last executing test programs:

1m40.871343571s ago: executing program 32 (id=197):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0xffff, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x7fffffff, 0x4)
sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0)

1m26.161556709s ago: executing program 4 (id=525):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000010c0)={0x0, &(0x7f0000001180)=[@nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x32, {0x0, "488b042500304000488904250030400066ba420066b81d0066ef"}}, @nested_vmlaunch={0x12f, 0x18}], 0x62})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001200)={0xb, 0x1, 0x400000, 0x100000, &(0x7f0000c68000/0x100000)=nil})

1m25.185590177s ago: executing program 4 (id=532):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10)

1m25.15148595s ago: executing program 4 (id=534):
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='+5', 0x2)

1m25.129661383s ago: executing program 4 (id=535):
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x2200810, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRES64], 0x1, 0x267, &(0x7f0000000580)="$eJzs2s9rXFUcB9DvSxNaU9KJv21BvOhC3TyarF00SArigKCNUAXpq3nRIc+ZkDcERsRmpeCqa1euxaULQZAu3WTjX+BCV9lk2YX4JJmkTdOItDaZoOds5jL3fbj33Xvf5S7u5ms3P1leGo+loh9jWRZjl2I9bmcxHWOxZz1effnqz8+/c/W9N+fa7fm3U7o8d2VmNqV07oWf3v/suxdv9c+++/25H0/HxvQHm1uzv208s3F+888rH3fq1KlTt9dPRbre6/WL61WZFjv1cp7Szaos6jJ1unW5ek/9UtVbWRmkors4NbmyWtZ1KrqDtFwOUr+X+quDVHxUdLopz/M0NRn8Gwvf3m6a2GomrkXTNI99E2dvxdSv0Yrs8ZQ9eSl7+lr27Hp2fqtpWqPuKkfC/P+/7dvUz0RUX64trC0Mf4f1c0vRiSrKuBit+CO2l8muYfnyG+35i2nHdHxR3djN31hbOLWT/2ovPxOtmD48PzPMp3vzp2Nyf/uzPzwRT92f//1Ue3720PyZeOWlffk8WvHLh9GLKhZjO3u3/c9nUnr9rfaB/IWd5wAA/mvydMeh57c8/7v6Yf4BzocHzlfjcWF8tO9ORD34dLmoqnL1WArba+r+qok48E/vGPqT7Q7APz/83NjDtxXjEcc3vA9Z+PpkdOOICsN9LO7M9yNu4pF+RBO7C3JvYxzl0I1gM+LY3Z30UfcEAAAAAAAAAACAB3Hg0l/rKK4cjvodAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+2vAAAA///gFcB1")
chdir(0x0)
creat(&(0x7f0000000e00)='./bus\x00', 0x130)
mount(&(0x7f0000000e40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000e80)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000ec0)='./bus\x00', 0x4c000, 0x14c)
preadv2(r0, &(0x7f0000000f00)=[{&(0x7f00000010c0)=""/4063, 0xfdf}], 0x1, 0x2, 0x0, 0x1)

1m25.080395048s ago: executing program 4 (id=538):
syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1e0041c, &(0x7f00000009c0)=ANY=[@ANYBLOB='rodir,utf8=0,uni_xlate=1,iocharset=cp852,nonumtail=0,utf8=0,shortname=mixed,iocharset=cp1251,iocharset=iso8859-13,utf8=1,uni_xlate=0,utf8=0,uni_xlate=0,utf8=0,shortname=mixed,shortname=winnt,nonuetail=0,shortname=lower,rodir,\x00'], 0x3, 0x28a, &(0x7f0000000ac0)="$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")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000006c0)=0x80000001, 0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000007c0), 0xf00)
close(r0)

1m25.003541175s ago: executing program 4 (id=539):
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc\x00', 0x4)
mount(0x0, &(0x7f00000009c0)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000a80)='7', 0x1)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b00), 0x22000)

1m24.95431671s ago: executing program 33 (id=539):
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc\x00', 0x4)
mount(0x0, &(0x7f00000009c0)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000a80)='7', 0x1)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b00), 0x22000)

1m1.759958861s ago: executing program 6 (id=1064):
symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file1\x00', 0x5)
unlinkat(r0, &(0x7f0000000380)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x80000, 0x0)
getdents64(r1, &(0x7f0000000400)=""/4128, 0x1020)

1m1.718278546s ago: executing program 6 (id=1068):
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @val={@val={0x88a8, 0x5}, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0xb4, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x42}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0x4000}}}}}}, 0x0)

1m1.697507868s ago: executing program 6 (id=1070):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x60700, 0x44)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005900)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1m1.68585942s ago: executing program 6 (id=1072):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2804c0e, &(0x7f0000000040), 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000640)={@desc={0x1, 0x0, @desc4}})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m1.444671094s ago: executing program 6 (id=1076):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
sendto(r0, &(0x7f0000000540)="f6", 0xffa6, 0xd63a66976f7dfbe1, 0x0, 0x0)

1m1.173160581s ago: executing program 6 (id=1085):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m1.138361025s ago: executing program 34 (id=1085):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

23.519121667s ago: executing program 3 (id=1644):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./mysys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)

23.460775933s ago: executing program 3 (id=1645):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, &(0x7f00000009c0)='\x00'/102, 0x66, 0x0, &(0x7f0000000a40)={0x2, 0x1234, @rand_addr=0x64010101}, 0xfffffffffffffcbd)

23.460422533s ago: executing program 3 (id=1647):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000500)=0x8, 0x4)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/17, 0x11}, 0x1000006}], 0x1, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000600)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

23.38771293s ago: executing program 3 (id=1648):
syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x8, 0x0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0xf8})
ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60})

23.282879491s ago: executing program 3 (id=1650):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x80, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

23.091147911s ago: executing program 3 (id=1651):
setresgid(0xee00, 0xee01, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000005640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000000, &(0x7f00000001c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@user_xattr}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}]}, 0x4, 0x533, &(0x7f0000000240)="$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")
fchownat(0xffffffffffffff9c, &(0x7f00000078c0)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000)

23.003531479s ago: executing program 35 (id=1651):
setresgid(0xee00, 0xee01, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000005640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000000, &(0x7f00000001c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@user_xattr}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}]}, 0x4, 0x533, &(0x7f0000000240)="$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")
fchownat(0xffffffffffffff9c, &(0x7f00000078c0)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000)

20.505307311s ago: executing program 1 (id=1691):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x7ffff000}, {&(0x7f0000000080)=""/152, 0x98}], 0x2, &(0x7f0000000140)=[{&(0x7f0000000180)=""/95, 0x7ffff000}], 0x286, 0x0)
socket(0x15, 0x3, 0x3)
io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f00000003c0)=[{0xd08, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x101, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/191, 0xbf}]}], 0x3)
sendmsg$key(r0, &(0x7f0000006a40)={0x0, 0x0, &(0x7f0000006a00)={&(0x7f0000006980)={0x2, 0x9, 0x1, 0x7, 0x5, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0xff, 0x80, 0x0, @in={0x2, 0x4e24, @local}}]}, 0x28}}, 0x44)

19.681340334s ago: executing program 1 (id=1702):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b40)=ANY=[@ANYBLOB="ff030000"], 0x390)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000b00)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendto$inet6(r1, &(0x7f0000000b40), 0x3000, 0x0, 0x0, 0x0)

19.502950062s ago: executing program 1 (id=1703):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000800)={@val={0xa, 0x8100}, @void, @eth={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "f1e8a2", 0x8, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x4e23, 0x4e23, 0x8}}}}}}}, 0x42)

19.263302017s ago: executing program 1 (id=1708):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
chroot(&(0x7f0000000180)='./file0/../file0/file0\x00')
mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000240)='./file0/../file0\x00')

19.220458811s ago: executing program 1 (id=1711):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
close(0x3)

19.111452942s ago: executing program 1 (id=1716):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="0e03"], 0x14}, 0x1, 0x0, 0x0, 0x481}, 0x8000000)
syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r1)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01fedbdf2500015529671d"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4048090)

19.012355352s ago: executing program 36 (id=1716):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="0e03"], 0x14}, 0x1, 0x0, 0x0, 0x481}, 0x8000000)
syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r1)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01fedbdf2500015529671d"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4048090)

18.942737069s ago: executing program 5 (id=1723):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000380)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@arp={0x806, @generic={0x310, 0x1, 0x6, 0x0, 0x8, @empty, "", @local}}}}, 0x0)

18.941979759s ago: executing program 5 (id=1724):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x0, 0x32, r0, 0x8528c000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

18.883080305s ago: executing program 5 (id=1725):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000680)='GPL\x00'}, 0x80)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000007c0)='syzkaller\x00'}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000800)={r1}, 0x8)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000ac0)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000b40)={r2, r0, 0x4, r1}, 0x10)

18.882688745s ago: executing program 5 (id=1727):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x1)

18.647035128s ago: executing program 5 (id=1730):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000007c0)={0x200000, 0x200000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/dummy0/carrier\x00', 0x8001, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0)

18.646758928s ago: executing program 5 (id=1731):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x0)
mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0xa0000, 0xb0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x400000cd, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']})

2.512397107s ago: executing program 37 (id=1731):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x0)
mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0xa0000, 0xb0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x400000cd, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']})

2.502602198s ago: executing program 8 (id=1814):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000010c0)={0x0, &(0x7f0000001180)=[@nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x32, {0x0, "488b042500304000488904250030400066ba420066b81d0066ef"}}, @nested_vmlaunch={0x12f, 0x18}], 0x62})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001200)={0xb, 0x1, 0x400000, 0x100000, &(0x7f0000c68000/0x100000)=nil})

2.241117404s ago: executing program 8 (id=1817):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})

2.099907898s ago: executing program 9 (id=1718):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f00000005c0)=0xfe65)

1.762715062s ago: executing program 0 (id=1826):
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12)
mkdirat$cgroup(r0, &(0x7f0000001000)='syz0\x00', 0x1ff)

1.700239779s ago: executing program 0 (id=1827):
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000380)=@svm={0x0, 0x1, 0x1080, {0x7000}, {"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"}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001440)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.69309579s ago: executing program 7 (id=1828):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
sched_setscheduler(0x0, 0x1, &(0x7f0000003000)=0x7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
pread64(r0, &(0x7f0000000200)=""/154, 0x9a, 0x4)

1.610793438s ago: executing program 7 (id=1829):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000372000/0x2000)=nil, 0x2000)
mprotect(&(0x7f000083d000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.598685349s ago: executing program 2 (id=1811):
r0 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='w', 0x1}], 0x1, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000180)='0', 0x1)

1.495330329s ago: executing program 0 (id=1830):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_create_resource$futex(&(0x7f00000003c0)=0x1)
futex(r0, 0x6, 0x3b9aca00, 0x0, 0x0, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1.49514343s ago: executing program 9 (id=1718):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f00000005c0)=0xfe65)

1.224942587s ago: executing program 2 (id=1811):
r0 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='w', 0x1}], 0x1, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000180)='0', 0x1)

1.217668467s ago: executing program 8 (id=1831):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f00000002c0)='7', 0x1)
setns(0xc9, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0x7fff0000}]})

1.217080007s ago: executing program 7 (id=1832):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff)
mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000003c0)=0x2)

1.197968759s ago: executing program 8 (id=1833):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9f, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.041660965s ago: executing program 7 (id=1834):
r0 = gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f00000001c0)=ANY=[], 0x1, 0x120c, &(0x7f0000000280)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000001500)={0x101, 0x2000003, 0x1758})

1.034902536s ago: executing program 8 (id=1835):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000580)='syz_tun\x00', 0x8)
bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1001}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0x1000}}}}}}}, 0x0)

1.034298056s ago: executing program 0 (id=1836):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys\x00', 0x42)
mount(0x0, &(0x7f0000000300)='./mysys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x20102, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r0, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

914.876328ms ago: executing program 7 (id=1837):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffea1}, &(0x7f0000001c00)=0x20)

914.252998ms ago: executing program 0 (id=1838):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004300), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000004380)=0x13)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000004400)={0xff83, 0x100, 0x8, 0x7fff, 0xfe, "db2d416fbecfb84b5452b768e08ee2df361089"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000004440)=0x6f)

889.892771ms ago: executing program 7 (id=1839):
syz_mount_image$exfat(&(0x7f0000000f80), &(0x7f0000000fc0)='./file1\x00', 0x842, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x152e, &(0x7f0000001380)="$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")
mount(0x0, 0x0, 0x0, 0x40, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000)
syz_io_uring_setup(0x6f8d, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./dev\x00', 0x1df)
mount(0x0, &(0x7f0000000bc0)='./dev\x00', &(0x7f0000000c00)='devtmpfs\x00', 0x0, 0x0)

885.562171ms ago: executing program 0 (id=1840):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c000280"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

779.143702ms ago: executing program 2 (id=1811):
r0 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='w', 0x1}], 0x1, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000180)='0', 0x1)

718.718298ms ago: executing program 9 (id=1718):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f00000005c0)=0xfe65)

607.582199ms ago: executing program 2 (id=1811):
r0 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='w', 0x1}], 0x1, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000180)='0', 0x1)

487.642111ms ago: executing program 9 (id=1718):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f00000005c0)=0xfe65)

364.953453ms ago: executing program 2 (id=1811):
r0 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='w', 0x1}], 0x1, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000180)='0', 0x1)

247.440116ms ago: executing program 9 (id=1718):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f00000005c0)=0xfe65)

117.751108ms ago: executing program 2 (id=1811):
r0 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='w', 0x1}], 0x1, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000180)='0', 0x1)

154.72µs ago: executing program 8 (id=1841):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800080, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16], 0x9, 0x105f6, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000010bc0)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000010c00)='2', 0x1, 0x8080c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000010c40)='./file1\x00', 0x181441, 0x148)
fallocate(r1, 0x20, 0x4000, 0x8000)

