last executing test programs:

2m58.189442258s ago: executing program 0 (id=121):
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020028"], 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"})
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x1000000d, 0x240, 0x9, '\x00=\x00'})
r1 = syz_open_pts(r0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004213000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17)
syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[], 0x0)

2m57.052719171s ago: executing program 0 (id=124):
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="fad33075218151db00316f3a277fedbc6c8e46", 0x13, 0x6008092, 0x0, 0x0)
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f50000000000006a862dfdff000000"], 0x78)

2m55.127421471s ago: executing program 0 (id=128):
r0 = getuid()
stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000fc0)={[], [{@appraise}, {@euid_eq={'euid', 0x3d, r0}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@uid_gt={'uid>', r1}}, {@flag='sync'}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x65, 0x65, 0x39, 0x32, 0x51, 0x62, 0x33], 0x2d, [0x65, 0x0, 0x65, 0x33], 0x2d, [0x35, 0x38, 0x30, 0x30], 0x2d, [0x34, 0x65, 0x61, 0x35], 0x2d, [0x35, 0x56, 0x33, 0x65, 0x66, 0x66, 0x61, 0x64]}}}]}, 0x1, 0x4e7, &(0x7f0000000ac0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x61132e3b, 0x3, 0x8, 0x6, 0x7, 0x20000001000, 0xf64, 0xfffffffd})
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1210080, &(0x7f0000000080)=ANY=[@ANYBLOB="472ef9ac0214e5c41e3324cc01a82d8f37ace57fd18511c7e940e86500"/41, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030372c66696c655f756d61736b3d30303030303030303030303030303030303030323030312c747970653d2d4ac4002c636f6465706167653d6d6163726f6d616e69616e2c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030303030302c636f6465706167653d64656661756c742c73657373696f6e3d3078303030303030303130303030303030302c73657373696f6e3d3078303030303030303030303030313030302c6173796e632c646566636f6e746578743d757365725f752c646f6e745f61707072616973652c646f6e745f686173682c00"], 0x7, 0x318, &(0x7f00000004c0)="$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")
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \'\' '], 0xbb)
close(r6)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x22001, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x2c, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'})

2m51.257440363s ago: executing program 0 (id=139):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x5, 0x2040)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f00000001c0))
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40106e80, 0x0)
inotify_add_watch(r2, &(0x7f0000000240)='./file1\x00', 0x9100014c)
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000140)='./file0\x00', 0x18000c6, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xcc)

2m49.837331008s ago: executing program 0 (id=147):
unshare(0x22020600)
r0 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x9)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
utimensat(r2, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100003040000000000000fff00007400", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x38960469d7f62642, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3, 0x3, 0x5}}]}]}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0)

2m48.303259224s ago: executing program 0 (id=151):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setresgid(0xee00, 0x0, 0xee00)
syz_open_dev$loop(0x0, 0x401, 0x240e00)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1001}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0x300})
setresgid(0xffffffffffffffff, 0x0, 0x0)

2m47.915479089s ago: executing program 32 (id=151):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setresgid(0xee00, 0x0, 0xee00)
syz_open_dev$loop(0x0, 0x401, 0x240e00)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1001}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0x300})
setresgid(0xffffffffffffffff, 0x0, 0x0)

1m22.800937612s ago: executing program 2 (id=646):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"})
ioctl$EVIOCRMFF(r0, 0x40044581, 0x0)

1m21.710774323s ago: executing program 2 (id=653):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa01", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

1m21.561971705s ago: executing program 2 (id=657):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x41)

1m21.334945107s ago: executing program 2 (id=660):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09edb44848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48)
fdatasync(r0)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
futex(0x0, 0xb, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x1, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

1m20.16719618s ago: executing program 2 (id=665):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181})
futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000)

1m19.25078598s ago: executing program 2 (id=675):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000001700030000000900030073797a30000000000900010073797a3000000000140004800800024000000000080001"], 0xa4}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0)

1m19.174675671s ago: executing program 33 (id=675):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000001700030000000900030073797a30000000000900010073797a3000000000140004800800024000000000080001"], 0xa4}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0)

1m18.29117458s ago: executing program 1 (id=689):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4)

1m18.158197072s ago: executing program 1 (id=690):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0)

1m17.947909364s ago: executing program 1 (id=691):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00')
write$binfmt_format(r2, &(0x7f0000000400)='0\x00', 0x2)

1m17.685425497s ago: executing program 1 (id=697):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x30520cf7f25f0c64, 0x0, 0x0})

1m17.562167448s ago: executing program 1 (id=700):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000180)=""/33, 0x21}], 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

1m16.896501835s ago: executing program 1 (id=705):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000400)=@base={0x16, 0x8000000, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
sendmsg$can_j1939(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000081}, 0x480c4)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
open$dir(0x0, 0x20000, 0x89)

1m1.756889377s ago: executing program 34 (id=705):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000400)=@base={0x16, 0x8000000, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
sendmsg$can_j1939(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000081}, 0x480c4)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
open$dir(0x0, 0x20000, 0x89)

6.653784479s ago: executing program 7 (id=1260):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006)
ioctl$VT_RELDISP(r1, 0x5605)

5.863865037s ago: executing program 7 (id=1266):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)

5.339853973s ago: executing program 7 (id=1270):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x18, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)

5.223930284s ago: executing program 7 (id=1273):
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x22020400)
poll(0x0, 0x0, 0x9)
fstat(0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x54, 0x1)
r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000001a80)={0x53, 0xfffffffffffffffd, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x80000001, 0x1, 0x1, 0x0})

3.276771965s ago: executing program 7 (id=1294):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)

2.81227502s ago: executing program 4 (id=1298):
unshare(0x22020400)
r0 = socket(0x1d, 0x2, 0x6)
bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @loopback, 0x2}, 0x1c)

2.699809471s ago: executing program 4 (id=1300):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x218a000, 0x0, 0x0, &(0x7f0000019200), 0x0, 0x0)

2.171901417s ago: executing program 3 (id=1308):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0x4, "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", 0x4, 0x4, 0xfa, 0x9, 0x6, 0x80, 0x6, 0x6}}}, 0x128)

2.155263217s ago: executing program 6 (id=1309):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0x180000000)

2.110679058s ago: executing program 3 (id=1310):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x54, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x6}, @in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, @in6={0xa, 0x4e24, 0x200, @remote, 0x4}]}, 0x0)
listen(r0, 0x5)
unshare(0x2a020480)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.975840259s ago: executing program 6 (id=1311):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0xa80d210d91c7f801}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810)

1.93588265s ago: executing program 3 (id=1312):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x0, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbdd, &(0x7f0000019200)="$eJzs3M1rXNcVAPDznkZj2VY9ciml7qYqpdhQOpZcZGpTqF1cuumi0G4LFvLICI0/kBQcyVqMkn8gJFkHsgkkMQlZxGTpTUKyzSaxtwlZBExQrARCSBTefEhja0aS4xk/Yf9+cDX3vjsz55x5jN69MDMBPLVGsz9pxJGIOJ9ElJrH04go1ntDEbXG/dZWl6e+XV2eSmJ9/b9fJZFExL3V5anWcyXN24PNwVBEfPyPJH75/Na484tLs5PVamWuOT6+cOnq8fnFpT/PXJq8WLlYuTx+8q8TJyZOjp2a6Fmt33125uY3v//XF7Xv3/jhxtcvvZbEmRhuzrXX0SujMbrxmrQrRMRkr4PlZKBZT3udSWGHB6V9TgoAgK7StjXcr6MUA7G5eCvF+5/kmhwAAADQE+sDEesAAADAEy6x/wcAAIAnXOtzAPdWl6daLd9PJDxed89GxEij/rVma8wUola/HYrBiDhwL4n2r7UmjYc9stGI+PzOqbezFn36HvJ2aisR8ZtO5z+p1z9S/xb31vrTiBjrQfzRB8Y71D/Qg5D3eZT6z/Qg/kPWDwA9cets40K29fqXbqx/osP1r9Dh2vVzdLj+9fwav53W+m9ty/pvs/6BtvqLzcdl67//7DLG9ddfudZtLqv/bzf/+VarZfGz28bse4Ndn3THH1nZnbsrEb8tdKo/2ag/6bL+Pb/LGKUfr1W6zW1ff/+tvxpxNDrX35Js//tEx6dnqpWxxt+OMVY+mnizW/y868/O/4Eu9bd+/6nb+b+6yxj/P3funS0H72x2t68//bKY/K/ea733np1cWJgbjygm/956/MT2ubTu03qOrP5jf9j+/d+p/ux/Qq35OmR7gZXmbTZ+7oGYf79x/d1u+bT2f3me/wtdzn97/R8Wtp7/F3YZ448fvHis21z7/jdrWfzWXhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWtKIGI4kLW/007RcjjgYEb+KA2n1yvzCn6avPHP5QjYXMRKD6fRMtTIWEaXGOMnG4/X+5vjEA+O/RMThiHi5tL8+Lk9dqV7Iu3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HIyI4UjSckSkEbFWStNyOe+sAAAAgJ47lHcCAAAAQN+N5J0AAAAA0Hf2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTZ4d/dup1ERO30/nrLFJtzg7lmBvRbmncCQG4G8k4AyE0h7wSA3DzkHt9yAZ5AyQ7zQ11n9vU8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2rqNHbt1OIqJ2en+9ZYrNucFcMwP6Lc07ASA3A90mhiKi8HhzAR4vb3F4etnjA8kO80Ob96ndP7OvbzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsPcM11uSliOi2DxWLkf8IiJGYjCZnqlWxiLiUER8Whrcl43Hc84ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3ptfXJqdrFYrc1knjWZn44jOZidpvGK1vZKPziN2irEn0tijnbz/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIf5xaXZyWq1MjefdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3uYXl2Ynq9XKXB87edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+fgoAAP//LdIK5Q==")
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

1.797700191s ago: executing program 5 (id=1313):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0xcb, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0)

1.731948542s ago: executing program 6 (id=1314):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb110018"], &(0x7f0000001f80)=""/226, 0x18, 0xe2, 0x2}, 0x28)

1.685817993s ago: executing program 5 (id=1315):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000001340)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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")
unshare(0x6020400)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000013c0)=ANY=[@ANYBLOB="000000004c9002000300000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000700000000000000000000000000669b31035fef00000000000000000000000000000000000000000000000000000000000000000000ff654f82b714defbffffff0000000000000000000000000000000000000000000000000000000000000000000040"])

1.673021532s ago: executing program 6 (id=1316):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000d0a0103"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1.427733975s ago: executing program 4 (id=1317):
syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty}}}}}}, 0x0)

1.427640635s ago: executing program 6 (id=1318):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000040), 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=")
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r1, r0, 0x0, 0xfffa83)

1.343040676s ago: executing program 3 (id=1319):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

1.335384306s ago: executing program 4 (id=1320):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x5, 0x4)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)

935.373501ms ago: executing program 6 (id=1321):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r1, 0xffff}, &(0x7f00000002c0)=0x8)

773.465592ms ago: executing program 5 (id=1322):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzDb59U9+JhURWxQDHipIt9lYrHpqezGHggU9iHhoaDY1ZNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7NJTHaTELJOmvl8YHbfn03e++7wMu/t7CMBlNZw9pBGnImIG0nE4Ka6Y5FXDrdet/rH3ZvZkcTa2lu/J5HkZe3XJ/nzqTxzPCK+uxrxZGV7uwtLy9PjjUZ9Ps9fWJyZu7CwtHx+amb8Vv1W/XZt9NWLl0Zeq12sHVisD7767Jexa28++/GH778y+X3jfBKXYyCv2xzHQRmO4fX3ZLPsfb100I0VpJLH0ylODr/2+euLiKdjMCr5qM8MxtSDQjsH9NRaJWINKKnE+IeSas8D2mv7XqyDD7NHV1oLoO3xH2t9NhLHm2ujk6vJppVRa707dADtZ238fffsF9kRPfocYif37kfEM53iT5p9G2p+ipPFn/4r/jQiRvL+Z+Wj+2x/eEv+cYr/cv6clV/dZ/tFxw9AOa1caV3It1//0vX5T3SY/wx0uHbtR9HXv+7zv434K13mf9f32MbPH4192q1u8/wvO7L223PB/8Kj+xFnO8afrMefdIg/m/fc2GMbb/zw21i3uqLjX3sYca7j+mfjjlay8/3JC5NTjfpI67FjG998+96X3dovOv7s/J/sEv9O5z8rm9tjG19ffzjTrW73+NNf+5O3m6n+vOSD8cXF+VpEf3Jte/kuC5H2a9q/I4v/xRd2Hv+d4j+RrR32GP/cO9Or+4+/t7L4J/Z5/j/ZYxt/vXvnuW51RccPAAAAAAAAR0na/C5HklbX02larbb28D4VJ9PG7MLiS5Ozd25PtL7zMRR9aftO92Arn2T5Wv592HZ+dEv+5Yg4HRGfV04089Wbs42JooMHAAAAAAAAAAAAAAAAAACAQ+LUlv3/f1Za+/+BkjhWdAeAwhj/UF7GP5SX8Q/lZfxDeRn/UF7GP5SX8Q/lZfxDeRn/UF7GPwAAAAAcSaefX/kpiYh7r59oHpn+vK6v0J4BvZYW3QGgMJWiOwAUxq1/KC9rfCDZpf54t4qV3X4SAAAAAAAAAAAAADgo587Y/w9lZf8/lJf9/1Be9v9DeVnjA/b/AwAAAAAAAAAAAMDhN9A8krSa7wUeiDStViP+HxFD0ZdMTjXqIxHxRET8WOn7X5avFd1pAAAAAAAAAAAAAAAAAAAAOGIWlpanxxuN+ryEhITEeqLov0wAAAAAAAAAAAAAAAAAAFA+G5t+i+4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRn4///9y5RdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPpnwAAAP//bKsggw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r0, 0x8, 0x4000, 0x4000)

771.227572ms ago: executing program 4 (id=1323):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x41)

407.918856ms ago: executing program 3 (id=1324):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], &(0x7f0000001f80)=""/226, 0x18, 0xe2, 0x2}, 0x28)

407.807866ms ago: executing program 5 (id=1325):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

272.636668ms ago: executing program 3 (id=1326):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800744, &(0x7f0000000300)={[{@data_err_ignore}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nobh}, {@quota}, {@nodiscard}, {@grpid}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq")

151.914579ms ago: executing program 4 (id=1327):
r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup/pids.max\x00', 0x2, 0x15)
write$cgroup_subtree(r0, &(0x7f00000002c0)={[{0x2d, 'blkio'}]}, 0x7)

