last executing test programs:

12m39.726696799s ago: executing program 0 (id=5761):
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4)

12m39.670735714s ago: executing program 0 (id=5764):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x9, 0xff, 0x16c0, 0x5505, 0x8b, 0x0, 0x10000009, 'syz0\x00'})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3)
writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0x1}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610a", 0x70}], 0x2)
sendmsg(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x248}, 0x20008044)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff00006a1724ef456949140001f0ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x94)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3, 0x1}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x0, 0x4, {0x3, 0x6}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1, 0x6}}, {0x23b, 0x2, {0x2, 0x4}}, {0x810, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x1, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xf475, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x0, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x4, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x2}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r6 = socket(0x200000000000011, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
bind$packet(r6, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)

12m38.713323592s ago: executing program 0 (id=5772):
socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={<r0=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r0, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)

12m38.643246317s ago: executing program 0 (id=5773):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x17, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000200)="112233", 0x3, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000003c0), 0x10}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, &(0x7f0000000880)=0x8)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0)

12m38.554170341s ago: executing program 0 (id=5774):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

12m38.490399806s ago: executing program 0 (id=5776):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)

12m23.460814051s ago: executing program 32 (id=5776):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$eJzs3M9PHFUcAPDv7rJQ2iJY649iq2g1En9AoT/swUuNJh40MdFDjScE2mC3xRRMbEMUPeDRNPFuPJr4F3ixXox6MvGqd2NCDBerpzWzO0O3sAssLGx1P59k4L19b/Ped2be7ts3OxtAxxpK/uQiDkbErxHRX83eWWGo+u/WysLk3ysLk7kol9/4M1ep99fKwmRWNXvegWqmXN6g3aW3IyZKpemraX50/vJ7o3PXrj83c3ni4vTF6SvjZ8+eOnms+8z46ZbE2Zf0dfDD2aNHXnnrxmuT52+88+PXSX8PpuW1cbTKUHXv1vVkqxtrs76adK6rjR2hKYWISA5XsTL++6MQvatl/fHyJ23tHLCryuV8uadx8WIZ+B9LJupAJ8re6JPPv9m2R1OPu8LyuVhdx7iVbtWSrsindYrpZ6TdMBQR5xf/+SLZYpfWIQAAat08FxHP1pv/5eOBmnr3pNeGBiLi3og4FBH3RcThiLg/olL3wYh4qMn2114hWT//KfdvK7AtSuZ/L6TXtu6c/2WzvxgopLm+SvzF3IWZ0vSJdJ8MR7EnyY9t0MZ3L/3yWaOy2vlfsiXtZ3PBtB9/dK1ZoJuamJ/YScy1lj+OGOyqF39udc6bzI+PRMTgNtuYefqro43KNo9/Ay2YlJe/jHiqevwXY038mVzD65Njz58ZPz26L0rTJ0azs2K9n35eer1R+zuKvwWWb5Zjf93zfzX+gdy+iLlr1y9VrtfONd/G0m+fNvxMs93zvzv3ZiXdnT72wcT8/NWxiO7cq+sfH7/93Cyf1U/O/+Hj9cf/obi9Jx6OiOQkPhYRj0TEo2nfH4uIxyPi+Abx//DiE+82H/8Gq/ItlMQ/tdnxj9rj33yicOn7b5qPP5Mc/1OV1HD6yFZe/7bawZ3sOwAAAPivyFe+A5/Lj6ym8/mRkep3+A/H/nxpdm7+mQuz71+Zqn5XfiCK+Wylq79mPXQsXRvO8uNr8ifTdePPC72V/MjkbGmq3cFDhzvQYPwnfi+0u3fArnO/FnQu4x86l/EPncv4h85l/EPnqjf+P2pDP4C9t8n7f+9e9QPYe+b/0LmMf+hcxj90pIb3xud3dMu/RJsS33bv7Lcatp6I/F0S8q4neiNiL9oqRjXRExE1RV1b/jGLbSZ66ha1+5UJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4NAAD//xwt370=")
getdents64(0xffffffffffffffff, 0x0, 0x0)

8m0.952392281s ago: executing program 2 (id=9444):
r0 = socket(0x10, 0x80002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum={0x3, 0x3, 0x0, 0xf, 0x4000000, [{0x7}, {0x1, 0x7}, {0xc, 0x7}]}]}, {0x0, [0x5f, 0x30, 0x2e]}}, 0x0, 0x41, 0x0, 0x0, 0x100000}, 0x28)
socket$netlink(0x10, 0x3, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd24, 0x25dfdbfb, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1a0008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0xb, 0xc033, @remote}}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdf}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448dd, &(0x7f0000000700))
sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4080)

8m0.60310844s ago: executing program 2 (id=9445):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

8m0.537308666s ago: executing program 2 (id=9446):
openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0)
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r1=>0x0})
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x98, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x68, 0x2, [@TCA_BASIC_ACT={0x64, 0x3, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8000}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x98}}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xfdef)

8m0.482744105s ago: executing program 2 (id=9447):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

8m0.482389081s ago: executing program 2 (id=9448):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
shutdown(r0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_opts(r2, 0x29, 0x4d, 0x0, &(0x7f00000001c0))

8m0.27175434s ago: executing program 2 (id=9449):
readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/40, 0x28}, {&(0x7f00000010c0)=""/4116, 0x1014}, {&(0x7f00000036c0)=""/4063, 0xfdf}], 0x3)

8m0.087865317s ago: executing program 33 (id=9449):
readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/40, 0x28}, {&(0x7f00000010c0)=""/4116, 0x1014}, {&(0x7f00000036c0)=""/4063, 0xfdf}], 0x3)

7m52.575907778s ago: executing program 1 (id=9521):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)="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", 0xfca}], 0x1}}], 0x1, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248)

7m52.36947799s ago: executing program 1 (id=9525):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002100850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m52.310216652s ago: executing program 1 (id=9527):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r2, 0x7}, 0x14, 0x0}}], 0x1, 0x80)

7m52.213412709s ago: executing program 1 (id=9528):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

7m52.022238236s ago: executing program 1 (id=9529):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

7m51.783080816s ago: executing program 1 (id=9530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

7m51.782870251s ago: executing program 34 (id=9530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

4m14.246766168s ago: executing program 5 (id=12767):
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10001, &(0x7f0000000080), 0x1, 0x582, &(0x7f00000007c0)="$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")
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x200880, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303031302c696f636861727365743d63703826302c636f6465706067653d63703836392c756d61736b3d30303030303030303030303011303030303030303030352c00c79171ba9d1584581e9c788189fc3c0410102a18887aac0df9b041b8d67acb6e6996569ead8e7b691c41495f80a6ac8f6f346dbbfd2fbe5e2d4a59b3a6400be9619f0c16498c6951c9613615c0149089d7011a15318953cbf46c9ff643bb2bab"], 0x4, 0x358, &(0x7f00000001c0)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x4, 0xffffffffffffffff, 0x3ffffc, 0x1, 0x0, 0x0, 0x2401})

4m14.10248273s ago: executing program 5 (id=12770):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r0, @ANYBLOB="eb91"], 0x40c}}, 0x0)

4m13.871831156s ago: executing program 5 (id=12776):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000480)={0x4c, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfff7fffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x21, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}, @perr={0x84, 0x15, {0x7, 0x1, [{{0x0, 0x1}, @broadcast, 0x6, @value, 0x2f}]}}]}]}, 0x4c}}, 0x10)

4m13.801455421s ago: executing program 5 (id=12777):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc, '\x00', 0x0, r0, 0x1, 0x1}, 0x50)

4m13.741057731s ago: executing program 5 (id=12779):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x80000001)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

4m13.671256731s ago: executing program 5 (id=12780):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48081)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xa}, 0x4b)

3m58.641915657s ago: executing program 35 (id=12780):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48081)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xa}, 0x4b)

3.87178537s ago: executing program 6 (id=16540):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x5})

3.799486085s ago: executing program 6 (id=16542):
unshare(0x22020600)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000", 0x4)

3.674419548s ago: executing program 6 (id=16545):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f000000c840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.495166554s ago: executing program 6 (id=16548):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@orlov}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r0, &(0x7f0000000000)='6', 0x32)
epoll_create(0x4c7)

3.3586154s ago: executing program 4 (id=16550):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x6, 0x4, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.358189651s ago: executing program 6 (id=16552):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.235521429s ago: executing program 4 (id=16554):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280060006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

3.101790441s ago: executing program 4 (id=16555):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000010201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d20000060003000015"], 0xc8}}, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0xe)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000340))
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x65, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854)
splice(r4, 0x0, r6, 0x0, 0x3000, 0x100000000000000d)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)

2.671956411s ago: executing program 6 (id=16556):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000000), 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x2c, 0x0, 0x0, 0x0, "5eb95d332554a486fef9a435c07eed823733a0bdd7c32ce4568f9cd83d926c956495cd34c8cf77cf881acf418672f5e52af248404413ce564b92cec00e0349a9"}, 0x48}, 0x1, 0x0, 0x0, 0x20008814}, 0x40)

2.507508704s ago: executing program 36 (id=16556):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000000), 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x2c, 0x0, 0x0, 0x0, "5eb95d332554a486fef9a435c07eed823733a0bdd7c32ce4568f9cd83d926c956495cd34c8cf77cf881acf418672f5e52af248404413ce564b92cec00e0349a9"}, 0x48}, 0x1, 0x0, 0x0, 0x20008814}, 0x40)

2.450158853s ago: executing program 4 (id=16559):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}]}, 0x1, 0xbaf, &(0x7f0000000bc0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5")
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x4)

1.879603229s ago: executing program 3 (id=16562):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)

1.439032587s ago: executing program 4 (id=16563):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

888.711644ms ago: executing program 3 (id=16564):
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166)
creat(&(0x7f0000000140)='./file0\x00', 0x49)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
unlink(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f00000001c0)='./file0\x00')
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

721.005195ms ago: executing program 3 (id=16565):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000002c0), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1200, 0x0)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffc, &(0x7f0000000040))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00')
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r3, &(0x7f0000000100)="05000000010001", 0x7)
write(r3, &(0x7f0000000340)="0dbcac5639487907372b6eae4a000000010001", 0x13)
write(r3, &(0x7f0000000200)="34000000070001020304050601", 0xd)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
close(0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$rxrpc(r4, &(0x7f0000000640)=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24)

422.003105ms ago: executing program 4 (id=16566):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x86, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256"}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000000000000e20000000500000406000100fc00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4004)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d40)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x4e22, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@remote, @in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e24, @in6=@empty}}]}, 0xbc}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x68, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '2\x00:\x00\x00\x00\x00D\x00\x00\x00\x00\x00\x00\x00\x00'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, r11, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c090)
socket$igmp(0x2, 0x3, 0x2)

370.449279ms ago: executing program 3 (id=16567):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@bh}]}, 0xfe, 0x55f, &(0x7f0000000f00)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