0s ago: executing program 9 (id=1718):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f00000005c0)=0xfe65)

kernel console output (not intermixed with test programs):

ree segment when checkpoint is enabled
[   79.108342][ T2559] kworker/u4:7: attempt to access beyond end of device
[   79.108342][ T2559] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   79.286275][ T3195] loop7: detected capacity change from 0 to 512
[   79.558046][ T3193] loop0: detected capacity change from 0 to 40427
[   79.569049][ T3193] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   79.585701][ T3193] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   79.604811][ T3193] F2FS-fs (loop0): invalid crc value
[   79.651902][ T3193] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   79.664562][ T3184] F2FS-fs (loop5): Invalid segment/section count (24 != 24 * 5)
[   79.678186][ T3184] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   79.695535][ T3184] F2FS-fs (loop5): invalid crc value
[   79.712698][ T3184] F2FS-fs (loop5): Found nat_bits in checkpoint
[   79.738703][ T3193] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   79.753081][ T3193] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   79.805009][ T3184] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   79.820096][ T3184] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   79.865406][  T289] syz-executor: attempt to access beyond end of device
[   79.865406][  T289] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   80.031770][ T3197] set_capacity_and_notify: 1 callbacks suppressed
[   80.031790][ T3197] loop7: detected capacity change from 0 to 40427
[   80.065872][ T3197] F2FS-fs (loop7): Invalid SB checksum offset: 0
[   80.093729][ T3197] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[   80.116047][ T3207] netlink: 'syz.0.1142': attribute type 12 has an invalid length.
[   80.119654][ T3197] F2FS-fs (loop7): invalid crc value
[   80.138843][ T3207] netlink: 'syz.0.1142': attribute type 29 has an invalid length.
[   80.158797][ T3197] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   80.166355][ T3207] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1142'.
[   80.225139][ T3197] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[   80.232486][ T3197] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   80.286246][ T3187] loop1: detected capacity change from 0 to 131072
[   80.328251][ T3187] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[   80.337057][ T3187] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   80.362666][ T3187] F2FS-fs (loop1): invalid crc value
[   80.418939][ T3191] loop3: detected capacity change from 0 to 131072
[   80.427551][ T3187] F2FS-fs (loop1): Found nat_bits in checkpoint
[   80.446253][ T3191] F2FS-fs (loop3): Test dummy encryption mode enabled
[   80.465196][ T3191] F2FS-fs (loop3): invalid crc value
[   80.513592][ T3191] F2FS-fs (loop3): Found nat_bits in checkpoint
[   80.544821][ T3229] loop0: detected capacity change from 0 to 256
[   80.569652][ T3187] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   80.590529][ T3187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   80.630818][ T3191] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   80.957985][    T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   81.139139][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.149439][    T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.160532][    T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.170381][    T6] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.183468][    T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   81.192599][    T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.337999][   T28] kauditd_printk_skb: 28 callbacks suppressed
[   81.338016][   T28] audit: type=1400 audit(1794399305.336:499): avc:  denied  { execmem } for  pid=3239 comm="syz.1.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   81.410053][ T3248] loop0: detected capacity change from 0 to 128
[   81.435187][ T3248] syz.0.1155: attempt to access beyond end of device
[   81.435187][ T3248] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128
[   81.452132][ T3248] syz.0.1155: attempt to access beyond end of device
[   81.452132][ T3248] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128
[   81.478672][ T3248] buffer_io_error: 35741 callbacks suppressed
[   81.478693][ T3248] Buffer I/O error on dev loop0, logical block 71, lost async page write
[   81.496157][ T3247] syz.0.1155: attempt to access beyond end of device
[   81.496157][ T3247] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128
[   81.509296][ T3258] device batadv_slave_1 entered promiscuous mode
[   81.510207][ T3247] Buffer I/O error on dev loop0, logical block 69, lost async page write
[   81.520616][ T3257] device batadv_slave_1 left promiscuous mode
[   81.537289][ T3247] syz.0.1155: attempt to access beyond end of device
[   81.537289][ T3247] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128
[   81.559811][ T3247] Buffer I/O error on dev loop0, logical block 70, lost async page write
[   81.598034][ T3266] loop7: detected capacity change from 0 to 2048
[   81.616490][    T6] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0
[   81.655157][ T3266] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   81.663857][ T3266] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.688865][ T3077] EXT4-fs (loop7): unmounting filesystem.
[   81.698520][    T6] lg-g15 0003:046D:C222.0008: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver
[   81.819200][   T40] usb 4-1: USB disconnect, device number 4
[   82.009054][ T3318] loop5: detected capacity change from 0 to 512
[   82.041057][ T3318] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   82.051282][ T3318] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.065939][ T3318] Quota error (device loop5): do_check_range: Getting block 773 out of range 1-5
[   82.075411][ T3318] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[   82.085210][ T3318] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.1187: Failed to acquire dquot type 1
[   82.096922][ T3318] EXT4-fs (loop5): Remounting filesystem read-only
[   82.206479][  T823] EXT4-fs (loop5): unmounting filesystem.
[   82.288020][    T6] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   82.430641][ T3353] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000004
[   82.469069][    T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.488080][    T6] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   82.518072][    T6] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   82.558685][    T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   82.578323][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   82.586370][    T6] usb 1-1: SerialNumber: syz
[   82.612054][ T3349] loop5: detected capacity change from 0 to 40427
[   82.631957][ T3349] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   82.647974][ T3349] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   82.667990][ T3349] F2FS-fs (loop5): fault_type options not supported
[   82.674690][ T3349] F2FS-fs (loop5): fault_injection options not supported
[   82.692095][ T3349] F2FS-fs (loop5): Image doesn't support compression
[   82.708435][ T3349] F2FS-fs (loop5): invalid crc value
[   82.737850][ T3349] F2FS-fs (loop5): Found nat_bits in checkpoint
[   82.806461][ T3349] F2FS-fs (loop5): Start checkpoint disabled!
[   82.813108][ T3349] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[   82.827221][   T19] usb 1-1: USB disconnect, device number 7
[   82.843562][ T3349] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   82.857995][ T3349] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   82.918968][ T3340] loop7: detected capacity change from 0 to 131072
[   82.935271][ T3340] F2FS-fs (loop7): invalid crc value
[   82.953163][ T2559] kworker/u4:7: attempt to access beyond end of device
[   82.953163][ T2559] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   82.977251][ T3340] F2FS-fs (loop7): Found nat_bits in checkpoint
[   83.042026][ T3340] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   83.055792][ T3340] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   83.086053][ T3379] loop1: detected capacity change from 0 to 256
[   83.104517][ T3340] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[   83.113664][ T3381] EXT4-fs (loop3): Test dummy encryption mode enabled
[   83.124703][ T3383] EXT4-fs: Ignoring removed bh option
[   83.131999][ T3381] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   83.145249][ T3379] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   83.157656][ T3381] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.1208: bad orphan inode 131083
[   83.170601][ T3381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   83.184515][ T3379] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   83.200933][ T2559] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   83.202690][ T3381] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   83.215485][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.223417][ T3383] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   83.226757][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.243749][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.252839][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.253428][ T3383] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.262063][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   83.281899][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.290860][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.300069][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.309014][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.318024][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.321574][  T288] EXT4-fs (loop3): unmounting filesystem.
[   83.326965][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.344466][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.356060][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.365021][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.374044][ T3077] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   83.404572][ T3389] erofs: (device loop1): mounted with root inode @ nid 36.
[   83.421609][ T3383] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.1203: lblock 3 mapped to illegal pblock 3 (length 3)
[   83.422039][   T47] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[   83.447240][ T3383] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   83.459731][ T3383] EXT4-fs (loop5): This should not happen!! Data will be lost
[   83.459731][ T3383] 
[   83.459741][ T3389] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   83.480444][ T3383] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1203: lblock 3 mapped to illegal pblock 3 (length 1)
[   83.494881][ T3383] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1203: lblock 3 mapped to illegal pblock 3 (length 1)
[   83.515241][ T3383] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1203: lblock 3 mapped to illegal pblock 3 (length 1)
[   83.529587][ T3389] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   83.531928][ T3383] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.1203: lblock 3 mapped to illegal pblock 3 (length 1)
[   83.555609][ T3389] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   83.558669][ T3395] EXT4-fs error (device loop5): ext4_ext_remove_space:2945: inode #15: comm syz.5.1203: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   83.584900][ T3395] EXT4-fs error (device loop5) in ext4_setattr:5697: Corrupt filesystem
[   83.585061][ T3389] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[   83.616871][  T823] EXT4-fs (loop5): unmounting filesystem.
[   83.640632][   T28] audit: type=1400 audit(1794399307.646:500): avc:  denied  { create } for  pid=3396 comm="syz.5.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   83.678036][   T40] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   83.700582][   T28] audit: type=1400 audit(1794399307.676:501): avc:  denied  { write } for  pid=3396 comm="syz.5.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   83.741458][   T28] audit: type=1400 audit(1794399307.676:502): avc:  denied  { nlmsg_write } for  pid=3396 comm="syz.5.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   83.875773][   T40] usb 4-1: unable to get BOS descriptor or descriptor too short
[   83.894935][   T40] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.913344][   T40] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   83.926791][   T40] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   83.946299][   T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.954764][   T40] usb 4-1: Product: syz
[   83.959219][   T40] usb 4-1: Manufacturer: syz
[   83.963927][   T40] usb 4-1: SerialNumber: syz
[   83.990317][ T3429] device-mapper: ioctl: Invalid data size in the ioctl structure: 56
[   84.113715][ T3437] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   84.122665][ T3437] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.178677][   T40] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   84.270811][ T3077] EXT4-fs (loop7): unmounting filesystem.
[   84.287672][   T60] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   84.298814][   T60] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   84.373559][ T3449] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   84.386077][   T40] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[   84.409823][ T3449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   84.418892][ T3449] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   84.445737][  T289] EXT4-fs (loop0): unmounting filesystem.
[   84.521096][ T3456] kvm [3454]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[   84.640780][ T3474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   84.649861][ T3474] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.664234][ T3474] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1242: bg 0: block 112: padding at end of block bitmap is not set
[   84.687375][  T289] EXT4-fs (loop0): unmounting filesystem.
[   84.714101][ T3479] EXT4-fs (loop0): 1 truncate cleaned up
[   84.719924][ T3479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   84.735434][ T3479] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1243: bg 0: block 465: padding at end of block bitmap is not set
[   84.752071][ T3479] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 8 with max blocks 4 with error 28
[   84.765131][ T3479] EXT4-fs (loop0): This should not happen!! Data will be lost
[   84.765131][ T3479] 
[   84.781460][ T3479] EXT4-fs (loop0): Total free blocks count 0
[   84.787618][ T3479] EXT4-fs (loop0): Free/Dirty block details
[   84.793832][ T3479] EXT4-fs (loop0): free_blocks=0
[   84.798983][ T3479] EXT4-fs (loop0): dirty_blocks=4
[   84.804118][ T3479] EXT4-fs (loop0): Block reservation details
[   84.810402][ T3479] EXT4-fs (loop0): i_reserved_data_blocks=4
[   84.827506][ T3485] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   84.838365][  T289] EXT4-fs (loop0): unmounting filesystem.
[   84.920688][ T3499] ip_tables: iptables: counters copy to user failed while replacing table
[   84.987879][   T40] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   85.006861][   T40] usb 4-1: clock source 0 is not valid, cannot use
[   85.014445][ T3510] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   85.015271][   T40] usb 4-1: 2:1: cannot get freq (v2/v3): err -71
[   85.038394][   T40] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   85.048438][ T3510] EXT4-fs (loop0): 1 truncate cleaned up
[   85.054129][ T3510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   85.073031][   T40] usb 4-1: USB disconnect, device number 5
[   85.118389][  T289] EXT4-fs (loop0): unmounting filesystem.
[   85.232663][ T3506] set_capacity_and_notify: 8 callbacks suppressed
[   85.232683][ T3506] loop5: detected capacity change from 0 to 40427