99.86565ms ago: executing program 5 (id=1328):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

36.15369ms ago: executing program 7 (id=1329):
ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7ff, 0x9, '\x00', {0x0, 0x7ff, 0xfbff, 0x6, 0x5, 0x4, 0x4, 0x57829ea1, {0x3, 0x4}, {0x2, 0x8705}, {0x626538b1, 0x3}, 0x40, 0xd08, 0x6, 0x800, 0x4b4a, 0x1000, 0x95a9, 0x9, 0xa9, 0x3, '\x00', 0x4, 0x9, 0x2, 0xd269}})
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socket$kcm(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f0000000440)}, 0x20)

0s ago: executing program 5 (id=1330):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x2c020400)
fallocate(r0, 0x19, 0x4, 0x10001)

kernel console output (not intermixed with test programs):

[  153.234155][ T5290] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  153.259432][ T5290] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  153.309076][ T5298] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "smackfstransmute=reiserfs"
[  153.356343][ T5290] ntfs: volume version 3.1.
[  153.479797][ T5298] netlink: 'syz.2.242': attribute type 29 has an invalid length.
[  153.680000][ T5304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  154.096337][ T5309] loop2: detected capacity change from 0 to 512
[  154.405093][ T4190] ntfs: (device loop1): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  154.588048][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.247'.
[  154.607892][ T5315] loop1: detected capacity change from 0 to 512
[  154.633377][ T5314] netlink: 'syz.5.247': attribute type 27 has an invalid length.
[  154.689123][ T5316] comedi comedi3: No hardware detected at I/O base 0x3c4
[  154.753783][ T5315] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  154.753783][ T5315] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  154.753783][ T5315] 
[  154.820848][ T5315] EXT4-fs (loop1): Ignoring removed nobh option
[  154.827182][ T5315] EXT4-fs (loop1): Unrecognized mount option "subj_user=ext3" or missing value
[  155.035837][ T5311] loop4: detected capacity change from 0 to 40427
[  155.061761][ T5311] F2FS-fs (loop4): invalid crc value
[  155.079325][ T4237] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  155.094479][ T5311] F2FS-fs (loop4): Found nat_bits in checkpoint
[  155.184532][ T5315] loop1: detected capacity change from 0 to 512
[  155.233686][ T5315] EXT4-fs (loop1): Mount option "data_err=ignore" incompatible with ext2
[  155.295951][ T5311] F2FS-fs (loop4): Start checkpoint disabled!
[  155.312381][ T5311] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  155.359013][ T4237] usb 3-1: Using ep0 maxpacket: 32
[  155.455438][ T5327] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  155.509097][ T5327] overlayfs: failed to look up (tracing) for ino (-66)
[  155.808783][ T4237] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  155.834892][ T4237] usb 3-1: config 0 has no interface number 0
[  155.884691][ T5314] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.893831][ T5314] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.045557][ T4237] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  156.063290][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.091719][ T4237] usb 3-1: Product: syz
[  156.095963][ T4237] usb 3-1: Manufacturer: syz
[  156.107582][ T4374] attempt to access beyond end of device
[  156.107582][ T4374] loop4: rw=2049, want=40976, limit=40427
[  156.125404][ T4237] usb 3-1: SerialNumber: syz
[  156.132885][ T4237] usb 3-1: config 0 descriptor??
[  156.181424][ T4237] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  156.215468][ T4237] usb 3-1: selecting invalid altsetting 1
[  156.235527][ T4237] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  156.260555][ T4237] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  156.296398][ T4237] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  156.321412][ T4237] usb 3-1: media controller created
[  156.351573][ T4237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  156.618875][ T4237] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  156.626043][ T4237] zl10353_read_register: readreg error (reg=127, ret==-71)
[  156.663762][ T4237] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  156.753791][ T4237] usb 3-1: USB disconnect, device number 11
[  157.133259][ T5341] loop1: detected capacity change from 0 to 40427
[  157.217081][ T5314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.249072][ T5341] F2FS-fs (loop1): invalid crc value
[  157.283772][ T5341] F2FS-fs (loop1): Found nat_bits in checkpoint
[  157.311127][ T5314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.321505][ T4277] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  157.337197][ T5341] F2FS-fs (loop1): Start checkpoint disabled!
[  157.385636][ T5341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  157.417130][ T5343] loop2: detected capacity change from 0 to 4096
[  157.753969][ T4277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.783260][ T4277] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  157.823195][ T4277] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  157.863675][ T4277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.906751][ T4277] usb 5-1: config 0 descriptor??
[  158.005120][ T4191] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  158.041724][ T4191] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  158.081549][ T4257] attempt to access beyond end of device
[  158.081549][ T4257] loop1: rw=2049, want=40976, limit=40427
[  158.238743][ T4199] usb 5-1: USB disconnect, device number 6
[  158.679936][ T4199] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  158.831946][ T5314] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.858682][ T5314] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.878739][ T5314] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.887683][ T5314] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.903651][ T5371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'.
[  158.948861][ T4199] usb 5-1: Using ep0 maxpacket: 32
[  159.088989][ T4199] usb 5-1: config 0 has an invalid interface number: 153 but max is 0
[  159.100649][ T4199] usb 5-1: config 0 has no interface number 0
[  159.112004][ T4199] usb 5-1: config 0 interface 153 has no altsetting 0
[  159.146397][ T5372] loop2: detected capacity change from 0 to 512
[  159.200234][ T5314] syz.5.247 (5314) used greatest stack depth: 20176 bytes left
[  159.237896][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  159.248242][ T5316] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.304052][ T5316] 8021q: adding VLAN 0 to HW filter on device team0
[  159.323380][ T5316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.341183][ T4199] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[  159.360461][ T4199] usb 5-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[  159.370056][ T4199] usb 5-1: Product: syz
[  159.374266][ T4199] usb 5-1: Manufacturer: syz
[  159.376555][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.247'.
[  159.381298][ T4199] usb 5-1: SerialNumber: syz
[  159.403488][ T4199] usb 5-1: config 0 descriptor??
[  159.419949][ T5322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'.
[  159.780505][ T4199] hub 5-1:0.153: bad descriptor, ignoring hub
[  159.787186][ T4199] hub: probe of 5-1:0.153 failed with error -5
[  159.809689][ T4199] sierra 5-1:0.153: Sierra USB modem converter detected
[  160.294818][ T4199] usb 5-1: USB disconnect, device number 7
[  160.579498][ T4199] sierra 5-1:0.153: device disconnected
[  160.785676][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  160.824579][ T5384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.902215][ T5384] 9pnet: Insufficient options for proto=fd
[  160.918780][ T4241] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  160.970186][ T5385] loop2: detected capacity change from 0 to 64
[  161.047349][ T5385] BFS-fs: bfs_fill_super(): Last block not available on loop2: 163903
[  161.048888][ T5378] loop3: detected capacity change from 0 to 40427
[  161.648707][ T4241] usb 6-1: Using ep0 maxpacket: 32
[  161.713573][ T5378] F2FS-fs (loop3): invalid crc value
[  161.742919][ T5378] F2FS-fs (loop3): Found nat_bits in checkpoint
[  161.769751][ T4241] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  161.777863][ T4241] usb 6-1: config 0 has no interface number 0
[  161.904362][ T5393] netlink: 'syz.4.265': attribute type 3 has an invalid length.
[  161.909761][ T5378] F2FS-fs (loop3): Start checkpoint disabled!
[  161.912856][ T5393] netlink: 224 bytes leftover after parsing attributes in process `syz.4.265'.
[  161.958928][ T5378] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  161.998814][ T4241] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  162.026584][ T4241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.061265][ T4241] usb 6-1: Product: syz
[  162.065520][ T4241] usb 6-1: Manufacturer: syz
[  162.122027][ T5403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.269'.
[  162.185596][ T4241] usb 6-1: SerialNumber: syz
[  162.212474][ T4241] usb 6-1: config 0 descriptor??
[  162.261404][ T4241] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  162.377463][ T5407] loop1: detected capacity change from 0 to 512
[  162.384082][ T4241] usb 6-1: selecting invalid altsetting 1
[  162.390485][ T4241] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  162.410105][ T4241] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  162.420781][ T4241] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  162.429772][ T4241] usb 6-1: media controller created
[  162.615020][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'.
[  162.694183][ T4241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  162.756086][ T5407] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  162.785492][ T5407] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.912142][ T4241] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  162.932932][ T4241] zl10353_read_register: readreg error (reg=127, ret==-71)
[  162.978503][ T4285] attempt to access beyond end of device
[  162.978503][ T4285] loop3: rw=2049, want=40976, limit=40427
[  162.991208][ T4241] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  163.361643][ T5429] input: syz1 as /devices/virtual/input/input7
[  163.586660][ T4241] usb 6-1: USB disconnect, device number 4
[  163.658443][ T5434] loop5: detected capacity change from 0 to 512
[  163.920959][ T5434] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  163.994570][ T5442] loop3: detected capacity change from 0 to 256
[  164.002346][ T5434] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.104238][ T5449] loop4: detected capacity change from 0 to 512
[  164.290391][ T5431] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  164.305546][ T5431] Quota error (device loop5): write_blk: dquota write failed
[  164.313129][ T5431] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  164.323030][ T5431] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.276: Failed to acquire dquot type 0
[  164.454449][ T5459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.277'.
[  164.589820][ T5462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'.
[  164.776078][ T5474] loop3: detected capacity change from 0 to 512
[  165.036216][ T5474] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  165.055345][ T5479] loop2: detected capacity change from 0 to 4096
[  165.077225][ T5479] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  165.087513][ T5474] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.208795][ T5479] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[  165.240259][ T5479] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume.
[  165.588525][ T5490] loop2: detected capacity change from 0 to 256
[  165.696287][ T5496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'.
[  166.473391][ T5490] FAT-fs (loop2): Unrecognized mount option "˙˙˙˙˙˙˙˙0xffffffffffffffff18446744073709551615eG÷W1»wpď\ú`Xü=C;Ň׆„ęÇ2�7ř¨Í^ăŰ_µIýÉNÍITI)Ť.«gJiĆ)l”ˇDzŘÝű›ˇě”�ę jcWű\Ť^ś*TÄBqÉoßß”)ňMš‡iyšëŽo" or missing value
[  166.518715][ T4199] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  166.828865][ T4199] usb 4-1: Using ep0 maxpacket: 32
[  166.935279][ T5513] netlink: 'syz.4.290': attribute type 10 has an invalid length.
[  166.959204][ T4199] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  166.985761][ T4199] usb 4-1: config 0 has no interface number 0
[  167.038181][ T5513] netlink: 55 bytes leftover after parsing attributes in process `syz.4.290'.
[  167.189812][ T4199] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  167.233100][ T4199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.309096][ T4199] usb 4-1: Product: syz
[  167.352512][ T4199] usb 4-1: Manufacturer: syz
[  167.396965][ T4199] usb 4-1: SerialNumber: syz
[  167.541712][ T5513] team0: Port device virt_wifi0 added
[  167.567928][ T4199] usb 4-1: config 0 descriptor??
[  167.641122][ T4199] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  167.679218][ T4199] usb 4-1: selecting invalid altsetting 1
[  167.685016][ T4199] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  167.721929][ T5517] loop5: detected capacity change from 0 to 512
[  167.739805][ T4241] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  167.772570][ T4199] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  167.803522][ T4199] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  167.833765][ T4199] usb 4-1: media controller created
[  167.871265][ T4199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  167.977399][ T5517] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  168.048876][ T5517] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.049076][ T4199] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  168.109706][ T4199] zl10353_read_register: readreg error (reg=127, ret==-71)
[  168.180581][ T4199] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  168.267798][ T5517] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  168.282534][ T5517] Quota error (device loop5): write_blk: dquota write failed
[  168.290694][ T5517] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  168.300816][ T5517] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.291: Failed to acquire dquot type 0
[  168.322094][ T5530] loop2: detected capacity change from 0 to 512
[  168.391503][ T4199] usb 4-1: USB disconnect, device number 5
[  168.436495][ T5530] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5
[  168.436495][ T5530] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  168.436495][ T5530] 
[  168.478686][ T4241] usb 3-1: device not accepting address 12, error -71
[  168.501068][ T5530] EXT4-fs (loop2): Ignoring removed nobh option
[  168.560798][ T5530] EXT4-fs (loop2): Unrecognized mount option "subj_user=ext3" or missing value
[  168.765260][ T5530] loop2: detected capacity change from 0 to 512
[  168.815788][ T5539] loop5: detected capacity change from 0 to 512
[  168.882325][ T5530] EXT4-fs (loop2): Mount option "data_err=ignore" incompatible with ext2
[  168.898680][ T5539] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5
[  168.898680][ T5539] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  168.898680][ T5539] 
[  169.067227][ T5543] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  169.082373][ T5522] loop4: detected capacity change from 0 to 32768
[  169.127121][ T5543] overlayfs: failed to look up (tracing) for ino (-66)
[  169.188200][ T5539] EXT4-fs (loop5): Ignoring removed nobh option
[  169.358861][ T5539] EXT4-fs (loop5): Unrecognized mount option "subj_user=ext3" or missing value
[  169.418298][ T5522] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  169.495406][ T5548] loop9: detected capacity change from 0 to 524287936
[  169.517798][ T5550] loop1: detected capacity change from 0 to 512
[  169.649182][ T5554] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  169.736814][ T5554] overlayfs: failed to look up (tracing) for ino (-66)
[  170.089214][ T5559] loop2: detected capacity change from 0 to 1024
[  170.148973][ T5559] EXT4-fs (loop2): Ignoring removed bh option
[  170.340077][ T5559] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  170.437679][ T5569] loop5: detected capacity change from 0 to 512
[  170.500559][ T5569] EXT4-fs (loop5): 1 truncate cleaned up
[  170.516630][ T5569] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  170.660166][   T26] audit: type=1800 audit(1778409286.136:4): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.299" name="file1" dev="loop5" ino=13 res=0 errno=0
[  170.757590][   T26] audit: type=1800 audit(1778409286.136:5): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.299" name="file1" dev="loop5" ino=13 res=0 errno=0
[  171.153970][ T5578] loop1: detected capacity change from 0 to 4096
[  171.196872][ T5578] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  171.228808][ T4188] ocfs2: Unmounting device (7,4) on (node local)