190.233274ms ago: executing program 3 (id=16568):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="7638a56a88000000010000000000", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 3 (id=16569):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r2)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100273d7000ffdb7132172f0000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000c0000000000"], 0x44}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000008c0)={'macvlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "6bd5cd02564f02baa6f0bebffdfae62afcb1fd7181456afb25ec29769ccfbab0", "3fd06d696e33edf2548c47a6ff34f2e528f318224e461f3782aae3d6a86be6b4", "168bc75f89267387dfe8f726649ab412c8ca4807008b540eccf6cbc20509a46a", "d010df955837f8ba675efba4d90d6941354f8b57b5e0f933bebd023dfd8556c7", "4c5138db1c62592d6f60fe50e538dc820105b16582d6dee0c3fd5fa47b3a23c0", "e9115c6266848f73be343ab4", 0x3, 0x9, 0x3, 0xfa, 0x5}})
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)

kernel console output (not intermixed with test programs):

" ino=14 res=0 errno=0
[ 1234.460182][T14653] F2FS-fs (loop6): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x355/0xdc0
[ 1234.465895][T14653] F2FS-fs (loop6): inject page get in f2fs_filemap_get_folio of __f2fs_find_entry+0x648/0xf60
[ 1234.466317][T14653] F2FS-fs (loop6): inject checkpoint error in f2fs_balance_fs of f2fs_create+0x554/0x6c0
[ 1234.477941][T14653] CPU: 1 UID: 0 PID: 14653 Comm: syz.6.15778 Not tainted syzkaller #0 PREEMPT(full) 
[ 1234.477971][T14653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1234.477979][T14653] Call Trace:
[ 1234.477985][T14653]  <TASK>
[ 1234.477989][T14653]  dump_stack_lvl+0xe8/0x150
[ 1234.478007][T14653]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1234.478021][T14653]  ? f2fs_create+0x554/0x6c0
[ 1234.478031][T14653]  f2fs_balance_fs+0x349/0x810
[ 1234.478045][T14653]  ? f2fs_create+0x554/0x6c0
[ 1234.478053][T14653]  ? __pfx_f2fs_balance_fs+0x10/0x10
[ 1234.478063][T14653]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1234.478077][T14653]  ? __pfx_wake_up_var+0x10/0x10
[ 1234.478093][T14653]  ? do_raw_spin_unlock+0x4d/0x200
[ 1234.478106][T14653]  f2fs_create+0x554/0x6c0
[ 1234.478118][T14653]  ? __pfx_f2fs_create+0x10/0x10
[ 1234.478131][T14653]  ? inode_permission+0x2bc/0x5f0
[ 1234.478141][T14653]  ? bpf_lsm_inode_create+0x9/0x20
[ 1234.478152][T14653]  lookup_open+0xc0d/0x1a40
[ 1234.478175][T14653]  path_openat+0x677/0x1d60
[ 1234.478195][T14653]  do_file_open+0x23e/0x4a0
[ 1234.478209][T14653]  ? __pfx_do_file_open+0x10/0x10
[ 1234.478229][T14653]  ? _raw_spin_unlock+0x28/0x50
[ 1234.478239][T14653]  ? alloc_fd+0x651/0x6c0
[ 1234.478253][T14653]  do_sys_openat2+0x115/0x200
[ 1234.478263][T14653]  ? __se_sys_futex+0x3a8/0x450
[ 1234.478273][T14653]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1234.478284][T14653]  ? rcu_is_watching+0x16/0xb0
[ 1234.478297][T14653]  __x64_sys_open+0x11e/0x150
[ 1234.478310][T14653]  do_syscall_64+0x166/0x520
[ 1234.478323][T14653]  ? trace_irq_disable+0x3b/0x140
[ 1234.478331][T14653]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1234.478342][T14653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1234.478350][T14653] RIP: 0033:0x7f690079e159
[ 1234.478359][T14653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1234.478366][T14653] RSP: 002b:00007f69015bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1234.478376][T14653] RAX: ffffffffffffffda RBX: 00007f6900a25fa0 RCX: 00007f690079e159
[ 1234.478398][T14653] RDX: 0000000000000176 RSI: 00000000001ad941 RDI: 0000200000000100
[ 1234.478405][T14653] RBP: 00007f690083506b R08: 0000000000000000 R09: 0000000000000000
[ 1234.478410][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1234.478415][T14653] R13: 00007f6900a26038 R14: 00007f6900a25fa0 R15: 00007fffd5cd23a8
[ 1234.478430][T14653]  </TASK>
[ 1234.479200][T14653] F2FS-fs (loop6): Stopped filesystem due to reason: 1
[ 1234.605423][T14673] loop3: detected capacity change from 0 to 128
[ 1234.807824][ T4994] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1234.869233][T14574] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1234.869282][T14574] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1234.888979][T22268] net_ratelimit: 34 callbacks suppressed
[ 1234.889057][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1234.997726][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1235.025787][T14692] syzkaller1: entered promiscuous mode
[ 1235.025901][T14692] syzkaller1: entered allmulticast mode
[ 1235.127920][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1235.225496][T14698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1235.229809][T14698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1235.238248][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1235.347741][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1235.455168][T14710] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1235.459348][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1235.471574][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15804'.
[ 1235.471643][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15804'.
[ 1235.536611][T14715] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15806'.
[ 1235.543110][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15806'.
[ 1235.568137][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1235.678393][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1235.789084][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1235.844755][T14720] __nla_validate_parse: 1 callbacks suppressed
[ 1235.846985][T14720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15807'.
[ 1235.850467][T14720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15807'.
[ 1235.870461][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15807'.
[ 1235.899239][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1236.061898][   T33] audit: type=1800 audit(1790637174.257:172): pid=14720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.15807" name="memory.events" dev="tmpfs" ino=10812 res=0 errno=0
[ 1236.172539][T14741] loop3: detected capacity change from 0 to 64
[ 1236.211616][T14741] hfs: request for non-existent node 65538 in B*Tree
[ 1236.214974][T14741] hfs: request for non-existent node 65538 in B*Tree
[ 1236.218788][T14741] hfs: fail to find leaf node: node ID 65538
[ 1236.620027][T14767] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15830'.
[ 1236.624132][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15830'.
[ 1236.652812][T14760] loop6: detected capacity change from 0 to 32768
[ 1236.721373][T14760] JBD2: Ignoring recovery information on journal
[ 1236.725492][T14760] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75
[ 1236.729341][T14760] JBD2: bad block at offset 32
[ 1236.735595][T14760] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1236.813250][ T7263] ocfs2: Unmounting device (7,6) on (node local)
[ 1237.119271][T14785] SQUASHFS error: Failed to read block 0x0: -5
[ 1237.274676][T14791] loop4: detected capacity change from 0 to 1024
[ 1237.344684][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.344749][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.354680][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.354917][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.356964][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.356978][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.359535][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.359548][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.364646][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.364659][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.398086][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.398140][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.399591][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.399601][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.400677][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.400686][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.401712][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.401720][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.409814][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.409852][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.411429][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.411441][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.413095][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.413106][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.414633][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.414643][T14791] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1237.674910][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15843'.
[ 1237.764117][T14805] syz_tun: entered allmulticast mode
[ 1237.825648][T14808] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15847'.
[ 1237.825756][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15847'.
[ 1237.838951][T14804] syz_tun: left allmulticast mode
[ 1238.171804][T14829] netlink: 56 bytes leftover after parsing attributes in process `syz.6.15857'.
[ 1238.171986][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15857'.
[ 1238.520766][T14833] loop6: detected capacity change from 0 to 40427
[ 1238.527153][T14833] F2FS-fs: heap/no_heap options were deprecated
[ 1238.531103][T14833] F2FS-fs (loop6): build fault injection rate: 19
[ 1238.531118][T14833] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[ 1238.559279][T14833] F2FS-fs (loop6): invalid crc value
[ 1238.574807][T14833] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1238.643360][T14833] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1238.649252][T14833] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1238.726151][T14833] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1238.753208][T14833] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1238.754793][   T33] audit: type=1800 audit(1790637176.947:173): pid=14833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15859" name="file1" dev="loop6" ino=14 res=0 errno=0
[ 1238.875248][ T7263] syz-executor: attempt to access beyond end of device
[ 1238.875248][ T7263] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1238.883038][T14866] loop4: detected capacity change from 0 to 1024
[ 1238.917522][ T7263] CPU: 0 UID: 0 PID: 7263 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1238.917566][ T7263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1238.917576][ T7263] Call Trace:
[ 1238.917583][ T7263]  <TASK>
[ 1238.917591][ T7263]  dump_stack_lvl+0xe8/0x150
[ 1238.917619][ T7263]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1238.917640][ T7263]  f2fs_write_end_bio+0x1211/0x16e0
[ 1238.917662][ T7263]  ? blkg_put+0x22/0x240
[ 1238.917688][ T7263]  __submit_merged_bio+0x258/0x6a0
[ 1238.917704][ T7263]  ? rcu_is_watching+0x16/0xb0
[ 1238.917725][ T7263]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1238.917747][ T7263]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1238.917779][ T7263]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1238.917798][ T7263]  ? __lock_acquire+0x6df/0x2e50
[ 1238.917863][ T7263]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1238.917900][ T7263]  ? is_bpf_text_address+0x26/0x2b0
[ 1238.917926][ T7263]  ? arch_stack_walk+0xfb/0x150
[ 1238.917963][ T7263]  ? add_lock_to_list+0xc7/0x100
[ 1238.917981][ T7263]  ? lockdep_unlock+0x5c/0xd0
[ 1238.917999][ T7263]  ? __lock_acquire+0x14b9/0x2e50
[ 1238.918032][ T7263]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1238.918058][ T7263]  ? do_raw_spin_unlock+0x4d/0x200
[ 1238.918076][ T7263]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1238.918094][ T7263]  do_writepages+0x338/0x560
[ 1238.918123][ T7263]  ? do_raw_spin_unlock+0x4d/0x200
[ 1238.918144][ T7263]  filemap_fdatawrite+0x1e9/0x2f0
[ 1238.918161][ T7263]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1238.918208][ T7263]  ? do_raw_spin_unlock+0x4d/0x200
[ 1238.918229][ T7263]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1238.918264][ T7263]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1238.918281][ T7263]  ? __lock_acquire+0x6df/0x2e50
[ 1238.918317][ T7263]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1238.918371][ T7263]  kill_f2fs_super+0x2dd/0x700
[ 1238.918397][ T7263]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1238.918424][ T7263]  ? call_rcu+0x64d/0x8b0
[ 1238.918439][ T7263]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1238.918469][ T7263]  deactivate_locked_super+0xbc/0x110
[ 1238.918489][ T7263]  cleanup_mnt+0x3d3/0x460
[ 1238.918512][ T7263]  task_work_run+0x1d9/0x270
[ 1238.918530][ T7263]  ? __pfx_task_work_run+0x10/0x10
[ 1238.918552][ T7263]  exit_to_user_mode_loop+0x204/0x770
[ 1238.918567][ T7263]  ? rcu_is_watching+0x16/0xb0
[ 1238.918585][ T7263]  do_syscall_64+0x328/0x520
[ 1238.918603][ T7263]  ? trace_irq_disable+0x3b/0x140
[ 1238.918615][ T7263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1238.918633][ T7263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1238.918647][ T7263] RIP: 0033:0x7f690079f397
[ 1238.918662][ T7263] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1238.918673][ T7263] RSP: 002b:00007fffd5cd1618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1238.918690][ T7263] RAX: 0000000000000000 RBX: 00007f69008344bb RCX: 00007f690079f397