[   85.250905][ T3506] F2FS-fs (loop5): Corrupted extension count (33554469 + 1 > 64)
[   85.259822][ T3506] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   85.288367][ T3506] F2FS-fs (loop5): invalid crc value
[   85.299064][ T1165] udevd[1165]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   85.318248][ T3506] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   85.405046][ T3506] F2FS-fs (loop5): Try to recover 2th superblock, ret: -30
[   85.417963][ T3506] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   85.476822][ T3524] loop1: detected capacity change from 0 to 40427
[   85.491609][ T3524] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[   85.507830][ T3524] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   85.534574][ T3524] F2FS-fs (loop1): Image doesn't support compression
[   85.541604][ T3524] F2FS-fs (loop1): Image doesn't support compression
[   85.550700][ T3530] loop3: detected capacity change from 0 to 512
[   85.558706][ T3524] F2FS-fs (loop1): invalid crc value
[   85.564840][ T3524] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   85.632777][ T3534] loop3: detected capacity change from 0 to 256
[   85.647230][ T3524] F2FS-fs (loop1): Start checkpoint disabled!
[   85.679956][ T3524] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   85.714918][ T3524] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   85.723368][ T3524] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   85.751448][ T3524] syz.1.1263: attempt to access beyond end of device
[   85.751448][ T3524] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   85.826417][  T342] kworker/u4:5: attempt to access beyond end of device
[   85.826417][  T342] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   85.870573][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'.
[   85.899748][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   85.926376][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[   86.081391][ T3519] loop7: detected capacity change from 0 to 131072
[   86.098535][ T3519] F2FS-fs (loop7): Test dummy encryption mode enabled
[   86.109735][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'.
[   86.119009][ T3519] F2FS-fs (loop7): invalid crc value
[   86.139203][ T3519] F2FS-fs (loop7): Found nat_bits in checkpoint
[   86.207977][ T3519] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   86.306277][ T3565] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   86.442397][ T3556] loop5: detected capacity change from 0 to 40427
[   86.456854][ T3556] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   86.473747][ T3532] loop0: detected capacity change from 0 to 131072
[   86.474705][ T3556] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   86.509355][ T3532] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   86.532875][ T3532] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   86.542304][ T3556] F2FS-fs (loop5): Found nat_bits in checkpoint
[   86.567198][ T3532] F2FS-fs (loop0): invalid crc value
[   86.596387][ T3532] F2FS-fs (loop0): Found nat_bits in checkpoint
[   86.648363][ T3556] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   86.657715][ T3556] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   86.692683][ T3532] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   86.704180][ T3532] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   86.839124][ T3580] syz.5.1275: attempt to access beyond end of device
[   86.839124][ T3580] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   86.895705][ T3584] device gretap1 entered promiscuous mode
[   87.170822][ T3600] loop3: detected capacity change from 0 to 512
[   87.197519][ T3602] FAULT_INJECTION: forcing a failure.
[   87.197519][ T3602] name failslab, interval 1, probability 0, space 0, times 0
[   87.228180][ T3602] CPU: 1 PID: 3602 Comm: syz.7.1293 Not tainted syzkaller #0
[   87.235700][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   87.245871][ T3602] Call Trace:
[   87.249175][ T3602]  <TASK>
[   87.252158][ T3602]  __dump_stack+0x21/0x24
[   87.256519][ T3602]  dump_stack_lvl+0x110/0x170
[   87.261236][ T3602]  ? __cfi_dump_stack_lvl+0x8/0x8
[   87.266299][ T3602]  ? node_tag_clear+0x1fb/0x330
[   87.271191][ T3602]  dump_stack+0x15/0x24
[   87.275397][ T3602]  should_fail_ex+0x3bf/0x510
[   87.280112][ T3602]  __should_failslab+0xac/0xf0
[   87.284915][ T3602]  should_failslab+0x9/0x20
[   87.289464][ T3602]  __kmem_cache_alloc_node+0x3d/0x2d0
[   87.294875][ T3602]  ? __kernfs_new_node+0xa6/0x670
[   87.299923][ T3602]  ? __kernfs_new_node+0xa6/0x670
[   87.304963][ T3602]  __kmalloc_node_track_caller+0xa1/0x1e0
[   87.310706][ T3602]  kstrdup_const+0x5a/0xa0
[   87.315136][ T3602]  __kernfs_new_node+0xa6/0x670
[   87.319996][ T3602]  ? clear_nonspinnable+0x60/0x60
[   87.325118][ T3602]  ? rwsem_write_trylock+0x136/0x300
[   87.330411][ T3602]  ? kernfs_new_node+0x260/0x260
[   87.335363][ T3602]  ? up_write+0x7b/0x290
[   87.339670][ T3602]  kernfs_new_node+0x150/0x260
[   87.344548][ T3602]  kernfs_create_link+0xa4/0x200
[   87.349508][ T3602]  sysfs_do_create_link_sd+0x8a/0x110
[   87.354923][ T3602]  sysfs_create_link+0x68/0x80
[   87.359710][ T3602]  device_add+0x742/0xec0
[   87.364058][ T3602]  netdev_register_kobject+0x18e/0x330
[   87.369530][ T3602]  ? raw_notifier_call_chain+0xfa/0x110
[   87.375088][ T3602]  register_netdevice+0xec9/0x1550
[   87.380221][ T3602]  ? __cfi_register_netdevice+0x10/0x10
[   87.385792][ T3602]  ? alloc_netdev_mqs+0xb6d/0xfb0
[   87.390835][ T3602]  ? memcpy+0x56/0x70
[   87.394835][ T3602]  ip6_tnl_create2+0xbf/0x3a0
[   87.399528][ T3602]  ip6_tnl_locate+0x687/0x7a0
[   87.404222][ T3602]  ? cap_capable+0x1a6/0x230
[   87.408825][ T3602]  ? ip6_tnl_link_config+0x970/0x970
[   87.414133][ T3602]  ? memcpy+0x56/0x70
[   87.418133][ T3602]  ip6_tnl_siocdevprivate+0x6c1/0xec0
[   87.423526][ T3602]  ? __cfi_ip6_tnl_siocdevprivate+0x10/0x10
[   87.429446][ T3602]  ? full_name_hash+0x9d/0xf0
[   87.434241][ T3602]  dev_ifsioc+0xa8b/0xd90
[   87.438590][ T3602]  ? dev_ioctl+0xcf0/0xcf0
[   87.443022][ T3602]  ? __kasan_check_write+0x14/0x20
[   87.448149][ T3602]  ? mutex_lock+0x93/0x1b0
[   87.452596][ T3602]  ? __cfi_mutex_lock+0x10/0x10
[   87.457561][ T3602]  ? dev_get_by_name_rcu+0xe5/0x130
[   87.462807][ T3602]  dev_ioctl+0x5d9/0xcf0
[   87.467121][ T3602]  sock_ioctl+0x673/0x700
[   87.471476][ T3602]  ? __cfi_sock_ioctl+0x10/0x10
[   87.476438][ T3602]  ? security_file_ioctl+0x95/0xc0
[   87.481567][ T3602]  ? __cfi_sock_ioctl+0x10/0x10
[   87.486438][ T3602]  __se_sys_ioctl+0x12f/0x1b0
[   87.491156][ T3602]  __x64_sys_ioctl+0x7b/0x90
[   87.495762][ T3602]  x64_sys_call+0x58b/0x9a0
[   87.500316][ T3602]  do_syscall_64+0x4c/0xa0
[   87.504745][ T3602]  ? clear_bhb_loop+0x30/0x80
[   87.509454][ T3602]  ? clear_bhb_loop+0x30/0x80
[   87.514150][ T3602]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   87.520060][ T3602] RIP: 0033:0x7f5dc09a8f19
[   87.524502][ T3602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.544293][ T3602] RSP: 002b:00007f5dc1940028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   87.552729][ T3602] RAX: ffffffffffffffda RBX: 00007f5dc0c25fa0 RCX: 00007f5dc09a8f19
[   87.560714][ T3602] RDX: 00002000000001c0 RSI: 00000000000089f1 RDI: 0000000000000004
[   87.568704][ T3602] RBP: 00007f5dc0a37f6d R08: 0000000000000000 R09: 0000000000000000
[   87.576687][ T3602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.584778][ T3602] R13: 00007f5dc0c26038 R14: 00007f5dc0c25fa0 R15: 00007fff16e4a9f8
[   87.592768][ T3602]  </TASK>
[   87.627345][ T3600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   87.654363][ T3600] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.680930][ T3570] loop1: detected capacity change from 0 to 131072
[   87.715402][ T3570] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[   87.741870][ T3570] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   87.760636][ T3570] F2FS-fs (loop1): invalid crc value
[   87.769083][ T3611] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   87.802461][ T3570] F2FS-fs (loop1): Found nat_bits in checkpoint
[   87.823407][ T2558] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   87.842577][ T2558] EXT4-fs (loop3): This should not happen!! Data will be lost
[   87.842577][ T2558] 
[   87.863758][ T2558] EXT4-fs (loop3): Total free blocks count 0
[   87.875441][ T2558] EXT4-fs (loop3): Free/Dirty block details
[   87.878600][ T3570] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   87.888128][ T2558] EXT4-fs (loop3): free_blocks=65281
[   87.888705][ T3570] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   87.896520][ T2558] EXT4-fs (loop3): dirty_blocks=33
[   87.914627][ T2558] EXT4-fs (loop3): Block reservation details
[   87.924075][ T2558] EXT4-fs (loop3): i_reserved_data_blocks=33
[   87.934836][  T288] EXT4-fs (loop3): unmounting filesystem.
[   88.046211][ T3632] loop5: detected capacity change from 0 to 1024
[   88.078357][ T3632] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   88.086984][ T3632] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.140242][ T3632] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.1300: lblock 0 mapped to illegal pblock 0 (length 6)
[   88.179918][ T3632] EXT4-fs error (device loop5): ext4_ext_remove_space:2945: inode #15: comm syz.5.1300: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   88.295391][  T823] EXT4-fs (loop5): unmounting filesystem.
[   88.403825][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.429910][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.506216][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   88.561566][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   88.582615][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.589723][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.635754][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.642880][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.686502][ T3645] device gretap1 left promiscuous mode
[   88.798785][ T3664] FAULT_INJECTION: forcing a failure.
[   88.798785][ T3664] name fail_futex, interval 1, probability 0, space 0, times 0
[   88.827322][ T3664] CPU: 1 PID: 3664 Comm: syz.1.1314 Not tainted syzkaller #0
[   88.834763][ T3664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   88.845248][ T3664] Call Trace:
[   88.848586][ T3664]  <TASK>
[   88.851546][ T3664]  __dump_stack+0x21/0x24
[   88.855928][ T3664]  dump_stack_lvl+0x110/0x170
[   88.860637][ T3664]  ? __cfi_dump_stack_lvl+0x8/0x8
[   88.865695][ T3664]  ? __switch_to+0x56f/0x1070
[   88.870406][ T3664]  dump_stack+0x15/0x24
[   88.874617][ T3664]  should_fail_ex+0x3bf/0x510
[   88.879326][ T3664]  should_fail+0xb/0x10
[   88.883611][ T3664]  get_futex_key+0x143/0xb10
[   88.888251][ T3664]  ? _raw_spin_unlock+0x4c/0x70
[   88.893137][ T3664]  ? __cfi_get_futex_key+0x10/0x10
[   88.898395][ T3664]  ? __schedule+0xcbb/0x1700
[   88.902821][ T3669] input: syz0 as /devices/virtual/input/input18
[   88.903015][ T3664]  ? futex_setup_timer+0xb0/0xc0
[   88.914219][ T3664]  futex_wait_requeue_pi+0x2af/0x9b0
[   88.919564][ T3664]  ? __cfi_futex_wait_requeue_pi+0x10/0x10
[   88.925428][ T3664]  ? futex_unqueue+0x132/0x160
[   88.930239][ T3664]  ? __cfi_futex_wait+0x10/0x10
[   88.935146][ T3664]  ? __cfi_futex_wake+0x10/0x10
[   88.940050][ T3664]  ? vfs_write+0xa51/0xd00
[   88.944519][ T3664]  do_futex+0x188/0x430
[   88.948709][ T3664]  ? __cfi_do_futex+0x10/0x10
[   88.953515][ T3664]  ? __kasan_check_write+0x14/0x20
[   88.958673][ T3664]  ? mutex_unlock+0x8f/0x230
[   88.963305][ T3664]  __se_sys_futex+0x136/0x310
[   88.968015][ T3664]  ? __x64_sys_futex+0x100/0x100
[   88.972977][ T3664]  ? xfd_validate_state+0x70/0x150
[   88.978132][ T3664]  ? __kasan_check_write+0x14/0x20
[   88.983284][ T3664]  __x64_sys_futex+0xe5/0x100
[   88.988002][ T3664]  x64_sys_call+0x7ec/0x9a0
[   88.992544][ T3664]  do_syscall_64+0x4c/0xa0
[   88.996990][ T3664]  ? clear_bhb_loop+0x30/0x80
[   89.001705][ T3664]  ? clear_bhb_loop+0x30/0x80
[   89.006418][ T3664]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   89.012341][ T3664] RIP: 0033:0x7efcbfda8f19
[   89.016796][ T3664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.036465][ T3664] RSP: 002b:00007efcc0bd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   89.044919][ T3664] RAX: ffffffffffffffda RBX: 00007efcc0025fa0 RCX: 00007efcbfda8f19
[   89.052934][ T3664] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000000000000000
[   89.060962][ T3664] RBP: 00007efcbfe37f6d R08: 0000200000000700 R09: 0000000000000001
[   89.068967][ T3664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.076970][ T3664] R13: 00007efcc0026038 R14: 00007efcc0025fa0 R15: 00007ffef1c8c248
[   89.084978][ T3664]  </TASK>
[   89.165429][ T3676] EXT4-fs: Ignoring removed i_version option
[   89.179668][ T3678] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   89.202680][ T3676] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   89.216387][ T3676] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.252530][ T3676] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[   89.262123][ T3678] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   89.287561][ T3678] FAT-fs (loop0): Filesystem has been set read-only
[   89.308359][ T3667] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   89.316615][ T3667] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   89.316756][ T3678] syz.0.1319: attempt to access beyond end of device
[   89.316756][ T3678] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   89.339417][ T3667] F2FS-fs (loop3): invalid crc value
[   89.345180][ T3678] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   89.353652][ T3678] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   89.368853][  T823] EXT4-fs (loop5): unmounting filesystem.
[   89.377557][ T3667] F2FS-fs (loop3): Found nat_bits in checkpoint
[   89.386268][ T3678] syz.0.1319: attempt to access beyond end of device
[   89.386268][ T3678] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   89.399713][ T3678] syz.0.1319: attempt to access beyond end of device
[   89.399713][ T3678] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   89.414208][ T3678] syz.0.1319: attempt to access beyond end of device
[   89.414208][ T3678] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   89.441120][ T3678] syz.0.1319: attempt to access beyond end of device
[   89.441120][ T3678] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   89.472792][ T3678] syz.0.1319: attempt to access beyond end of device
[   89.472792][ T3678] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   89.490285][ T3678] syz.0.1319: attempt to access beyond end of device
[   89.490285][ T3678] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   89.512550][ T3678] syz.0.1319: attempt to access beyond end of device
[   89.512550][ T3678] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   89.515387][ T3667] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   89.542182][ T3667] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   89.550413][ T3678] syz.0.1319: attempt to access beyond end of device
[   89.550413][ T3678] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   89.604782][ T3678] syz.0.1319: attempt to access beyond end of device
[   89.604782][ T3678] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[   89.631004][ T3695] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   89.645120][ T3695] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.696667][ T3695] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.1325: lblock 0 mapped to illegal pblock 0 (length 6)
[   89.736171][ T3695] EXT4-fs error (device loop7): ext4_ext_remove_space:2945: inode #15: comm syz.7.1325: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   89.848942][ T3077] EXT4-fs (loop7): unmounting filesystem.
[   89.921932][ T3704] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   89.938596][ T3704] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.086315][ T3714] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   90.171117][ T3716] xt_hashlimit: size too large, truncated to 1048576