[  171.762676][ T5591] netlink: 'syz.2.303': attribute type 1 has an invalid length.
[  171.936200][ T5593] ntfs3: loop1: ino=5, "/" directory corrupted
[  171.959693][ T5593] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  171.968774][ T5591] 8021q: adding VLAN 0 to HW filter on device bond2
[  172.004857][ T5589] F2FS-fs (loop5): invalid crc value
[  172.027937][ T5577] ntfs3: loop1: ino=5, "/" directory corrupted
[  172.045701][ T5600] bond2: (slave geneve2): making interface the new active one
[  172.054768][ T5589] F2FS-fs (loop5): Found nat_bits in checkpoint
[  172.098696][ T5589] F2FS-fs (loop5): Start checkpoint disabled!
[  172.119416][ T5577] ntfs3: loop1: ino=5, "/" directory corrupted
[  172.133305][ T5589] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  172.197215][ T5600] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  172.318409][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  172.823942][ T5612] set_capacity_and_notify: 1 callbacks suppressed
[  172.824082][ T5612] loop3: detected capacity change from 0 to 512
[  173.011096][ T5600] syz.2.303 (5600) used greatest stack depth: 20112 bytes left
[  173.260739][ T5612] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  173.463855][ T5612] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.660260][ T5612] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  173.675057][ T5612] Quota error (device loop3): write_blk: dquota write failed
[  173.682570][ T5612] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  173.692647][ T5612] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.305: Failed to acquire dquot type 0
[  173.733024][ T5631] loop2: detected capacity change from 0 to 512
[  173.859144][ T4257] attempt to access beyond end of device
[  173.859144][ T4257] loop5: rw=2049, want=40976, limit=40427
[  173.890222][ T5631] EXT4-fs (loop2): Ignoring removed nobh option
[  173.914207][ T5631] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback.
[  173.930840][ T5631] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  174.079176][ T1326] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  174.138944][ T4241] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  174.338748][ T1326] usb 2-1: Using ep0 maxpacket: 32
[  174.388879][ T4241] usb 5-1: Using ep0 maxpacket: 8
[  174.458869][ T1326] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  174.466937][ T1326] usb 2-1: config 0 has no interface number 0
[  174.509118][ T4241] usb 5-1: config index 0 descriptor too short (expected 12112, got 80)
[  174.527780][ T4241] usb 5-1: config 0 has too many interfaces: 180, using maximum allowed: 32
[  174.568317][ T4241] usb 5-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config
[  174.599412][ T4241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 180
[  174.626005][ T4241] usb 5-1: config 0 has no interface number 0
[  174.658956][ T1326] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  174.688493][ T1326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.709476][ T1326] usb 2-1: Product: syz
[  174.713700][ T1326] usb 2-1: Manufacturer: syz
[  174.718317][ T1326] usb 2-1: SerialNumber: syz
[  174.754155][ T1326] usb 2-1: config 0 descriptor??
[  174.762247][ T5641] loop3: detected capacity change from 0 to 32768
[  174.782442][ T5663] loop2: detected capacity change from 0 to 4096
[  174.800758][ T1326] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  174.812254][ T4241] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  174.824707][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=4
[  174.832982][ T1326] usb 2-1: selecting invalid altsetting 1
[  174.847403][ T1326] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  174.852544][ T5663] ntfs: (device loop2): parse_options(): Unrecognized mount option .
[  174.855520][ T4241] usb 5-1: Product: syz
[  174.891456][ T1326] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  174.903277][ T4241] usb 5-1: Manufacturer: syz
[  174.907988][ T4241] usb 5-1: SerialNumber: syz
[  175.096056][ T1326] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  175.105435][ T1326] usb 2-1: media controller created
[  175.120613][ T4241] usb 5-1: config 0 descriptor??
[  175.132944][ T1326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  175.922721][ T4181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4181)
[  175.964364][ T5636] loop9: detected capacity change from 0 to 7
[  176.038473][ T5636] Dev loop9: unable to read RDB block 7
[  176.072776][ T5636]  loop9: AHDI p2 p3
[  176.104301][ T5636] loop9: partition table partially beyond EOD, truncated
[  176.166315][ T5636] loop9: p2 size 1701016946 extends beyond EOD, truncated
[  176.259579][ T5683] loop5: detected capacity change from 0 to 512
[  176.339712][ T5683] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  176.484511][ T5683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  176.506705][ T5683] System zones: 1-12
[  176.543097][ T5683] EXT4-fs (loop5): 1 truncate cleaned up
[  176.561860][ T5683] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[  176.690612][ T4241] usb 5-1: Found UVC 0.00 device syz (046d:08c3)
[  176.697060][ T4241] usb 5-1: No valid video chain found.
[  176.705076][ T4241] usb 5-1: USB disconnect, device number 8
[  177.148941][   T13] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  177.640123][ T5702] loop4: detected capacity change from 0 to 512
[  177.782465][ T5702] EXT4-fs (loop4): 1 truncate cleaned up
[  177.837063][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  177.838887][ T5702] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  177.879746][ T5708] loop5: detected capacity change from 0 to 512
[  177.978385][ T1326] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  177.985680][ T1326] zl10353_read_register: readreg error (reg=127, ret==-71)
[  178.008806][ T1326] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  178.057889][ T5720] 9pnet: Insufficient options for proto=fd
[  178.072442][ T5708] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  178.101095][   T26] audit: type=1800 audit(1778409293.596:6): pid=5702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.322" name="file1" dev="loop4" ino=13 res=0 errno=0
[  178.101139][ T5708] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.166784][ T1326] usb 2-1: USB disconnect, device number 3
[  178.458407][ T5708] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  178.473190][ T5708] Quota error (device loop5): write_blk: dquota write failed
[  178.480748][ T5708] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  178.490660][ T5708] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.321: Failed to acquire dquot type 0
[  178.679026][ T4195] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  178.948859][ T4195] usb 3-1: Using ep0 maxpacket: 8
[  179.069065][ T4195] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  179.159058][ T4195] usb 3-1: config 6 has an invalid interface number: 85 but max is 0
[  179.195746][ T5735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.207579][ T4195] usb 3-1: config 6 has no interface number 0
[  179.258745][ T4195] usb 3-1: config 6 interface 85 has no altsetting 0
[  179.358885][ T4195] usb 3-1: config 6 has an invalid interface number: 85 but max is 0
[  179.367048][ T4195] usb 3-1: config 6 has no interface number 0
[  179.408664][ T4195] usb 3-1: config 6 interface 85 has no altsetting 0
[  179.474571][ T5699] loop3: detected capacity change from 0 to 32768
[  179.488874][ T4195] usb 3-1: config 6 has an invalid interface number: 85 but max is 0
[  179.497026][ T4195] usb 3-1: config 6 has no interface number 0
[  179.514454][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  179.538451][ T4195] usb 3-1: config 6 interface 85 has no altsetting 0
[  179.638980][ T4195] usb 3-1: config 6 has an invalid interface number: 85 but max is 0
[  179.647136][ T4195] usb 3-1: config 6 has no interface number 0
[  179.678973][ T4195] usb 3-1: config 6 interface 85 has no altsetting 0
[  179.696089][ T5699] XFS (loop3): Mounting V5 Filesystem
[  179.759006][ T4195] usb 3-1: config 6 has an invalid interface number: 85 but max is 0
[  179.776269][ T4195] usb 3-1: config 6 has no interface number 0
[  179.782729][ T4195] usb 3-1: config 6 interface 85 has no altsetting 0
[  179.797417][ T5757] loop4: detected capacity change from 0 to 512
[  179.890699][ T5757] EXT4-fs (loop4): Ignoring removed orlov option
[  179.901497][ T5699] XFS (loop3): Ending clean mount
[  179.914228][ T5757] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.329: corrupted inode contents
[  179.928148][ T4195] usb 3-1: config 6 has an invalid interface number: 85 but max is 0
[  179.939106][ T1108] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  179.954844][ T4195] usb 3-1: config 6 has no interface number 0
[  179.958992][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.975253][ T1108] usb 2-1: config 0 has no interface number 0
[  180.002307][ T5757] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  180.019198][ T4195] usb 3-1: config 6 interface 85 has no altsetting 0
[  180.063436][ T5757] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.329: corrupted inode contents
[  180.078452][ T5757] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.329: mark_inode_dirty error
[  180.098986][ T5757] EXT4-fs (loop4): 1 orphan inode deleted
[  180.105008][ T5757] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,resuid=0x0000000000000000,delalloc,nouid32,orlov,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  180.119398][ T4195] usb 3-1: config 6 has an invalid interface number: 85 but max is 0
[  180.144203][ T4195] usb 3-1: config 6 has no interface number 0
[  180.166636][ T4195] usb 3-1: config 6 interface 85 has no altsetting 0
[  180.182230][ T5699] XFS (loop3): Quotacheck needed: Please wait.
[  180.208947][ T1108] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  180.248878][ T4195] usb 3-1: config 6 has an invalid interface number: 85 but max is 0
[  180.257256][ T4195] usb 3-1: config 6 has no interface number 0
[  180.265308][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.358486][ T1108] usb 2-1: Product: syz
[  180.412495][ T1108] usb 2-1: Manufacturer: syz
[  180.484335][ T1108] usb 2-1: SerialNumber: syz
[  180.595567][ T1108] usb 2-1: config 0 descriptor??
[  180.819028][ T4199] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  180.843810][ T5699] XFS (loop3): Quotacheck: Done.
[  180.938149][ T4195] usb 3-1: config 6 interface 85 has no altsetting 0
[  180.967813][ T5735] loop1: detected capacity change from 0 to 256
[  181.006881][ T4192] XFS (loop3): Unmounting Filesystem
[  181.068230][ T5735] FAT-fs (loop1): Directory bread(block 64) failed
[  181.094634][ T5735] FAT-fs (loop1): Directory bread(block 65) failed
[  181.101802][ T4195] usb 3-1: New USB device found, idVendor=2ca3, idProduct=0031, bcdDevice=44.be
[  181.118818][ T5735] FAT-fs (loop1): Directory bread(block 66) failed
[  181.125431][ T5735] FAT-fs (loop1): Directory bread(block 67) failed
[  181.132430][ T4195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.146765][ T4195] usb 3-1: Product: syz
[  181.151459][ T5735] FAT-fs (loop1): Directory bread(block 68) failed
[  181.158098][ T4195] usb 3-1: Manufacturer: syz
[  181.163197][ T4195] usb 3-1: SerialNumber: syz
[  181.168297][ T5735] FAT-fs (loop1): Directory bread(block 69) failed
[  181.208082][ T5735] FAT-fs (loop1): Directory bread(block 70) failed
[  181.208128][ T5735] FAT-fs (loop1): Directory bread(block 71) failed
[  181.208204][ T5735] FAT-fs (loop1): Directory bread(block 72) failed
[  181.208237][ T5735] FAT-fs (loop1): Directory bread(block 73) failed
[  181.229060][ T4199] usb 5-1: config 0 has an invalid interface number: 172 but max is 0
[  181.229092][ T4199] usb 5-1: config 0 has no interface number 0
[  181.229118][ T4199] usb 5-1: too many endpoints for config 0 interface 172 altsetting 255: 247, using maximum allowed: 30
[  181.229156][ T4199] usb 5-1: config 0 interface 172 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  181.229187][ T4199] usb 5-1: config 0 interface 172 has no altsetting 0
[  181.300417][ T1108] usb 2-1: USB disconnect, device number 4
[  181.365712][ T5783] loop5: detected capacity change from 0 to 512
[  181.409642][ T4199] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23
[  181.426256][ T4199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.434708][ T4199] usb 5-1: Product: syz
[  181.439183][ T4199] usb 5-1: Manufacturer: syz
[  181.443889][ T4199] usb 5-1: SerialNumber: syz
[  181.466823][ T4199] usb 5-1: config 0 descriptor??
[  181.573207][ T5783] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  181.586663][ T4195] usb-storage 3-1:6.85: USB Mass Storage device detected
[  181.608469][ T5783] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.689907][ T4195] usb-storage 3-1:6.85: Quirks match for vid 2ca3 pid 0031: 2000000
[  181.772738][ T4195] usb 3-1: USB disconnect, device number 14
[  182.087197][ T5800] loop1: detected capacity change from 0 to 512
[  182.097750][ T4199] ftdi_sio 5-1:0.172: FTDI USB Serial Device converter detected
[  182.117795][ T4199] usb 5-1: Detected FT-X
[  182.146365][ T4199] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  182.200383][ T4199] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  182.230473][ T5800] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  182.245290][ T4199] ftdi_sio 5-1:0.172: GPIO initialisation failed: -71
[  182.288108][ T5800] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.290595][ T4199] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  182.388888][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  182.553275][ T5800] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  182.567982][ T5800] Quota error (device loop1): write_blk: dquota write failed
[  182.575631][ T5800] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  182.585488][ T5800] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.336: Failed to acquire dquot type 0
[  182.599317][ T4199] usb 5-1: USB disconnect, device number 9
[  182.614140][ T4199] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  182.627623][ T4199] ftdi_sio 5-1:0.172: device disconnected
[  182.706163][ T5788] loop2: detected capacity change from 0 to 32768
[  182.758674][   T23] usb 4-1: Using ep0 maxpacket: 32
[  182.800673][ T5788] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  182.898834][   T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  182.927411][   T23] usb 4-1: config 0 has no interface number 0
[  183.061108][ T5820] syz.1.338 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  183.146450][ T4191] ocfs2: Unmounting device (7,2) on (node local)
[  183.158998][   T23] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  183.183084][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.248903][   T23] usb 4-1: Product: syz
[  183.270408][   T23] usb 4-1: Manufacturer: syz
[  183.285525][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'.
[  183.300455][   T23] usb 4-1: SerialNumber: syz
[  183.324831][   T23] usb 4-1: config 0 descriptor??
[  183.400780][   T23] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  183.469568][   T23] usb 4-1: selecting invalid altsetting 1
[  183.475366][   T23] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  183.506288][ T5836] FAULT_INJECTION: forcing a failure.
[  183.506288][ T5836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.523751][   T23] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  183.558720][ T5836] CPU: 1 PID: 5836 Comm: syz.4.341 Not tainted syzkaller #0
[  183.566078][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  183.576167][ T5836] Call Trace:
[  183.579477][ T5836]  <TASK>
[  183.582464][ T5836]  dump_stack_lvl+0x188/0x250
[  183.587203][ T5836]  ? show_regs_print_info+0x20/0x20
[  183.592446][ T5836]  ? load_image+0x400/0x400
[  183.596993][ T5836]  ? __lock_acquire+0x7d10/0x7d10
[  183.602147][ T5836]  should_fail+0x38c/0x4c0
[  183.606607][ T5836]  _copy_to_user+0x2e/0x130
[  183.611241][ T5836]  simple_read_from_buffer+0xe3/0x150
[  183.616658][ T5836]  proc_fail_nth_read+0x1a6/0x220
[  183.621828][ T5836]  ? proc_fault_inject_write+0x310/0x310
[  183.627513][ T5836]  ? fsnotify_perm+0x254/0x560
[  183.632311][ T5836]  ? proc_fault_inject_write+0x310/0x310
[  183.637989][ T5836]  vfs_read+0x301/0xd60
[  183.642193][ T5836]  ? kernel_read+0x1e0/0x1e0
[  183.646825][ T5836]  ? __fget_files+0x40f/0x480
[  183.651652][ T5836]  ? mutex_lock_nested+0x17/0x20
[  183.656628][ T5836]  ? __fdget_pos+0x2bf/0x370
[  183.661311][ T5836]  ? ksys_read+0x71/0x260
[  183.665689][ T5836]  ksys_read+0x152/0x260
[  183.669978][ T5836]  ? vfs_write+0xd60/0xd60
[  183.674438][ T5836]  ? lockdep_hardirqs_on+0x94/0x140
[  183.679685][ T5836]  do_syscall_64+0x4c/0xa0
[  183.684137][ T5836]  ? clear_bhb_loop+0x30/0x80
[  183.688851][ T5836]  ? clear_bhb_loop+0x30/0x80