[ 1238.918700][ T7263] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd5cd16d0
[ 1238.918708][ T7263] RBP: 00007fffd5cd16d0 R08: 00007fffd5cd26d0 R09: 00000000ffffffff
[ 1238.918718][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd5cd2760
[ 1238.918726][ T7263] R13: 00007f69008344bb R14: 000000000012e68c R15: 00007fffd5cd27a0
[ 1238.918749][ T7263]  </TASK>
[ 1239.038230][ T7263] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1239.176620][T14870] syzkaller0: entered promiscuous mode
[ 1239.179785][T14870] syzkaller0: entered allmulticast mode
[ 1239.527842][    C1] openvswitch: cpu_id mismatch with handler threads
[ 1239.575913][T14880] bond28: option mode: unable to set because the bond device is up
[ 1239.593994][T14880] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1239.635518][T14880] bond28: (slave bond0): making interface the new active one
[ 1239.652515][T14880] bond28: (slave bond0): Enslaving as an active interface with an up link
[ 1239.696004][T14885] bond28 (unregistering): (slave bond0): Releasing active interface
[ 1239.710117][T14885] bond28 (unregistering): Released all slaves
[ 1239.799978][T14887] syzkaller0: entered promiscuous mode
[ 1239.802389][T14887] syzkaller0: entered allmulticast mode
[ 1240.344775][T14912] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1240.504156][T14904] loop6: detected capacity change from 0 to 40427
[ 1240.504977][T14904] F2FS-fs: heap/no_heap options were deprecated
[ 1240.505891][T14904] F2FS-fs (loop6): build fault injection rate: 19
[ 1240.505905][T14904] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[ 1240.506621][T14904] F2FS-fs (loop6): invalid crc value
[ 1240.514276][T14904] f2fs_printk: 2 callbacks suppressed
[ 1240.514285][T14904] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1240.581533][T14904] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1240.584201][T14904] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1240.595228][T14904] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1240.620873][T14904] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1240.643319][T14904] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[ 1240.806025][T14917] syz.6.15891: attempt to access beyond end of device
[ 1240.806025][T14917] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[ 1240.894287][ T7263] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90
[ 1240.894358][ T7263] F2FS-fs (loop6): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[ 1240.906098][ T7263] syz-executor: attempt to access beyond end of device
[ 1240.906098][ T7263] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 1240.913681][ T7263] CPU: 1 UID: 0 PID: 7263 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1240.913712][ T7263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1240.913719][ T7263] Call Trace:
[ 1240.913724][ T7263]  <TASK>
[ 1240.913729][ T7263]  dump_stack_lvl+0xe8/0x150
[ 1240.913747][ T7263]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1240.913761][ T7263]  f2fs_write_end_bio+0x1211/0x16e0
[ 1240.913775][ T7263]  ? blkg_put+0x22/0x240
[ 1240.913791][ T7263]  __submit_merged_bio+0x258/0x6a0
[ 1240.913801][ T7263]  ? rcu_is_watching+0x16/0xb0
[ 1240.913838][ T7263]  f2fs_submit_merged_write+0x27d/0x380
[ 1240.913857][ T7263]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[ 1240.913880][ T7263]  f2fs_sync_node_pages+0x1055/0x1210
[ 1240.913897][ T7263]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[ 1240.913929][ T7263]  f2fs_write_checkpoint+0xf91/0x2710
[ 1240.913941][ T7263]  ? __lock_acquire+0x6df/0x2e50
[ 1240.913962][ T7263]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1240.913994][ T7263]  kill_f2fs_super+0x2dd/0x700
[ 1240.914009][ T7263]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1240.914024][ T7263]  ? call_rcu+0x64d/0x8b0
[ 1240.914033][ T7263]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1240.914051][ T7263]  deactivate_locked_super+0xbc/0x110
[ 1240.914063][ T7263]  cleanup_mnt+0x3d3/0x460
[ 1240.914077][ T7263]  task_work_run+0x1d9/0x270
[ 1240.914089][ T7263]  ? __pfx_task_work_run+0x10/0x10
[ 1240.914101][ T7263]  exit_to_user_mode_loop+0x204/0x770
[ 1240.914111][ T7263]  ? rcu_is_watching+0x16/0xb0
[ 1240.914121][ T7263]  do_syscall_64+0x328/0x520
[ 1240.914133][ T7263]  ? trace_irq_disable+0x3b/0x140
[ 1240.914141][ T7263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1240.914151][ T7263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1240.914160][ T7263] RIP: 0033:0x7f690079f397
[ 1240.914169][ T7263] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1240.914177][ T7263] RSP: 002b:00007fffd5cd1618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1240.914187][ T7263] RAX: 0000000000000000 RBX: 00007f69008344bb RCX: 00007f690079f397
[ 1240.914193][ T7263] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd5cd16d0
[ 1240.914198][ T7263] RBP: 00007fffd5cd16d0 R08: 00007fffd5cd26d0 R09: 00000000ffffffff
[ 1240.914204][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd5cd2760
[ 1240.914209][ T7263] R13: 00007f69008344bb R14: 000000000012ee83 R15: 00007fffd5cd27a0
[ 1240.914222][ T7263]  </TASK>
[ 1240.914605][ T7263] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1240.914661][ T7263] CPU: 1 UID: 0 PID: 7263 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1240.914671][ T7263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1240.914676][ T7263] Call Trace:
[ 1240.914680][ T7263]  <TASK>
[ 1240.914683][ T7263]  dump_stack_lvl+0xe8/0x150
[ 1240.914697][ T7263]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1240.914710][ T7263]  f2fs_write_end_bio+0x1211/0x16e0
[ 1240.914730][ T7263]  __submit_merged_bio+0x258/0x6a0
[ 1240.914739][ T7263]  ? rcu_is_watching+0x16/0xb0
[ 1240.914751][ T7263]  f2fs_submit_merged_write+0x27d/0x380
[ 1240.914763][ T7263]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[ 1240.914778][ T7263]  f2fs_sync_node_pages+0x1055/0x1210
[ 1240.914795][ T7263]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[ 1240.914851][ T7263]  f2fs_write_checkpoint+0xf91/0x2710
[ 1240.914864][ T7263]  ? __lock_acquire+0x6df/0x2e50
[ 1240.914885][ T7263]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1240.914923][ T7263]  kill_f2fs_super+0x2dd/0x700
[ 1240.914938][ T7263]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1240.914954][ T7263]  ? call_rcu+0x64d/0x8b0
[ 1240.914962][ T7263]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1240.914979][ T7263]  deactivate_locked_super+0xbc/0x110
[ 1240.914991][ T7263]  cleanup_mnt+0x3d3/0x460
[ 1240.915004][ T7263]  task_work_run+0x1d9/0x270
[ 1240.915014][ T7263]  ? __pfx_task_work_run+0x10/0x10
[ 1240.915027][ T7263]  exit_to_user_mode_loop+0x204/0x770
[ 1240.915035][ T7263]  ? rcu_is_watching+0x16/0xb0
[ 1240.915046][ T7263]  do_syscall_64+0x328/0x520
[ 1240.915057][ T7263]  ? trace_irq_disable+0x3b/0x140
[ 1240.915064][ T7263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1240.915075][ T7263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1240.915083][ T7263] RIP: 0033:0x7f690079f397
[ 1240.915091][ T7263] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1240.915098][ T7263] RSP: 002b:00007fffd5cd1618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1240.915106][ T7263] RAX: 0000000000000000 RBX: 00007f69008344bb RCX: 00007f690079f397
[ 1240.915112][ T7263] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd5cd16d0
[ 1240.915117][ T7263] RBP: 00007fffd5cd16d0 R08: 00007fffd5cd26d0 R09: 00000000ffffffff
[ 1240.915122][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd5cd2760
[ 1240.915127][ T7263] R13: 00007f69008344bb R14: 000000000012ee83 R15: 00007fffd5cd27a0
[ 1240.915140][ T7263]  </TASK>
[ 1240.915144][ T7263] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1242.728380][    C1] net_ratelimit: 33 callbacks suppressed
[ 1242.731040][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1244.267758][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1244.377847][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1244.491004][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1244.599180][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1244.631974][T14926] loop3: detected capacity change from 0 to 32768
[ 1244.650346][T14926] JBD2: Ignoring recovery information on journal
[ 1244.655522][T14926] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75
[ 1244.662150][T14926] JBD2: bad block at offset 32
[ 1244.666958][T14926] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1244.724244][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1244.743627][T21453] ocfs2: Unmounting device (7,3) on (node local)
[ 1244.803753][T14952] loop4: detected capacity change from 0 to 64
[ 1244.838324][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1244.942348][T14961] loop6: detected capacity change from 0 to 64
[ 1244.950885][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1245.078666][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1245.188968][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1245.200790][T14977] loop3: detected capacity change from 0 to 64
[ 1245.744863][T14995] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1245.748680][T14997] __nla_validate_parse: 4 callbacks suppressed
[ 1245.748848][T14997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15931'.
[ 1245.748886][T14997] netlink: 'syz.3.15931': attribute type 1 has an invalid length.
[ 1245.764426][T14995] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1245.954529][T15003] loop3: detected capacity change from 0 to 64
[ 1246.782139][T15045] hsr_slave_0: left promiscuous mode
[ 1246.785149][T15051] loop4: detected capacity change from 0 to 1024
[ 1246.792405][T15045] hsr_slave_1: left promiscuous mode
[ 1246.804001][T15053] loop3: detected capacity change from 0 to 64
[ 1246.850560][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.850596][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.856927][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.856960][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.874187][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.874280][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.878700][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.878710][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.879527][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.879535][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.925999][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.927609][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.941760][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1246.946057][T15051] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1247.035495][T15059] loop3: detected capacity change from 0 to 64
[ 1247.124957][T15063] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1247.147830][T15066] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1247.154616][T15066] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1247.223123][T15065] hfs: walked past end of dir
[ 1247.319028][T15068] loop6: detected capacity change from 0 to 64
[ 1247.473753][T15076] syzkaller0: entered promiscuous mode
[ 1247.473880][T15076] syzkaller0: entered allmulticast mode
[ 1247.751133][T10025] net_ratelimit: 20 callbacks suppressed
[ 1247.751223][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1247.868402][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1247.981378][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1248.088538][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1248.199241][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1248.226216][T15105] loop3: detected capacity change from 0 to 64
[ 1248.319214][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1248.438030][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1248.548850][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1248.658166][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1248.769579][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1249.172046][T15115] overlayfs: overlapping lowerdir path
[ 1249.421731][T15125] overlayfs: overlapping lowerdir path
[ 1249.425664][T15125] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1249.426171][T15125] overlayfs: overlapping lowerdir path
[ 1249.735587][T15143] overlayfs: overlapping lowerdir path
[ 1249.741108][T15143] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1249.741159][T15143] overlayfs: overlapping lowerdir path
[ 1249.899593][T15152] set_capacity_and_notify: 1 callbacks suppressed
[ 1249.902471][T15152] loop4: detected capacity change from 0 to 64
[ 1249.979321][T15156] syzkaller0: entered promiscuous mode
[ 1249.981729][T15156] syzkaller0: entered allmulticast mode
[ 1249.986712][T15156] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1250.185694][T15160] loop3: detected capacity change from 0 to 1024
[ 1250.275437][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.275498][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.322705][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.322768][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.342560][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.342618][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.349258][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.349273][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.366149][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.366245][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.375251][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.375311][T15160] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1250.452348][T15169] loop6: detected capacity change from 0 to 64
