2d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000004380)="0158bf8582b631dc550e90cbde7d545d2e5180fcbcc14fbc3c1f25068673b725cfae663e065ba56fe1564c554bfe7a88051d140efac83f4797dcc4f08622", 0x3e}, {&(0x7f0000000300)="f7afa1233ccfd47b644235cf1b0c56ed8e34fd1d20d325351547d306a8747b", 0x1f}, {&(0x7f00000015c0)="a1230da374c954bf89dc6dcf5675c30d720f2a6f018d18f06e7bc40faa28c55b504b2f644a47cf5c30277cd900f72df02047ea3052196871e26a", 0x3a}], 0x3}}], 0x3, 0x240080c5)
recvmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12102)

0s ago: executing program 2 (id=234):
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
socket(0x10, 0x3, 0x4)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback, 0xffffffffffffffff, 0x7, 0x6014, 0x0, @value=r4}, 0x20)
ioctl$sock_bt_hci(r0, 0x400448dd, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts.
[   72.074969][ T5757] cgroup: Unknown subsys name 'net'
[   72.211691][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.894424][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   75.510056][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.518830][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.526744][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.544599][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.552519][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   75.560177][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.600510][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.609061][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.617088][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.629177][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.648321][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   75.656549][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.674555][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.683873][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.693550][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.717765][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.725119][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.733350][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.741960][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.742050][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   75.758207][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.766386][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   75.774581][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.782030][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.036595][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   76.219279][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.227360][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.234988][ T5769] bridge_slave_0: entered allmulticast mode
[   76.242411][ T5769] bridge_slave_0: entered promiscuous mode
[   76.252964][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.260216][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.267917][ T5769] bridge_slave_1: entered allmulticast mode
[   76.275999][ T5769] bridge_slave_1: entered promiscuous mode
[   76.309375][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   76.357277][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.386728][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.436015][ T5769] team0: Port device team_slave_0 added
[   76.457675][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   76.479641][ T5769] team0: Port device team_slave_1 added
[   76.548903][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.556202][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.582167][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.600699][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.607897][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.634733][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.661272][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   76.729324][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.736604][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.743765][ T5773] bridge_slave_0: entered allmulticast mode
[   76.750903][ T5773] bridge_slave_0: entered promiscuous mode
[   76.776675][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.783845][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.791403][ T5772] bridge_slave_0: entered allmulticast mode
[   76.798527][ T5772] bridge_slave_0: entered promiscuous mode
[   76.808044][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.815286][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.822425][ T5772] bridge_slave_1: entered allmulticast mode
[   76.829631][ T5772] bridge_slave_1: entered promiscuous mode
[   76.841012][ T5769] hsr_slave_0: entered promiscuous mode
[   76.848386][ T5769] hsr_slave_1: entered promiscuous mode
[   76.855467][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.862613][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.870047][ T5773] bridge_slave_1: entered allmulticast mode
[   76.877796][ T5773] bridge_slave_1: entered promiscuous mode
[   76.919478][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.956501][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.978691][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.010754][ T5772] team0: Port device team_slave_0 added
[   77.035536][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.060835][ T5772] team0: Port device team_slave_1 added
[   77.093255][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.100401][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.126680][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.176205][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.183189][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.209457][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.223234][ T5773] team0: Port device team_slave_0 added
[   77.246123][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.253416][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.260994][ T5775] bridge_slave_0: entered allmulticast mode
[   77.268065][ T5775] bridge_slave_0: entered promiscuous mode
[   77.284302][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.291435][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.300885][ T5775] bridge_slave_1: entered allmulticast mode
[   77.307972][ T5775] bridge_slave_1: entered promiscuous mode
[   77.317560][ T5773] team0: Port device team_slave_1 added
[   77.375978][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.383078][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.409956][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.431509][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.438588][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.464870][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.493621][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.511684][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.525614][ T5772] hsr_slave_0: entered promiscuous mode
[   77.532979][ T5772] hsr_slave_1: entered promiscuous mode
[   77.539357][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.547517][ T5772] Cannot create hsr debugfs directory
[   77.625358][ T5779] Bluetooth: hci0: command tx timeout
[   77.656751][ T5773] hsr_slave_0: entered promiscuous mode
[   77.663037][ T5773] hsr_slave_1: entered promiscuous mode
[   77.669361][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.677698][ T5773] Cannot create hsr debugfs directory
[   77.695345][ T5775] team0: Port device team_slave_0 added
[   77.705225][ T5775] team0: Port device team_slave_1 added
[   77.784338][ T5779] Bluetooth: hci1: command tx timeout
[   77.812006][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.819087][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.845138][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.864373][ T5779] Bluetooth: hci3: command tx timeout
[   77.864392][ T5085] Bluetooth: hci2: command tx timeout
[   77.887093][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.894360][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.920470][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.021099][ T5775] hsr_slave_0: entered promiscuous mode
[   78.027989][ T5775] hsr_slave_1: entered promiscuous mode
[   78.037027][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.044886][ T5775] Cannot create hsr debugfs directory
[   78.122813][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.153733][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.167506][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.198773][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.325133][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.335329][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.347092][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.359522][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.450199][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.469818][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.481645][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.495564][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.583767][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.596918][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.614997][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.624877][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.695013][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.747666][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.765225][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   78.795950][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.803293][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.830744][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.837969][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.855722][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.889535][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   78.922736][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.929962][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.969339][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.976743][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.991240][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   79.013891][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.021058][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.040351][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.067587][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.074874][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.111713][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.142368][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   79.191099][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.198264][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.215417][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.222648][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.397806][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.606522][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.710282][ T5779] Bluetooth: hci0: command tx timeout