[   90.197738][ T3716] xt_hashlimit: max too large, truncated to 1048576
[   90.232724][ T2558] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   90.245450][ T2558] EXT4-fs (loop5): This should not happen!! Data will be lost
[   90.245450][ T2558] 
[   90.256682][ T2558] EXT4-fs (loop5): Total free blocks count 0
[   90.262826][ T2558] EXT4-fs (loop5): Free/Dirty block details
[   90.277959][ T2558] EXT4-fs (loop5): free_blocks=65281
[   90.288193][ T2558] EXT4-fs (loop5): dirty_blocks=33
[   90.293376][ T2558] EXT4-fs (loop5): Block reservation details
[   90.307936][ T2558] EXT4-fs (loop5): i_reserved_data_blocks=33
[   90.325592][  T823] EXT4-fs (loop5): unmounting filesystem.
[   90.361460][ T3721] bridge0: port 3(syz_tun) entered blocking state
[   90.377968][ T3721] bridge0: port 3(syz_tun) entered disabled state
[   90.394672][ T3721] device syz_tun entered promiscuous mode
[   90.408390][ T3721] bridge0: port 3(syz_tun) entered blocking state
[   90.414906][ T3721] bridge0: port 3(syz_tun) entered forwarding state
[   90.431179][ T3727] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   90.445724][ T3725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'.
[   90.497971][ T3729] netlink: 'syz.7.1337': attribute type 3 has an invalid length.
[   90.512687][ T3729] netlink: 'syz.7.1337': attribute type 3 has an invalid length.
[   90.550029][ T3734] set_capacity_and_notify: 6 callbacks suppressed
[   90.550049][ T3734] loop5: detected capacity change from 0 to 512
[   90.591029][ T3734] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   90.629457][ T3734] EXT4-fs (loop5): 1 truncate cleaned up
[   90.635299][ T3734] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   90.676236][ T3742] loop7: detected capacity change from 0 to 128
[   90.684614][  T823] EXT4-fs (loop5): unmounting filesystem.
[   90.734964][ T3742] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   90.758902][ T3742] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.773836][ T3745] loop5: detected capacity change from 0 to 2048
[   90.832939][ T3745] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[   90.870384][ T3745] FAT-fs (loop5): Filesystem has been set read-only
[   90.902126][ T3077] EXT4-fs (loop7): unmounting filesystem.
[   91.015851][ T3758] loop1: detected capacity change from 0 to 128
[   91.050126][ T3758] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   91.089611][ T3758] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   91.097605][ T3758] FAT-fs (loop1): Filesystem has been set read-only
[   91.140007][ T3758] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   91.167962][ T3758] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   91.316032][ T3755] loop7: detected capacity change from 0 to 40427
[   91.348620][ T3755] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[   91.356013][ T3755] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   91.365630][ T3755] F2FS-fs (loop7): Image doesn't support compression
[   91.388105][ T3755] F2FS-fs (loop7): Image doesn't support compression
[   91.395331][ T3755] F2FS-fs (loop7): invalid crc value
[   91.408814][ T3755] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   91.479580][ T3755] F2FS-fs (loop7): Start checkpoint disabled!
[   91.498187][ T3755] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[   91.518223][ T3755] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   91.525317][ T3755] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[   91.594175][ T3755] F2FS-fs (loop7): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0
[   91.637963][ T3755] F2FS-fs (loop7): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3
[   91.658027][ T3755] F2FS-fs (loop7): f2fs_enable_checkpoint() finishes, writeback:50, sync:0
[   91.760511][ T3771] bridge0: port 3(syz_tun) entered blocking state
[   91.787269][ T3771] bridge0: port 3(syz_tun) entered disabled state
[   91.803210][ T3771] device syz_tun entered promiscuous mode
[   91.816833][ T3771] bridge0: port 3(syz_tun) entered blocking state
[   91.823387][ T3771] bridge0: port 3(syz_tun) entered forwarding state
[   91.883793][ T3779] loop7: detected capacity change from 0 to 512
[   91.930473][ T3779] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   91.946087][ T3779] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.091173][ T3786] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   92.173294][ T2558] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   92.197560][ T3789] loop1: detected capacity change from 0 to 512
[   92.210394][ T2558] EXT4-fs (loop7): This should not happen!! Data will be lost
[   92.210394][ T2558] 
[   92.244727][ T2558] EXT4-fs (loop7): Total free blocks count 0
[   92.252783][ T3789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   92.254693][ T2558] EXT4-fs (loop7): Free/Dirty block details
[   92.267790][ T2558] EXT4-fs (loop7): free_blocks=65281
[   92.280377][ T2558] EXT4-fs (loop7): dirty_blocks=33
[   92.285715][ T2558] EXT4-fs (loop7): Block reservation details
[   92.290083][ T3789] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.295788][ T2558] EXT4-fs (loop7): i_reserved_data_blocks=33
[   92.310411][ T3077] EXT4-fs (loop7): unmounting filesystem.
[   92.324029][ T3794] loop0: detected capacity change from 0 to 2048
[   92.350626][ T3797] xt_hashlimit: size too large, truncated to 1048576
[   92.415138][ T3797] xt_hashlimit: max too large, truncated to 1048576
[   92.452855][ T3794] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[   92.466761][ T3799] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   92.504407][ T3794] FAT-fs (loop0): Filesystem has been set read-only
[   92.585160][ T2558] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   92.608685][ T2558] EXT4-fs (loop1): This should not happen!! Data will be lost
[   92.608685][ T2558] 
[   92.627945][ T2558] EXT4-fs (loop1): Total free blocks count 0
[   92.648041][ T2558] EXT4-fs (loop1): Free/Dirty block details
[   92.654018][ T2558] EXT4-fs (loop1): free_blocks=65281
[   92.673114][ T2558] EXT4-fs (loop1): dirty_blocks=65
[   92.687945][ T2558] EXT4-fs (loop1): Block reservation details
[   92.694003][ T2558] EXT4-fs (loop1): i_reserved_data_blocks=65
[   92.718621][ T2558] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 448 with max blocks 32 with error 28
[   92.763512][ T3806] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   92.776726][ T3808] loop1: detected capacity change from 0 to 128
[   92.803292][ T3808] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   92.822524][ T3769] loop5: detected capacity change from 0 to 131072
[   92.825489][ T3808] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   92.855442][ T3769] F2FS-fs (loop5): Invalid log sectorsize (0)
[   92.867958][ T3769] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   92.985553][   T10] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   92.995369][ T3769] F2FS-fs (loop5): invalid crc value
[   93.098823][ T3769] F2FS-fs (loop5): Found nat_bits in checkpoint
[   93.181494][ T3769] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   93.194385][ T3769] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   93.297230][ T3804] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[   93.306373][ T3804] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   93.330125][ T3804] F2FS-fs (loop3): Image doesn't support compression
[   93.337228][ T3804] F2FS-fs (loop3): Image doesn't support compression
[   93.344197][ T3811] syz.1.1365 (3811) used greatest stack depth: 18976 bytes left
[   93.361808][ T3804] F2FS-fs (loop3): invalid crc value
[   93.371794][ T3804] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   93.404975][ T3821] input: syz0 as /devices/virtual/input/input19
[   93.454690][ T3804] F2FS-fs (loop3): Start checkpoint disabled!
[   93.468787][ T3804] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[   93.488244][ T3804] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   93.495471][ T3804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   93.519203][ T3823] kvm [3822]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[   93.587019][ T3804] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   93.746433][ T3834] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   93.767237][ T3836] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   93.804685][ T3838] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.832492][ T3838] EXT4-fs (loop5): Test dummy encryption mode enabled
[   93.861053][ T3838] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80ec1a8, mo2=0003]
[   93.877468][ T3843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   93.887077][ T3838] System zones: 0-5
[   93.896746][ T3843] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.910671][ T3838] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   94.029410][ T3847] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   94.098137][ T3815] F2FS-fs (loop0): Test dummy encryption mode enabled
[   94.105689][ T3815] F2FS-fs (loop0): invalid crc value
[   94.118019][   T40] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[   94.130761][ T2558] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   94.143373][ T2558] EXT4-fs (loop3): This should not happen!! Data will be lost
[   94.143373][ T2558] 
[   94.154057][ T2558] EXT4-fs (loop3): Total free blocks count 0
[   94.160246][ T2558] EXT4-fs (loop3): Free/Dirty block details
[   94.166174][ T2558] EXT4-fs (loop3): free_blocks=65281
[   94.171761][ T2558] EXT4-fs (loop3): dirty_blocks=65
[   94.176908][ T2558] EXT4-fs (loop3): Block reservation details
[   94.183136][ T2558] EXT4-fs (loop3): i_reserved_data_blocks=65
[   94.193854][ T3815] F2FS-fs (loop0): Found nat_bits in checkpoint
[   94.203600][ T2558] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1056 with max blocks 32 with error 28
[   94.230603][ T3852] input: syz0 as /devices/virtual/input/input20
[   94.237607][ T3852] input: failed to attach handler leds to device input20, error: -6
[   94.273844][   T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[   94.290740][ T3858] trusted_key: device-mapper: crypt: Selected cipher does not support IVs
[   94.295356][   T24] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   94.299708][ T3858] device-mapper: table: 252:3: crypt: Error decoding and setting key (-EINVAL)
[   94.318847][ T3858] device-mapper: ioctl: error adding target to table
[   94.337126][ T3815] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   94.381992][ T3862] input: syz0 as /devices/virtual/input/input21
[   94.598269][ T3878] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.688961][ T3882] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   94.769450][  T308] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   94.782075][  T308] EXT4-fs (loop3): This should not happen!! Data will be lost
[   94.782075][  T308] 
[   94.794741][  T308] EXT4-fs (loop3): Total free blocks count 0
[   94.803567][  T308] EXT4-fs (loop3): Free/Dirty block details
[   94.809597][  T308] EXT4-fs (loop3): free_blocks=65281
[   94.825891][   T40] usb 8-1: too many configurations: 181, using maximum allowed: 8
[   94.829345][  T308] EXT4-fs (loop3): dirty_blocks=65
[   94.845132][ T3888] kvm [3886]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[   94.848629][   T40] usb 8-1: unable to read config index 0 descriptor/start: -71
[   94.853413][  T308] EXT4-fs (loop3): Block reservation details
[   94.880090][  T308] EXT4-fs (loop3): i_reserved_data_blocks=65
[   94.886330][   T40] usb 8-1: can't read configurations, error -71
[   94.893960][  T308] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2048 with max blocks 32 with error 28
[   94.906678][   T28] audit: type=1400 audit(1794399318.906:503): avc:  denied  { setopt } for  pid=3893 comm="syz.0.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   94.916952][  T308] EXT4-fs (loop3): This should not happen!! Data will be lost
[   94.916952][  T308] 
[   94.940880][ T3892] trusted_key: device-mapper: crypt: Selected cipher does not support IVs
[   94.958689][ T3892] device-mapper: table: 252:4: crypt: Error decoding and setting key (-EINVAL)
[   94.967835][ T3892] device-mapper: ioctl: error adding target to table
[   94.991058][ T3900] netlink: 'syz.0.1396': attribute type 12 has an invalid length.
[   94.999498][ T3900] netlink: 'syz.0.1396': attribute type 29 has an invalid length.
[   95.007573][ T3900] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1396'.
[   95.016732][ T3900] netlink: 'syz.0.1396': attribute type 1 has an invalid length.
[   95.024655][ T3900] netlink: 'syz.0.1396': attribute type 2 has an invalid length.
[   95.037188][ T3900] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1396'.
[   95.222206][ T3909] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.331817][ T3923] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   95.406851][ T3925] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.450480][  T308] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   95.487948][  T308] EXT4-fs (loop1): This should not happen!! Data will be lost
[   95.487948][  T308] 
[   95.527969][  T308] EXT4-fs (loop1): Total free blocks count 0
[   95.538040][  T308] EXT4-fs (loop1): Free/Dirty block details
[   95.543983][  T308] EXT4-fs (loop1): free_blocks=65281
[   95.567950][  T308] EXT4-fs (loop1): dirty_blocks=33
[   95.573197][  T308] EXT4-fs (loop1): Block reservation details
[   95.579632][   T60] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   95.597333][  T308] EXT4-fs (loop1): i_reserved_data_blocks=33
[   95.660608][ T3931] set_capacity_and_notify: 8 callbacks suppressed
[   95.660629][ T3931] loop1: detected capacity change from 0 to 512
[   95.746937][ T3931] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.882935][ T3935] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   95.929771][ T3912] loop5: detected capacity change from 0 to 131072
[   95.942551][ T3912] F2FS-fs (loop5): Test dummy encryption mode enabled
[   95.953157][ T3918] loop0: detected capacity change from 0 to 131072
[   95.967999][ T3912] F2FS-fs (loop5): invalid crc value
[   95.973781][ T3918] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   95.982957][ T3918] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   95.992100][ T3918] F2FS-fs (loop0): invalid crc value
[   96.001513][ T3912] F2FS-fs (loop5): Found nat_bits in checkpoint
[   96.029002][ T3918] F2FS-fs (loop0): Found nat_bits in checkpoint
[   96.066433][ T2558] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   96.079110][ T2558] EXT4-fs (loop1): This should not happen!! Data will be lost
[   96.079110][ T2558] 
[   96.080733][ T3912] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   96.090530][ T2558] EXT4-fs (loop1): Total free blocks count 0
[   96.112480][ T2558] EXT4-fs (loop1): Free/Dirty block details
[   96.121671][ T2558] EXT4-fs (loop1): free_blocks=65281
[   96.127147][ T2558] EXT4-fs (loop1): dirty_blocks=65
[   96.132712][ T3918] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   96.139943][ T3918] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   96.147784][ T2558] EXT4-fs (loop1): Block reservation details
[   96.153934][ T2558] EXT4-fs (loop1): i_reserved_data_blocks=65
[   96.168159][  T308] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1216 with max blocks 32 with error 28
[   96.190013][  T308] EXT4-fs (loop1): This should not happen!! Data will be lost
[   96.190013][  T308] 
[   96.245880][ T3951] trusted_key: device-mapper: crypt: Selected cipher does not support IVs
[   96.254602][ T3951] device-mapper: table: 252:5: crypt: Error decoding and setting key (-EINVAL)
[   96.264323][ T3951] device-mapper: ioctl: error adding target to table
[   96.264632][ T3918] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[   96.281529][ T3954] netlink: 'syz.7.1413': attribute type 12 has an invalid length.