[ 1250.493288][T15171] ref_ctr_offset mismatch. inode: 0xd2 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[ 1250.693449][T15179] syz_tun: entered allmulticast mode
[ 1250.747528][T15179] syz_tun: left allmulticast mode
[ 1250.909905][T15185] loop4: detected capacity change from 0 to 512
[ 1250.942154][T15185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1250.948542][T15185] ext4 filesystem being mounted at /2149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1250.962070][T15185] cgroup: Unknown subsys name 'cpuset'
[ 1250.992812][T30703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1251.092458][T15194] loop6: detected capacity change from 0 to 1024
[ 1251.106277][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.106321][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.108241][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.108249][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.109337][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.109345][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.112368][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.112376][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.113108][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.113115][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.114362][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.114369][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.115055][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.115062][T15194] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1251.438056][T15198] loop3: detected capacity change from 0 to 40427
[ 1251.438893][T15198] F2FS-fs: heap/no_heap options were deprecated
[ 1251.445300][T15198] F2FS-fs (loop3): build fault injection rate: 19
[ 1251.445348][T15198] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[ 1251.453607][T15198] F2FS-fs (loop3): invalid crc value
[ 1251.483601][T15198] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1251.560970][T15198] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1251.578335][T15198] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1251.602562][T15198] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1251.613000][T15198] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1251.693946][T21453] syz-executor: attempt to access beyond end of device
[ 1251.693946][T21453] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 1251.706153][T21453] CPU: 0 UID: 0 PID: 21453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1251.706196][T21453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1251.706205][T21453] Call Trace:
[ 1251.706212][T21453]  <TASK>
[ 1251.706218][T21453]  dump_stack_lvl+0xe8/0x150
[ 1251.706245][T21453]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1251.706267][T21453]  f2fs_write_end_bio+0x1211/0x16e0
[ 1251.706288][T21453]  ? blkg_put+0x22/0x240
[ 1251.706315][T21453]  __submit_merged_bio+0x258/0x6a0
[ 1251.706332][T21453]  ? rcu_is_watching+0x16/0xb0
[ 1251.706352][T21453]  f2fs_submit_merged_write+0x27d/0x380
[ 1251.706372][T21453]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[ 1251.706400][T21453]  f2fs_sync_node_pages+0x1055/0x1210
[ 1251.706431][T21453]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[ 1251.706477][T21453]  f2fs_write_checkpoint+0xf91/0x2710
[ 1251.706496][T21453]  ? __lock_acquire+0x6df/0x2e50
[ 1251.706532][T21453]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1251.706589][T21453]  kill_f2fs_super+0x2dd/0x700
[ 1251.706615][T21453]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1251.706643][T21453]  ? call_rcu+0x64d/0x8b0
[ 1251.706659][T21453]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1251.706690][T21453]  deactivate_locked_super+0xbc/0x110
[ 1251.706710][T21453]  cleanup_mnt+0x3d3/0x460
[ 1251.706735][T21453]  task_work_run+0x1d9/0x270
[ 1251.706753][T21453]  ? __pfx_task_work_run+0x10/0x10
[ 1251.706775][T21453]  exit_to_user_mode_loop+0x204/0x770
[ 1251.706818][T21453]  ? rcu_is_watching+0x16/0xb0
[ 1251.706839][T21453]  do_syscall_64+0x328/0x520
[ 1251.706857][T21453]  ? trace_irq_disable+0x3b/0x140
[ 1251.706871][T21453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1251.706910][T21453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1251.706925][T21453] RIP: 0033:0x7f6f2519f397
[ 1251.706939][T21453] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1251.706951][T21453] RSP: 002b:00007ffd6690f5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1251.706973][T21453] RAX: 0000000000000000 RBX: 00007f6f252344bb RCX: 00007f6f2519f397
[ 1251.706983][T21453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6690f690
[ 1251.706991][T21453] RBP: 00007ffd6690f690 R08: 00007ffd66910690 R09: 00000000ffffffff
[ 1251.707000][T21453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd66910720
[ 1251.707009][T21453] R13: 00007f6f252344bb R14: 00000000001318b8 R15: 00007ffd66910760
[ 1251.707032][T21453]  </TASK>
[ 1251.760393][T21453] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1251.760491][T21453] CPU: 1 UID: 0 PID: 21453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1251.760502][T21453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1251.760507][T21453] Call Trace:
[ 1251.760511][T21453]  <TASK>
[ 1251.760515][T21453]  dump_stack_lvl+0xe8/0x150
[ 1251.760530][T21453]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1251.760543][T21453]  f2fs_write_end_bio+0x1211/0x16e0
[ 1251.760564][T21453]  __submit_merged_bio+0x258/0x6a0
[ 1251.760573][T21453]  ? rcu_is_watching+0x16/0xb0
[ 1251.760585][T21453]  f2fs_submit_merged_write+0x27d/0x380
[ 1251.760597][T21453]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[ 1251.760621][T21453]  f2fs_sync_node_pages+0x1055/0x1210
[ 1251.760649][T21453]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[ 1251.760695][T21453]  f2fs_write_checkpoint+0xf91/0x2710
[ 1251.760713][T21453]  ? __lock_acquire+0x6df/0x2e50
[ 1251.760749][T21453]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1251.760835][T21453]  kill_f2fs_super+0x2dd/0x700
[ 1251.760863][T21453]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1251.760891][T21453]  ? call_rcu+0x64d/0x8b0
[ 1251.760905][T21453]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1251.760935][T21453]  deactivate_locked_super+0xbc/0x110
[ 1251.760955][T21453]  cleanup_mnt+0x3d3/0x460
[ 1251.760972][T21453]  task_work_run+0x1d9/0x270
[ 1251.760985][T21453]  ? __pfx_task_work_run+0x10/0x10
[ 1251.760998][T21453]  exit_to_user_mode_loop+0x204/0x770
[ 1251.761006][T21453]  ? rcu_is_watching+0x16/0xb0
[ 1251.761017][T21453]  do_syscall_64+0x328/0x520
[ 1251.761028][T21453]  ? trace_irq_disable+0x3b/0x140
[ 1251.761036][T21453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1251.761047][T21453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1251.761055][T21453] RIP: 0033:0x7f6f2519f397
[ 1251.761064][T21453] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1251.761071][T21453] RSP: 002b:00007ffd6690f5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1251.761081][T21453] RAX: 0000000000000000 RBX: 00007f6f252344bb RCX: 00007f6f2519f397
[ 1251.761087][T21453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6690f690
[ 1251.761092][T21453] RBP: 00007ffd6690f690 R08: 00007ffd66910690 R09: 00000000ffffffff
[ 1251.761098][T21453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd66910720
[ 1251.761103][T21453] R13: 00007f6f252344bb R14: 00000000001318b8 R15: 00007ffd66910760
[ 1251.761116][T21453]  </TASK>
[ 1251.761120][T21453] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1251.978241][T15202] loop4: detected capacity change from 0 to 40427
[ 1251.981510][T15202] F2FS-fs: heap/no_heap options were deprecated
[ 1251.986206][T15202] F2FS-fs (loop4): build fault injection rate: 19
[ 1251.986329][T15202] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[ 1251.987319][T15202] F2FS-fs (loop4): invalid crc value
[ 1252.004138][T15202] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1252.145673][T15218] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[ 1252.163650][T15202] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1252.213069][T15202] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1252.227088][T15202] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1252.266952][T15202] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1252.272693][T15202] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[ 1252.315348][T30703] syz-executor: attempt to access beyond end of device
[ 1252.315348][T30703] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1252.321329][T30703] CPU: 1 UID: 0 PID: 30703 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1252.321365][T30703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1252.321374][T30703] Call Trace:
[ 1252.321382][T30703]  <TASK>
[ 1252.321387][T30703]  dump_stack_lvl+0xe8/0x150
[ 1252.321411][T30703]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1252.321427][T30703]  f2fs_write_end_bio+0x1211/0x16e0
[ 1252.321444][T30703]  ? blkg_put+0x22/0x240
[ 1252.321465][T30703]  __submit_merged_bio+0x258/0x6a0
[ 1252.321477][T30703]  ? rcu_is_watching+0x16/0xb0
[ 1252.321499][T30703]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1252.321516][T30703]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1252.321541][T30703]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1252.321556][T30703]  ? __lock_acquire+0x6df/0x2e50
[ 1252.321585][T30703]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1252.321598][T30703]  ? is_bpf_text_address+0x26/0x2b0
[ 1252.321618][T30703]  ? arch_stack_walk+0xfb/0x150
[ 1252.321647][T30703]  ? add_lock_to_list+0xc7/0x100
[ 1252.321660][T30703]  ? lockdep_unlock+0x5c/0xd0
[ 1252.321674][T30703]  ? __lock_acquire+0x14b9/0x2e50
[ 1252.321699][T30703]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1252.321719][T30703]  ? do_raw_spin_unlock+0x4d/0x200
[ 1252.321733][T30703]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1252.321747][T30703]  do_writepages+0x338/0x560
[ 1252.321770][T30703]  ? do_raw_spin_unlock+0x4d/0x200
[ 1252.321815][T30703]  filemap_fdatawrite+0x1e9/0x2f0
[ 1252.321830][T30703]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1252.321866][T30703]  ? do_raw_spin_unlock+0x4d/0x200
[ 1252.321883][T30703]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1252.321906][T30703]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1252.321920][T30703]  ? __lock_acquire+0x6df/0x2e50
[ 1252.321948][T30703]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1252.321993][T30703]  kill_f2fs_super+0x2dd/0x700
[ 1252.322012][T30703]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1252.322033][T30703]  ? call_rcu+0x64d/0x8b0
[ 1252.322045][T30703]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1252.322068][T30703]  deactivate_locked_super+0xbc/0x110
[ 1252.322083][T30703]  cleanup_mnt+0x3d3/0x460
[ 1252.322101][T30703]  task_work_run+0x1d9/0x270
[ 1252.322115][T30703]  ? __pfx_task_work_run+0x10/0x10
[ 1252.322132][T30703]  exit_to_user_mode_loop+0x204/0x770
[ 1252.322143][T30703]  ? rcu_is_watching+0x16/0xb0
[ 1252.322157][T30703]  do_syscall_64+0x328/0x520
[ 1252.322172][T30703]  ? trace_irq_disable+0x3b/0x140
[ 1252.322181][T30703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.322195][T30703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.322206][T30703] RIP: 0033:0x7f978279f397
[ 1252.322217][T30703] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1252.322227][T30703] RSP: 002b:00007ffe024cd008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1252.322240][T30703] RAX: 0000000000000000 RBX: 00007f97828344bb RCX: 00007f978279f397
[ 1252.322247][T30703] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe024cd0c0
[ 1252.322254][T30703] RBP: 00007ffe024cd0c0 R08: 00007ffe024ce0c0 R09: 00000000ffffffff
[ 1252.322262][T30703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe024ce150
[ 1252.322268][T30703] R13: 00007f97828344bb R14: 0000000000131b47 R15: 00007ffe024ce190
[ 1252.322286][T30703]  </TASK>
[ 1252.333689][T30703] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1252.685150][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16034'.
[ 1252.735402][T15232] syz_tun: entered allmulticast mode
[ 1252.752136][T15233] syzkaller0: entered promiscuous mode
[ 1252.754839][T15233] syzkaller0: entered allmulticast mode
[ 1252.758366][T10025] net_ratelimit: 33 callbacks suppressed
[ 1252.758454][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1252.761642][T15232] syz_tun: left allmulticast mode
[ 1252.868184][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1252.927267][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16037'.
[ 1252.934124][T15238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16037'.
[ 1252.938123][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16037'.
[ 1252.942256][T15238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16037'.
[ 1252.946063][T15238] netlink: 'syz.3.16037': attribute type 6 has an invalid length.