[   79.753419][ T5769] veth0_vlan: entered promiscuous mode
[   79.840140][ T5769] veth1_vlan: entered promiscuous mode
[   79.864605][ T5779] Bluetooth: hci1: command tx timeout
[   79.892141][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.908706][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.923486][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.944476][ T5779] Bluetooth: hci2: command tx timeout
[   79.944780][ T5085] Bluetooth: hci3: command tx timeout
[   79.975420][ T5769] veth0_macvtap: entered promiscuous mode
[   79.997089][ T5769] veth1_macvtap: entered promiscuous mode
[   80.065122][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.072758][ T5775] veth0_vlan: entered promiscuous mode
[   80.101500][ T5772] veth0_vlan: entered promiscuous mode
[   80.113343][ T5775] veth1_vlan: entered promiscuous mode
[   80.128234][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.152050][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.161157][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.170237][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.179086][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.196968][ T5772] veth1_vlan: entered promiscuous mode
[   80.211026][ T5773] veth0_vlan: entered promiscuous mode
[   80.233615][ T5773] veth1_vlan: entered promiscuous mode
[   80.341765][ T5772] veth0_macvtap: entered promiscuous mode
[   80.352486][ T5775] veth0_macvtap: entered promiscuous mode
[   80.365760][ T5775] veth1_macvtap: entered promiscuous mode
[   80.412523][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.421566][ T5772] veth1_macvtap: entered promiscuous mode
[   80.428535][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.437847][ T5773] veth0_macvtap: entered promiscuous mode
[   80.480082][ T5773] veth1_macvtap: entered promiscuous mode
[   80.493229][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.504249][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.517770][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.531053][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.541832][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.552208][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.562815][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.575385][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.593133][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.593355][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.611871][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.612563][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.630920][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.642175][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.651335][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.661208][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.670139][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.692408][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.703419][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.714387][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.728471][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.738504][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.749904][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.762175][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.772876][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.783793][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.793841][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.804910][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.821877][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.835121][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.843916][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.853225][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.863043][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.907192][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.918588][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.928760][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.939516][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.949427][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.960454][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.975350][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.998645][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.014103][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.022957][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.058347][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.335274][ T5838] syz.3.6[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   81.353594][ T5838] loop3: detected capacity change from 0 to 512
[   81.399289][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.433889][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.473332][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.489458][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.497420][ T5838] EXT4-fs (loop3): Test dummy encryption mode enabled
[   81.508880][ T5838] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   81.531881][ T5838] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   81.559441][ T5838] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.6: bad orphan inode 131083
[   81.583754][ T5838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.692766][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.706356][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.719313][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.735579][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.749330][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.758002][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.784761][ T5085] Bluetooth: hci0: command tx timeout
[   81.815041][ T5838] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   81.838199][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.851313][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.944959][ T5085] Bluetooth: hci1: command tx timeout
[   82.009558][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.024442][ T5085] Bluetooth: hci3: command tx timeout
[   82.024622][ T5779] Bluetooth: hci2: command tx timeout
[   82.213670][ T5850] loop3: detected capacity change from 0 to 512
[   82.267756][ T5850] EXT4-fs (loop3): Test dummy encryption mode enabled
[   82.300725][ T5850] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   82.333575][ T5850] EXT4-fs (loop3): 1 truncate cleaned up
[   82.358239][ T5850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.719562][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.885440][ T5861] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   83.122785][ T5856] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   83.766521][ T5872] loop1: detected capacity change from 0 to 512
[   83.786870][ T5872] EXT4-fs: Ignoring removed nobh option
[   83.827285][ T5872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   83.863494][ T5872] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   83.915664][ T5872] EXT4-fs (loop1): 1 truncate cleaned up
[   83.941466][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.024233][ T5779] Bluetooth: hci1: command tx timeout
[   84.104418][ T5779] Bluetooth: hci3: command tx timeout
[   84.104627][ T5085] Bluetooth: hci2: command tx timeout
[   84.309278][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.112568][ T5881] loop0: detected capacity change from 0 to 512
[   87.192115][   T23] cfg80211: failed to load regulatory.db
[   87.338733][ T5881] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   87.350139][ T5881] EXT4-fs (loop0): orphan cleanup on readonly fs
[   87.380115][ T5881] Quota error (device loop0): v2_read_file_info: Can't read info structure
[   87.389641][ T5881] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[   87.404998][ T5881] EXT4-fs (loop0): Cannot turn on quotas: error -5
[   87.427012][ T5881] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.15: bg 0: block 64: padding at end of block bitmap is not set
[   87.456618][ T5881] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[   87.478576][ T5881] EXT4-fs (loop0): 1 truncate cleaned up
[   87.492142][ T5881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   87.517401][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.644060][    C0] sched: RT throttling activated
[   89.727756][ T5885] loop3: detected capacity change from 0 to 128
[   89.870586][ T5885] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   89.925433][ T5885] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   90.728829][ T5894] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.754777][ T5894] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16'.
[   91.509305][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.003389][ T5903] trusted_key: encrypted_key: insufficient parameters specified
[   92.545424][ T5902] loop0: detected capacity change from 0 to 16
[   92.596501][ T5902] erofs: (device loop0): erofs_read_inode: unsupported datalayout 6 of nid 36
[   94.925150][ T5915] syzkaller0: entered promiscuous mode
[   94.954196][ T5915] syzkaller0: entered allmulticast mode
[   94.968635][ T5919] loop3: detected capacity change from 0 to 512
[   94.990992][ T5919] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.239378][ T5925] loop1: detected capacity change from 0 to 512
[   95.319058][ T5919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.332755][ T5925] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.25: missing EA_INODE flag
[   95.367556][ T5925] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.25: error while reading EA inode 12 err=-117
[   95.423469][ T5919] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.459273][ T5925] EXT4-fs (loop1): 1 orphan inode deleted
[   95.505658][ T5925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.723650][ T5925] syzkaller0: entered promiscuous mode
[   95.742752][ T5925] syzkaller0: entered allmulticast mode
[   97.153978][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.169455][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.598558][ T5957] loop3: detected capacity change from 0 to 1024
[   97.607591][ T5957] =======================================================
[   97.607591][ T5957] WARNING: The mand mount option has been deprecated and
[   97.607591][ T5957]          and is ignored by this kernel. Remove the mand
[   97.607591][ T5957]          option from the mount to silence this warning.