[  183.693566][ T5836]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  183.699664][ T5836] RIP: 0033:0x7fe57704760e
[  183.704108][ T5836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  183.723843][ T5836] RSP: 002b:00007fe5752dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  183.732399][ T5836] RAX: ffffffffffffffda RBX: 00007fe5752e06c0 RCX: 00007fe57704760e
[  183.740462][ T5836] RDX: 000000000000000f RSI: 00007fe5752e00a0 RDI: 0000000000000004
[  183.748580][ T5836] RBP: 00007fe5752e0090 R08: 0000000000000000 R09: 0000000000000000
[  183.756584][ T5836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.764601][ T5836] R13: 00007fe577300038 R14: 00007fe5772fffa0 R15: 00007ffc10fb2e08
[  183.772643][ T5836]  </TASK>
[  183.922279][   T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  183.935535][   T23] usb 4-1: media controller created
[  183.957756][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  185.695420][ T5864] device syzkaller1 entered promiscuous mode
[  185.716742][   T23] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  185.723919][   T23] zl10353_read_register: readreg error (reg=127, ret==-110)
[  185.748880][   T23] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  185.778701][ T4241] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  185.810419][   T23] usb 4-1: USB disconnect, device number 7
[  186.005673][ T5869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.346'.
[  186.050642][ T5868] loop3: detected capacity change from 0 to 512
[  186.288796][ T4241] usb 5-1: config 87 has an invalid descriptor of length 0, skipping remainder of the config
[  186.308666][ T4241] usb 5-1: config 87 has 1 interface, different from the descriptor's value: 3
[  186.344908][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.351'.
[  186.488890][ T4241] usb 5-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40
[  186.508211][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.536970][ T4241] usb 5-1: Product: syz
[  186.544264][ T4241] usb 5-1: Manufacturer: syz
[  186.711500][ T4241] usb 5-1: SerialNumber: syz
[  187.628836][ T4241] usb 5-1: 0:1 : does not exist
[  187.636419][ T4241] usb 5-1: 0:2 : does not exist
[  187.650339][ T4241] usb 5-1: unit 66 not found!
[  187.711400][ T4241] usb 5-1: USB disconnect, device number 10
[  187.895019][ T5900] loop5: detected capacity change from 0 to 512
[  188.842992][ T5900] EXT4-fs (loop5): orphan cleanup on readonly fs
[  188.857120][ T5900] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  188.873727][ T5900] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  188.881181][ T5900] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.356: couldn't read orphan inode 26 (err -116)
[  188.904866][ T5900] EXT4-fs (loop5): Remounting filesystem read-only
[  188.911651][ T5900] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback.
[  190.118307][ T5924] loop4: detected capacity change from 0 to 256
[  190.173122][ T5927] loop3: detected capacity change from 0 to 1024
[  190.216895][ T5926] loop2: detected capacity change from 0 to 1024
[  190.302711][ T5926] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature
[  190.357553][ T5927] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  190.406956][   T26] audit: type=1800 audit(1778409305.786:7): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.364" name="file1" dev="loop4" ino=1048594 res=0 errno=0
[  190.429008][ T5927] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  190.501069][ T5927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  190.539370][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:87.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  190.639537][ T5927] System zones: 0-1, 3-36
[  190.676892][ T5927] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  190.707170][ T5931] netlink: 64 bytes leftover after parsing attributes in process `syz.5.367'.
[  190.813711][ T5934] loop4: detected capacity change from 0 to 1764
[  191.098666][ T4199] Bluetooth: hci2: command 0x0406 tx timeout
[  191.339583][ T5952] loop3: detected capacity change from 0 to 128
[  191.402740][ T5956] loop5: detected capacity change from 0 to 512
[  191.440092][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.379'.
[  191.493933][ T5956] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  191.593681][ T5956] EXT4-fs (loop5): 1 truncate cleaned up
[  191.599535][ T5956] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x000000000000000d,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,data_err=ignore,dioread_lock,. Quota mode: none.
[  191.668381][ T5968] loop2: detected capacity change from 0 to 256
[  191.823367][ T4199] Bluetooth: hci3: command 0x0406 tx timeout
[  191.830944][ T4199] Bluetooth: hci4: command 0x0406 tx timeout
[  191.858118][ T4199] Bluetooth: hci1: command 0x0406 tx timeout
[  192.075494][ T5992] device bridge1 entered promiscuous mode
[  192.116341][ T5999] netlink: 'syz.2.396': attribute type 2 has an invalid length.
[  192.664279][ T6019] netlink: 128 bytes leftover after parsing attributes in process `syz.1.405'.
[  192.782289][ T6023] loop1: detected capacity change from 0 to 2048
[  192.850165][ T6023] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  192.945585][ T6023] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none.
[  193.089410][ T6032] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6033] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6032]
[  193.127099][ T6036] loop1: detected capacity change from 0 to 512
[  193.152203][ T6036] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  193.179972][ T6036] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  193.250021][ T6040] loop5: detected capacity change from 0 to 136
[  193.275761][ T6036] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,dioread_nolock,abort,grpjquota=,lazytime,auto_da_alloc,mblk_io_submit,max_dir_size_kb=0x0000000000000100,min_batch_time=0x000000000000007a,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  193.304105][ T6036] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  193.393401][ T6040] Attempt to read inode for relocated directory
[  193.490550][ T6050] device syzkaller0 entered promiscuous mode
[  193.782962][ T4199] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  193.820897][ T4199] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  193.915303][ T6080] netlink: 32 bytes leftover after parsing attributes in process `syz.2.428'.
[  194.044486][ T6073] loop1: detected capacity change from 0 to 8192
[  194.098915][   T21] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  194.143265][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.151176][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.187847][   T26] audit: type=1800 audit(1778409309.676:8): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.424" name="file1" dev="loop1" ino=1048596 res=0 errno=0
[  194.291114][ T6093] loop2: detected capacity change from 0 to 512
[  194.329469][   T21] usb 6-1: device descriptor read/64, error -71
[  194.344609][ T6093] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  194.489348][ T6093] EXT4-fs error (device loop2): ext4_init_orphan_info:584: comm syz.2.432: inode #0: comm syz.2.432: iget: illegal inode #
[  194.530598][ T6093] EXT4-fs (loop2): get orphan inode failed
[  194.540799][ T6093] EXT4-fs (loop2): mount failed
[  194.605272][   T21] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  194.687024][ T6106] loop4: detected capacity change from 0 to 256
[  194.848818][   T21] usb 6-1: device descriptor read/64, error -71
[  194.967590][ T6114] loop2: detected capacity change from 0 to 128
[  194.979095][   T21] usb usb6-port1: attempt power cycle
[  195.261031][    T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  195.282455][    T7] hid-generic 0000:0000:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  195.335166][ T6123] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none.
[  195.373362][ T6123] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.432797][   T21] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  195.500170][ T6132] xt_hashlimit: size too large, truncated to 1048576
[  195.539010][   T21] usb 6-1: device descriptor read/8, error -71
[  195.559503][ T4195] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  195.768702][ T4195] usb 3-1: device descriptor read/64, error -71
[  195.812593][ T6146] device syzkaller0 entered promiscuous mode
[  195.821037][   T21] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  195.938773][   T21] usb 6-1: device descriptor read/8, error -71
[  196.060002][ T4195] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  196.081081][   T21] usb usb6-port1: unable to enumerate USB device
[  196.248666][ T4195] usb 3-1: device descriptor read/64, error -71
[  196.334597][ T6165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.368758][ T6168] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  196.371718][ T4195] usb usb3-port1: attempt power cycle
[  196.571965][ T6165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.702681][ T6165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.862289][ T6165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.890080][ T4195] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  196.978965][ T4195] usb 3-1: device descriptor read/8, error -71
[  197.007249][ T6188] device syzkaller0 entered promiscuous mode
[  197.126200][ T6165] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.168420][ T6165] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.196458][ T6165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.241822][ T6165] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.251770][ T4195] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  197.358969][ T4195] usb 3-1: device descriptor read/8, error -71
[  197.414694][ T6190] set_capacity_and_notify: 1 callbacks suppressed
[  197.414710][ T6190] loop1: detected capacity change from 0 to 1024
[  197.483120][ T4195] usb usb3-port1: unable to enumerate USB device
[  197.497892][ T6190] EXT4-fs (loop1): inline encryption not supported
[  197.548840][ T6196] loop3: detected capacity change from 0 to 512
[  197.588386][ T6190] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,auto_da_alloc=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback.
[  197.810341][ T6196] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  197.893220][ T6196] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.349951][ T6219] loop1: detected capacity change from 0 to 1024
[  198.432174][ T6219] EXT4-fs (loop1): Ignoring removed orlov option
[  198.526352][ T6219] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  199.111351][ T6250] loop2: detected capacity change from 0 to 1024
[  199.202540][ T6254] loop1: detected capacity change from 0 to 164
[  199.215042][ T6250] EXT4-fs (loop2): Ignoring removed orlov option
[  199.232827][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.498'.
[  199.313592][ T6250] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000036,orlov,journal_ioprio=0x0000000000000003,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  199.409685][ T6254] Unable to read rock-ridge attributes
[  199.817039][ T6267] loop5: detected capacity change from 0 to 4096
[  199.918760][ T6267] EXT4-fs (loop5): Unrecognized mount option "euid<00000000000000000000" or missing value
[  201.060731][ T6305] loop5: detected capacity change from 0 to 8192
[  201.203178][ T6310] xt_CONNSECMARK: invalid mode: 66
[  201.332105][ T6310] loop2: detected capacity change from 0 to 2048
[  201.466951][ T6305] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.789884][ T4178]  loop2: p3 < > p4 < >
[  201.797452][ T4178] loop2: partition table partially beyond EOD, truncated
[  201.845879][ T4178] loop2: p3 start 4284289 is beyond EOD, truncated
[  201.892687][ T6310]  loop2: p3 < > p4 < >
[  201.897012][ T6310] loop2: partition table partially beyond EOD, truncated
[  201.904442][ T6310] loop2: p3 start 4284289 is beyond EOD, truncated
[  202.069984][ T1326] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  202.108455][ T6324] netlink: 'syz.3.525': attribute type 1 has an invalid length.
[  202.110701][ T1326] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  202.157363][ T6326] loop1: detected capacity change from 0 to 512
[  202.222442][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  202.313824][ T6326] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.526: inode has both inline data and extents flags
[  202.328898][ T6326] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.526: couldn't read orphan inode 15 (err -117)
[  202.384575][ T6326] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  202.427474][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  202.821889][ T6354] loop1: detected capacity change from 0 to 128
[  202.848193][ T6348] fido_id[6348]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  202.958771][ T6354] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  203.094891][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'.
[  203.173496][ T6366] loop4: detected capacity change from 0 to 512
[  203.297159][ T6366] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  203.352161][ T6366] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.399629][   T26] audit: type=1800 audit(1778409318.896:9): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.540" name="file1" dev="loop4" ino=15 res=0 errno=0
[  203.425236][ T6371] device syzkaller0 entered promiscuous mode
[  204.079646][ T6402] device syzkaller0 entered promiscuous mode
[  204.353159][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'.
[  204.607343][ T6427] xt_hashlimit: size too large, truncated to 1048576
[  205.091940][ T6439] loop3: detected capacity change from 0 to 512
[  205.101740][ T6437] netlink: 'syz.4.569': attribute type 7 has an invalid length.
[  205.118859][ T6437] netlink: 'syz.4.569': attribute type 5 has an invalid length.
[  205.143631][ T6439] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  205.179813][ T6437] netlink: 17 bytes leftover after parsing attributes in process `syz.4.569'.
[  205.213643][ T6439] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended
[  205.244901][ T6439] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.570: inode #15: comm syz.3.570: iget: illegal inode #
[  205.265260][ T6439] EXT4-fs (loop3): Remounting filesystem read-only
[  205.281284][ T6439] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.570: couldn't read orphan inode 15 (err -117)
[  205.367121][ T6439] EXT4-fs (loop3): Remounting filesystem read-only
[  205.409934][ T6439] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  205.445796][ T6444] device syzkaller0 entered promiscuous mode
[  205.513665][ T6439] EXT4-fs (loop3): shut down requested (2)
[  205.561823][ T6446] loop5: detected capacity change from 0 to 1024
[  205.691318][ T6446] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  205.708890][ T6446] System zones: 0-1, 3-8
[  205.743579][ T6446] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,jqfmt=vfsv1,noquota,debug,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none.
[  205.767985][ T6446] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.178996][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.576'.
[  206.215708][ T6460] loop3: detected capacity change from 0 to 4096
[  206.321401][ T6460] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  206.370215][   T26] audit: type=1800 audit(1778409321.856:10): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.579" name="file0" dev="loop3" ino=13 res=0 errno=0
[  206.484911][ T6466] netlink: 104 bytes leftover after parsing attributes in process `syz.1.581'.
[  207.258093][ T6479] device syzkaller0 entered promiscuous mode
[  207.788739][ T6493] loop5: detected capacity change from 0 to 1024
[  207.881249][ T6493] EXT4-fs (loop5): Ignoring removed bh option
[  207.927320][ T6493] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  208.258487][ T6507] loop3: detected capacity change from 0 to 128
[  208.343949][ T6509] loop5: detected capacity change from 0 to 512
[  208.411454][ T6509] EXT4-fs (loop5): Ignoring removed nobh option
[  208.420279][ T6507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  208.429050][ T6507] System zones: 1-3, 19-19, 35-36
[  208.435283][ T6507] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[  208.462889][ T6509] fscrypt (loop5, inode 2): Error -61 getting encryption context
[  208.488763][ T6509] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61
[  208.518991][ T6507] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  208.581295][ T6509] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #13: comm syz.5.600: inode has both inline data and extents flags
[  208.640038][ T6509] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.600: couldn't read orphan inode 13 (err -117)
[  208.683112][ T6509] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback.