[ 1252.977339][T15241] loop4: detected capacity change from 0 to 64
[ 1252.980262][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1253.088373][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1253.120874][T15243] hfs: walked past end of dir
[ 1253.197992][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1253.307809][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1253.418475][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1253.527607][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1253.638246][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1253.748975][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1254.543925][T15308] loop6: detected capacity change from 0 to 1024
[ 1254.564914][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.564966][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.574852][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.574894][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.576007][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.576026][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.587001][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.587070][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.591947][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.591959][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.611272][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.611333][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.620404][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.622066][T15308] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1254.887594][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1255.105167][T15328] syzkaller0: entered promiscuous mode
[ 1255.105232][T15328] syzkaller0: entered allmulticast mode
[ 1255.404599][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16081'.
[ 1255.404656][T15342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16081'.
[ 1255.404716][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16081'.
[ 1255.459882][T15344] SET target dimension over the limit!
[ 1255.603112][T15354] loop3: detected capacity change from 0 to 8
[ 1255.669584][T15354] SQUASHFS error: Failed to read block 0x26067d: -5
[ 1255.669638][T15354] SQUASHFS error: Unable to read metadata cache entry [26067d]
[ 1255.670531][T15354] SQUASHFS error: Unable to read directory block [26067d:ffff]
[ 1255.730043][T15360] loop3: detected capacity change from 0 to 64
[ 1255.815768][T15350] loop6: detected capacity change from 0 to 32768
[ 1255.819366][T15350] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.16087 (15350)
[ 1255.838134][T15350] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1255.841543][T15350] BTRFS info (device loop6): using sha256 checksum algorithm
[ 1255.921418][T15350] BTRFS info (device loop6): enabling ssd optimizations
[ 1255.921456][T15350] BTRFS info (device loop6): turning on async discard
[ 1255.921503][T15350] BTRFS info (device loop6): enabling free space tree
[ 1255.946993][T15364] hfs: walked past end of dir
[ 1255.951690][T15350] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1256.005008][ T7263] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1256.161072][T15388] loop6: detected capacity change from 0 to 256
[ 1256.165336][T15388] exfat: Deprecated parameter 'utf8'
[ 1256.165399][T15388] exfat: Deprecated parameter 'utf8'
[ 1256.165483][T15388] exfat: Deprecated parameter 'namecase'
[ 1256.226618][T15388] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d)
[ 1256.285074][T15390] loop4: detected capacity change from 0 to 8
[ 1256.560958][T15393] loop4: detected capacity change from 0 to 64
[ 1256.649744][T15397] loop3: detected capacity change from 0 to 1024
[ 1256.699361][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.699420][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.701507][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.701520][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.716418][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.716465][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.720733][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.734906][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.740824][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.740883][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.745539][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.745553][T15397] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1256.891760][T15404] syz.3.16104(15404): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 1256.909030][T15406] loop6: detected capacity change from 0 to 128
[ 1256.927844][T15406] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1256.932992][T15406] ext4 filesystem being mounted at /1078/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1256.945422][T15406] EXT4-fs warning (device loop6): ext4_group_add:1735: No reserved GDT blocks, can't resize
[ 1256.983683][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16107'.
[ 1256.993883][ T7263] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1257.003632][T15411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16107'.
[ 1257.081531][   T33] audit: type=1804 audit(1790637195.277:174): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.16109" name="/newroot/2177/cgroup.controllers" dev="tmpfs" ino=11280 res=1 errno=0
[ 1257.081614][   T33] audit: type=1800 audit(1790637195.277:175): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16109" name="cgroup.controllers" dev="tmpfs" ino=11280 res=0 errno=0
[ 1257.123999][T15415] loop6: detected capacity change from 0 to 4096
[ 1257.128985][T15415] EXT4-fs: Ignoring removed nobh option
[ 1257.151006][T15415] EXT4-fs: Ignoring removed bh option
[ 1257.165072][T15415] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1257.187929][T15415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1257.291656][   T33] audit: type=1800 audit(1790637195.487:176): pid=15415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.16108" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1257.328838][T15425] syzkaller1: entered promiscuous mode
[ 1257.330680][T15425] syzkaller1: entered allmulticast mode
[ 1257.410011][ T7263] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1257.522431][T15431] geneve6: entered promiscuous mode
[ 1257.531623][T15435] loop4: detected capacity change from 0 to 256
[ 1257.541819][T22265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 54685 - 0
[ 1257.542069][T22265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 54685 - 0
[ 1257.542117][T22265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 54685 - 0
[ 1257.542163][T22265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 54685 - 0
[ 1257.762519][T15444] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[ 1257.790312][T15444] ntfs3(loop4): ino=1a, mi_enum_attr
[ 1257.790422][T15444] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[ 1257.888907][   T13] net_ratelimit: 35 callbacks suppressed
[ 1257.888977][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1258.005515][T15459] hfsplus: Bad value for 'umask'
[ 1258.010321][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1258.078635][T15462] hfs: unable to locate alternate MDB
[ 1258.081443][T15462] hfs: continuing without an alternate MDB
[ 1258.118013][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1258.227979][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1258.243734][T15467] syz.4.16131: attempt to access beyond end of device
[ 1258.243734][T15467] loop4: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[ 1258.249580][T15467] Buffer I/O error on dev loop4, logical block 512, async page read
[ 1258.253296][T15467] syz.4.16131: attempt to access beyond end of device
[ 1258.253296][T15467] loop4: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[ 1258.260852][T15467] Buffer I/O error on dev loop4, logical block 56576, async page read
[ 1258.271535][T15467] syz.4.16131: attempt to access beyond end of device
[ 1258.271535][T15467] loop4: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[ 1258.289271][T15467] Buffer I/O error on dev loop4, logical block 512, async page read
[ 1258.292699][T15467] syz.4.16131: attempt to access beyond end of device
[ 1258.292699][T15467] loop4: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[ 1258.298068][T15467] Buffer I/O error on dev loop4, logical block 56576, async page read
[ 1258.338724][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1258.405654][T15469] EXT4-fs: Ignoring removed bh option
[ 1258.422200][T15469] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[ 1258.447583][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1258.458116][T15469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1258.558343][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1258.563585][T15459] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1258.584734][T15459] XFS (loop6): Ending clean mount
[ 1258.669343][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1258.698891][T21453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1258.756078][ T7263] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1258.805370][T15487] syzkaller0: entered promiscuous mode
[ 1258.808416][T15487] syzkaller0: entered allmulticast mode
[ 1262.789219][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1262.912614][T15514] set_capacity_and_notify: 6 callbacks suppressed
[ 1262.922174][T15514] loop4: detected capacity change from 0 to 256
[ 1262.926556][T15510] loop3: detected capacity change from 0 to 4096
[ 1262.927705][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1262.931792][T15514] exfat: Deprecated parameter 'utf8'
[ 1262.931807][T15514] exfat: Deprecated parameter 'utf8'
[ 1262.931853][T15514] exfat: Deprecated parameter 'namecase'
[ 1262.940978][T15510] EXT4-fs: Ignoring removed nobh option
[ 1262.941013][T15510] EXT4-fs: Ignoring removed bh option
[ 1262.943024][T15510] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1262.952121][T15510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1262.965396][T15514] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d)
[ 1263.006096][T21453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1263.046271][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1263.084730][T15521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1263.087036][T15522] __nla_validate_parse: 1 callbacks suppressed
[ 1263.087048][T15522] netlink: 128 bytes leftover after parsing attributes in process `syz.6.16148'.
[ 1263.148691][T22271] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1263.167137][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16148'.
[ 1263.234109][   T33] audit: type=1800 audit(1790637201.427:177): pid=15523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.16148" name="memory.events" dev="tmpfs" ino=5712 res=0 errno=0
[ 1263.257730][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1263.368538][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1263.458590][T15540] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16157'.
[ 1263.477914][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1263.518135][T15544] syz_tun: entered allmulticast mode
[ 1264.382572][T15547] syz_tun: left allmulticast mode
[ 1264.398062][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1264.479496][T15563] loop4: detected capacity change from 0 to 256
[ 1264.495650][T15563] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[ 1264.520273][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1264.628050][T22271] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1264.717312][T15577] loop3: detected capacity change from 0 to 256
[ 1264.722548][T15577] exfat: Deprecated parameter 'namecase'
[ 1264.725087][T15577] exfat: Deprecated parameter 'namecase'
[ 1264.732213][T15577] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[ 1264.980203][T15594] loop3: detected capacity change from 0 to 64
[ 1265.108977][T15599] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16181'.
[ 1265.190578][T15591] loop4: detected capacity change from 0 to 32768
[ 1265.198351][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16181'.
[ 1265.232182][T15591] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[ 1265.236255][T15591] JBD2: Ignoring recovery information on journal
[ 1265.304386][T15591] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1265.422839][T30703] ocfs2: Unmounting device (7,4) on (node local)
[ 1265.495891][T15613] loop6: detected capacity change from 0 to 64
[ 1265.631276][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16188'.
[ 1265.922355][T15620] loop4: detected capacity change from 0 to 40427
[ 1265.927347][T15620] F2FS-fs: heap/no_heap options were deprecated
[ 1265.931437][T15620] F2FS-fs (loop4): build fault injection rate: 19
[ 1265.933878][T15620] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[ 1265.938097][T15620] F2FS-fs (loop4): invalid crc value
[ 1265.945997][T15620] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1265.974576][T15620] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1265.980692][T15620] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1265.996098][T15620] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1266.054226][T15620] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1266.064845][T15620] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90