[   97.607591][ T5957] =======================================================
[   97.610508][ T5955] syzkaller0: entered promiscuous mode
[   97.665491][ T5957] EXT4-fs: inline encryption not supported
[   97.672397][ T5955] syzkaller0: entered allmulticast mode
[   97.725222][ T5957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   97.786879][ T5957] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.965788][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   98.087311][ T5961] loop2: detected capacity change from 0 to 256
[   98.247409][ T5961] FAT-fs (loop2): Directory bread(block 64) failed
[   98.278687][ T5961] FAT-fs (loop2): Directory bread(block 65) failed
[   98.298676][ T5961] FAT-fs (loop2): Directory bread(block 66) failed
[   98.341603][ T5961] FAT-fs (loop2): Directory bread(block 67) failed
[   98.351930][ T5961] FAT-fs (loop2): Directory bread(block 68) failed
[   98.413541][ T5961] FAT-fs (loop2): Directory bread(block 69) failed
[   98.434337][ T5961] FAT-fs (loop2): Directory bread(block 70) failed
[   98.459942][ T5961] FAT-fs (loop2): Directory bread(block 71) failed
[   98.484739][ T5961] FAT-fs (loop2): Directory bread(block 72) failed
[   98.515864][ T5961] FAT-fs (loop2): Directory bread(block 73) failed
[   99.651166][ T5976] xt_hashlimit: size too large, truncated to 1048576
[   99.662362][ T5948] loop0: detected capacity change from 0 to 40427
[   99.732149][ T5948] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[   99.811463][ T5948] F2FS-fs (loop0): heap/no_heap options were deprecated
[   99.891430][ T5948] F2FS-fs (loop0): invalid crc value
[   99.958679][ T5948] F2FS-fs (loop0): Found nat_bits in checkpoint
[  100.586118][ T5990] loop2: detected capacity change from 0 to 512
[  100.685691][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.721782][ T5972] loop1: detected capacity change from 0 to 40427
[  100.738079][ T5990] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.749118][ T5972] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  100.757466][ T5972] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  100.783033][ T5972] F2FS-fs (loop1): invalid crc value
[  101.005834][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.100698][ T5972] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  101.147241][ T6000] loop2: detected capacity change from 0 to 256
[  101.157656][ T5972] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  101.189151][ T6000] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  101.394955][ T5773] syz-executor: attempt to access beyond end of device
[  101.394955][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  101.452189][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  101.766039][ T6006] syzkaller0: entered promiscuous mode
[  101.805210][ T6006] syzkaller0: entered allmulticast mode
[  101.832454][ T6008] loop2: detected capacity change from 0 to 512
[  101.876419][ T6008] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  101.935831][ T6008] EXT4-fs (loop2): 1 truncate cleaned up
[  101.958149][ T6008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.073577][ T6008] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.50: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  102.212450][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.409485][ T6017] loop2: detected capacity change from 0 to 256
[  102.500366][ T6017] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  102.564165][ T6017] syz.2.51: attempt to access beyond end of device
[  102.564165][ T6017] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  102.578757][   T27] audit: type=1800 audit(1774823954.728:2): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.51" name="file1" dev="loop2" ino=1048592 res=0 errno=0
[  104.570568][ T6043] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  105.373343][ T6045] raw_sendmsg: syz.1.60 forgot to set AF_INET. Fix it!
[  105.670849][ T6047] loop0: detected capacity change from 0 to 256
[  105.797736][ T6047] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  105.855436][   T27] audit: type=1800 audit(1774823958.028:3): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.61" name="file1" dev="loop0" ino=1048593 res=0 errno=0
[  105.878194][ T6047] syz.0.61: attempt to access beyond end of device
[  105.878194][ T6047] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  106.326708][ T6065] loop1: detected capacity change from 0 to 512
[  106.455650][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.534593][ T6065] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.746987][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.931488][ T6078] loop1: detected capacity change from 0 to 256
[  106.932822][ T6080] loop3: detected capacity change from 0 to 128
[  106.961667][ T6080] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  106.962451][ T6078] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  107.015835][ T6080] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  107.029845][ T6078] syz.1.72: attempt to access beyond end of device
[  107.029845][ T6078] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  107.044253][   T27] audit: type=1800 audit(1774823959.198:4): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="file1" dev="loop1" ino=1048594 res=0 errno=0
[  107.354321][ T6086] loop1: detected capacity change from 0 to 512
[  107.447146][ T6086] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.75: missing EA_INODE flag
[  107.481902][ T6089] loop0: detected capacity change from 0 to 512
[  107.529034][ T6089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  107.540098][ T6086] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.75: error while reading EA inode 12 err=-117
[  107.603518][ T6086] EXT4-fs (loop1): 1 orphan inode deleted
[  107.631795][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.657084][ T6089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.714180][ T6086] syzkaller0: entered promiscuous mode
[  107.727734][ T6089] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.751675][ T6086] syzkaller0: entered allmulticast mode
[  107.890888][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.016996][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.274274][ T6106] loop1: detected capacity change from 0 to 256
[  108.360730][ T6106] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  109.213196][ T6118] syz.1.83: attempt to access beyond end of device
[  109.213196][ T6118] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  109.219570][   T27] audit: type=1800 audit(1774823961.378:5): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.83" name="file1" dev="loop1" ino=1048596 res=0 errno=0
[  109.292095][ T6116] syzkaller0: entered promiscuous mode
[  109.305429][ T6116] syzkaller0: entered allmulticast mode
[  109.346916][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.86'.
[  109.364276][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.86'.
[  109.437771][ T6122] loop0: detected capacity change from 0 to 256
[  109.521714][ T6122] FAT-fs (loop0): Directory bread(block 64) failed
[  109.565822][ T6122] FAT-fs (loop0): Directory bread(block 65) failed
[  109.582850][ T6122] FAT-fs (loop0): Directory bread(block 66) failed
[  109.610794][ T6122] FAT-fs (loop0): Directory bread(block 67) failed
[  109.638238][ T6122] FAT-fs (loop0): Directory bread(block 68) failed
[  109.651215][ T6122] FAT-fs (loop0): Directory bread(block 69) failed
[  109.667436][ T6122] FAT-fs (loop0): Directory bread(block 70) failed
[  109.684931][ T6122] FAT-fs (loop0): Directory bread(block 71) failed
[  109.691737][ T6122] FAT-fs (loop0): Directory bread(block 72) failed
[  109.712555][ T6122] FAT-fs (loop0): Directory bread(block 73) failed
[  109.907077][ T6128] loop3: detected capacity change from 0 to 512
[  109.966731][ T6128] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.91: missing EA_INODE flag
[  110.015897][ T6128] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.91: error while reading EA inode 12 err=-117
[  110.074551][ T6128] EXT4-fs (loop3): 1 orphan inode deleted
[  110.098023][ T6128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.266465][ T6128] syzkaller0: entered promiscuous mode
[  110.272024][ T6128] syzkaller0: entered allmulticast mode
[  110.296566][ T6137] loop2: detected capacity change from 0 to 2048
[  110.351832][ T6137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.553566][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.567036][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.878581][ T6146] loop2: detected capacity change from 0 to 1024
[  110.905597][ T6146] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.026589][ T6146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.093589][ T6158] syzkaller0: entered promiscuous mode
[  111.117016][ T6158] syzkaller0: entered allmulticast mode
[  111.142002][   T27] audit: type=1326 audit(1774823963.308:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fea19c819 code=0x7ffc0000
[  111.189716][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'.