[   96.293785][ T3954] netlink: 'syz.7.1413': attribute type 29 has an invalid length.
[   96.302204][ T3954] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1413'.
[   96.319028][   T60] usb 4-1: too many configurations: 181, using maximum allowed: 8
[   96.324696][ T3954] netlink: 'syz.7.1413': attribute type 1 has an invalid length.
[   96.335834][ T3954] netlink: 'syz.7.1413': attribute type 2 has an invalid length.
[   96.343738][ T3954] netlink: 15 bytes leftover after parsing attributes in process `syz.7.1413'.
[   96.352749][   T60] usb 4-1: unable to read config index 0 descriptor/start: -71
[   96.352779][   T60] usb 4-1: can't read configurations, error -71
[   96.374211][ T3959] loop3: detected capacity change from 0 to 1024
[   96.388141][ T3959] EXT4-fs: Ignoring removed bh option
[   96.407985][ T3962] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000004
[   96.433138][ T3959] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.509590][ T3959] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.1416: lblock 3 mapped to illegal pblock 3 (length 3)
[   96.528435][ T3973] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551615ÿÿ
[   96.569772][ T3959] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   96.604455][ T3959] EXT4-fs (loop3): This should not happen!! Data will be lost
[   96.604455][ T3959] 
[   96.632856][ T3976] loop7: detected capacity change from 0 to 512
[   96.648115][ T3974] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.1416: lblock 3 mapped to illegal pblock 3 (length 1)
[   96.708754][ T3977] EXT4-fs error (device loop3): ext4_ext_remove_space:2945: inode #15: comm syz.3.1416: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   96.728679][ T3976] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.753156][ T3977] EXT4-fs error (device loop3) in ext4_setattr:5697: Corrupt filesystem
[   96.840789][ T3985] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   96.921542][ T3993] loop1: detected capacity change from 0 to 8192
[   96.942063][   T10] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   96.955571][   T10] EXT4-fs (loop7): This should not happen!! Data will be lost
[   96.955571][   T10] 
[   96.965860][   T10] EXT4-fs (loop7): Total free blocks count 0
[   96.972135][   T10] EXT4-fs (loop7): Free/Dirty block details
[   96.978633][   T10] EXT4-fs (loop7): free_blocks=65281
[   96.983983][   T10] EXT4-fs (loop7): dirty_blocks=33
[   96.990931][   T10] EXT4-fs (loop7): Block reservation details
[   96.997099][   T10] EXT4-fs (loop7): i_reserved_data_blocks=33
[   97.003301][   T28] audit: type=1400 audit(1794399320.986:504): avc:  denied  { mounton } for  pid=3992 comm="syz.1.1427" path="/278/bus/bus" dev="loop1" ino=1048827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   97.044294][  T287] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[   97.069473][  T287] FAT-fs (loop1): Filesystem has been set read-only
[   97.098016][    T6] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   97.124480][ T4014] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551615ÿÿ
[   97.142914][ T4016] loop7: detected capacity change from 0 to 1024
[   97.151398][ T4016] EXT4-fs: Ignoring removed bh option
[   97.180495][ T4016] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.196402][ T4016] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 3: comm syz.7.1438: lblock 3 mapped to illegal pblock 3 (length 3)
[   97.210970][ T4016] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   97.223895][ T4016] EXT4-fs (loop7): This should not happen!! Data will be lost
[   97.223895][ T4016] 
[   97.236794][ T4016] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: block 3: comm syz.7.1438: lblock 3 mapped to illegal pblock 3 (length 1)
[   97.251442][ T4016] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: block 3: comm syz.7.1438: lblock 3 mapped to illegal pblock 3 (length 1)
[   97.265852][ T4016] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: block 3: comm syz.7.1438: lblock 3 mapped to illegal pblock 3 (length 1)
[   97.280541][ T4016] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: block 3: comm syz.7.1438: lblock 3 mapped to illegal pblock 3 (length 1)
[   97.297822][    T6] usb 6-1: unable to get BOS descriptor or descriptor too short
[   97.306354][ T4021] EXT4-fs error (device loop7): ext4_ext_remove_space:2945: inode #15: comm syz.7.1438: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   97.319142][    T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.335527][ T4021] EXT4-fs error (device loop7) in ext4_setattr:5697: Corrupt filesystem
[   97.344124][    T6] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   97.361039][    T6] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   97.370295][    T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.378500][    T6] usb 6-1: Product: syz
[   97.382758][    T6] usb 6-1: Manufacturer: syz
[   97.387377][    T6] usb 6-1: SerialNumber: syz
[   97.434966][ T4018] loop0: detected capacity change from 0 to 40427
[   97.450302][ T4018] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   97.473349][ T4018] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   97.483573][ T4018] F2FS-fs (loop0): fault_type options not supported
[   97.486208][ T4032] loop3: detected capacity change from 0 to 128
[   97.490931][ T4018] F2FS-fs (loop0): fault_injection options not supported
[   97.506539][ T4033] loop1: detected capacity change from 0 to 512
[   97.514053][ T4018] F2FS-fs (loop0): Image doesn't support compression
[   97.527161][ T4032] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   97.529113][ T4018] F2FS-fs (loop0): invalid crc value
[   97.544855][ T4032] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   97.553175][ T4032] FAT-fs (loop3): Filesystem has been set read-only
[   97.560760][ T4032] bio_check_eod: 42383 callbacks suppressed
[   97.560776][ T4032] syz.3.1445: attempt to access beyond end of device
[   97.560776][ T4032] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   97.582965][ T4018] F2FS-fs (loop0): Found nat_bits in checkpoint
[   97.586244][ T4032] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   97.590276][ T4033] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.597304][ T4032] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[   97.619127][    T6] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   97.626178][ T4032] syz.3.1445: attempt to access beyond end of device
[   97.626178][ T4032] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   97.639547][ T4032] syz.3.1445: attempt to access beyond end of device
[   97.639547][ T4032] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   97.653111][ T4032] syz.3.1445: attempt to access beyond end of device
[   97.653111][ T4032] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   97.666623][ T4032] syz.3.1445: attempt to access beyond end of device
[   97.666623][ T4032] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   97.688008][ T4032] syz.3.1445: attempt to access beyond end of device
[   97.688008][ T4032] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   97.701650][ T4032] syz.3.1445: attempt to access beyond end of device
[   97.701650][ T4032] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   97.715358][ T4032] syz.3.1445: attempt to access beyond end of device
[   97.715358][ T4032] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   97.730502][ T4018] F2FS-fs (loop0): Start checkpoint disabled!
[   97.736859][ T4032] syz.3.1445: attempt to access beyond end of device
[   97.736859][ T4032] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   97.750505][ T4032] syz.3.1445: attempt to access beyond end of device
[   97.750505][ T4032] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128
[   97.758163][ T4018] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   97.774727][ T4038] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   97.791155][ T4018] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   97.798421][ T4018] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   97.818605][    T6] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[   97.919273][   T10] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[   97.937590][   T10] EXT4-fs (loop1): This should not happen!! Data will be lost
[   97.937590][   T10] 
[   97.972561][   T10] EXT4-fs (loop1): Total free blocks count 0
[   97.983024][   T10] EXT4-fs (loop1): Free/Dirty block details
[   97.990753][ T3077] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[   98.007983][   T10] EXT4-fs (loop1): free_blocks=65281
[   98.015991][ T3077] FAT-fs (loop7): Filesystem has been set read-only
[   98.023089][   T10] EXT4-fs (loop1): dirty_blocks=65
[   98.029698][   T10] EXT4-fs (loop1): Block reservation details
[   98.036418][   T10] EXT4-fs (loop1): i_reserved_data_blocks=65
[   98.068172][ T2558] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1024 with max blocks 32 with error 28
[   98.088603][ T2558] EXT4-fs (loop1): This should not happen!! Data will be lost
[   98.088603][ T2558] 
[   98.381999][ T4057] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551615ÿÿ
[   98.421376][    T6] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   98.430993][    T6] usb 6-1: clock source 0 is not valid, cannot use
[   98.442536][    T6] usb 6-1: 2:1: cannot get freq (v2/v3): err -71
[   98.458218][    T6] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   98.488948][    T6] usb 6-1: USB disconnect, device number 5
[   98.668004][   T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   98.798381][ T4067] F2FS-fs (loop3): invalid crc value
[   98.805482][ T4067] F2FS-fs (loop3): Found nat_bits in checkpoint
[   98.841254][ T4067] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   98.851035][   T19] usb 2-1: Using ep0 maxpacket: 32
[   98.857769][   T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.867272][ T4067] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   98.869636][   T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.886409][   T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   98.895702][   T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.904855][   T19] usb 2-1: config 0 descriptor??
[   98.911218][   T19] hub 2-1:0.0: USB hub found
[   98.928249][ T4067] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   98.960419][   T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   98.978424][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   98.987334][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   98.998111][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.007124][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.019118][ T4082] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   99.033025][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[   99.043059][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.052150][ T4082] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[   99.058774][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.068058][ T4082] FAT-fs (loop7): Filesystem has been set read-only
[   99.075004][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.084829][ T4082] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[   99.087160][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.101839][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.108391][ T4082] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100)
[   99.116609][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.116845][   T19] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   99.135758][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.144959][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.154742][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.165934][  T288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[   99.537649][   T19] hid-generic 0003:046D:C31C.000B: unknown main item tag 0x0
[   99.557014][   T19] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[   99.608668][ T4098] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   99.948090][   T19] usb 2-1: USB disconnect, device number 4
[   99.965239][ T4109] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  100.018546][ T4109] EXT4-fs (loop0): 1 truncate cleaned up
[  100.118192][ T4089] F2FS-fs (loop3): Test dummy encryption mode enabled
[  100.153924][ T4089] F2FS-fs (loop3): invalid crc value
[  100.179147][ T4089] F2FS-fs (loop3): Found nat_bits in checkpoint
[  100.215054][ T4125] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  100.256529][ T4089] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  100.261393][ T4125] EXT4-fs (loop7): 1 truncate cleaned up
[  100.799685][ T4107] set_capacity_and_notify: 6 callbacks suppressed
[  100.799706][ T4107] loop5: detected capacity change from 0 to 131072
[  100.804100][ T4134] loop7: detected capacity change from 0 to 131072
[  100.829326][ T4134] F2FS-fs (loop7): invalid crc value
[  100.849140][ T4134] F2FS-fs (loop7): Found nat_bits in checkpoint
[  100.868741][ T4107] F2FS-fs (loop5): invalid crc value
[  100.890598][ T4134] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  100.937776][ T4107] F2FS-fs (loop5): Found nat_bits in checkpoint
[  101.030019][ T4107] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  101.077972][ T4107] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  101.143790][ T4107] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  101.150062][ T4164] loop1: detected capacity change from 0 to 512
[  101.184405][ T4164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  101.215681][ T4164] EXT4-fs (loop1): 1 truncate cleaned up
[  101.243901][   T10] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  101.254369][ T4164] EXT4-fs mount: 22 callbacks suppressed
[  101.254386][ T4164] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  101.286439][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.298359][  T287] EXT4-fs (loop1): unmounting filesystem.
[  101.312368][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.347957][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.373524][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.393357][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  101.413086][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.433273][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.482819][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.512192][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.562684][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.597969][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.637302][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.674299][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.698371][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.717472][  T823] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  101.858116][ T4178] loop0: detected capacity change from 0 to 131072
[  101.871194][ T4178] F2FS-fs (loop0): invalid crc value
[  101.889555][ T4178] F2FS-fs (loop0): Found nat_bits in checkpoint
[  101.936767][ T4178] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  102.818796][ T4233] loop1: detected capacity change from 0 to 512
[  102.869973][ T4233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  102.918066][ T4233] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  102.985455][  T287] EXT4-fs (loop1): unmounting filesystem.
[  103.039707][ T4246] loop1: detected capacity change from 0 to 512
[  103.100062][ T4246] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  103.112569][ T4246] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.185579][ T4212] loop5: detected capacity change from 0 to 131072
[  103.198518][ T4212] F2FS-fs (loop5): Test dummy encryption mode enabled
[  103.222391][ T4212] F2FS-fs (loop5): invalid crc value
[  103.237303][ T4251] FAULT_INJECTION: forcing a failure.
[  103.237303][ T4251] name failslab, interval 1, probability 0, space 0, times 0
[  103.250110][ T4251] CPU: 1 PID: 4251 Comm: syz.7.1527 Not tainted syzkaller #0