[ 1266.071834][T15620] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[ 1266.095842][T15620] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of do_checkpoint+0x233b/0x3f20
[ 1266.113680][T15620] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[ 1266.628324][T15633] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1266.871503][T15631] loop3: detected capacity change from 0 to 32768
[ 1266.896295][T15631] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[ 1266.902627][T15631] JBD2: Ignoring recovery information on journal
[ 1266.946935][T15631] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1266.963453][T15659] loop4: detected capacity change from 0 to 64
[ 1267.128545][T21453] ocfs2: Unmounting device (7,3) on (node local)
[ 1267.362912][T15676] EXT4-fs: Ignoring removed nobh option
[ 1267.365308][T15676] EXT4-fs: Ignoring removed bh option
[ 1267.368387][T15676] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1267.385478][T15676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1267.444209][T21453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1267.660933][T15690] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1267.715612][T15696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1267.723797][T15696] hsr_slave_0: left promiscuous mode
[ 1267.971563][T15713] set_capacity_and_notify: 1 callbacks suppressed
[ 1267.971644][T15713] loop4: detected capacity change from 0 to 256
[ 1267.972929][T15713] exfat: Deprecated parameter 'namecase'
[ 1267.972958][T15713] exfat: Deprecated parameter 'namecase'
[ 1267.975915][T15713] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[ 1267.998564][T22272] net_ratelimit: 28 callbacks suppressed
[ 1267.998638][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1268.108570][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1268.135624][T15725] loop3: detected capacity change from 0 to 4096
[ 1268.136270][T15725] EXT4-fs: Ignoring removed nobh option
[ 1268.136321][T15725] EXT4-fs: Ignoring removed bh option
[ 1268.138192][T15725] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1268.141854][T15725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1268.172873][T21453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1268.218863][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1268.334376][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1268.390382][T15738] loop3: detected capacity change from 0 to 256
[ 1268.394107][T15738] exfat: Deprecated parameter 'namecase'
[ 1268.398333][T15738] exfat: Deprecated parameter 'namecase'
[ 1268.415686][T15738] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[ 1268.451905][T22271] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1268.571783][T22271] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1268.667039][T15752] loop6: detected capacity change from 0 to 128
[ 1268.673914][T15752] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[ 1268.673997][T15752] System zones: 1-3, 19-19, 35-36
[ 1268.675607][T15752] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1268.676003][T15752] ext4 filesystem being mounted at /1116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1268.687926][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1268.716334][ T7263] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1268.798259][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1268.893051][T15751] loop3: detected capacity change from 0 to 32768
[ 1268.896096][T15751] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16232 (15751)
[ 1268.904610][T15751] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1268.904659][T15751] BTRFS info (device loop3): using blake2b checksum algorithm
[ 1268.908841][T22271] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1268.962472][T15751] BTRFS info (device loop3): enabling ssd optimizations
[ 1268.962541][T15751] BTRFS info (device loop3): turning on async discard
[ 1268.962582][T15751] BTRFS info (device loop3): enabling free space tree
[ 1268.962615][T15751] BTRFS info (device loop3): use zstd compression, level 3
[ 1269.019068][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1269.144130][T15755] loop6: detected capacity change from 0 to 32768
[ 1269.179457][T15755] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1269.229592][   T33] audit: type=1800 audit(1790637207.427:178): pid=15751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16232" name="file1" dev="loop3" ino=260 res=0 errno=0
[ 1269.507281][T15776] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[ 1269.511024][ T7263] ocfs2: Unmounting device (7,6) on (node local)
[ 1269.683306][T21453] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1269.754279][T15780] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1269.936613][T15784] loop4: detected capacity change from 0 to 128
[ 1269.962859][T15784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[ 1269.962987][T15784] System zones: 1-3, 19-19, 35-36
[ 1269.969959][T15784] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1269.974528][T15784] ext4 filesystem being mounted at /2218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1270.070367][T30703] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1270.263867][T15793] loop3: detected capacity change from 0 to 4096
[ 1270.273311][T15793] EXT4-fs: Ignoring removed nobh option
[ 1270.273391][T15793] EXT4-fs: Ignoring removed bh option
[ 1270.274340][T15793] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1270.314380][T15793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1270.376131][T21453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1270.440578][T15806] netlink: 'syz.3.16248': attribute type 9 has an invalid length.
[ 1270.478778][T15806] netlink: 'syz.3.16248': attribute type 6 has an invalid length.
[ 1270.482071][T15806] netlink: 'syz.3.16248': attribute type 7 has an invalid length.
[ 1270.486319][T15806] netlink: 'syz.3.16248': attribute type 8 has an invalid length.
[ 1270.930716][T15836] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1270.930817][T15836] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1270.936834][T15836] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1270.948122][T15836] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1271.095346][T15836] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1271.865926][T15870] loop3: detected capacity change from 0 to 40427
[ 1271.879576][T15870] F2FS-fs: heap/no_heap options were deprecated
[ 1271.886888][T15870] F2FS-fs (loop3): build fault injection rate: 19
[ 1271.889880][T15870] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[ 1271.895318][T15870] F2FS-fs (loop3): invalid crc value
[ 1271.901604][T15887] netlink: 'syz.6.16285': attribute type 4 has an invalid length.
[ 1271.920612][T15870] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1271.990978][T15870] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1272.011575][T15870] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1272.066312][T15870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1272.076596][T15870] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1272.095497][T15870] F2FS-fs (loop3): inject page get in f2fs_filemap_get_folio of __f2fs_find_entry+0x648/0xf60
[ 1272.103600][T15870] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_create+0x554/0x6c0
[ 1272.108544][T15870] CPU: 1 UID: 0 PID: 15870 Comm: syz.3.16277 Not tainted syzkaller #0 PREEMPT(full) 
[ 1272.108590][T15870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1272.108600][T15870] Call Trace:
[ 1272.108607][T15870]  <TASK>
[ 1272.108614][T15870]  dump_stack_lvl+0xe8/0x150
[ 1272.108641][T15870]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1272.108662][T15870]  ? f2fs_create+0x554/0x6c0
[ 1272.108677][T15870]  f2fs_balance_fs+0x349/0x810
[ 1272.108705][T15870]  ? f2fs_create+0x554/0x6c0
[ 1272.108719][T15870]  ? __pfx_f2fs_balance_fs+0x10/0x10
[ 1272.108737][T15870]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1272.108788][T15870]  ? __pfx_wake_up_var+0x10/0x10
[ 1272.108815][T15870]  ? do_raw_spin_unlock+0x4d/0x200
[ 1272.108835][T15870]  f2fs_create+0x554/0x6c0
[ 1272.108853][T15870]  ? __pfx_f2fs_create+0x10/0x10
[ 1272.108874][T15870]  ? inode_permission+0x2bc/0x5f0
[ 1272.108891][T15870]  ? bpf_lsm_inode_create+0x9/0x20
[ 1272.108910][T15870]  vfs_create+0x2be/0x450
[ 1272.108934][T15870]  filename_mknodat+0x3e8/0x660
[ 1272.108953][T15870]  ? __pfx_filename_mknodat+0x10/0x10
[ 1272.108971][T15870]  ? do_getname+0x151/0x250
[ 1272.108989][T15870]  __se_sys_mknod+0x3a/0x150
[ 1272.109005][T15870]  do_syscall_64+0x166/0x520
[ 1272.109022][T15870]  ? trace_irq_disable+0x3b/0x140
[ 1272.109060][T15870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1272.109080][T15870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1272.109095][T15870] RIP: 0033:0x7f6f2519e159
[ 1272.109110][T15870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1272.109122][T15870] RSP: 002b:00007f6f25fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[ 1272.109139][T15870] RAX: ffffffffffffffda RBX: 00007f6f25425fa0 RCX: 00007f6f2519e159
[ 1272.109150][T15870] RDX: 0000000000000001 RSI: 0000000000000020 RDI: 0000200000000000
[ 1272.109159][T15870] RBP: 00007f6f2523506b R08: 0000000000000000 R09: 0000000000000000
[ 1272.109168][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1272.109177][T15870] R13: 00007f6f25426038 R14: 00007f6f25425fa0 R15: 00007ffd66910368
[ 1272.109200][T15870]  </TASK>
[ 1272.206419][T15870] F2FS-fs (loop3): Stopped filesystem due to reason: 1
[ 1272.932161][T15935] loop6: detected capacity change from 0 to 1024
[ 1273.090211][T22268] net_ratelimit: 35 callbacks suppressed
[ 1273.090297][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1273.208945][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1273.212585][T15954] siw: device registration error -23
[ 1273.327988][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1273.421842][T15962] siw: device registration error -23
[ 1273.449098][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1273.561187][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1273.596044][T15956] loop4: detected capacity change from 0 to 32768
[ 1273.632835][T15956] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1273.717683][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1273.822394][T30703] ocfs2: Unmounting device (7,4) on (node local)
[ 1273.832799][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1273.938833][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1274.040651][T15981] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16319'.
[ 1274.049789][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1274.076819][T15983] tipc: Started in network mode
[ 1274.076891][T15983] tipc: Node identity ac14140f, cluster identity 4711
[ 1274.077125][T15983] tipc: New replicast peer: 255.255.255.255
[ 1274.096331][T15983] tipc: Enabled bearer <udp:syz1>, priority 10
[ 1274.112463][T15985] tipc: New replicast peer: 255.255.255.255
[ 1274.115402][T15985] tipc: Enabled bearer <udp:syz1>, priority 10
[ 1274.158102][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1274.173560][T15987] loop4: detected capacity change from 0 to 1024
[ 1274.177271][T15987] EXT4-fs: Ignoring removed bh option
[ 1274.184324][T15987] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[ 1274.215625][T15987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1274.265303][T30703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1274.321067][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16326'.
[ 1274.773081][T16018] netlink: 'syz.6.16335': attribute type 4 has an invalid length.
[ 1275.103007][   T33] audit: type=1804 audit(1790637213.297:179): pid=16042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.16344" name="/newroot/2244/cgroup.controllers" dev="tmpfs" ino=11633 res=1 errno=0
[ 1275.103163][   T33] audit: type=1800 audit(1790637213.297:180): pid=16042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16344" name="cgroup.controllers" dev="tmpfs" ino=11633 res=0 errno=0
[ 1275.187629][ T5729] tipc: Node number set to 2886997007
[ 1275.430710][T16063] syzkaller0: entered promiscuous mode
[ 1275.433138][T16063] syzkaller0: entered allmulticast mode
[ 1275.770499][T16066] loop6: detected capacity change from 0 to 40427
[ 1275.774094][T16066] F2FS-fs: heap/no_heap options were deprecated
[ 1275.818632][T16066] F2FS-fs (loop6): build fault injection rate: 19
[ 1275.818684][T16066] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[ 1275.819656][T16066] F2FS-fs (loop6): invalid crc value
[ 1275.823420][T16066] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1275.863614][T16066] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1275.891694][T16066] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1275.956659][T16066] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1275.984333][T16066] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1276.036993][T16066] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90
[ 1276.037061][T16066] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[ 1276.198287][T16066] F2FS-fs (loop6): Stopped filesystem due to reason: 0
[ 1276.530308][T16090] loop6: detected capacity change from 0 to 512