[  111.204122][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'.
[  111.234405][   T27] audit: type=1326 audit(1774823963.318:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0fea19c819 code=0x7ffc0000
[  111.304225][   T27] audit: type=1326 audit(1774823963.318:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fea19c819 code=0x7ffc0000
[  111.374445][   T27] audit: type=1326 audit(1774823963.318:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0fea19c819 code=0x7ffc0000
[  111.441592][ T6165] loop3: detected capacity change from 0 to 256
[  111.444176][   T27] audit: type=1326 audit(1774823963.318:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fea19c819 code=0x7ffc0000
[  111.502015][ T6165] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  111.544436][   T27] audit: type=1326 audit(1774823963.318:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f0fea19c819 code=0x7ffc0000
[  111.640260][   T27] audit: type=1326 audit(1774823963.348:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fea19c819 code=0x7ffc0000
[  111.761197][   T27] audit: type=1326 audit(1774823963.348:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fea19c819 code=0x7ffc0000
[  111.883338][   T27] audit: type=1326 audit(1774823963.348:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0fea19c819 code=0x7ffc0000
[  111.961227][ T6176] syz.3.103: attempt to access beyond end of device
[  111.961227][ T6176] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  112.220771][ T6179] loop0: detected capacity change from 0 to 512
[  112.304695][ T6179] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.104: missing EA_INODE flag
[  112.438480][ T6179] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.104: error while reading EA inode 12 err=-117
[  112.510145][ T6179] EXT4-fs (loop0): 1 orphan inode deleted
[  112.525841][ T6179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.605654][ T6179] syzkaller0: entered promiscuous mode
[  112.611204][ T6179] syzkaller0: entered allmulticast mode
[  112.734580][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  112.820375][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.934180][    T9] usb 2-1: Using ep0 maxpacket: 32
[  112.958724][    T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  112.977705][    T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  113.015558][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  113.044291][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  113.054007][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  113.084625][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  113.114375][    T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  113.133787][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.168573][    T9] usb 2-1: config 0 descriptor??
[  113.351824][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.416503][    T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  113.513863][    T9] usb 2-1: USB disconnect, device number 2
[  113.551393][    T9] usblp0: removed
[  113.706480][ T6198] syzkaller0: entered promiscuous mode
[  113.711976][ T6201] loop3: detected capacity change from 0 to 512
[  113.712010][ T6198] syzkaller0: entered allmulticast mode
[  113.732350][ T5830] IPVS: starting estimator thread 0...
[  113.777503][ T6201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.794962][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'.
[  113.807065][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'.
[  113.816944][ T6201] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.865172][ T6203] IPVS: using max 17 ests per chain, 40800 per kthread
[  113.925823][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.012328][ T6207] loop3: detected capacity change from 0 to 512
[  114.028458][ T6207] EXT4-fs: Ignoring removed bh option
[  114.046616][ T6207] EXT4-fs: inline encryption not supported
[  114.054791][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  114.063883][ T6207] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  114.136988][ T6207] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  114.181648][ T6212] loop2: detected capacity change from 0 to 512
[  114.200433][ T6207] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.113: bg 0: block 248: padding at end of block bitmap is not set
[  114.227257][ T6212] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.114: missing EA_INODE flag
[  114.269626][    T9] usb 2-1: Using ep0 maxpacket: 32
[  114.275381][ T6207] __quota_error: 15 callbacks suppressed
[  114.275398][ T6207] Quota error (device loop3): write_blk: dquota write failed
[  114.290345][ T6212] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.114: error while reading EA inode 12 err=-117
[  114.325761][    T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  114.361021][ T6212] EXT4-fs (loop2): 1 orphan inode deleted
[  114.367494][    T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  114.377068][ T6207] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  114.426100][ T6212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.438916][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  114.460806][ T6207] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.113: Failed to acquire dquot type 1
[  114.503595][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  114.528251][ T6207] EXT4-fs (loop3): 1 truncate cleaned up
[  114.536549][ T6207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  114.550094][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  114.581411][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  114.616906][ T6212] syzkaller0: entered promiscuous mode
[  114.651108][    T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  114.674759][ T6212] syzkaller0: entered allmulticast mode
[  114.682274][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.739432][ T6221] loop0: detected capacity change from 0 to 256
[  114.748374][    T9] usb 2-1: config 0 descriptor??
[  114.967160][    T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  115.144862][ T6207] syz.3.113 (6207) used greatest stack depth: 20904 bytes left
[  115.500898][    T9] usb 2-1: USB disconnect, device number 3
[  115.521090][    T9] usblp0: removed
[  115.663658][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  115.797051][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.993123][ T6228] netlink: 'syz.1.118': attribute type 13 has an invalid length.