[  208.703311][ T6513] device syzkaller0 entered promiscuous mode
[  208.711696][ T6507] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 1752196451 (only 1 groups)
[  208.789049][ T6509] fscrypt (loop5, inode 2): Error -61 getting encryption context
[  209.286161][ T6525] qfq: no options
[  209.346719][ T6529] netlink: 44 bytes leftover after parsing attributes in process `syz.1.609'.
[  209.491503][ T6533] netlink: 'syz.3.611': attribute type 1 has an invalid length.
[  209.651845][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1
[  209.734450][ T6540] device syzkaller0 entered promiscuous mode
[  209.892778][ T6546] netlink: 60 bytes leftover after parsing attributes in process `syz.3.616'.
[  210.353953][ T6566] loop3: detected capacity change from 0 to 1024
[  210.442696][ T6566] EXT4-fs (loop3): inline encryption not supported
[  210.455126][ T6566] EXT4-fs (loop3): Ignoring removed orlov option
[  210.559542][ T6566] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,inlinecrypt,norecovery,noblock_validity,orlov,nogrpid,init_itable=0x0000000000000008,norecovery,,errors=continue. Quota mode: none.
[  210.716810][ T6566] EXT4-fs (loop3): shut down requested (2)
[  210.906512][ T6585] loop2: detected capacity change from 0 to 1024
[  210.979273][ T6585] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,data_err=ignore,,errors=continue. Quota mode: none.
[  211.163237][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.634'.
[  211.198544][ T6596] netlink: 68 bytes leftover after parsing attributes in process `syz.5.634'.
[  211.246337][ T6599] loop4: detected capacity change from 0 to 512
[  211.339548][ T6603] netlink: 220 bytes leftover after parsing attributes in process `syz.3.639'.
[  211.383951][ T6599] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  211.410462][ T6599] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.637: bad orphan inode 131083
[  211.452097][ T6603] netlink: 184 bytes leftover after parsing attributes in process `syz.3.639'.
[  211.472323][ T6599] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  211.693116][ T6612] loop3: detected capacity change from 0 to 512
[  211.866549][ T6612] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback.
[  211.908762][ T6612] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.229437][ T6621] loop5: detected capacity change from 0 to 8192
[  212.301443][ T6627] netlink: 204 bytes leftover after parsing attributes in process `syz.4.649'.
[  212.371070][ T6628] netlink: 84 bytes leftover after parsing attributes in process `syz.4.649'.
[  213.320856][ T6653] loop2: detected capacity change from 0 to 128
[  213.539961][ T6657] attempt to access beyond end of device
[  213.539961][ T6657] loop2: rw=2049, want=745, limit=128
[  213.715617][ T6653] loop2: detected capacity change from 128 to 0
[  214.193762][ T6665] loop5: detected capacity change from 0 to 1024
[  214.237251][ T6665] EXT4-fs (loop5): inline encryption not supported
[  214.303922][ T6665] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,acl,norecovery,,errors=continue. Quota mode: none.
[  214.377898][    C1] blk_update_request: I/O error, dev loop2, sector 33 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  214.410874][    C1] blk_update_request: I/O error, dev loop2, sector 34 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  214.422526][    C1] blk_update_request: I/O error, dev loop2, sector 35 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  214.433942][    C1] blk_update_request: I/O error, dev loop2, sector 36 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  214.445418][    C1] blk_update_request: I/O error, dev loop2, sector 37 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  214.456800][    C1] blk_update_request: I/O error, dev loop2, sector 38 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  214.468268][    C1] blk_update_request: I/O error, dev loop2, sector 39 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  214.479651][    C1] blk_update_request: I/O error, dev loop2, sector 40 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  214.491046][    C1] blk_update_request: I/O error, dev loop2, sector 33 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  214.503831][ T4191] FAT-fs (loop2): Directory bread(block 33) failed
[  214.531965][    C0] blk_update_request: I/O error, dev loop2, sector 34 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  214.543115][ T4191] FAT-fs (loop2): Directory bread(block 34) failed
[  214.562387][ T4191] FAT-fs (loop2): Directory bread(block 35) failed
[  214.570956][ T4191] FAT-fs (loop2): Directory bread(block 36) failed
[  214.585338][ T4191] FAT-fs (loop2): Directory bread(block 37) failed
[  214.593502][ T4191] FAT-fs (loop2): Directory bread(block 38) failed
[  214.629813][ T4191] FAT-fs (loop2): Directory bread(block 39) failed
[  214.639782][ T4191] FAT-fs (loop2): Directory bread(block 40) failed
[  214.665589][ T4347] loop: Write error at byte offset 9223372036855157247, length 4096.
[  214.677758][ T4348] FAT-fs (loop2): unable to read inode block for updating (i_pos 532)
[  214.698748][ T4348] FAT-fs (loop2): bread failed in fat_clusters_flush
[  214.792786][ T4191] FAT-fs (loop2): unable to read boot sector to mark fs as dirty
[  215.180522][ T6690] loop3: detected capacity change from 0 to 512
[  215.233650][ T6690] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  215.274713][ T6690] EXT4-fs (loop3): 1 truncate cleaned up
[  215.280633][ T6690] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  215.294941][   T26] audit: type=1800 audit(1778409330.786:11): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.674" name="file1" dev="loop3" ino=15 res=0 errno=0
[  216.095790][ T6723] loop3: detected capacity change from 0 to 512
[  216.165807][ T6703] chnl_net:caif_netlink_parms(): no params data found
[  216.194345][ T6723] EXT4-fs (loop3): 1 truncate cleaned up
[  216.243957][ T6723] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  216.435063][   T26] audit: type=1800 audit(1778409331.926:12): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.688" name="file1" dev="loop3" ino=13 res=0 errno=0
[  216.462390][ T6723] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.688: bg 0: block 465: padding at end of block bitmap is not set
[  216.487136][ T6723] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28
[  216.500255][ T6723] EXT4-fs (loop3): This should not happen!! Data will be lost
[  216.500255][ T6723] 
[  216.528805][ T6723] EXT4-fs (loop3): Total free blocks count 0
[  216.535083][ T6723] EXT4-fs (loop3): Free/Dirty block details
[  216.546970][ T6723] EXT4-fs (loop3): free_blocks=0
[  216.552484][ T6723] EXT4-fs (loop3): dirty_blocks=10
[  216.557803][ T6723] EXT4-fs (loop3): Block reservation details
[  216.564022][ T6723] EXT4-fs (loop3): i_reserved_data_blocks=10
[  216.705931][ T6703] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.788642][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.798300][ T6703] device bridge_slave_0 entered promiscuous mode
[  216.833330][ T6703] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.847228][ T6741] loop4: detected capacity change from 0 to 512
[  216.873100][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.900208][ T6703] device bridge_slave_1 entered promiscuous mode
[  216.974323][ T6703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.033157][ T6741] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.695: inode #1: comm syz.4.695: iget: illegal inode #
[  217.048495][ T6703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.084634][ T6741] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.695: error while reading EA inode 1 err=-117
[  217.122336][ T6703] team0: Port device team_slave_0 added
[  217.149167][ T6741] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.695: inode #1: comm syz.4.695: iget: illegal inode #
[  217.222420][ T6703] team0: Port device team_slave_1 added
[  217.237076][ T6741] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.695: error while reading EA inode 1 err=-117
[  217.279580][ T6741] EXT4-fs (loop4): 1 orphan inode deleted
[  217.296642][ T6741] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  217.354736][ T6762] loop3: detected capacity change from 0 to 128
[  217.448531][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.455717][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.523754][ T6703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.589250][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.596351][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.738988][ T4195] Bluetooth: hci1: command 0x0409 tx timeout
[  217.795971][ T6703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.865922][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  218.175555][ T6779] xt_CONNSECMARK: invalid mode: 66
[  218.944274][ T4241] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  218.953130][ T4241] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  218.956606][ T6703] device hsr_slave_0 entered promiscuous mode
[  219.027984][ T6703] device hsr_slave_1 entered promiscuous mode
[  219.045365][ T6703] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.076208][ T6703] Cannot create hsr debugfs directory
[  219.260249][ T5065] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  219.438615][ T6703] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  219.468637][ T5065] usb 6-1: device descriptor read/64, error -71
[  219.479405][ T6703] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  219.517882][ T6703] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  219.527771][ T6703] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  219.706055][ T6703] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.737321][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  219.747854][ T5065] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  219.757370][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  219.811635][ T6703] 8021q: adding VLAN 0 to HW filter on device team0
[  219.819098][ T1108] Bluetooth: hci1: command 0x041b tx timeout
[  219.834809][ T1249] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.855875][ T6801] loop4: detected capacity change from 0 to 256
[  219.880079][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  219.896055][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  219.906269][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.913494][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.936205][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  219.955803][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  219.969902][ T5065] usb 6-1: device descriptor read/64, error -71
[  219.977511][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.984680][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.014885][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  220.071122][ T1249] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.256573][ T5065] usb usb6-port1: attempt power cycle
[  220.286315][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  220.295568][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  220.307489][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  220.321818][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  220.334139][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  220.377639][ T6808] xt_CONNSECMARK: invalid mode: 66
[  220.392673][ T6808] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  220.430601][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  220.510379][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  220.606641][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  220.677696][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  220.699624][ T5065] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  220.785376][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  220.830014][ T5065] usb 6-1: device descriptor read/8, error -71
[  220.897594][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  221.171117][ T1249] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.342264][ T5065] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  221.373949][ T1249] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.449449][ T5065] usb 6-1: device descriptor read/8, error -71
[  221.465350][ T6820] xt_CONNSECMARK: invalid mode: 66
[  221.570314][ T5065] usb usb6-port1: unable to enumerate USB device
[  221.899090][ T5065] Bluetooth: hci1: command 0x040f tx timeout
[  222.248800][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'.
[  222.370824][ T6859] batman_adv: batadv0: Adding interface: dummy0
[  222.377139][ T6859] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.549878][ T6859] batman_adv: batadv0: Interface activated: dummy0
[  222.614607][ T6868] batadv0: mtu less than device minimum
[  222.640006][ T6868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.653011][ T6868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.665529][ T6868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.677906][ T6868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.690426][ T6868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.702919][ T6868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.715409][ T6868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.727825][ T6868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.740169][ T6868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  223.067046][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  223.088538][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  223.131826][ T6703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.219765][ T6894] raw_sendmsg: syz.3.727 forgot to set AF_INET. Fix it!
[  223.388447][ T6906] loop3: detected capacity change from 0 to 512
[  223.445207][ T6909] loop4: detected capacity change from 0 to 512
[  223.533183][ T6906] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  223.601960][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  223.610552][ T6909] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  223.624900][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  223.676157][ T6909] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.798184][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  223.822229][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  223.876305][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  223.907107][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  223.939906][ T6703] device veth0_vlan entered promiscuous mode
[  224.008618][ T1108] Bluetooth: hci1: command 0x0419 tx timeout
[  224.102129][ T6936] usb usb8: usbfs: process 6936 (syz.4.735) did not claim interface 0 before use
[  224.118884][ T6703] device veth1_vlan entered promiscuous mode
[  224.217553][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  224.232622][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  224.263704][ T6703] device veth0_macvtap entered promiscuous mode
[  224.347036][ T6703] device veth1_macvtap entered promiscuous mode
[  224.425872][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.456750][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.488265][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.515122][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.537619][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.573435][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.612038][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.643285][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.665758][ T6963] loop5: detected capacity change from 0 to 2048
[  224.700161][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.741078][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  224.790334][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  224.811465][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  224.829991][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  224.868478][ T6963] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  224.882184][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.945151][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.993807][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.013542][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.042701][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.053283][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.078665][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.089260][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.110582][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.143080][ T6961] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  225.185260][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  225.207984][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  225.212663][ T6961] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 594 with error 28
[  225.223813][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  225.236209][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  225.253401][ T6961] EXT4-fs (loop5): This should not happen!! Data will be lost