[  103.257520][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  103.267606][ T4251] Call Trace:
[  103.270959][ T4251]  <TASK>
[  103.273951][ T4251]  __dump_stack+0x21/0x24
[  103.278312][ T4251]  dump_stack_lvl+0x110/0x170
[  103.283033][ T4251]  ? __cfi_dump_stack_lvl+0x8/0x8
[  103.288092][ T4251]  ? x64_sys_call+0x783/0x9a0
[  103.292817][ T4251]  dump_stack+0x15/0x24
[  103.297030][ T4251]  should_fail_ex+0x3bf/0x510
[  103.301758][ T4251]  __should_failslab+0xac/0xf0
[  103.306566][ T4251]  should_failslab+0x9/0x20
[  103.311092][ T4251]  __kmem_cache_alloc_node+0x3d/0x2d0
[  103.316501][ T4251]  ? selinux_sk_alloc_security+0x7e/0x1a0
[  103.322265][ T4251]  ? selinux_sk_alloc_security+0x7e/0x1a0
[  103.328026][ T4251]  kmalloc_trace+0x29/0xb0
[  103.332478][ T4251]  selinux_sk_alloc_security+0x7e/0x1a0
[  103.338065][ T4251]  security_sk_alloc+0x83/0xb0
[  103.342874][ T4251]  sk_prot_alloc+0x108/0x320
[  103.347494][ T4251]  sk_alloc+0x3b/0x460
[  103.351595][ T4251]  tun_chr_open+0x7a/0x540
[  103.356057][ T4251]  ? __cfi_tun_chr_open+0x10/0x10
[  103.361125][ T4251]  misc_open+0x337/0x3b0
[  103.365504][ T4251]  chrdev_open+0x593/0x600
[  103.369962][ T4251]  ? __cfi_chrdev_open+0x10/0x10
[  103.374931][ T4251]  ? fsnotify_perm+0x3e9/0x5b0
[  103.379733][ T4251]  do_dentry_open+0x885/0x11f0
[  103.384544][ T4251]  ? __cfi_chrdev_open+0x10/0x10
[  103.389527][ T4251]  vfs_open+0x73/0x80
[  103.393229][ T4249] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  103.393548][ T4251]  path_openat+0x2699/0x2f30
[  103.412494][ T4251]  ? slab_post_alloc_hook+0x4f/0x2d0
[  103.417825][ T4251]  ? kmem_cache_alloc+0x166/0x320
[  103.422894][ T4251]  ? getname_flags+0xba/0x510
[  103.427721][ T4251]  ? do_sys_openat2+0xeb/0x820
[  103.432532][ T4251]  ? do_filp_open+0x420/0x420
[  103.437254][ T4251]  do_filp_open+0x1ee/0x420
[  103.441797][ T4251]  ? __cfi_do_filp_open+0x10/0x10
[  103.446864][ T4251]  ? alloc_fd+0x4c1/0x570
[  103.451225][ T4251]  do_sys_openat2+0x15e/0x820
[  103.455941][ T4251]  ? __se_sys_futex+0x136/0x310
[  103.460859][ T4251]  ? do_sys_open+0xe0/0xe0
[  103.465314][ T4251]  ? __this_cpu_preempt_check+0x13/0x20
[  103.470909][ T4251]  ? xfd_validate_state+0x70/0x150
[  103.476062][ T4251]  __x64_sys_openat+0x136/0x160
[  103.480953][ T4251]  x64_sys_call+0x783/0x9a0
[  103.485487][ T4251]  do_syscall_64+0x4c/0xa0
[  103.489934][ T4251]  ? clear_bhb_loop+0x30/0x80
[  103.494648][ T4251]  ? clear_bhb_loop+0x30/0x80
[  103.499367][ T4251]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  103.505295][ T4251] RIP: 0033:0x7f5dc09a8f19
[  103.509733][ T4251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.529366][ T4251] RSP: 002b:00007f5dc1940028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  103.537813][ T4251] RAX: ffffffffffffffda RBX: 00007f5dc0c25fa0 RCX: 00007f5dc09a8f19
[  103.545797][ T4251] RDX: 0000000000000000 RSI: 0000200000000580 RDI: ffffffffffffff9c
[  103.553783][ T4251] RBP: 00007f5dc0a37f6d R08: 0000000000000000 R09: 0000000000000000
[  103.561761][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.569740][ T4251] R13: 00007f5dc0c26038 R14: 00007f5dc0c25fa0 R15: 00007fff16e4a9f8
[  103.577725][ T4251]  </TASK>
[  103.608831][ T4212] F2FS-fs (loop5): Found nat_bits in checkpoint
[  103.738012][ T4212] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  103.779274][ T2558] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28
[  103.797978][ T2558] EXT4-fs (loop1): This should not happen!! Data will be lost
[  103.797978][ T2558] 
[  103.817866][ T2558] EXT4-fs (loop1): Total free blocks count 0
[  103.824698][ T2558] EXT4-fs (loop1): Free/Dirty block details
[  103.837936][ T2558] EXT4-fs (loop1): free_blocks=65281
[  103.843327][ T2558] EXT4-fs (loop1): dirty_blocks=65
[  103.853427][ T2558] EXT4-fs (loop1): Block reservation details
[  103.863541][ T2558] EXT4-fs (loop1): i_reserved_data_blocks=65
[  103.874191][   T10] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1536 with max blocks 32 with error 28
[  104.001294][ T4261] loop1: detected capacity change from 0 to 128
[  104.036598][ T4261] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  104.071974][ T4261] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  104.088054][ T4261] FAT-fs (loop1): Filesystem has been set read-only
[  104.094705][ T4261] bio_check_eod: 44268 callbacks suppressed
[  104.094722][ T4261] syz.1.1531: attempt to access beyond end of device
[  104.094722][ T4261] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  104.138110][ T4261] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  104.146036][ T4261] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  104.160919][ T4261] syz.1.1531: attempt to access beyond end of device
[  104.160919][ T4261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  104.188073][ T4261] syz.1.1531: attempt to access beyond end of device
[  104.188073][ T4261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  104.228064][ T4261] syz.1.1531: attempt to access beyond end of device
[  104.228064][ T4261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  104.268023][ T4261] syz.1.1531: attempt to access beyond end of device
[  104.268023][ T4261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  104.332084][ T4261] syz.1.1531: attempt to access beyond end of device
[  104.332084][ T4261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  104.377991][ T4261] syz.1.1531: attempt to access beyond end of device
[  104.377991][ T4261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  104.418024][ T4261] syz.1.1531: attempt to access beyond end of device
[  104.418024][ T4261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  104.447998][ T4261] syz.1.1531: attempt to access beyond end of device
[  104.447998][ T4261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  104.462780][ T4239] loop0: detected capacity change from 0 to 131072
[  104.489372][ T4239] F2FS-fs (loop0): invalid crc value
[  104.512830][ T4261] syz.1.1531: attempt to access beyond end of device
[  104.512830][ T4261] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  104.526804][ T4239] F2FS-fs (loop0): Found nat_bits in checkpoint
[  104.628014][ T4239] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  105.378174][ T4284] loop7: detected capacity change from 0 to 40427
[  105.404478][ T4284] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  105.432016][ T4284] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  105.470867][ T4284] F2FS-fs (loop7): invalid crc value
[  105.487852][ T4292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  105.537465][ T4292] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.628981][  T289] EXT4-fs (loop0): unmounting filesystem.
[  105.634916][ T4284] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  105.788262][ T4284] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  105.795362][ T4284] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  105.920768][ T4278] set_capacity_and_notify: 1 callbacks suppressed
[  105.920788][ T4278] loop3: detected capacity change from 0 to 131072
[  105.944080][ T4278] F2FS-fs (loop3): invalid crc value
[  105.973338][ T4286] loop5: detected capacity change from 0 to 131072
[  105.999898][ T4286] F2FS-fs (loop5): Test dummy encryption mode enabled
[  106.027640][ T4278] F2FS-fs (loop3): Found nat_bits in checkpoint
[  106.044418][ T4286] F2FS-fs (loop5): invalid crc value
[  106.107197][ T4286] F2FS-fs (loop5): Found nat_bits in checkpoint
[  106.178187][ T4278] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  106.229457][ T4290] loop1: detected capacity change from 0 to 131072
[  106.237283][ T4286] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  106.252250][ T4290] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[  106.261433][ T4290] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  106.273937][ T4290] F2FS-fs (loop1): invalid crc value
[  106.318921][ T4290] F2FS-fs (loop1): Found nat_bits in checkpoint
[  106.457069][ T4290] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  106.468060][ T4290] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  106.906145][ T4331] loop0: detected capacity change from 0 to 40427
[  106.956898][ T4331] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  106.978693][ T4331] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  107.000599][ T4331] F2FS-fs (loop0): invalid crc value
[  107.046316][ T4331] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  107.119156][ T4331] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  107.126372][ T4331] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  107.570344][ T4349] loop7: detected capacity change from 0 to 131072
[  107.587155][ T4349] F2FS-fs (loop7): Invalid segment/section count (24 != 24 * 5)
[  107.594933][ T4349] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  107.604207][ T4349] F2FS-fs (loop7): invalid crc value
[  107.639293][ T4349] F2FS-fs (loop7): Found nat_bits in checkpoint
[  107.651465][ T4347] loop3: detected capacity change from 0 to 131072
[  107.663028][ T4347] F2FS-fs (loop3): invalid crc value
[  107.683909][ T4347] F2FS-fs (loop3): Found nat_bits in checkpoint
[  107.696217][ T4349] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  107.703375][ T4349] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  107.730740][ T4347] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  107.992893][ T4380] loop0: detected capacity change from 0 to 1024
[  108.020533][ T4380] EXT4-fs: Ignoring removed bh option
[  108.064995][ T4380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  108.081316][ T4380] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.126540][ T4380] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.1568: lblock 3 mapped to illegal pblock 3 (length 2)
[  108.175485][ T4380] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 2 with error 117
[  108.225744][ T4380] EXT4-fs (loop0): This should not happen!! Data will be lost
[  108.225744][ T4380] 
[  108.268125][ T4390] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.1568: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  108.316684][ T4390] EXT4-fs error (device loop0) in ext4_setattr:5697: Corrupt filesystem
[  108.355077][  T289] EXT4-fs (loop0): unmounting filesystem.
[  108.370572][ T4398] loop7: detected capacity change from 0 to 16384
[  108.547995][ T4403] loop7: detected capacity change from 16384 to 0
[  108.743082][   T28] audit: type=1400 audit(1794399332.746:505): avc:  denied  { map } for  pid=4404 comm="syz.3.1577" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  108.839434][ T4386] loop1: detected capacity change from 0 to 131072
[  108.849214][ T4386] F2FS-fs (loop1): Test dummy encryption mode enabled
[  108.856498][ T4386] F2FS-fs (loop1): invalid crc value
[  108.863414][ T4386] F2FS-fs (loop1): Found nat_bits in checkpoint
[  108.892223][ T4384] F2FS-fs (loop7): invalid crc value
[  108.910695][ T4386] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  108.918882][ T4384] F2FS-fs (loop7): Found nat_bits in checkpoint
[  108.990109][ T4384] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  109.248012][   T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  109.439012][   T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.457942][   T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.477943][   T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.487720][   T19] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  109.517964][   T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  109.527051][   T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.636105][ T4421] F2FS-fs (loop5): invalid crc value
[  109.667868][ T4421] F2FS-fs (loop5): Found nat_bits in checkpoint
[  109.725749][ T4421] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  109.847244][ T4426] F2FS-fs (loop7): invalid crc value
[  109.873544][ T4426] F2FS-fs (loop7): Found nat_bits in checkpoint
[  109.954139][   T19] lg-g15 0003:046D:C222.000C: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0
[  109.972615][ T4426] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  110.037976][   T19] lg-g15 0003:046D:C222.000C: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver
[  110.169850][ T4445] input: syz0 as /devices/virtual/input/input23
[  110.180764][   T24] usb 2-1: USB disconnect, device number 5
[  110.258113][ T4454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  110.267357][ T4454] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.290758][  T288] EXT4-fs (loop3): unmounting filesystem.
[  110.333580][ T4462] SELinux: failed to load policy
[  110.375322][ T4466] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  110.399333][ T4466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  110.415820][   T28] audit: type=1400 audit(1794399334.416:506): avc:  denied  { write } for  pid=4464 comm="syz.3.1595" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  110.459021][  T288] EXT4-fs (loop3): unmounting filesystem.
[  110.478463][   T28] audit: type=1400 audit(1794399334.416:507): avc:  denied  { remove_name } for  pid=4464 comm="syz.3.1595" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  110.506176][   T28] audit: type=1400 audit(1794399334.416:508): avc:  denied  { rename } for  pid=4464 comm="syz.3.1595" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  110.530329][   T28] audit: type=1400 audit(1794399334.416:509): avc:  denied  { add_name } for  pid=4464 comm="syz.3.1595" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  110.553208][   T28] audit: type=1400 audit(1794399334.416:510): avc:  denied  { rename } for  pid=4464 comm="syz.3.1595" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  110.586151][ T4477] EXT4-fs: Ignoring removed bh option
[  110.599477][ T4477] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  110.608064][ T4477] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.622821][ T4477] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 3: comm syz.7.1586: lblock 3 mapped to illegal pblock 3 (length 2)
[  110.647989][ T4477] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 2 with error 117
[  110.660808][ T4477] EXT4-fs (loop7): This should not happen!! Data will be lost
[  110.660808][ T4477] 
[  110.672684][ T4477] EXT4-fs error (device loop7): ext4_ext_remove_space:2945: inode #15: comm syz.7.1586: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  110.691291][ T4477] EXT4-fs error (device loop7) in ext4_setattr:5697: Corrupt filesystem
[  110.718932][ T3077] EXT4-fs (loop7): unmounting filesystem.
[  111.130256][   T28] audit: type=1400 audit(1794399335.136:511): avc:  denied  { getopt } for  pid=4512 comm="syz.7.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  111.179519][ T4522] netlink: 'syz.5.1619': attribute type 9 has an invalid length.
[  111.215665][ T4516] set_capacity_and_notify: 8 callbacks suppressed
[  111.215687][ T4516] loop0: detected capacity change from 0 to 4096
[  111.278581][ T4516] EXT4-fs (loop0): Test dummy encryption mode enabled
[  111.311224][ T4516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  111.324140][ T4533] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000
[  111.388958][  T289] EXT4-fs (loop0): unmounting filesystem.
[  111.444456][ T4533] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff]
[  111.588851][ T4533] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  111.604298][ T4533] pci 0000:00:05.0: pci_fixup_video+0x0/0x310 took 15667 usecs
[  111.616304][ T4533] pci 0000:00:05.0: vgaarb: setting as boot VGA device
[  111.623230][ T4533] pci 0000:00:05.0: vgaarb: bridge control possible
[  111.629849][ T4533] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  111.662313][   T28] audit: type=1400 audit(1794399335.666:512): avc:  denied  { create } for  pid=4550 comm="syz.5.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  111.692746][ T4533] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned
[  111.728085][   T28] audit: type=1400 audit(1794399335.696:513): avc:  denied  { sys_admin } for  pid=4550 comm="syz.5.1631" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  111.848561][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1635'.
[  112.045441][ T4580] x86/PAT: syz.3.1644:4580 freeing invalid memtype [mem 0xc0004000-0xc0004fff]
[  112.104249][ T4584] loop5: detected capacity change from 0 to 16
[  112.140270][ T4584] erofs: (device loop5): mounted with root inode @ nid 36.
[  112.171226][   T28] audit: type=1400 audit(1794399336.176:514): avc:  denied  { rename } for  pid=4583 comm="syz.5.1646" name="file1" dev="overlay" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  112.216118][ T4589] loop3: detected capacity change from 0 to 256
[  112.295756][ T4590] Core dump to core aborted: cannot preserve file permissions
[  112.307179][  T288] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  112.325250][  T288] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  112.336994][ T4524] loop7: detected capacity change from 0 to 131072
[  112.355824][ T4524] F2FS-fs (loop7): Test dummy encryption mode enabled
[  112.374588][ T4524] F2FS-fs (loop7): invalid crc value
[  112.406325][ T4524] F2FS-fs (loop7): Found nat_bits in checkpoint
[  112.475270][ T4524] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  112.887456][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.907944][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.926439][ T4600] device bridge_slave_0 entered promiscuous mode
[  112.948554][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.970740][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.995076][ T4600] device bridge_slave_1 entered promiscuous mode
[  113.012277][ T4572] loop0: detected capacity change from 0 to 131072
[  113.038177][ T4572] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[  113.060459][ T4572] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  113.098205][ T4572] F2FS-fs (loop0): invalid crc value
[  113.127566][ T4572] F2FS-fs (loop0): Found nat_bits in checkpoint
[  113.137551][ T4608] loop5: detected capacity change from 0 to 128
[  113.193039][ T4608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  113.210805][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.217943][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.225269][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.231959][ T4608] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.232415][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.250849][ T4572] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  113.258221][ T4572] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  113.270733][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  113.286466][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.299198][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.307072][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  113.316013][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  113.320814][  T823] EXT4-fs (loop5): unmounting filesystem.
[  113.325117][  T314] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  113.338778][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  113.345445][ T4573] loop1: detected capacity change from 0 to 131072
[  113.358993][ T4573] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[  113.367670][ T4573] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  113.369960][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  113.377755][ T4573] F2FS-fs (loop1): invalid crc value
[  113.387836][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  113.396767][ T4573] F2FS-fs (loop1): Found nat_bits in checkpoint
[  113.400915][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  113.413582][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  113.422339][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  113.494282][ T4573] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  113.511435][ T4573] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  113.521328][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  113.545308][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  113.578529][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  113.598431][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  113.607145][  T308] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.614248][  T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.638135][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  113.659470][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  113.678215][  T308] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.685371][  T308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.718441][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  113.738183][   T19] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  113.745977][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  113.764173][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  113.788098][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  113.799379][   T19] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  113.825630][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.848427][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.867327][ T4600] device veth0_vlan entered promiscuous mode
[  113.898473][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.906868][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.915417][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.936238][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.952742][ T4600] device veth1_macvtap entered promiscuous mode
[  113.982342][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  113.994698][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  114.013352][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  114.034698][ T4638] loop5: detected capacity change from 0 to 1024
[  114.039291][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  114.074458][ T4638] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  114.088332][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  114.125903][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  114.167541][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  114.179579][  T823] EXT4-fs (loop5): unmounting filesystem.
[  114.253871][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  114.253887][   T28] audit: type=1326 audit(1794399338.256:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.0.1667" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7412fa8f19 code=0x0
[  114.398332][ T4674] loop7: detected capacity change from 0 to 512
[  114.404977][ T4674] EXT4-fs: Ignoring removed nobh option
[  114.411054][ T4674] EXT4-fs: quotafile must be on filesystem root
[  114.441439][ T4679] xt_hashlimit: size too large, truncated to 1048576
[  114.638067][   T40] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  114.809074][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  114.826022][  T314] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  114.828048][   T40] usb 6-1: Using ep0 maxpacket: 32
[  114.838759][  T314] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  114.848013][   T40] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40
[  114.850868][  T314] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  114.861863][   T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.883083][   T40] usb 6-1: Product: syz
[  114.887287][   T40] usb 6-1: Manufacturer: syz
[  114.892143][   T40] usb 6-1: SerialNumber: syz
[  115.106146][ T4719] netlink: 'syz.0.1693': attribute type 4 has an invalid length.
[  115.114433][  T314] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  115.135385][ T4719] netlink: 'syz.0.1693': attribute type 4 has an invalid length.
[  115.149152][ T4722] loop7: detected capacity change from 0 to 512
[  115.155491][   T28] audit: type=1400 audit(1794399339.156:522): avc:  denied  { create } for  pid=4714 comm="syz.1.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  115.196471][ T1165] udevd[1165]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  115.207127][ T1165] udevd[1165]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  115.217221][ T4722] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.1694: missing EA_INODE flag
[  115.229630][ T4722] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1694: error while reading EA inode 2 err=-117
[  115.242715][ T4722] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.1694: inode #3584: comm syz.7.1694: iget: illegal inode #
[  115.256512][ T4722] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1694: error while reading EA inode 3584 err=-117
[  115.258208][  T314] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  115.270781][ T4722] EXT4-fs (loop7): 1 orphan inode deleted
[  115.282717][ T4722] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  115.295904][ T4722] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #2: comm syz.7.1694: directory missing '.'
[  115.314786][ T4667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.325328][ T3077] EXT4-fs (loop7): unmounting filesystem.
[  115.333239][ T4667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.342931][ T1165] udevd[1165]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  115.359849][ T1165] udevd[1165]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  115.374704][   T40] snd-usb-audio: probe of 6-1:1.0 failed with error -71
[  115.391174][  T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  115.407583][   T40] usb 6-1: USB disconnect, device number 6
[  115.442614][ T4737] FAULT_INJECTION: forcing a failure.
[  115.442614][ T4737] name failslab, interval 1, probability 0, space 0, times 0
[  115.456277][ T4737] CPU: 0 PID: 4737 Comm: syz.0.1700 Not tainted syzkaller #0
[  115.463704][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  115.473964][ T4737] Call Trace:
[  115.477272][ T4737]  <TASK>
[  115.480233][ T4737]  __dump_stack+0x21/0x24
[  115.484692][ T4737]  dump_stack_lvl+0x110/0x170
[  115.489500][ T4737]  ? __cfi_dump_stack_lvl+0x8/0x8
[  115.494533][ T4737]  ? kasan_set_track+0x60/0x70
[  115.499312][ T4737]  ? kasan_set_track+0x4b/0x70
[  115.504083][ T4737]  ? kasan_save_alloc_info+0x1f/0x30
[  115.509368][ T4737]  ? __kasan_kmalloc+0x95/0xb0
[  115.514141][ T4737]  dump_stack+0x15/0x24
[  115.518297][ T4737]  should_fail_ex+0x3bf/0x510
[  115.522977][ T4737]  __should_failslab+0xac/0xf0
[  115.527744][ T4737]  should_failslab+0x9/0x20
[  115.532250][ T4737]  kmem_cache_alloc_node+0x42/0x330
[  115.537463][ T4737]  ? alloc_vmap_area+0x184/0x18c0
[  115.542494][ T4737]  alloc_vmap_area+0x184/0x18c0
[  115.547349][ T4737]  ? vm_map_ram+0x930/0x930
[  115.551856][ T4737]  ? __kasan_kmalloc+0x95/0xb0
[  115.556664][ T4737]  ? kmalloc_node_trace+0x3d/0xb0
[  115.561709][ T4737]  __get_vm_area_node+0x160/0x360
[  115.566781][ T4737]  __vmalloc_node_range+0x326/0x1440
[  115.572184][ T4737]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[  115.577785][ T4737]  ? avc_has_perm_noaudit+0x390/0x490
[  115.583200][ T4737]  ? __x64_sys_seccomp+0x7b/0x90
[  115.588688][ T4737]  ? __cfi___vmalloc_node_range+0x10/0x10
[  115.594483][ T4737]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[  115.600154][ T4737]  __vmalloc+0x79/0x90
[  115.604250][ T4737]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[  115.609820][ T4737]  bpf_prog_alloc_no_stats+0x3e/0x3f0
[  115.615224][ T4737]  bpf_prog_alloc+0x21/0x1c0
[  115.619826][ T4737]  bpf_prog_create_from_user+0xa7/0x420
[  115.625404][ T4737]  ? __cfi_seccomp_check_filter+0x10/0x10
[  115.631137][ T4737]  do_seccomp+0x801/0xec0
[  115.635475][ T4737]  ? prctl_set_seccomp+0x60/0x60
[  115.640425][ T4737]  ? __this_cpu_preempt_check+0x13/0x20
[  115.645996][ T4737]  ? xfd_validate_state+0x70/0x150
[  115.651127][ T4737]  ? fpregs_restore_userregs+0x128/0x260
[  115.656856][ T4737]  __x64_sys_seccomp+0x7b/0x90
[  115.661628][ T4737]  x64_sys_call+0x721/0x9a0
[  115.666138][ T4737]  do_syscall_64+0x4c/0xa0
[  115.670661][ T4737]  ? clear_bhb_loop+0x30/0x80
[  115.675359][ T4737]  ? clear_bhb_loop+0x30/0x80
[  115.680081][ T4737]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  115.686013][ T4737] RIP: 0033:0x7f7412fa8f19
[  115.690451][ T4737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.710116][ T4737] RSP: 002b:00007f7413ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  115.718643][ T4737] RAX: ffffffffffffffda RBX: 00007f7413225fa0 RCX: 00007f7412fa8f19
[  115.726654][ T4737] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  115.734648][ T4737] RBP: 00007f7413037f6d R08: 0000000000000000 R09: 0000000000000000
[  115.742634][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.750657][ T4737] R13: 00007f7413226038 R14: 00007f7413225fa0 R15: 00007ffd04bafaf8
[  115.758642][ T4737]  </TASK>
[  115.762257][ T4737] syz.0.1700: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[  115.796791][ T4737] CPU: 1 PID: 4737 Comm: syz.0.1700 Not tainted syzkaller #0
[  115.804243][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  115.814331][ T4737] Call Trace:
[  115.817639][ T4737]  <TASK>
[  115.820598][ T4737]  __dump_stack+0x21/0x24
[  115.824962][ T4737]  dump_stack_lvl+0x110/0x170
[  115.829674][ T4737]  ? __cfi_dump_stack_lvl+0x8/0x8
[  115.834737][ T4737]  ? pr_cont_kernfs_name+0x133/0x160
[  115.834893][   T28] audit: type=1400 audit(1794399339.796:523): avc:  denied  { watch watch_reads } for  pid=4739 comm="syz.8.1701" path="/6/file1" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  115.840054][ T4737]  dump_stack+0x15/0x24
[  115.840079][ T4737]  warn_alloc+0x1dc/0x200
[  115.840114][ T4737]  ? __cfi_warn_alloc+0x10/0x10
[  115.876670][ T4737]  ? __get_vm_area_node+0x175/0x360
[  115.881915][ T4737]  __vmalloc_node_range+0x34b/0x1440
[  115.884205][ T4742] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  115.887247][ T4737]  ? avc_has_perm_noaudit+0x390/0x490
[  115.901368][ T4737]  ? __x64_sys_seccomp+0x7b/0x90
[  115.906351][ T4737]  ? __cfi___vmalloc_node_range+0x10/0x10
[  115.912209][ T4737]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[  115.918241][ T4737]  __vmalloc+0x79/0x90
[  115.922363][ T4737]  ? bpf_prog_alloc_no_stats+0x3e/0x3f0
[  115.927992][ T4737]  bpf_prog_alloc_no_stats+0x3e/0x3f0
[  115.933425][ T4737]  bpf_prog_alloc+0x21/0x1c0
[  115.938071][ T4737]  bpf_prog_create_from_user+0xa7/0x420
[  115.943759][ T4737]  ? __cfi_seccomp_check_filter+0x10/0x10
[  115.949530][ T4737]  do_seccomp+0x801/0xec0
[  115.953911][ T4737]  ? prctl_set_seccomp+0x60/0x60
[  115.958978][ T4737]  ? __this_cpu_preempt_check+0x13/0x20
[  115.964586][ T4737]  ? xfd_validate_state+0x70/0x150
[  115.969778][ T4737]  ? fpregs_restore_userregs+0x128/0x260
[  115.975478][ T4737]  __x64_sys_seccomp+0x7b/0x90
[  115.980462][ T4737]  x64_sys_call+0x721/0x9a0
[  115.985012][ T4737]  do_syscall_64+0x4c/0xa0
[  115.989471][ T4737]  ? clear_bhb_loop+0x30/0x80
[  115.994215][ T4737]  ? clear_bhb_loop+0x30/0x80
[  115.998939][ T4737]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  116.004873][ T4737] RIP: 0033:0x7f7412fa8f19
[  116.009327][ T4737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.010377][ T4746] SELinux: failed to load policy
[  116.029182][ T4737] RSP: 002b:00007f7413ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  116.029212][ T4737] RAX: ffffffffffffffda RBX: 00007f7413225fa0 RCX: 00007f7412fa8f19
[  116.029229][ T4737] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  116.029244][ T4737] RBP: 00007f7413037f6d R08: 0000000000000000 R09: 0000000000000000
[  116.066735][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.074769][ T4737] R13: 00007f7413226038 R14: 00007f7413225fa0 R15: 00007ffd04bafaf8
[  116.082841][ T4737]  </TASK>
[  116.087890][ T4737] Mem-Info:
[  116.091980][ T4737] active_anon:27533 inactive_anon:164 isolated_anon:0
[  116.091980][ T4737]  active_file:21026 inactive_file:2181 isolated_file:0
[  116.091980][ T4737]  unevictable:0 dirty:258 writeback:0
[  116.091980][ T4737]  slab_reclaimable:11204 slab_unreclaimable:72615
[  116.091980][ T4737]  mapped:29851 shmem:16623 pagetables:850