[  116.122102][ T6235] loop2: detected capacity change from 0 to 256
[  116.162070][ T6235] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  116.298892][ T6239] Zero length message leads to an empty skb
[  116.610912][   T27] audit: type=1800 audit(1774823968.778:30): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.120" name="file1" dev="loop2" ino=1048598 res=0 errno=0
[  116.641337][ T6247] syz.2.120: attempt to access beyond end of device
[  116.641337][ T6247] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  116.673908][ T6241] syzkaller0: entered promiscuous mode
[  116.714195][ T6241] syzkaller0: entered allmulticast mode
[  116.882697][ T6249] loop1: detected capacity change from 0 to 1024
[  116.910231][ T6249] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  116.962952][ T6249] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.123: lblock 2 mapped to illegal pblock 2 (length 1)
[  116.991711][ T6249] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  117.039647][ T6249] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.123: lblock 0 mapped to illegal pblock 48 (length 1)
[  117.112216][ T6249] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  117.148077][ T6249] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.123: Failed to acquire dquot type 0
[  117.184167][ T6249] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  117.206528][ T6249] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.123: mark_inode_dirty error
[  117.247992][ T6249] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[  117.264205][ T6249] EXT4-fs (loop1): 1 orphan inode deleted
[  117.275480][ T1031] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  117.281608][ T6249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.326468][ T1031] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  117.349723][ T1031] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:6: Failed to release dquot type 0
[  118.282018][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.300300][ T1031] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  118.320434][ T6253] loop2: detected capacity change from 0 to 512
[  118.337671][ T6253] EXT4-fs: Ignoring removed bh option
[  118.339905][ T1031] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  118.353348][ T6253] EXT4-fs: inline encryption not supported
[  118.382616][ T1031] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:6: Failed to release dquot type 0
[  118.422215][ T6253] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  118.443427][ T5773] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0
[  118.473678][ T5773] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem
[  118.490169][ T6253] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  118.521009][ T5773] EXT4-fs error (device loop1): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error
[  118.546497][ T6253] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.124: bg 0: block 248: padding at end of block bitmap is not set
[  118.580984][ T6253] Quota error (device loop2): write_blk: dquota write failed
[  118.643119][ T6253] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  118.679239][ T6253] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.124: Failed to acquire dquot type 1
[  118.718359][ T6253] EXT4-fs (loop2): 1 truncate cleaned up
[  118.729670][ T6253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  120.640162][ T6253] syz.2.124 (6253) used greatest stack depth: 20720 bytes left
[  121.156478][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  121.361959][ T6263] loop2: detected capacity change from 0 to 512
[  121.379090][ T6263] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.126: missing EA_INODE flag
[  121.395198][ T6263] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.126: error while reading EA inode 12 err=-117
[  121.413733][ T6263] EXT4-fs (loop2): 1 orphan inode deleted
[  121.421510][ T6263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.309397][ T6283] loop0: detected capacity change from 0 to 256
[  122.411720][ T6283] FAT-fs (loop0): Directory bread(block 64) failed
[  122.418706][ T6283] FAT-fs (loop0): Directory bread(block 65) failed
[  122.426497][ T6283] FAT-fs (loop0): Directory bread(block 66) failed
[  122.433779][ T6283] FAT-fs (loop0): Directory bread(block 67) failed
[  122.443431][ T6283] FAT-fs (loop0): Directory bread(block 68) failed
[  122.450364][ T6283] FAT-fs (loop0): Directory bread(block 69) failed
[  122.458140][ T6283] FAT-fs (loop0): Directory bread(block 70) failed
[  122.465174][ T6283] FAT-fs (loop0): Directory bread(block 71) failed
[  122.471844][ T6283] FAT-fs (loop0): Directory bread(block 72) failed
[  122.479049][ T6283] FAT-fs (loop0): Directory bread(block 73) failed
[  122.536791][ T6283] syz.0.131: attempt to access beyond end of device
[  122.536791][ T6283] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256
[  122.572621][ T6283] syz.0.131: attempt to access beyond end of device
[  122.572621][ T6283] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256
[  122.596478][   T27] audit: type=1800 audit(1774823974.758:31): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.131" name="file1" dev="loop0" ino=1048599 res=0 errno=0
[  122.634319][   T27] audit: type=1800 audit(1774823974.798:32): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.131" name="file1" dev="loop0" ino=1048599 res=0 errno=0
[  122.682451][ T6283] syz.0.131: attempt to access beyond end of device
[  122.682451][ T6283] loop0: rw=2049, sector=1208, nr_sectors = 560 limit=256
[  122.710455][ T6283] syz.0.131: attempt to access beyond end of device
[  122.710455][ T6283] loop0: rw=2049, sector=1800, nr_sectors = 128 limit=256
[  122.725837][ T6283] syz.0.131: attempt to access beyond end of device
[  122.725837][ T6283] loop0: rw=2049, sector=1960, nr_sectors = 280 limit=256
[  122.789858][ T2964] kworker/u4:11: attempt to access beyond end of device
[  122.789858][ T2964] loop0: rw=1, sector=1192, nr_sectors = 16 limit=256
[  123.276626][ T6288] loop1: detected capacity change from 0 to 256
[  123.331326][ T6288] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  123.379415][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.459284][ T6290] loop3: detected capacity change from 0 to 512
[  123.481975][ T6290] EXT4-fs: Ignoring removed bh option
[  123.501560][ T6290] EXT4-fs: inline encryption not supported
[  123.524989][ T6290] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  123.722029][ T6295] syz.1.133: attempt to access beyond end of device
[  123.722029][ T6295] loop1: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  123.762004][ T6290] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  123.779208][   T27] audit: type=1800 audit(1774823975.878:33): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.133" name="file1" dev="loop1" ino=1048600 res=0 errno=0
[  124.189500][ T6290] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.134: bg 0: block 248: padding at end of block bitmap is not set
[  124.511918][ T6290] Quota error (device loop3): write_blk: dquota write failed
[  124.549402][ T6290] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  124.553748][ T6286] loop0: detected capacity change from 0 to 40427
[  124.563778][ T6290] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.134: Failed to acquire dquot type 1
[  124.587670][ T6290] EXT4-fs (loop3): 1 truncate cleaned up
[  124.608535][ T6290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  124.627823][ T6286] F2FS-fs (loop0): invalid crc value
[  124.689057][ T6286] F2FS-fs (loop0): Found nat_bits in checkpoint
[  124.807934][ T6304] loop2: detected capacity change from 0 to 256
[  125.414424][ T6286] F2FS-fs (loop0): Start checkpoint disabled!
[  125.507247][ T6286] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  125.786221][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  126.029570][ T1031] kworker/u4:6: attempt to access beyond end of device
[  126.029570][ T1031] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  126.076336][ T1031] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  126.224249][  T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  126.233539][ T6307] loop1: detected capacity change from 0 to 40427
[  126.247266][ T6307] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x7ffff
[  126.430666][  T787] usb 4-1: unable to get BOS descriptor or descriptor too short
[  126.449922][  T787] usb 4-1: config 0 has an invalid interface number: 2 but max is 1
[  126.476479][  T787] usb 4-1: config 0 has an invalid interface number: 111 but max is 1
[  126.500944][  T787] usb 4-1: config 0 has no interface number 0
[  126.528585][  T787] usb 4-1: config 0 has no interface number 1
[  126.550251][  T787] usb 4-1: config 0 interface 2 has no altsetting 0
[  126.570494][  T787] usb 4-1: config 0 interface 111 has no altsetting 0
[  126.590871][  T787] usb 4-1: New USB device found, idVendor=1514, idProduct=2008, bcdDevice= c.a6
[  126.607847][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.634201][  T787] usb 4-1: Product: syz
[  126.648991][  T787] usb 4-1: Manufacturer: syz
[  126.653774][  T787] usb 4-1: SerialNumber: syz
[  126.679363][  T787] usb 4-1: config 0 descriptor??