[  225.253401][ T6961] 
[  225.275970][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.295976][ T6961] EXT4-fs (loop5): Total free blocks count 0
[  225.303048][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  225.318737][ T6961] EXT4-fs (loop5): Free/Dirty block details
[  225.325449][ T6961] EXT4-fs (loop5): free_blocks=4096
[  225.335252][ T6703] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.368683][ T6703] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.377445][ T6703] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.388226][ T6961] EXT4-fs (loop5): dirty_blocks=624
[  225.399869][ T6703] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.416269][ T6961] EXT4-fs (loop5): Block reservation details
[  225.452248][ T6961] EXT4-fs (loop5): i_reserved_data_blocks=39
[  225.500288][ T1249] device hsr_slave_0 left promiscuous mode
[  225.519532][ T1249] device hsr_slave_1 left promiscuous mode
[  225.526698][ T1249] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.558731][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.575685][ T1249] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.591009][ T6991] loop3: detected capacity change from 0 to 256
[  225.597398][ T1249] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.606932][ T1249] device bridge_slave_1 left promiscuous mode
[  225.614754][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.629354][ T1249] device bridge_slave_0 left promiscuous mode
[  225.635677][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.650104][ T6991] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙˙1844674407370955161518446744073709551615" or missing value
[  225.687672][ T1249] device veth1_macvtap left promiscuous mode
[  225.697324][ T6866] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  225.713722][ T1249] device veth0_macvtap left promiscuous mode
[  225.720352][ T1249] device veth1_vlan left promiscuous mode
[  225.726325][ T6866] EXT4-fs (loop5): This should not happen!! Data will be lost
[  225.726325][ T6866] 
[  225.737849][ T1249] device veth0_vlan left promiscuous mode
[  225.971123][ T1249] bond2 (unregistering): (slave geneve2): Releasing active interface
[  225.985551][ T1249] bond2 (unregistering): Released all slaves
[  226.002033][ T1249] bond1 (unregistering): Released all slaves
[  226.173232][ T1249] team0 (unregistering): Port device team_slave_1 removed
[  226.187396][ T1249] team0 (unregistering): Port device team_slave_0 removed
[  226.255405][ T6997] xt_CONNSECMARK: invalid mode: 66
[  226.313157][ T1249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.565816][ T1249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.028177][ T1249] bond0 (unregistering): Released all slaves
[  227.374167][ T6866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.409364][ T6866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.432369][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  227.503197][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.533920][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.679485][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  227.857703][ T7033] loop4: detected capacity change from 0 to 764
[  227.940023][ T7034] xt_CONNSECMARK: invalid mode: 66
[  228.872278][ T7048] program syz.6.767 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  229.066662][ T7056] loop5: detected capacity change from 0 to 1024
[  229.189579][ T7056] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  229.248823][ T7056] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.480385][ T6849] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm kworker/u4:14: lblock 0 mapped to illegal pblock 0 (length 1)
[  229.522554][ T6849] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  229.548712][ T6849] EXT4-fs (loop5): This should not happen!! Data will be lost
[  229.548712][ T6849] 
[  230.037663][ T7087] xt_CONNSECMARK: invalid mode: 66
[  230.916600][ T7093] loop3: detected capacity change from 0 to 512
[  230.976786][ T7093] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  231.002461][ T7099] netlink: 68 bytes leftover after parsing attributes in process `syz.5.781'.
[  231.041814][ T7093] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  231.121345][ T7093] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.779: corrupted in-inode xattr
[  231.262435][ T7093] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.779: couldn't read orphan inode 15 (err -117)
[  231.296936][ T7093] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback.
[  231.442133][   T26] audit: type=1800 audit(1778409346.936:13): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.779" name="bus" dev="loop3" ino=18 res=0 errno=0
[  231.494952][ T7117] device ipvlan2 entered promiscuous mode
[  231.516709][ T7122] loop6: detected capacity change from 0 to 128
[  231.523533][ T7117] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  231.536775][ T7117] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  231.548850][ T7117] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  232.017684][ T7137] xt_CONNSECMARK: invalid mode: 66
[  232.696905][ T7138] loop6: detected capacity change from 0 to 1024
[  232.912510][ T7138] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback.
[  233.063144][ T7148] device syzkaller0 entered promiscuous mode
[  233.093531][   T26] audit: type=1804 audit(1778409348.586:14): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.791" name="/newroot/11/file1/bus" dev="loop6" ino=18 res=1 errno=0
[  233.095181][ T7138] EXT4-fs (loop6): shut down requested (0)
[  233.608623][   T26] audit: type=1326 audit(1778409349.096:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7161 comm="syz.5.799" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2e9c4dd9 code=0x7fc00000
[  234.237453][ T7191] xt_CONNSECMARK: invalid mode: 66
[  235.034332][ T7157] chnl_net:caif_netlink_parms(): no params data found
[  235.409389][   T23] Bluetooth: hci5: command 0x0409 tx timeout
[  235.499462][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.527438][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.554729][ T7157] device bridge_slave_0 entered promiscuous mode
[  235.660466][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.690923][ T7219] loop5: detected capacity change from 0 to 512
[  235.710505][ T7219] EXT4-fs (loop5): Ignoring removed bh option
[  235.721081][ T7219] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  235.734385][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.767560][ T7157] device bridge_slave_1 entered promiscuous mode
[  235.799368][ T7207] device syzkaller0 entered promiscuous mode
[  235.879998][ T7219] EXT4-fs (loop5): 1 truncate cleaned up
[  235.924370][ T7219] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,barrier,errors=remount-ro,nodiscard,. Quota mode: none.
[  236.019890][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.033838][ T7219] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.815: bg 0: block 465: padding at end of block bitmap is not set
[  236.078837][   T26] audit: type=1326 audit(1778409351.576:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.5.815" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f2e9c4dd9 code=0x0
[  236.134250][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.192072][ T7219] EXT4-fs (loop5): Remounting filesystem read-only
[  236.349563][ T7157] team0: Port device team_slave_0 added
[  236.359244][ T7157] team0: Port device team_slave_1 added
[  236.395590][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.466707][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.510194][ T7239] xt_CONNSECMARK: invalid mode: 66
[  236.900151][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.290624][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.297743][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.441361][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.458323][ T4195] Bluetooth: hci5: command 0x041b tx timeout
[  237.604806][ T7157] device hsr_slave_0 entered promiscuous mode
[  237.676229][ T7157] device hsr_slave_1 entered promiscuous mode
[  237.727071][ T7259] loop3: detected capacity change from 0 to 2048
[  237.782026][ T7263] loop6: detected capacity change from 0 to 1024
[  237.802590][ T7259]  loop3: p1 p2
[  237.836651][ T7269] loop4: detected capacity change from 0 to 512
[  237.855255][ T7269] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  237.869472][ T7263] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  237.887076][ T7269] EXT4-fs (loop4): invalid journal inode
[  237.897537][ T7269] EXT4-fs (loop4): can't get journal size
[  237.924564][ T7261] device syzkaller0 entered promiscuous mode
[  237.925107][ T7263] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,auto_da_alloc=0x0000000000000007,noblock_validity,delalloc,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none.
[  237.972603][ T7263] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.003114][ T7269] EXT4-fs (loop4): 1 truncate cleaned up
[  238.009531][ T7269] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none.
[  238.026942][ T3561]  loop3: p1 p2
[  238.515952][ T7157] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  238.581401][ T7295] xt_CONNSECMARK: invalid mode: 66
[  238.655010][ T7291] vxcan0: tx address claim with different name
[  238.945869][ T7294] loop5: detected capacity change from 0 to 512
[  239.268943][ T7157] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  239.340161][ T7157] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  239.432419][ T7157] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  239.447703][ T7294] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback.
[  239.485412][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  239.498795][    T7] Bluetooth: hci5: command 0x040f tx timeout
[  239.546264][ T7294] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.560676][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  239.634684][ T7294] EXT4-fs warning (device loop5): ext4_group_add:1676: Can't resize non-sparse filesystem further
[  239.710071][ T7312] device syzkaller0 entered promiscuous mode
[  239.832655][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  239.866158][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  240.088131][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.172821][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  240.199238][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  240.235459][ T7157] 8021q: adding VLAN 0 to HW filter on device team0
[  240.328658][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  240.345270][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  240.363955][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.371134][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.445913][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  240.481063][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  240.509298][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.516609][ T6877] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.556844][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  240.630100][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  240.651398][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  240.681587][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  240.720763][ T7335] loop3: detected capacity change from 0 to 8192
[  240.721442][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  240.783789][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  240.836416][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  240.871098][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  240.896886][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  240.925171][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  240.986257][ T7157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  241.016412][ T7157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  241.053933][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  241.069204][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  241.522449][ T7362] device syzkaller0 entered promiscuous mode
[  241.579757][ T4240] Bluetooth: hci5: command 0x0419 tx timeout
[  241.727385][ T7340] loop5: detected capacity change from 0 to 1024
[  241.776540][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  241.807780][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  241.832753][ T7340] EXT4-fs (loop5): Ignoring removed bh option
[  241.909235][ T7371] xt_CONNSECMARK: invalid mode: 66
[  242.044363][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.184855][ T7340] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  242.853876][ T1108] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  242.890089][ T1108] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  243.146461][ T7387] fido_id[7387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  243.289402][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  243.327945][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  243.461158][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  243.482602][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  243.509342][ T7402] loop3: detected capacity change from 0 to 1024
[  243.568831][ T7402] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  243.599840][ T7157] device veth0_vlan entered promiscuous mode
[  243.688890][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  243.697098][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  243.893468][ T7157] device veth1_vlan entered promiscuous mode
[  243.981867][ T7422] xt_CONNSECMARK: invalid mode: 66
[  244.753814][ T7430] loop5: detected capacity change from 0 to 128
[  244.871217][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  244.881075][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  244.885565][ T7430] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  244.952725][ T7157] device veth0_macvtap entered promiscuous mode
[  244.978771][ T7430] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.065868][ T7157] device veth1_macvtap entered promiscuous mode
[  245.198257][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.221438][ T7444] loop3: detected capacity change from 0 to 1024
[  245.231558][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.248869][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.263044][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.273255][ T7444] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  245.295163][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.314453][ T7444] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  245.346072][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.356422][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.385531][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.397700][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.410997][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.421678][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.432466][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.443062][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.455035][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.478785][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.491948][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.503486][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.520519][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.573878][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  245.599541][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  245.636092][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  245.706157][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  245.742323][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  245.794297][ T7157] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.833711][ T7452] loop6: detected capacity change from 0 to 4096
[  245.844998][ T7157] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.006235][ T7157] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.024050][ T7157] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.186756][ T7467] xt_CONNSECMARK: invalid mode: 66
[  246.964317][ T6866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.992993][ T7470] sg_write: process 540 (syz.3.886) changed security contexts after opening file descriptor, this is not allowed.
[  247.038878][ T7452] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  247.038893][ T7466] loop5: detected capacity change from 0 to 4096
[  247.057234][ T6866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.135497][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  247.166023][   T26] audit: type=1800 audit(1778409362.656:17): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.880" name="file0" dev="loop6" ino=13 res=0 errno=0