[ 1276.570557][T16090] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1276.570663][T16090] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1276.572449][T16090] EXT4-fs (loop6): 1 truncate cleaned up
[ 1276.573192][T16090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1276.575041][T16090] EXT4-fs (loop6): shut down requested (1)
[ 1276.586187][ T7263] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1277.440575][T16101] loop6: detected capacity change from 0 to 40427
[ 1277.442611][T16101] F2FS-fs: heap/no_heap options were deprecated
[ 1277.445037][T16101] F2FS-fs (loop6): build fault injection rate: 19
[ 1277.445052][T16101] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[ 1277.445793][T16101] F2FS-fs (loop6): invalid crc value
[ 1277.452927][T16101] f2fs_printk: 1 callbacks suppressed
[ 1277.452941][T16101] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1277.535835][T16101] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1277.549699][T16101] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1277.635666][T16101] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1277.645665][T16101] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1277.664343][T16101] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90
[ 1277.664383][T16101] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[ 1278.152008][T16101] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of do_checkpoint+0x233b/0x3f20
[ 1278.179683][T16101] F2FS-fs (loop6): Stopped filesystem due to reason: 0
[ 1278.553409][T16105] loop6: detected capacity change from 0 to 128
[ 1278.556228][T16105] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1278.630232][T16105] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1278.670614][T24172] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1280.957665][T10000] net_ratelimit: 12 callbacks suppressed
[ 1280.957871][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1280.968340][T30640] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1281.069827][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1281.116824][T16140] tipc: New replicast peer: 255.255.255.255
[ 1281.119537][T16140] tipc: Enabled bearer <udp:syz1>, priority 10
[ 1281.163066][T30640] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1281.177775][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1281.201424][T16148] netlink: 'syz.3.16381': attribute type 4 has an invalid length.
[ 1281.293738][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1281.398598][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1281.509954][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1281.545872][T16165] loop3: detected capacity change from 0 to 4096
[ 1281.546473][T16165] EXT4-fs: Ignoring removed orlov option
[ 1281.548679][T16165] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1281.554238][T16165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1281.565899][T16154] loop4: detected capacity change from 0 to 32768
[ 1281.606177][T16154] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[ 1281.607145][T21453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1281.636815][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1281.665038][T16154] JBD2: Ignoring recovery information on journal
[ 1281.683353][T16172] loop3: detected capacity change from 0 to 512
[ 1281.684176][T16172] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1281.684198][T16172] EXT4-fs: Ignoring removed orlov option
[ 1281.684513][T16172] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1281.696054][T16172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[ 1281.696185][T16172] System zones: 1-12
[ 1281.696928][T16172] EXT4-fs (loop3): 1 truncate cleaned up
[ 1281.702689][T16172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1281.710872][T16172] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 3391 (only 1 groups)
[ 1281.738121][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1281.754697][T21453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1281.760394][T16154] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1281.862739][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1281.921603][T16180] loop3: detected capacity change from 0 to 128
[ 1281.922660][T16180] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1281.926994][T16180] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1281.969437][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1282.031209][T30703] ocfs2: Unmounting device (7,4) on (node local)
[ 1282.210360][T16191] loop3: detected capacity change from 0 to 128
[ 1282.232438][T16191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[ 1282.235811][T16191] System zones: 1-3, 19-19, 35-36
[ 1282.239130][   T25] tipc: Node number set to 2011519332
[ 1282.243824][T16191] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1282.249637][T16191] ext4 filesystem being mounted at /3475/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1282.294565][T16191] EXT4-fs warning (device loop3): ext4_group_extend:1861: can't shrink FS - resize aborted
[ 1282.379095][T21453] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1282.510305][T16202] siw: device registration error -23
[ 1282.622107][T16208] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 1282.777262][T16198] loop4: detected capacity change from 0 to 40427
[ 1282.782253][T16198] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[ 1282.782312][T16198] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1282.785220][T16198] F2FS-fs (loop4): invalid crc value
[ 1282.785525][T16198] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[ 1282.905252][T16198] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1282.924910][T16198] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1282.924966][T16198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1282.958753][   T33] audit: type=1800 audit(1790637221.157:181): pid=16198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16402" name="file1" dev="loop4" ino=10 res=0 errno=0
[ 1282.965426][T16198] syz.4.16402: attempt to access beyond end of device
[ 1282.965426][T16198] loop4: rw=8423425, sector=53248, nr_sectors = 8 limit=40427
[ 1283.027285][T30703] syz-executor: attempt to access beyond end of device
[ 1283.027285][T30703] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1283.044377][T30703] CPU: 0 UID: 0 PID: 30703 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1283.044421][T30703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1283.044431][T30703] Call Trace:
[ 1283.044438][T30703]  <TASK>
[ 1283.044446][T30703]  dump_stack_lvl+0xe8/0x150
[ 1283.044471][T30703]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1283.044491][T30703]  f2fs_write_end_bio+0x1211/0x16e0
[ 1283.044512][T30703]  ? blkg_put+0x22/0x240
[ 1283.044538][T30703]  __submit_merged_bio+0x258/0x6a0
[ 1283.044553][T30703]  ? rcu_is_watching+0x16/0xb0
[ 1283.044573][T30703]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1283.044594][T30703]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1283.044624][T30703]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1283.044641][T30703]  ? __lock_acquire+0x6df/0x2e50
[ 1283.044677][T30703]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1283.044748][T30703]  ? __pfx_hlock_conflict+0x10/0x10
[ 1283.044763][T30703]  ? __bfs+0x153/0x290
[ 1283.044775][T30703]  ? __pfx_hlock_conflict+0x10/0x10
[ 1283.044800][T30703]  ? lockdep_unlock+0x5c/0xd0
[ 1283.044817][T30703]  ? __lock_acquire+0x14b9/0x2e50
[ 1283.044847][T30703]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1283.044865][T30703]  do_writepages+0x338/0x560
[ 1283.044893][T30703]  ? do_raw_spin_unlock+0x4d/0x200
[ 1283.044913][T30703]  filemap_fdatawrite+0x1e9/0x2f0
[ 1283.044930][T30703]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1283.044969][T30703]  ? do_raw_spin_unlock+0x4d/0x200
[ 1283.044988][T30703]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1283.045016][T30703]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1283.045034][T30703]  ? __lock_acquire+0x6df/0x2e50
[ 1283.045066][T30703]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1283.045118][T30703]  kill_f2fs_super+0x2dd/0x700
[ 1283.045143][T30703]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1283.045168][T30703]  ? call_rcu+0x64d/0x8b0
[ 1283.045193][T30703]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1283.045222][T30703]  deactivate_locked_super+0xbc/0x110
[ 1283.045242][T30703]  cleanup_mnt+0x3d3/0x460
[ 1283.045266][T30703]  task_work_run+0x1d9/0x270
[ 1283.045283][T30703]  ? __pfx_task_work_run+0x10/0x10
[ 1283.045303][T30703]  exit_to_user_mode_loop+0x204/0x770
[ 1283.045317][T30703]  ? rcu_is_watching+0x16/0xb0
[ 1283.045335][T30703]  do_syscall_64+0x328/0x520
[ 1283.045354][T30703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1283.045372][T30703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1283.045386][T30703] RIP: 0033:0x7f978279f397
[ 1283.045400][T30703] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1283.045411][T30703] RSP: 002b:00007ffe024cd008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1283.045427][T30703] RAX: 0000000000000000 RBX: 00007f97828344bb RCX: 00007f978279f397
[ 1283.045436][T30703] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe024cd0c0
[ 1283.045444][T30703] RBP: 00007ffe024cd0c0 R08: 00007ffe024ce0c0 R09: 00000000ffffffff
[ 1283.045454][T30703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe024ce150
[ 1283.045463][T30703] R13: 00007f97828344bb R14: 0000000000139343 R15: 00007ffe024ce190
[ 1283.045486][T30703]  </TASK>
[ 1283.045549][T30703] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1283.155059][T16210] loop6: detected capacity change from 0 to 32768
[ 1283.192553][T16210] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[ 1283.214062][T16210] JBD2: Ignoring recovery information on journal
[ 1283.300258][T16210] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1283.426215][T16219] loop3: detected capacity change from 0 to 40427
[ 1283.430156][T16219] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[ 1283.430175][T16219] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1283.432030][T16219] F2FS-fs (loop3): invalid crc value
[ 1283.432324][T16219] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[ 1283.508998][T16219] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1283.541773][T16219] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1283.546205][T16219] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1283.599829][   T33] audit: type=1800 audit(1790637221.797:182): pid=16219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16411" name="file1" dev="loop3" ino=10 res=0 errno=0
[ 1283.626933][ T7263] ocfs2: Unmounting device (7,6) on (node local)
[ 1283.852552][T16230] syz_tun: entered allmulticast mode
[ 1283.870695][T21453] syz-executor: attempt to access beyond end of device
[ 1283.870695][T21453] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1283.898093][T21453] CPU: 0 UID: 0 PID: 21453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1283.898136][T21453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1283.898147][T21453] Call Trace:
[ 1283.898154][T21453]  <TASK>
[ 1283.898161][T21453]  dump_stack_lvl+0xe8/0x150
[ 1283.898188][T21453]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1283.898211][T21453]  f2fs_write_end_bio+0x1211/0x16e0
[ 1283.898232][T21453]  ? blkg_put+0x22/0x240
[ 1283.898259][T21453]  __submit_merged_bio+0x258/0x6a0
[ 1283.898275][T21453]  ? rcu_is_watching+0x16/0xb0
[ 1283.898296][T21453]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1283.898324][T21453]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1283.898332][T16230] syz_tun: left allmulticast mode
[ 1283.898357][T21453]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1283.898401][T21453]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1283.898453][T21453]  ? rcu_is_watching+0x16/0xb0
[ 1283.898469][T21453]  ? trace_sched_exit_tp+0x3a/0x130
[ 1283.898504][T21453]  ? irqentry_exit+0x218/0x910
[ 1283.898527][T21453]  ? __pfx___schedule+0x10/0x10
[ 1283.898548][T21453]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1283.898566][T21453]  do_writepages+0x338/0x560
[ 1283.898590][T21453]  ? preempt_schedule_common+0x7f/0xd0
[ 1283.898607][T21453]  ? preempt_schedule_thunk+0x16/0x40
[ 1283.898628][T21453]  filemap_fdatawrite+0x1e9/0x2f0
[ 1283.898646][T21453]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1283.898692][T21453]  ? do_raw_spin_unlock+0x4d/0x200
[ 1283.898737][T21453]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1283.898770][T21453]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1283.898788][T21453]  ? __lock_acquire+0x6df/0x2e50
[ 1283.898823][T21453]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1283.898880][T21453]  kill_f2fs_super+0x2dd/0x700
[ 1283.898905][T21453]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1283.898932][T21453]  ? call_rcu+0x64d/0x8b0
[ 1283.898947][T21453]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1283.898975][T21453]  deactivate_locked_super+0xbc/0x110
[ 1283.898996][T21453]  cleanup_mnt+0x3d3/0x460
[ 1283.899019][T21453]  task_work_run+0x1d9/0x270
[ 1283.899037][T21453]  ? __pfx_task_work_run+0x10/0x10
[ 1283.899059][T21453]  exit_to_user_mode_loop+0x204/0x770
[ 1283.899074][T21453]  ? rcu_is_watching+0x16/0xb0