[  127.777977][  T787] ftdi_sio 4-1:0.2: FTDI USB Serial Device converter detected
[  127.843150][  T787] ftdi_sio ttyUSB0: unknown device type: 0xca6
[  127.911995][  T787] usb 4-1: USB disconnect, device number 2
[  127.941867][  T787] ftdi_sio 4-1:0.2: device disconnected
[  128.207598][ T6327] loop1: detected capacity change from 0 to 512
[  128.230717][ T6329] loop0: detected capacity change from 0 to 256
[  128.273004][ T6327] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.143: missing EA_INODE flag
[  128.301656][ T6329] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  128.399368][ T6327] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.143: error while reading EA inode 12 err=-117
[  128.513127][ T6327] EXT4-fs (loop1): 1 orphan inode deleted
[  128.550881][ T6327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.678571][ T6327] syzkaller0: entered promiscuous mode
[  128.723880][ T6327] syzkaller0: entered allmulticast mode
[  128.759087][ T6335] syz.0.144: attempt to access beyond end of device
[  128.759087][ T6335] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  128.784852][   T27] audit: type=1800 audit(1774823980.918:34): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.144" name="file1" dev="loop0" ino=1048601 res=0 errno=0
[  129.232068][ T6338] loop3: detected capacity change from 0 to 512
[  129.283952][ T6338] EXT4-fs: Ignoring removed bh option
[  129.339881][ T6338] EXT4-fs: inline encryption not supported
[  129.377078][ T6338] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  129.441408][ T6338] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  129.540844][ T6338] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.146: bg 0: block 248: padding at end of block bitmap is not set
[  129.621279][ T6338] Quota error (device loop3): write_blk: dquota write failed
[  129.633248][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.654180][ T6338] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  129.692296][ T6338] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.146: Failed to acquire dquot type 1
[  129.742699][ T6338] EXT4-fs (loop3): 1 truncate cleaned up
[  129.769531][ T6338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  129.812295][ T6344] loop1: detected capacity change from 0 to 512
[  129.904869][ T6344] EXT4-fs (loop1): Test dummy encryption mode enabled
[  129.924539][ T6344] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  129.990037][ T6344] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.148: bad orphan inode 131083
[  130.042763][ T6344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.603561][ T6342] loop0: detected capacity change from 0 to 512
[  130.621545][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.699788][ T6342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  130.833104][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  130.842619][ T6342] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.221286][ T6358] loop1: detected capacity change from 0 to 2048
[  131.462442][ T6358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.035804][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  132.175767][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.390574][ T6366] loop0: detected capacity change from 0 to 4096
[  132.400455][ T6366] EXT4-fs (loop0): Test dummy encryption mode enabled
[  132.412402][ T6366] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  132.421218][ T6366] System zones: 0-5
[  132.473915][ T6366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.560487][  T787] IPVS: starting estimator thread 0...
[  132.664268][ T6374] IPVS: using max 18 ests per chain, 43200 per kthread
[  132.743706][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.906139][ T6380] xt_CONNSECMARK: invalid mode: 66
[  133.110294][ T6381] kvm: pic: non byte write
[  133.151557][ T6385] loop0: detected capacity change from 0 to 512
[  133.201211][ T6376] kvm: vcpu 0: requested 34 ns lapic timer period limited to 200000 ns
[  133.232462][ T6385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.159: missing EA_INODE flag
[  133.252366][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.263865][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.320095][ T6388] process 'syz.3.160' launched '/dev/fd/3' with NULL argv: empty string added
[  133.334845][ T6385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.159: error while reading EA inode 12 err=-117
[  133.363193][ T6385] EXT4-fs (loop0): 1 orphan inode deleted
[  133.399724][ T6385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.636152][ T6385] syzkaller0: entered promiscuous mode
[  133.641710][ T6385] syzkaller0: entered allmulticast mode
[  133.778394][ T6395] syzkaller0: entered promiscuous mode
[  133.784770][ T6395] syzkaller0: entered allmulticast mode
[  134.542049][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.716625][ T6402] loop1: detected capacity change from 0 to 512
[  134.748769][ T6402] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: fsck is running on the filesystem
[  134.778543][ T6402] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[  134.963506][   T23] IPVS: starting estimator thread 0...
[  135.168291][ T6414] capability: warning: `syz.0.170' uses deprecated v2 capabilities in a way that may be insecure
[  135.245876][ T6412] IPVS: using max 15 ests per chain, 36000 per kthread
[  135.554257][ T6427] loop2: detected capacity change from 0 to 512
[  135.610799][ T6427] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.173: missing EA_INODE flag
[  135.623115][ T6428] loop3: detected capacity change from 0 to 256
[  135.683999][ T6427] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.173: error while reading EA inode 12 err=-117
[  135.748120][ T6427] EXT4-fs (loop2): 1 orphan inode deleted
[  135.765776][ T6427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.949157][ T6427] syzkaller0: entered promiscuous mode
[  135.973519][ T6427] syzkaller0: entered allmulticast mode
[  136.991261][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.061784][ T6435] syzkaller0: entered promiscuous mode
[  137.096017][ T6435] syzkaller0: entered allmulticast mode
[  137.687011][ T5759] IPVS: starting estimator thread 0...