[  247.242448][ T7466] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  247.338005][ T7466] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.883: corrupted inode contents
[  247.387783][ T6866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.439405][ T7466] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #15: comm syz.5.883: mark_inode_dirty error
[  247.455418][ T6866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.479509][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  247.525949][ T7466] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.883: corrupted inode contents
[  247.629289][ T7466] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.883: mark_inode_dirty error
[  247.667637][ T7486] device syzkaller0 entered promiscuous mode
[  247.684593][ T7466] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.883: corrupted inode contents
[  247.743079][ T7466] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #15: comm syz.5.883: mark_inode_dirty error
[  247.844265][ T7466] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.883: corrupted inode contents
[  247.867818][ T7502] loop7: detected capacity change from 0 to 512
[  247.894762][ T7466] EXT4-fs error (device loop5): ext4_truncate:4286: inode #15: comm syz.5.883: mark_inode_dirty error
[  247.935310][ T7466] EXT4-fs error (device loop5) in ext4_setattr:5645: Corrupt filesystem
[  248.000218][ T7485] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.883: corrupted inode contents
[  248.031627][ T7502] EXT4-fs (loop7): 1 truncate cleaned up
[  248.048297][ T7502] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nodelalloc,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  248.497970][ T7524] xt_CONNSECMARK: invalid mode: 66
[  249.438039][ T7535] loop5: detected capacity change from 0 to 4096
[  249.588868][ T7553] loop7: detected capacity change from 0 to 512
[  249.605522][ T7535] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  249.704450][ T7556] device syzkaller0 entered promiscuous mode
[  249.770442][   T26] audit: type=1800 audit(1778409365.266:18): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.903" name="file0" dev="loop5" ino=13 res=0 errno=0
[  249.812882][ T7553] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.908: inode has both inline data and extents flags
[  249.933045][ T7553] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.908: couldn't read orphan inode 15 (err -117)
[  250.022716][ T7553] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  250.039593][ T7564] loop3: detected capacity change from 0 to 512
[  250.345830][ T7564] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  250.375734][ T7572] xt_CONNSECMARK: invalid mode: 66
[  251.107177][ T7564] EXT4-fs (loop3): 1 truncate cleaned up
[  251.127311][ T7564] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noload,lazytime,noload,resgid=0x0000000000000000,auto_da_alloc,,errors=continue. Quota mode: none.
[  251.273590][ T7581] loop6: detected capacity change from 0 to 256
[  251.378297][ T7585] loop5: detected capacity change from 0 to 512
[  251.538676][ T7585] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  251.604909][ T7585] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.767411][ T7599] loop3: detected capacity change from 0 to 1024
[  251.869736][ T7593] device syzkaller0 entered promiscuous mode
[  251.924134][ T7599] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  251.947211][ T7606] loop5: detected capacity change from 0 to 1024
[  251.979898][ T7599] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.057601][ T7606] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  252.134087][ T7599] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 2: comm syz.3.923: lblock 2 mapped to illegal pblock 2 (length 4)
[  252.158808][ T7606] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  252.198950][ T7606] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.924: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  252.329471][ T7606] EXT4-fs (loop5): no journal found
[  252.334881][ T7606] EXT4-fs (loop5): can't get journal size
[  252.450615][ T7606] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,noinit_itable,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback.
[  252.477252][ T7624] loop7: detected capacity change from 0 to 128
[  252.553346][ T7625] xt_CONNSECMARK: invalid mode: 66
[  252.565147][ T5065] Bluetooth: hci0: command 0x0406 tx timeout
[  252.823721][ T7606] netlink: 40 bytes leftover after parsing attributes in process `syz.5.924'.
[  253.359887][ T7624] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  253.513457][ T7637] device syzkaller0 entered promiscuous mode
[  254.081861][ T7664] device syzkaller0 entered promiscuous mode
[  254.494540][ T7683] xt_CONNSECMARK: invalid mode: 66
[  255.418203][ T7696] loop3: detected capacity change from 0 to 512
[  255.447841][ T7699] netlink: 84 bytes leftover after parsing attributes in process `syz.4.951'.
[  255.484363][ T7696] EXT4-fs (loop3): Ignoring removed bh option
[  255.503726][ T7696] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  255.554156][ T7696] EXT4-fs (loop3): Unrecognized mount option "=" or missing value
[  255.581137][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  255.587602][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  255.849286][ T7707] device syzkaller0 entered promiscuous mode
[  256.267917][ T7723] netlink: 'syz.7.960': attribute type 10 has an invalid length.
[  256.327653][ T7724] xt_CONNSECMARK: invalid mode: 66
[  257.132294][ T7723] team0: Port device dummy0 added
[  257.207530][ T7730] netlink: 48 bytes leftover after parsing attributes in process `syz.4.962'.
[  257.255500][ T7733] loop6: detected capacity change from 0 to 256
[  257.401306][ T7741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.964'.
[  257.419322][ T7733] FAT-fs (loop6): Unrecognized mount option "017777777777777777777770x0000000000000000" or missing value
[  257.748708][ T7750] device syzkaller0 entered promiscuous mode
[  257.956640][ T7762] loop3: detected capacity change from 0 to 512
[  258.008375][ T7762] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  258.080112][ T7762] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.971: iget: bogus i_mode (2)
[  258.119542][ T7762] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.971: couldn't read orphan inode 15 (err -117)
[  258.242477][ T7762] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  258.422330][ T7773] xt_CONNSECMARK: invalid mode: 66
[  259.550220][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz.6.979'.
[  259.618754][ T7793] netlink: 'syz.6.979': attribute type 1 has an invalid length.
[  260.096476][ T7811] device syzkaller0 entered promiscuous mode
[  261.397985][ T7717] ODEBUG: Out of memory. ODEBUG disabled
[  261.548043][ T7833] loop3: detected capacity change from 0 to 4096
[  261.628380][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'.
[  261.704917][ T7833] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  261.895500][ T7833] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.991: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  262.005729][ T4199] kernel write not supported for file /input/event2 (pid: 4199 comm: kworker/1:3)
[  262.022688][ T7833] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.991: directory missing '..'
[  263.414497][ T7879] xt_TCPMSS: Only works on TCP SYN packets
[  263.537547][ T7872] loop6: detected capacity change from 0 to 8192
[  263.595439][ T7880] device syzkaller0 entered promiscuous mode
[  263.837925][ T7894] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1008'.
[  263.964120][ T7897] tap0: tun_chr_ioctl cmd 1074025677
[  263.989253][ T7897] tap0: linktype set to 772
[  264.237457][ T7907] loop7: detected capacity change from 0 to 512
[  264.308825][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'.
[  264.375751][ T7907] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  264.529572][ T7911] device hsr_slave_0 left promiscuous mode
[  264.566070][ T7911] device hsr_slave_1 left promiscuous mode
[  265.826757][ T7932] device syzkaller0 entered promiscuous mode
[  266.351186][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1025'.
[  266.769980][ T7963] xt_CONNSECMARK: invalid mode: 66
[  266.790916][ T7717] net_ratelimit: 11 callbacks suppressed
[  266.790934][ T7717] Set syz1 is full, maxelem 65536 reached
[  267.027624][ T7717] Process accounting resumed
[  267.110379][ T7972] device syzkaller0 entered promiscuous mode
[  267.602400][ T7997] loop3: detected capacity change from 0 to 256
[  267.660571][ T7997] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  268.363812][ T8022] device syzkaller0 entered promiscuous mode
[  268.389098][ T8021] loop_set_status: loop4 () has still dirty pages (nrpages=1)
[  268.397220][ T8031] xt_CONNSECMARK: invalid mode: 66
[  268.752162][ T8045] xt_CONNSECMARK: invalid mode: 66
[  268.764537][ T8045] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  268.889761][ T8045] loop6: detected capacity change from 0 to 2048
[  269.546514][ T4178]  loop6: p3 < > p4 < >
[  269.550886][ T4178] loop6: partition table partially beyond EOD, truncated
[  269.577277][ T4178] loop6: p3 start 4284289 is beyond EOD, truncated
[  269.610547][ T8045]  loop6: p3 < > p4 < >
[  269.614812][ T8045] loop6: partition table partially beyond EOD, truncated
[  269.623044][ T8045] loop6: p3 start 4284289 is beyond EOD, truncated
[  269.817788][ T8062] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1063'.
[  269.901751][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  269.953580][ T8061] device syzkaller0 entered promiscuous mode
[  269.997370][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  270.274604][ T8083] xt_CONNSECMARK: invalid mode: 66
[  270.309439][ T8085] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  270.309439][ T8085] The task syz.7.1072 (8085) triggered the difference, watch for misbehavior.
[  270.414806][ T8087] loop5: detected capacity change from 0 to 1024
[  270.591834][ T8087] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  270.648656][ T4240] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  270.860075][ T4240] usb 5-1: device descriptor read/64, error -71
[  271.142040][ T8103] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'.
[  271.149211][ T4240] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  271.499196][ T4240] usb 5-1: device descriptor read/64, error -71
[  271.628755][ T4240] usb usb5-port1: attempt power cycle
[  271.958085][ T8129] xt_CONNSECMARK: invalid mode: 66
[  272.023002][ T8133] loop3: detected capacity change from 0 to 512
[  272.038678][ T4240] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  272.103359][ T8133] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  272.130678][ T8133] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: comm syz.3.1089: inode #1: comm syz.3.1089: iget: illegal inode #
[  272.139314][ T4240] usb 5-1: device descriptor read/8, error -71
[  272.177066][ T8133] EXT4-fs (loop3): no journal found
[  272.193176][ T8133] EXT4-fs (loop3): can't get journal size
[  272.231701][ T8133] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  272.269074][ T8133] EXT4-fs (loop3): failed to initialize system zone (-22)
[  272.276360][ T8133] EXT4-fs (loop3): mount failed
[  272.459351][ T4240] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  272.566187][ T8144] loop5: detected capacity change from 0 to 8192
[  272.645505][ T4240] usb 5-1: device descriptor read/8, error -71
[  272.670376][ T1108] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  272.738848][ T1108] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  272.768921][ T4240] usb usb5-port1: unable to enumerate USB device
[  273.207825][ T6877] Bluetooth: hci6: Frame reassembly failed (-84)
[  273.667355][ T8176] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  273.903721][ T8182] loop5: detected capacity change from 0 to 512
[  274.017392][ T8182] EXT4-fs (loop5): Ignoring removed oldalloc option
[  274.086959][ T8182] EXT4-fs (loop5): 1 truncate cleaned up
[  274.118633][ T8182] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000001,. Quota mode: writeback.
[  274.196712][ T8187] xt_CONNSECMARK: invalid mode: 66
[  274.398490][ T8191] loop3: detected capacity change from 0 to 256
[  275.260610][   T23] Bluetooth: hci6: command 0x1003 tx timeout
[  275.274038][ T4208] Bluetooth: hci6: sending frame failed (-49)
[  275.565293][ T8219] loop3: detected capacity change from 0 to 2048
[  275.734909][ T8219] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  275.942895][ T8231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1119'.
[  275.989268][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1119'.
[  276.697083][ T8250] xt_CONNSECMARK: invalid mode: 66
[  277.158512][ T8264] netlink: 'syz.4.1130': attribute type 1 has an invalid length.
[  277.217384][ T8266] loop5: detected capacity change from 0 to 1024
[  277.248795][ T8268] device syzkaller0 entered promiscuous mode
[  277.308347][ T8266] EXT4-fs (loop5): Ignoring removed orlov option
[  277.347972][ T8266] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none.
[  277.369077][   T23] Bluetooth: hci6: command 0x1001 tx timeout
[  277.375193][ T4208] Bluetooth: hci6: sending frame failed (-49)
[  279.090353][ T8308] loop6: detected capacity change from 0 to 128
[  279.147062][ T8309] xt_CONNSECMARK: invalid mode: 66
[  279.284438][ T8308] attempt to access beyond end of device
[  279.284438][ T8308] loop6: rw=1, want=210, limit=128
[  279.457612][ T4199] Bluetooth: hci6: command 0x1009 tx timeout
[  279.530678][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1146'.
[  279.706071][ T8316] loop6: detected capacity change from 0 to 512
[  279.871516][ T8316] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1148: inode has both inline data and extents flags
[  279.905735][ T8316] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1148: couldn't read orphan inode 15 (err -117)
[  279.926709][ T8316] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  280.514956][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1159'.
[  280.757891][ T8353] loop6: detected capacity change from 0 to 128
[  280.771190][ T8355] device syzkaller0 entered promiscuous mode
[  280.836729][ T8356] xt_CONNSECMARK: invalid mode: 66
[  280.967806][ T8353] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  281.011711][ T8353] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.258108][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1166'.
[  281.585750][ T8379] loop6: detected capacity change from 0 to 128
[  281.617372][ T8383] device syzkaller0 entered promiscuous mode
[  281.660887][ T8379] EXT4-fs (loop6): Ignoring removed bh option
[  281.697475][ T8379] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,bh,,errors=continue. Quota mode: none.
[  281.768948][ T8379] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  281.826468][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'.
[  281.888853][ T8379] EXT4-fs (loop6): re-mounted. Opts: . Quota mode: none.
[  281.935196][ T8379] EXT4-fs (loop6): re-mounted. Opts: . Quota mode: none.
[  282.439275][ T8412] xt_CONNSECMARK: invalid mode: 66
[  282.474290][ T8411] device syzkaller0 entered promiscuous mode
[  282.711343][ T8416] loop5: detected capacity change from 0 to 256
[  282.801231][ T8416] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  282.810530][ T8416] FAT-fs (loop5): bogus number of directory entries (1)
[  282.817583][ T8416] FAT-fs (loop5): Can't find a valid FAT filesystem
[  283.519223][ T8439] loop5: detected capacity change from 0 to 1024
[  283.573629][ T8439] EXT4-fs (loop5): The Hurd can't support 64-bit file systems
[  283.838478][ T8453] loop6: detected capacity change from 0 to 512
[  283.942266][ T8453] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  283.993337][ T8460] loop7: detected capacity change from 0 to 128
[  284.013912][ T8453] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  284.030749][ T8453] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.1200: bad orphan inode 4
[  284.048699][ T8453] EXT4-fs (loop6): 1 orphan inode deleted
[  284.054567][ T8453] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=ignore,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x00000000000000fd,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: writeback.
[  284.457567][ T8467] xt_CONNSECMARK: invalid mode: 66
[  284.677610][ T8482] loop7: detected capacity change from 0 to 256
[  285.739830][ T8510] xt_CONNSECMARK: invalid mode: 66
[  285.972911][ T8528] tipc: Enabled bearer <eth:vlan1>, priority 10
[  286.297095][ T8551] loop6: detected capacity change from 0 to 128
[  286.485247][ T8552] xt_CONNSECMARK: invalid mode: 66
[  286.687441][  T161] attempt to access beyond end of device
[  286.687441][  T161] loop6: rw=1, want=151, limit=128
[  286.851018][ T8571] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.1245' sets config #2