[  116.091980][ T4737]  sec_pagetables:0 bounce:0
[  116.091980][ T4737]  kernel_misc_reclaimable:0
[  116.091980][ T4737]  free:1457273 free_pcp:7736 free_cma:0
[  116.138357][ T4737] Node 0 active_anon:110132kB inactive_anon:656kB active_file:84104kB inactive_file:8724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119404kB dirty:1032kB writeback:0kB shmem:66492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5244kB pagetables:3400kB sec_pagetables:0kB all_unreclaimable? no
[  116.172399][ T4737] DMA32 free:2840784kB boost:0kB min:30496kB low:38120kB high:45744kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3014252kB managed:2840784kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  116.200932][ T4737] lowmem_reserve[]: 0 3932 3932 3932
[  116.206300][ T4737] Normal free:2989008kB boost:0kB min:43228kB low:54032kB high:64836kB reserved_highatomic:0KB active_anon:110132kB inactive_anon:556kB active_file:84104kB inactive_file:8724kB unevictable:0kB writepending:1032kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:31508kB local_pcp:4724kB free_cma:0kB
[  116.220853][ T4751] loop5: detected capacity change from 0 to 256
[  116.246330][ T4737] lowmem_reserve[]: 0 0 0 0
[  116.256073][ T4737] DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 6*64kB (M) 5*128kB (M) 6*256kB (M) 5*512kB (M) 5*1024kB (UM) 2*2048kB (M) 690*4096kB (M) = 2840784kB
[  116.261601][  T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory
[  116.273880][ T4737] Normal: 
[  116.281143][ T4751] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.306970][  T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory
[  116.307705][ T4737] 872*4kB (UME) 363*8kB (UME) 871*16kB (UME) 1442*32kB (UME) 694*64kB (UME) 308*128kB (UM) 84*256kB (UM) 52*512kB (UM) 19*1024kB (UM) 11*2048kB (UME) 671*4096kB (UM) = 2988840kB
[  116.343743][ T4737] 40164 total pagecache pages
[  116.356517][ T4737] 9 pages in swap cache
[  116.361053][ T4737] Free swap  = 124084kB
[  116.365361][ T4737] Total swap = 124996kB
[  116.375474][ T4737] 2064283 pages RAM
[  116.379505][ T4737] 0 pages HighMem/MovableOnly
[  116.384200][ T4737] 347487 pages reserved
[  116.389693][ T4737] 0 pages cma reserved
[  116.397282][  T287] bridge0: port 3(syz_tun) entered disabled state
[  116.407024][  T287] device syz_tun left promiscuous mode
[  116.413451][  T287] bridge0: port 3(syz_tun) entered disabled state
[  116.430692][  T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory
[  116.442040][  T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory
[  116.454243][ T4767] loop5: detected capacity change from 0 to 512
[  116.468661][  T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory
[  116.478436][ T4767] EXT4-fs: Ignoring removed nobh option
[  116.500744][ T4767] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  116.516087][ T4767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c028, mo2=0002]
[  116.524349][ T4767] System zones: 1-12
[  116.529348][ T4767] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.1713: bad orphan inode 16
[  116.539852][ T4767] EXT4-fs (loop5): Remounting filesystem read-only
[  116.546386][ T4767] ext4_test_bit(bit=15, block=4) = 0
[  116.552146][ T4767] EXT4-fs (loop5): 1 orphan inode deleted
[  116.558759][ T4767] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  116.576558][  T823] EXT4-fs (loop5): unmounting filesystem.
[  116.708017][    T6] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  116.885069][ T4802] device veth0 entered promiscuous mode
[  116.911227][    T6] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64
[  116.928451][    T6] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64
[  116.954950][    T6] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  116.983702][    T6] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  117.004950][    T6] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  117.024329][    T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  117.045138][    T6] usb 8-1: Product: syz
[  117.049554][    T6] usb 8-1: Manufacturer: syz
[  117.318597][   T10] device bridge_slave_1 left promiscuous mode
[  117.327010][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.348404][   T10] device bridge_slave_0 left promiscuous mode
[  117.354607][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.379168][   T10] device veth1_macvtap left promiscuous mode
[  117.385263][   T10] device veth0_vlan left promiscuous mode
[  117.869131][ T4811] loop0: detected capacity change from 0 to 131072
[  117.878903][ T4811] F2FS-fs (loop0): Test dummy encryption mode enabled
[  117.886208][ T4811] F2FS-fs (loop0): invalid crc value
[  117.894263][ T4811] F2FS-fs (loop0): Found nat_bits in checkpoint
[  117.937092][ T4811] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  118.897990][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  118.926744][ T4842] tipc: Started in network mode
[  118.937995][ T4842] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  118.945241][ T4842] tipc: Enabled bearer <eth:vlan0>, priority 10
[  119.415202][   T40] usb 8-1: USB disconnect, device number 4
[  119.808798][ T4850] netlink: 'syz.8.1746': attribute type 4 has an invalid length.
[  119.833522][ T4850] netlink: 'syz.8.1746': attribute type 4 has an invalid length.
[  119.887302][ T4856] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  119.918858][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.926130][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.058132][  T314] tipc: Node number set to 10005162
[  120.828390][ T4869] program syz.7.1752 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.865793][ T4870] udevd[4870]: open /dev/null failed: Not a directory
[  120.912937][  T364] udevd[364]: inotify_add_watch(7, /dev/sda, 10) failed: Not a directory
[  120.942340][   T24] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  120.951948][  T364] udevd[364]: inotify_add_watch(7, /dev/sda1, 10) failed: Not a directory
[  120.968206][   T24] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  121.038576][ T4880] udevd[4880]: open /dev/null failed: Not a directory
[  122.081462][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  123.308714][ T4925] loop7: detected capacity change from 0 to 2048
[  123.316458][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  123.365973][ T4925] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  123.407876][ T4925] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  123.422529][ T4925] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28
[  123.434998][ T4925] EXT4-fs (loop7): This should not happen!! Data will be lost
[  123.434998][ T4925] 
[  123.446610][ T4925] EXT4-fs (loop7): Total free blocks count 0
[  123.452686][ T4925] EXT4-fs (loop7): Free/Dirty block details
[  123.458757][ T4925] EXT4-fs (loop7): free_blocks=4096
[  123.464034][ T4925] EXT4-fs (loop7): dirty_blocks=512
[  123.469364][ T4925] EXT4-fs (loop7): Block reservation details
[  123.475416][ T4925] EXT4-fs (loop7): i_reserved_data_blocks=32
[  123.506923][ T3077] EXT4-fs (loop7): unmounting filesystem.
[  123.530147][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  123.549942][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  123.577385][ T4935] SELinux: failed to load policy
[  124.098029][ T2127] Bluetooth: hci0: command 0x1003 tx timeout
[  124.098098][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  124.604446][ T4938] netlink: 'syz.7.1776': attribute type 4 has an invalid length.
[  124.684454][ T4938] netlink: 'syz.7.1776': attribute type 4 has an invalid length.
[  124.715223][   T28] audit: type=1400 audit(1794399348.716:524): avc:  denied  { search } for  pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  124.783629][   T28] audit: type=1400 audit(1794399348.716:525): avc:  denied  { read } for  pid=142 comm="dhcpcd" name="n2" dev="tmpfs" ino=6539 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  124.823821][ T4949] loop7: detected capacity change from 0 to 2048
[  124.849996][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  124.862215][   T28] audit: type=1400 audit(1794399348.716:526): avc:  denied  { open } for  pid=142 comm="dhcpcd" path="/run/udev/data/n2" dev="tmpfs" ino=6539 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  124.885345][ T4949] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  124.895583][ T4949] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.908409][   T28] audit: type=1400 audit(1794399348.716:527): avc:  denied  { getattr } for  pid=142 comm="dhcpcd" path="/run/udev/data/n2" dev="tmpfs" ino=6539 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  124.931511][   T28] audit: type=1400 audit(1794399348.836:528): avc:  denied  { module_request } for  pid=4954 comm="syz-executor" kmod="netdev-nr9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  124.957149][   T28] audit: type=1400 audit(1794399348.876:529): avc:  denied  { read } for  pid=4958 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  124.981126][ T4949] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1778: bg 0: block 152: padding at end of block bitmap is not set
[  124.984845][   T28] audit: type=1400 audit(1794399348.876:530): avc:  denied  { open } for  pid=4958 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.020448][   T28] audit: type=1400 audit(1794399348.876:531): avc:  denied  { getattr } for  pid=4958 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.046181][ T4949] fs-verity (loop7, inode 13): Error -28 writing Merkle tree block 1
[  125.068341][ T4949] fs-verity (loop7, inode 13): Error -28 building Merkle tree
[  125.069784][   T28] audit: type=1400 audit(1794399349.056:532): avc:  denied  { write } for  pid=4952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=492 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.099534][   T28] audit: type=1400 audit(1794399349.056:533): avc:  denied  { add_name } for  pid=4952 comm="dhcpcd-run-hook" name="resolv.conf.v.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  125.143458][ T3077] EXT4-fs (loop7): unmounting filesystem.
[  125.158208][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  125.197087][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  125.223501][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  126.422646][ T4983] mass_storage.0/lun.0: unable to open backing file: f
[  126.818024][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  127.218013][ T2127] Bluetooth: hci0: command 0x1003 tx timeout
[  127.224128][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  129.411689][ T5013] ip_tables: iptables: counters copy to user failed while replacing table
[  130.300365][ T5023] loop0: detected capacity change from 0 to 131072
[  130.308830][  T364] udevd[364]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[  130.328772][ T5023] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[  130.337442][ T5023] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  130.358892][ T5023] F2FS-fs (loop0): invalid crc value
[  130.381890][ T5023] F2FS-fs (loop0): Found nat_bits in checkpoint
[  130.457422][ T5023] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  130.464552][ T5023] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  130.939530][  T364] udevd[364]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[  130.959628][  T364] udevd[364]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[  133.097776][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  133.097795][   T28] audit: type=1326 audit(1794399357.096:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.0.1813" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412fa8f19 code=0x7ffc0000
[  133.141807][   T28] audit: type=1326 audit(1794399357.096:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.0.1813" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412fa8f19 code=0x7ffc0000
[  133.226491][   T28] audit: type=1326 audit(1794399357.116:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.0.1813" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412fa8f19 code=0x7ffc0000
[  133.298394][   T28] audit: type=1326 audit(1794399357.116:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.0.1813" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412fa8f19 code=0x7ffc0000
[  133.301512][  T823] bridge0: port 3(syz_tun) entered disabled state
[  133.374467][  T823] device syz_tun left promiscuous mode
[  133.380073][  T823] bridge0: port 3(syz_tun) entered disabled state
[  133.407277][   T28] audit: type=1326 audit(1794399357.136:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.0.1813" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7412fa8f19 code=0x7ffc0000
[  133.505437][   T28] audit: type=1326 audit(1794399357.136:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.0.1813" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412fa8f19 code=0x7ffc0000
[  133.588007][   T28] audit: type=1326 audit(1794399357.136:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.0.1813" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412fa8f19 code=0x7ffc0000
[  133.653211][   T28] audit: type=1326 audit(1794399357.136:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.0.1813" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412fa8f19 code=0x7ffc0000
[  133.732323][   T28] audit: type=1326 audit(1794399357.136:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.0.1813" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7412fa8f19 code=0x7ffc0000
[  133.832676][   T28] audit: type=1326 audit(1794399357.136:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.0.1813" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7412fa8f19 code=0x7ffc0000
[  134.388747][ T5130] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  134.428460][   T10] device bridge_slave_1 left promiscuous mode
[  134.453999][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.471930][   T10] device bridge_slave_0 left promiscuous mode
[  134.486908][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.501182][   T10] device veth1_macvtap left promiscuous mode
[  134.507587][   T10] device veth0_vlan left promiscuous mode
[  134.563695][ T5137] x86/PAT: syz.0.1836:5137 freeing invalid memtype [mem 0xc02ec000-0xc04ebfff]
[  134.585323][ T5137] x86/PAT: syz.0.1836:5137 freeing invalid memtype [mem 0xc0001000-0xc02ebfff]
[  134.599659][ T5139] loop7: detected capacity change from 0 to 8192
[  134.607397][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  134.629277][ T5137] x86/PAT: syz.0.1836:5137 freeing invalid memtype [mem 0xc0000000-0xc0000fff]
[  134.646418][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  134.657151][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  134.684674][ T5147] loop7: detected capacity change from 0 to 256
[  134.693184][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  134.706958][ T5147] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb0bb22c6, utbl_chksum : 0xe619d30d)
[  134.712677][ T5149] netlink: 'syz.0.1840': attribute type 1 has an invalid length.
[  134.727315][ T5149] netlink: 'syz.0.1840': attribute type 2 has an invalid length.
[  134.735308][ T5149] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1840'.
[  134.787329][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
[  134.823897][  T364] udevd[364]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 20: Not a directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=9 req=1718 state=3 status=67 (errno 32: Broken pipe)
[  135.720576][  T350] bridge0: port 3(syz_tun) entered disabled state
[  135.728264][  T350] device syz_tun left promiscuous mode
[  135.733750][  T350] bridge0: port 3(syz_tun) entered disabled state
[  135.959139][   T10] device bridge_slave_1 left promiscuous mode
[  135.965293][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.972895][   T10] device bridge_slave_0 left promiscuous mode
[  135.979162][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.987247][   T10] device veth1_macvtap left promiscuous mode
[  135.993515][   T10] device veth0_vlan left promiscuous mode