[  137.784646][ T6456] IPVS: using max 18 ests per chain, 43200 per kthread
[  137.803948][ T6458] loop2: detected capacity change from 0 to 512
[  137.852557][ T6458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.068634][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.452682][ T6464] loop2: detected capacity change from 0 to 512
[  138.497124][ T6464] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.185: missing EA_INODE flag
[  138.554819][ T6464] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.185: error while reading EA inode 12 err=-117
[  138.572187][ T6464] EXT4-fs (loop2): 1 orphan inode deleted
[  138.593573][ T6464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.654795][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.710449][ T6492] loop3: detected capacity change from 0 to 256
[  141.852523][ T6492] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  143.024002][ T6504] syzkaller0: entered promiscuous mode
[  143.029938][ T6504] syzkaller0: entered allmulticast mode
[  143.273675][ T6512] loop2: detected capacity change from 0 to 256
[  143.331872][ T6511] loop0: detected capacity change from 0 to 256
[  143.504152][ T6511] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  143.773200][ T6522] loop3: detected capacity change from 0 to 128
[  143.932206][ T6525] syz.0.200: attempt to access beyond end of device
[  143.932206][ T6525] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  144.014902][   T27] audit: type=1800 audit(1774823996.098:35): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.200" name="file1" dev="loop0" ino=1048603 res=0 errno=0
[  144.295296][ T6522] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000fb9)
[  144.350645][ T6522] FAT-fs (loop3): Filesystem has been set read-only
[  144.592567][ T6528] loop0: detected capacity change from 0 to 512
[  144.603189][ T6528] EXT4-fs: Ignoring removed bh option
[  144.614628][ T6528] EXT4-fs: inline encryption not supported
[  144.659055][ T6528] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  144.733529][ T6528] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  144.888840][ T6528] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.205: bg 0: block 248: padding at end of block bitmap is not set
[  144.949362][ T6528] Quota error (device loop0): write_blk: dquota write failed
[  144.992187][ T6528] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  145.032349][ T6528] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.205: Failed to acquire dquot type 1
[  145.065898][ T6528] EXT4-fs (loop0): 1 truncate cleaned up
[  145.091282][ T6528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  146.326444][ T6551] syzkaller0: entered promiscuous mode
[  146.332010][ T6551] syzkaller0: entered allmulticast mode
[  146.695219][ T6557] loop1: detected capacity change from 0 to 512
[  146.739326][ T6557] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.211: missing EA_INODE flag
[  146.957904][ T6557] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.211: error while reading EA inode 12 err=-117
[  147.364804][ T6557] EXT4-fs (loop1): 1 orphan inode deleted
[  147.399299][ T6557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.547175][ T6557] syzkaller0: entered promiscuous mode
[  147.568393][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  147.574534][ T6557] syzkaller0: entered allmulticast mode
[  147.737499][ T6565] loop3: detected capacity change from 0 to 512
[  147.773128][ T6567] loop0: detected capacity change from 0 to 256
[  147.785764][ T6565] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.214: corrupted in-inode xattr: invalid size in ea xattr
[  147.791610][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.820433][ T6567] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  147.844238][ T6565] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.214: couldn't read orphan inode 15 (err -117)
[  147.867617][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.978228][ T6565] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.354166][   T27] audit: type=1800 audit(1774824000.498:36): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.213" name="file1" dev="loop0" ino=1048605 res=0 errno=0
[  148.354551][ T6574] syz.0.213: attempt to access beyond end of device
[  148.354551][ T6574] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  148.575342][ T6578] syzkaller0: entered promiscuous mode
[  148.614133][ T6578] syzkaller0: entered allmulticast mode
[  148.926661][ T6580] syzkaller0: entered promiscuous mode
[  148.942475][ T6580] syzkaller0: entered allmulticast mode
[  149.691683][ T6588] loop1: detected capacity change from 0 to 512
[  149.715216][ T6588] EXT4-fs: Ignoring removed bh option
[  149.739303][ T6588] EXT4-fs: inline encryption not supported
[  149.792227][ T6588] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  149.867767][ T6588] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  149.931200][ T6588] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.221: bg 0: block 248: padding at end of block bitmap is not set
[  149.973660][ T6588] Quota error (device loop1): write_blk: dquota write failed
[  149.993308][ T6588] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  150.036094][ T6588] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.221: Failed to acquire dquot type 1
[  150.071299][ T6588] EXT4-fs (loop1): 1 truncate cleaned up
[  150.089509][ T6588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  151.318542][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  151.346612][ T6599] loop0: detected capacity change from 0 to 512
[  151.369057][ T6599] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.223: missing EA_INODE flag
[  151.434653][ T6599] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.223: error while reading EA inode 12 err=-117
[  151.485074][ T6599] EXT4-fs (loop0): 1 orphan inode deleted
[  151.492239][ T6599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.611676][ T6599] syzkaller0: entered promiscuous mode
[  151.636564][ T6599] syzkaller0: entered allmulticast mode
[  151.938253][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.981577][ T6610] syzkaller0: entered promiscuous mode
[  151.996767][ T6610] syzkaller0: entered allmulticast mode
[  152.202404][ T6616] loop3: detected capacity change from 0 to 256
[  152.233815][ T6616] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  152.628784][   T27] audit: type=1800 audit(1774824004.798:37): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.230" name="file1" dev="loop3" ino=1048606 res=0 errno=0
[  152.629410][ T6623] syz.3.230: attempt to access beyond end of device
[  152.629410][ T6623] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  153.035880][ T5830] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  153.246614][ T5830] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  153.268852][ T5830] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  153.300550][ T5830] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.325992][ T5830] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  153.349530][ T5830] usb 1-1: config 0 interface 0 has no altsetting 0
[  153.381605][ T5830] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  153.402418][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.433651][ T5830] usb 1-1: config 0 descriptor??
[  153.594291][ T6620] loop1: detected capacity change from 0 to 40427
[  153.637974][ T6620] F2FS-fs (loop1): invalid crc value
[  153.684522][ T6620] F2FS-fs (loop1): Found nat_bits in checkpoint
[  153.864969][ T6620] F2FS-fs (loop1): Start checkpoint disabled!
[  153.918543][ T6620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  153.924139][ T5830] hid-alps 0003:044E:120C.0001: unknown main item tag 0x0
[  153.933256][ T5830] hid-alps 0003:044E:120C.0001: unknown main item tag 0x0
[  153.997569][ T5830] hid-alps 0003:044E:120C.0001: unknown main item tag 0x0
[  154.023679][ T5830] hid-alps 0003:044E:120C.0001: unbalanced collection at end of report description
[  154.054760][ T5830] hid-alps 0003:044E:120C.0001: parse failed
[  154.060949][ T5830] hid-alps: probe of 0003:044E:120C.0001 failed with error -22
[  154.077353][ T6620] ------------[ cut here ]------------
[  154.083316][ T6620] kernel BUG at fs/f2fs/segment.c:3481!