[  286.992561][ T4199] tipc: Node number set to 817442502
[  287.261674][ T8595] xt_CONNSECMARK: invalid mode: 66
[  287.942156][ T8614] loop3: detected capacity change from 0 to 1024
[  288.063181][ T8614] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  288.066181][   T26] audit: type=1800 audit(1778409403.556:19): pid=8614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1259" name="file1" dev="loop3" ino=15 res=0 errno=0
[  288.084122][   T26] audit: type=1804 audit(1778409403.576:20): pid=8614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1259" name="/newroot/305/file1/cgroup.controllers" dev="loop3" ino=18 res=1 errno=0
[  288.795707][ T8643] xt_CONNSECMARK: invalid mode: 66
[  289.478322][ T8666] loop6: detected capacity change from 0 to 164
[  289.496840][ T8667] loop3: detected capacity change from 0 to 256
[  289.578397][ T8666] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1276'.
[  289.937204][ T8682] loop6: detected capacity change from 0 to 128
[  289.972025][ T8682] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  290.084025][ T8682] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  290.146778][ T8688] xt_CONNSECMARK: invalid mode: 66
[  290.263383][ T4396] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  290.314623][ T6703] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  291.060001][ T8710] device syzkaller0 entered promiscuous mode
[  291.091843][ T8718] netlink: 876 bytes leftover after parsing attributes in process `syz.3.1291'.
[  291.122473][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1291'.
[  291.145582][ T8719] loop6: detected capacity change from 0 to 2048
[  291.310042][ T8719] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  291.446898][ T8730] loop5: detected capacity change from 0 to 128
[  291.466743][ T8719] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  291.519827][ T8719] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 5 with error 28
[  291.547102][ T8719] EXT4-fs (loop6): This should not happen!! Data will be lost
[  291.547102][ T8719] 
[  291.567540][ T8719] EXT4-fs (loop6): Total free blocks count 0
[  291.588030][ T8719] EXT4-fs (loop6): Free/Dirty block details
[  291.632577][ T8719] EXT4-fs (loop6): free_blocks=4096
[  291.668783][ T8730] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  291.668801][ T8719] EXT4-fs (loop6): dirty_blocks=32
[  291.685123][ T8719] EXT4-fs (loop6): Block reservation details
[  291.691209][ T8719] EXT4-fs (loop6): i_reserved_data_blocks=2
[  291.775773][ T8730] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.787477][ T8727] xt_CONNSECMARK: invalid mode: 66
[  291.797730][ T8738] netlink: 'syz.3.1297': attribute type 1 has an invalid length.
[  291.841616][  T161] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  291.894407][  T161] EXT4-fs (loop6): This should not happen!! Data will be lost
[  291.894407][  T161] 
[  292.194018][ T8752] libceph: secret too big 112
[  292.529598][ T8758] device syzkaller0 entered promiscuous mode
[  292.739357][ T8769] loop3: detected capacity change from 0 to 4096
[  292.873273][ T8769] EXT4-fs (loop3): Ignoring removed bh option
[  292.942470][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1316'.
[  292.997514][ T8769] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback.
[  293.118450][ T8778] loop5: detected capacity change from 0 to 4096
[  293.188151][ T8784] loop6: detected capacity change from 0 to 128
[  293.292429][ T8778] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  293.340263][ T8778] EXT4-fs (loop5): inline encryption not supported
[  293.350715][ T8784] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  293.441233][ T8791] loop3: detected capacity change from 0 to 512
[  293.447904][ T8784] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.470390][ T8778] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  293.479497][ T8778] System zones: 0-5
[  293.488305][   T26] audit: type=1800 audit(1778409408.976:21): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1318" name="file1" dev="loop6" ino=12 res=0 errno=0
[  293.496585][ T8778] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,init_itable=0x00000000000007ff,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback.
[  293.624598][ T8791] EXT4-fs (loop3): 1 truncate cleaned up
[  293.630686][ T8791] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  293.654568][   T26] audit: type=1800 audit(1778409409.146:22): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1319" name="file1" dev="loop3" ino=13 res=0 errno=0
[  293.656100][ T8791] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1319: bg 0: block 465: padding at end of block bitmap is not set
[  293.716744][ T8791] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28
[  293.796455][ T8791] EXT4-fs (loop3): This should not happen!! Data will be lost
[  293.796455][ T8791] 
[  293.849020][ T8791] EXT4-fs (loop3): Total free blocks count 0
[  293.891921][ T8791] EXT4-fs (loop3): Free/Dirty block details
[  293.948722][ T8791] EXT4-fs (loop3): free_blocks=0
[  293.974439][ T8791] EXT4-fs (loop3): dirty_blocks=2
[  293.992217][ T8791] EXT4-fs (loop3): Block reservation details
[  294.031234][ T8791] EXT4-fs (loop3): i_reserved_data_blocks=2
[  294.104899][ T8797] device syzkaller0 entered promiscuous mode
[  294.357517][ T8812] loop3: detected capacity change from 0 to 512
[  294.384461][ T8812] EXT4-fs (loop3): Ignoring removed oldalloc option
[  294.472337][ T8812] EXT4-fs (loop3): Ignoring removed nobh option
[  294.624034][ T8812] 
[  294.626441][ T8812] ======================================================
[  294.633486][ T8812] WARNING: possible circular locking dependency detected
[  294.640555][ T8812] syzkaller #0 Not tainted
[  294.644998][ T8812] ------------------------------------------------------
[  294.652034][ T8812] syz.3.1326/8812 is trying to acquire lock:
[  294.658045][ T8812] ffff88807dee0c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0
[  294.668333][ T8812] 
[  294.668333][ T8812] but task is already holding lock:
[  294.675732][ T8812] ffff88805f0d4690 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700
[  294.685608][ T8812] 
[  294.685608][ T8812] which lock already depends on the new lock.
[  294.685608][ T8812] 
[  294.696041][ T8812] 
[  294.696041][ T8812] the existing dependency chain (in reverse order) is:
[  294.705078][ T8812] 
[  294.705078][ T8812] -> #1 (&ei->xattr_sem){++++}-{3:3}:
[  294.712677][ T8812]        down_write+0x38/0x60
[  294.717535][ T8812]        ext4_destroy_inline_data+0x24/0xe0
[  294.723474][ T8812]        ext4_writepages+0x670/0x2df0
[  294.728887][ T8812]        do_writepages+0x476/0x6e0
[  294.734039][ T8812]        filemap_fdatawrite_wbc+0x1eb/0x240
[  294.739972][ T8812]        filemap_flush+0xd4/0x130
[  294.745026][ T8812]        ext4_convert_inline_data+0x18b/0x5f0
[  294.751120][ T8812]        ext4_page_mkwrite+0x1df/0x1250
[  294.756690][ T8812]        do_page_mkwrite+0x168/0x3c0
[  294.761983][ T8812]        wp_page_shared+0x16b/0x6d0
[  294.767207][ T8812]        handle_mm_fault+0x1f06/0x4410
[  294.772681][ T8812]        do_user_addr_fault+0x489/0xc80
[  294.778359][ T8812]        exc_page_fault+0x60/0x100
[  294.783777][ T8812]        asm_exc_page_fault+0x22/0x30
[  294.789234][ T8812] 
[  294.789234][ T8812] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}:
[  294.797691][ T8812]        __lock_acquire+0x2c42/0x7d10
[  294.803370][ T8812]        lock_acquire+0x19e/0x400
[  294.808428][ T8812]        percpu_down_read+0x46/0x1b0
[  294.813726][ T8812]        ext4_writepages+0x20f/0x2df0
[  294.819121][ T8812]        do_writepages+0x476/0x6e0
[  294.824248][ T8812]        __writeback_single_inode+0x153/0xda0
[  294.830335][ T8812]        writeback_single_inode+0x3cb/0x8e0
[  294.836244][ T8812]        write_inode_now+0x23b/0x2c0
[  294.841545][ T8812]        iput+0x5ab/0x8a0
[  294.845889][ T8812]        ext4_xattr_set_entry+0x34f4/0x3ea0
[  294.851794][ T8812]        ext4_xattr_block_set+0x4fd/0x2d20
[  294.857624][ T8812]        ext4_expand_extra_isize_ea+0xf3f/0x19b0
[  294.863958][ T8812]        __ext4_expand_extra_isize+0x301/0x3e0
[  294.870128][ T8812]        __ext4_mark_inode_dirty+0x469/0x700
[  294.876151][ T8812]        ext4_evict_inode+0xa8d/0x1090
[  294.881616][ T8812]        evict+0x4c9/0x8d0
[  294.886052][ T8812]        ext4_orphan_cleanup+0xad2/0x1320
[  294.891780][ T8812]        ext4_fill_super+0x8d6e/0x94f0
[  294.897254][ T8812]        mount_bdev+0x287/0x3c0
[  294.902122][ T8812]        legacy_get_tree+0xe6/0x180
[  294.907332][ T8812]        vfs_get_tree+0x88/0x270
[  294.912287][ T8812]        do_new_mount+0x24a/0xa40
[  294.917327][ T8812]        __se_sys_mount+0x2e3/0x3d0
[  294.922537][ T8812]        do_syscall_64+0x4c/0xa0
[  294.927486][ T8812]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  294.933912][ T8812] 
[  294.933912][ T8812] other info that might help us debug this:
[  294.933912][ T8812] 
[  294.944148][ T8812]  Possible unsafe locking scenario:
[  294.944148][ T8812] 
[  294.951613][ T8812]        CPU0                    CPU1
[  294.956983][ T8812]        ----                    ----
[  294.962366][ T8812]   lock(&ei->xattr_sem);
[  294.966711][ T8812]                                lock(&sbi->s_writepages_rwsem);
[  294.974437][ T8812]                                lock(&ei->xattr_sem);
[  294.981298][ T8812]   lock(&sbi->s_writepages_rwsem);
[  294.986509][ T8812] 
[  294.986509][ T8812]  *** DEADLOCK ***
[  294.986509][ T8812] 
[  294.994657][ T8812] 3 locks held by syz.3.1326/8812:
[  294.999787][ T8812]  #0: ffff88807dee40e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[  295.009936][ T8812]  #1: ffff88807dee4650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x44a/0x1090
[  295.019430][ T8812]  #2: ffff88805f0d4690 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700
[  295.029721][ T8812] 
[  295.029721][ T8812] stack backtrace:
[  295.035615][ T8812] CPU: 1 PID: 8812 Comm: syz.3.1326 Not tainted syzkaller #0
[  295.043003][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  295.053081][ T8812] Call Trace:
[  295.056380][ T8812]  <TASK>
[  295.059323][ T8812]  dump_stack_lvl+0x188/0x250
[  295.064044][ T8812]  ? load_image+0x400/0x400
[  295.068601][ T8812]  ? show_regs_print_info+0x20/0x20
[  295.073823][ T8812]  ? print_circular_bug+0x12b/0x1a0
[  295.079043][ T8812]  check_noncircular+0x296/0x330
[  295.084000][ T8812]  ? check_path+0x40/0x40
[  295.088341][ T8812]  ? look_up_lock_class+0x71/0x110
[  295.093475][ T8812]  ? add_chain_block+0x940/0x940
[  295.098426][ T8812]  ? lockdep_lock+0xf1/0x1f0
[  295.103031][ T8812]  ? __bfs+0x2a3/0x5c0
[  295.107144][ T8812]  ? mark_lock+0x94/0x320
[  295.111483][ T8812]  ? _find_first_zero_bit+0xce/0xf0
[  295.116704][ T8812]  __lock_acquire+0x2c42/0x7d10
[  295.121578][ T8812]  ? mark_lock+0x94/0x320
[  295.125923][ T8812]  ? verify_lock_unused+0x140/0x140
[  295.131136][ T8812]  ? __lock_acquire+0x13bc/0x7d10
[  295.136186][ T8812]  lock_acquire+0x19e/0x400
[  295.140709][ T8812]  ? ext4_writepages+0x20f/0x2df0
[  295.145748][ T8812]  ? __might_sleep+0xf0/0xf0
[  295.150342][ T8812]  ? read_lock_is_recursive+0x10/0x10
[  295.155811][ T8812]  ? mark_lock+0x94/0x320
[  295.160152][ T8812]  ? __lock_acquire+0x13bc/0x7d10
[  295.165226][ T8812]  percpu_down_read+0x46/0x1b0
[  295.170099][ T8812]  ? ext4_writepages+0x20f/0x2df0
[  295.175145][ T8812]  ext4_writepages+0x20f/0x2df0
[  295.180016][ T8812]  ? mark_lock+0x94/0x320
[  295.184369][ T8812]  ? verify_lock_unused+0x140/0x140
[  295.189582][ T8812]  ? mark_lock+0x94/0x320
[  295.193928][ T8812]  ? ext4_readpage+0x2e0/0x2e0
[  295.198712][ T8812]  ? __lock_acquire+0x13bc/0x7d10
[  295.203757][ T8812]  ? rcu_lock_release+0x5/0x20
[  295.208561][ T8812]  ? lock_chain_count+0x20/0x20
[  295.213437][ T8812]  ? ext4_readpage+0x2e0/0x2e0
[  295.218213][ T8812]  do_writepages+0x476/0x6e0
[  295.222859][ T8812]  ? __writepage+0x130/0x130
[  295.227461][ T8812]  ? writeback_single_inode+0x3c0/0x8e0
[  295.233015][ T8812]  ? __lock_acquire+0x7d10/0x7d10
[  295.238051][ T8812]  ? do_raw_spin_lock+0x128/0x2f0
[  295.243113][ T8812]  __writeback_single_inode+0x153/0xda0
[  295.248672][ T8812]  writeback_single_inode+0x3cb/0x8e0
[  295.254061][ T8812]  ? write_inode_now+0x2c0/0x2c0
[  295.259012][ T8812]  write_inode_now+0x23b/0x2c0
[  295.263784][ T8812]  ? bdi_split_work_to_wbs+0x8a0/0x8a0
[  295.269263][ T8812]  ? do_raw_spin_unlock+0x11d/0x230
[  295.274474][ T8812]  iput+0x5ab/0x8a0
[  295.278297][ T8812]  ext4_xattr_set_entry+0x34f4/0x3ea0
[  295.283697][ T8812]  ? ext4_xattr_ibody_set+0x330/0x330
[  295.289095][ T8812]  ? rcu_is_watching+0x11/0xa0
[  295.293870][ T8812]  ? kmem_cache_free+0x14c/0x210
[  295.298835][ T8812]  ? mb_cache_entry_delete_or_get+0x1bd/0x1e0
[  295.304917][ T8812]  ext4_xattr_block_set+0x4fd/0x2d20
[  295.310244][ T8812]  ? ext4_get_inode_loc+0x120/0x120
[  295.315453][ T8812]  ? __ext4_xattr_check_block+0x7d8/0x8d0
[  295.321184][ T8812]  ? ext4_xattr_block_find+0x500/0x500
[  295.326658][ T8812]  ? ext4_xattr_block_find+0x433/0x500
[  295.332134][ T8812]  ext4_expand_extra_isize_ea+0xf3f/0x19b0
[  295.337963][ T8812]  __ext4_expand_extra_isize+0x301/0x3e0
[  295.343619][ T8812]  __ext4_mark_inode_dirty+0x469/0x700
[  295.349100][ T8812]  ext4_evict_inode+0xa8d/0x1090
[  295.354051][ T8812]  ? _raw_spin_unlock+0x24/0x40
[  295.358916][ T8812]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  295.364824][ T8812]  ? do_raw_spin_unlock+0x11d/0x230
[  295.370033][ T8812]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  295.375942][ T8812]  evict+0x4c9/0x8d0
[  295.379853][ T8812]  ? proc_nr_inodes+0x320/0x320
[  295.384721][ T8812]  ? do_raw_spin_unlock+0x11d/0x230
[  295.389932][ T8812]  ? _raw_spin_unlock+0x24/0x40
[  295.394793][ T8812]  ? iput+0x706/0x8a0
[  295.398789][ T8812]  ext4_orphan_cleanup+0xad2/0x1320
[  295.404003][ T8812]  ? ext4_orphan_del+0xbf0/0xbf0
[  295.408958][ T8812]  ? errseq_check_and_advance+0x62/0x120
[  295.414616][ T8812]  ext4_fill_super+0x8d6e/0x94f0
[  295.419570][ T8812]  ? format_decode+0x898/0x1300
[  295.424447][ T8812]  ? ext4_mount+0x40/0x40
[  295.428787][ T8812]  ? set_blocksize+0x1f3/0x370
[  295.433562][ T8812]  ? sb_set_blocksize+0xa5/0xe0
[  295.438423][ T8812]  mount_bdev+0x287/0x3c0
[  295.442764][ T8812]  ? ext4_mount+0x40/0x40
[  295.447108][ T8812]  legacy_get_tree+0xe6/0x180
[  295.451800][ T8812]  ? ext4_errno_to_code+0x160/0x160
[  295.457011][ T8812]  vfs_get_tree+0x88/0x270
[  295.461439][ T8812]  do_new_mount+0x24a/0xa40
[  295.465952][ T8812]  __se_sys_mount+0x2e3/0x3d0
[  295.470667][ T8812]  ? __x64_sys_mount+0xc0/0xc0
[  295.475451][ T8812]  ? lockdep_hardirqs_on+0x94/0x140
[  295.480663][ T8812]  ? __x64_sys_mount+0x1c/0xc0
[  295.485446][ T8812]  do_syscall_64+0x4c/0xa0
[  295.489876][ T8812]  ? clear_bhb_loop+0x30/0x80
[  295.494572][ T8812]  ? clear_bhb_loop+0x30/0x80
[  295.499264][ T8812]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  295.505171][ T8812] RIP: 0033:0x7f11774f204a
[  295.509612][ T8812] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.529254][ T8812] RSP: 002b:00007f1175749e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  295.537703][ T8812] RAX: ffffffffffffffda RBX: 00007f1175749ee0 RCX: 00007f11774f204a
[  295.545689][ T8812] RDX: 00002000000001c0 RSI: 0000200000000b80 RDI: 00007f1175749ea0
[  295.553927][ T8812] RBP: 00002000000001c0 R08: 00007f1175749ee0 R09: 0000000000800744
[  295.561966][ T8812] R10: 0000000000800744 R11: 0000000000000246 R12: 0000200000000b80
[  295.569961][ T8812] R13: 00007f1175749ea0 R14: 000000000000047a R15: 0000200000000300
[  295.577960][ T8812]  </TASK>
[  295.625604][ T8812] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.1326: iget: bad extra_isize 90 (inode size 256)
[  295.642118][ T8812] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1326: error while reading EA inode 11 err=-117
[  295.681650][ T8812] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.1326: iget: bad extra_isize 90 (inode size 256)
[  295.721144][ T8812] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1326: error while reading EA inode 11 err=-117
[  295.743359][ T8812] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.1326: iget: bad extra_isize 90 (inode size 256)
[  295.765159][ T8812] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1326: error while reading EA inode 18 err=-117
[  295.781378][ T8812] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.1326: iget: bad extra_isize 90 (inode size 256)
[  295.797730][ T8812] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1326: error while reading EA inode 18 err=-117
[  295.813077][ T8812] EXT4-fs (loop3): 1 orphan inode deleted
[  295.818991][ T8812] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,oldalloc,debug_want_extra_isize=0x000000000000005a,nobh,quota,nodiscard,grpid,,errors=continue. Quota mode: writeback.