[  154.133301][   T23] usb 1-1: USB disconnect, device number 2
[  154.142373][ T6620] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  154.148535][ T6620] CPU: 0 PID: 6620 Comm: syz.1.231 Not tainted syzkaller #0
[  154.155858][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  154.165959][ T6620] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0
[  154.172531][ T6620] Code: 19 fe 48 8b 54 24 30 e9 88 eb ff ff e8 8a 82 c1 fd 48 c7 c7 f0 ed 6f 8d 4c 89 f6 e8 2b a2 97 00 e9 a4 eb ff ff e8 71 82 c1 fd <0f> 0b e8 6a 82 c1 fd 0f 0b e8 63 82 c1 fd 0f 0b e8 5c 82 c1 fd 0f
[  154.192180][ T6620] RSP: 0018:ffffc90004bf7410 EFLAGS: 00010283
[  154.198288][ T6620] RAX: ffffffff83c59daf RBX: 0000000000000201 RCX: 0000000000080000
[  154.206294][ T6620] RDX: ffffc9000d40b000 RSI: 000000000002eb22 RDI: 000000000002eb23
[  154.214291][ T6620] RBP: 0000000000000200 R08: ffff88807df9845f R09: 1ffff1100fbf308b
[  154.222297][ T6620] R10: dffffc0000000000 R11: ffffed100fbf308c R12: 1ffff9200097eef8
[  154.230306][ T6620] R13: 0000000000000000 R14: 0000000000001a01 R15: dffffc0000000000
[  154.238315][ T6620] FS:  00007f98680ee6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  154.247282][ T6620] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  154.253893][ T6620] CR2: 00007f98671e9f00 CR3: 000000002f54a000 CR4: 00000000003506f0
[  154.261898][ T6620] Call Trace:
[  154.265213][ T6620]  <TASK>
[  154.268181][ T6620]  ? f2fs_mark_inode_dirty_sync+0x120/0x1f0
[  154.274128][ T6620]  f2fs_map_blocks+0x1338/0x3e60
[  154.279140][ T6620]  ? f2fs_get_block_locked+0xe0/0xe0
[  154.284461][ T6620]  ? __up_read+0x2b6/0x6b0
[  154.288906][ T6620]  ? up_read+0x20/0x20
[  154.293090][ T6620]  ? f2fs_allocate_pinning_section+0x1af/0x590
[  154.299285][ T6620]  f2fs_expand_inode_data+0x67a/0xa10
[  154.304715][ T6620]  ? f2fs_insert_range+0x470/0x470
[  154.309873][ T6620]  ? __mnt_drop_write_file+0xc3/0x100
[  154.315287][ T6620]  ? file_modified_flags+0x267/0x2a0
[  154.320651][ T6620]  f2fs_fallocate+0x416/0x890
[  154.325375][ T6620]  vfs_fallocate+0x58e/0x700
[  154.329999][ T6620]  do_vfs_ioctl+0x19f6/0x1cc0
[  154.334721][ T6620]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[  154.340499][ T6620]  ? tomoyo_path_number_perm+0x217/0x620
[  154.346188][ T6620]  ? __lock_acquire+0x7d40/0x7d40
[  154.351263][ T6620]  ? slab_free_freelist_hook+0x130/0x1a0
[  154.356945][ T6620]  ? tomoyo_path_number_perm+0x5b4/0x620
[  154.362629][ T6620]  ? tomoyo_path_number_perm+0x217/0x620
[  154.368314][ T6620]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  154.373838][ T6620]  ? __fget_files+0x28/0x4b0
[  154.378472][ T6620]  ? __fget_files+0x28/0x4b0
[  154.383150][ T6620]  ? bpf_lsm_file_ioctl+0x9/0x10
[  154.388110][ T6620]  ? security_file_ioctl+0x80/0xa0
[  154.393278][ T6620]  __se_sys_ioctl+0x83/0x170
[  154.397919][ T6620]  do_syscall_64+0x55/0xa0
[  154.402387][ T6620]  ? clear_bhb_loop+0x40/0x90
[  154.407101][ T6620]  ? clear_bhb_loop+0x40/0x90
[  154.411812][ T6620]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  154.417750][ T6620] RIP: 0033:0x7f986719c819
[  154.422201][ T6620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.436571][ T6637] loop2: detected capacity change from 0 to 512
[  154.441822][ T6620] RSP: 002b:00007f98680ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  154.441853][ T6620] RAX: ffffffffffffffda RBX: 00007f9867415fa0 RCX: 00007f986719c819
[  154.441868][ T6620] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000004
[  154.472684][ T6620] RBP: 00007f9867232c91 R08: 0000000000000000 R09: 0000000000000000
[  154.479882][ T6637] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.236: missing EA_INODE flag
[  154.480674][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.492868][ T6637] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.236: error while reading EA inode 12 err=-117
[  154.500096][ T6620] R13: 00007f9867416038 R14: 00007f9867415fa0 R15: 00007fff6a89d0f8
[  154.500124][ T6620]  </TASK>
[  154.500130][ T6620] Modules linked in:
[  154.528675][ T6620] ---[ end trace 0000000000000000 ]---
[  154.531780][ T6637] EXT4-fs (loop2): 1 orphan inode deleted
[  154.536293][ T6620] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0
[  154.548014][ T6620] Code: 19 fe 48 8b 54 24 30 e9 88 eb ff ff e8 8a 82 c1 fd 48 c7 c7 f0 ed 6f 8d 4c 89 f6 e8 2b a2 97 00 e9 a4 eb ff ff e8 71 82 c1 fd <0f> 0b e8 6a 82 c1 fd 0f 0b e8 63 82 c1 fd 0f 0b e8 5c 82 c1 fd 0f
[  154.568297][ T6620] RSP: 0018:ffffc90004bf7410 EFLAGS: 00010283
[  154.576013][ T6620] RAX: ffffffff83c59daf RBX: 0000000000000201 RCX: 0000000000080000
[  154.581541][ T6637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.588392][ T6620] RDX: ffffc9000d40b000 RSI: 000000000002eb22 RDI: 000000000002eb23
[  154.602127][ T6641] loop3: detected capacity change from 0 to 512
[  154.606156][ T6620] RBP: 0000000000000200 R08: ffff88807df9845f R09: 1ffff1100fbf308b
[  154.619396][ T6641] EXT4-fs: Ignoring removed bh option
[  154.619833][ T6620] R10: dffffc0000000000 R11: ffffed100fbf308c R12: 1ffff9200097eef8
[  154.633183][ T6620] R13: 0000000000000000 R14: 0000000000001a01 R15: dffffc0000000000
[  154.641415][ T6620] FS:  00007f98680ee6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  154.650888][ T6620] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  154.659932][ T6641] EXT4-fs: inline encryption not supported
[  154.674058][ T6620] CR2: 00007f8eee217dac CR3: 000000002f54a000 CR4: 00000000003506e0
[  154.695843][ T6620] Kernel panic - not syncing: Fatal exception
[  154.702106][ T6620] Kernel Offset: disabled
[  154.706431][ T6620] Rebooting in 86400 seconds..