[ 1283.899092][T21453]  do_syscall_64+0x328/0x520
[ 1283.899110][T21453]  ? trace_irq_disable+0x3b/0x140
[ 1283.899123][T21453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1283.899141][T21453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1283.899155][T21453] RIP: 0033:0x7f6f2519f397
[ 1283.899170][T21453] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1283.899182][T21453] RSP: 002b:00007ffd6690f5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1283.899199][T21453] RAX: 0000000000000000 RBX: 00007f6f252344bb RCX: 00007f6f2519f397
[ 1283.899209][T21453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6690f690
[ 1283.899217][T21453] RBP: 00007ffd6690f690 R08: 00007ffd66910690 R09: 00000000ffffffff
[ 1283.899227][T21453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd66910720
[ 1283.899235][T21453] R13: 00007f6f252344bb R14: 000000000013959e R15: 00007ffd66910760
[ 1283.899258][T21453]  </TASK>
[ 1283.899315][T21453] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1284.202135][T16234] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 1284.345096][T16232] loop6: detected capacity change from 0 to 40427
[ 1284.345677][T16232] F2FS-fs: heap/no_heap options were deprecated
[ 1284.358573][T16232] F2FS-fs (loop6): build fault injection rate: 19
[ 1284.358622][T16232] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[ 1284.360949][T16232] F2FS-fs (loop6): invalid crc value
[ 1284.371960][T16232] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1284.459700][T16232] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1284.475498][T16232] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1284.499820][T16232] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1284.509175][T16232] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1284.535199][T16232] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90
[ 1284.535262][T16232] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[ 1284.605113][    C0] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of f2fs_write_end_bio+0x7ed/0x16e0
[ 1284.605179][    C0] F2FS-fs (loop6): inconsistent node block, node_type:0, nid:12, node_footer[nid:12,ino:3,ofs:249659,cpver:10241045589465957861,blkaddr:4101]
[ 1284.621858][T16232] F2FS-fs (loop6): Stopped filesystem due to reason: 0
[ 1284.866805][T16271] netlink: 9 bytes leftover after parsing attributes in process `syz.3.16429'.
[ 1285.234002][T16283] loop4: detected capacity change from 0 to 512
[ 1285.235254][T16274] F2FS-fs: heap/no_heap options were deprecated
[ 1285.239358][T16274] F2FS-fs (loop3): build fault injection rate: 19
[ 1285.239370][T16274] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[ 1285.242176][T16283] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1285.242211][T16283] EXT4-fs: Ignoring removed orlov option
[ 1285.243081][T16274] F2FS-fs (loop3): invalid crc value
[ 1285.253504][T16274] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1285.266888][T16283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1285.276128][T16283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[ 1285.280539][T16283] System zones: 1-12
[ 1285.286632][T16283] EXT4-fs (loop4): 1 truncate cleaned up
[ 1285.292205][T16283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1285.336410][T16274] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1285.373557][T16274] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1285.390699][T30703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1285.423890][T16274] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1285.440128][T16274] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1285.743248][T16274] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[ 1286.088847][   T13] net_ratelimit: 35 callbacks suppressed
[ 1286.091892][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1286.197943][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1286.327940][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1286.447801][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1286.557788][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1286.677979][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1286.692551][T16312] set_capacity_and_notify: 2 callbacks suppressed
[ 1286.695452][T16312] loop6: detected capacity change from 0 to 40427
[ 1286.699904][T16312] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[ 1286.703472][T16312] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1286.708880][T16312] F2FS-fs (loop6): invalid crc value
[ 1286.711465][T16312] F2FS-fs (loop6): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[ 1286.778293][T16312] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1286.782897][T16316] loop4: detected capacity change from 0 to 40427
[ 1286.785753][T16316] F2FS-fs: heap/no_heap options were deprecated
[ 1286.789594][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1286.790728][T16316] F2FS-fs (loop4): build fault injection rate: 19
[ 1286.790744][T16316] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[ 1286.792186][T16316] F2FS-fs (loop4): invalid crc value
[ 1286.839806][T16312] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1286.842760][T16312] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1286.886082][   T33] audit: type=1800 audit(1790637225.077:183): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.16445" name="file1" dev="loop6" ino=10 res=0 errno=0
[ 1286.898200][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1286.914353][   T33] audit: type=1800 audit(1790637225.107:184): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.16445" name="file1" dev="loop6" ino=10 res=0 errno=0
[ 1286.940539][ T7263] syz-executor: attempt to access beyond end of device
[ 1286.940539][ T7263] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1286.964542][T16316] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1286.965826][ T7263] CPU: 0 UID: 0 PID: 7263 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1286.965845][ T7263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1286.965873][ T7263] Call Trace:
[ 1286.965881][ T7263]  <TASK>
[ 1286.965888][ T7263]  dump_stack_lvl+0xe8/0x150
[ 1286.965915][ T7263]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1286.965938][ T7263]  f2fs_write_end_bio+0x1211/0x16e0
[ 1286.965961][ T7263]  ? blkg_put+0x22/0x240
[ 1286.965988][ T7263]  __submit_merged_bio+0x258/0x6a0
[ 1286.966006][ T7263]  ? rcu_is_watching+0x16/0xb0
[ 1286.966026][ T7263]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1286.966049][ T7263]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1286.966081][ T7263]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1286.966123][ T7263]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1286.966141][ T7263]  ? is_bpf_text_address+0x26/0x2b0
[ 1286.966167][ T7263]  ? arch_stack_walk+0xfb/0x150
[ 1286.966202][ T7263]  ? add_lock_to_list+0xc7/0x100
[ 1286.966221][ T7263]  ? lockdep_unlock+0x5c/0xd0
[ 1286.966238][ T7263]  ? __lock_acquire+0x14b9/0x2e50
[ 1286.966270][ T7263]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1286.966296][ T7263]  ? do_raw_spin_unlock+0x4d/0x200
[ 1286.966314][ T7263]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1286.966333][ T7263]  do_writepages+0x338/0x560
[ 1286.966362][ T7263]  ? do_raw_spin_unlock+0x4d/0x200
[ 1286.966383][ T7263]  filemap_fdatawrite+0x1e9/0x2f0
[ 1286.966400][ T7263]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1286.966445][ T7263]  ? do_raw_spin_unlock+0x4d/0x200
[ 1286.966466][ T7263]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1286.966497][ T7263]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1286.966516][ T7263]  ? __lock_acquire+0x6df/0x2e50
[ 1286.966550][ T7263]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1286.966610][ T7263]  kill_f2fs_super+0x2dd/0x700
[ 1286.966635][ T7263]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1286.966662][ T7263]  ? call_rcu+0x64d/0x8b0
[ 1286.966678][ T7263]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1286.966734][ T7263]  deactivate_locked_super+0xbc/0x110
[ 1286.966757][ T7263]  cleanup_mnt+0x3d3/0x460
[ 1286.966780][ T7263]  task_work_run+0x1d9/0x270
[ 1286.966799][ T7263]  ? __pfx_task_work_run+0x10/0x10
[ 1286.966820][ T7263]  exit_to_user_mode_loop+0x204/0x770
[ 1286.966835][ T7263]  ? rcu_is_watching+0x16/0xb0
[ 1286.966854][ T7263]  do_syscall_64+0x328/0x520
[ 1286.966873][ T7263]  ? trace_irq_disable+0x3b/0x140
[ 1286.966885][ T7263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1286.966903][ T7263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1286.966917][ T7263] RIP: 0033:0x7f690079f397
[ 1286.966933][ T7263] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1286.966945][ T7263] RSP: 002b:00007fffd5cd1618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1286.966960][ T7263] RAX: 0000000000000000 RBX: 00007f69008344bb RCX: 00007f690079f397
[ 1286.966971][ T7263] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd5cd16d0
[ 1286.966979][ T7263] RBP: 00007fffd5cd16d0 R08: 00007fffd5cd26d0 R09: 00000000ffffffff
[ 1286.966988][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd5cd2760
[ 1286.966998][ T7263] R13: 00007f69008344bb R14: 000000000013a29d R15: 00007fffd5cd27a0
[ 1286.967019][ T7263]  </TASK>
[ 1286.967117][ T7263] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1287.010194][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1287.117623][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1287.126504][T16316] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1287.256153][T16322] CPU: 1 UID: 0 PID: 16322 Comm: syz.4.16446 Not tainted syzkaller #0 PREEMPT(full) 
[ 1287.256202][T16322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1287.256212][T16322] Call Trace:
[ 1287.256220][T16322]  <TASK>
[ 1287.256229][T16322]  dump_stack_lvl+0xe8/0x150
[ 1287.256258][T16322]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1287.256280][T16322]  ? f2fs_create+0x554/0x6c0
[ 1287.256296][T16322]  f2fs_balance_fs+0x349/0x810
[ 1287.256318][T16322]  ? f2fs_create+0x554/0x6c0
[ 1287.256333][T16322]  ? __pfx_f2fs_balance_fs+0x10/0x10
[ 1287.256352][T16322]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1287.256371][T16322]  ? __pfx_wake_up_var+0x10/0x10
[ 1287.256399][T16322]  ? do_raw_spin_unlock+0x4d/0x200
[ 1287.256422][T16322]  f2fs_create+0x554/0x6c0
[ 1287.256441][T16322]  ? __pfx_f2fs_create+0x10/0x10
[ 1287.256463][T16322]  ? inode_permission+0x2bc/0x5f0
[ 1287.256480][T16322]  ? bpf_lsm_inode_create+0x9/0x20
[ 1287.256499][T16322]  vfs_create+0x2be/0x450
[ 1287.256524][T16322]  filename_mknodat+0x3e8/0x660
[ 1287.256543][T16322]  ? __pfx_filename_mknodat+0x10/0x10
[ 1287.256560][T16322]  ? do_getname+0x151/0x250
[ 1287.256579][T16322]  __se_sys_mknod+0x3a/0x150
[ 1287.256595][T16322]  do_syscall_64+0x166/0x520
[ 1287.256614][T16322]  ? trace_irq_disable+0x3b/0x140
[ 1287.256628][T16322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.256647][T16322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.256661][T16322] RIP: 0033:0x7f978279e159
[ 1287.256678][T16322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1287.256690][T16322] RSP: 002b:00007f97809f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[ 1287.256735][T16322] RAX: ffffffffffffffda RBX: 00007f9782a26090 RCX: 00007f978279e159
[ 1287.256755][T16322] RDX: 0000000000000001 RSI: 0000000000000020 RDI: 0000200000000000
[ 1287.256765][T16322] RBP: 00007f978283506b R08: 0000000000000000 R09: 0000000000000000
[ 1287.256775][T16322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1287.256785][T16322] R13: 00007f9782a26128 R14: 00007f9782a26090 R15: 00007ffe024cdd98
[ 1287.256813][T16322]  </TASK>
[ 1287.349077][T16322] F2FS-fs (loop4): Stopped filesystem due to reason: 1
[ 1287.372081][T16316] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[ 1287.462260][T16324] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 1287.982788][T16343] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 1288.149583][T16336] loop4: detected capacity change from 0 to 40427
[ 1288.154948][T16336] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[ 1288.157796][T16336] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1288.162637][T16336] F2FS-fs (loop4): invalid crc value
[ 1288.164968][T16336] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[ 1288.232472][T16345] batman_adv: batadv0: Adding interface: macvlan2
[ 1288.234687][T16345] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1288.244406][T16345] batman_adv: batadv0: Interface activated: macvlan2
[ 1288.257251][T16336] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1288.271046][T16336] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1288.273588][T16336] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1288.318793][   T33] audit: type=1800 audit(1790637226.517:185): pid=16336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16449" name="file1" dev="loop4" ino=10 res=0 errno=0
[ 1288.371617][T30703] syz-executor: attempt to access beyond end of device
[ 1288.371617][T30703] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1288.411215][T30703] CPU: 1 UID: 0 PID: 30703 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1288.411254][T30703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1288.411264][T30703] Call Trace:
[ 1288.411271][T30703]  <TASK>
[ 1288.411277][T30703]  dump_stack_lvl+0xe8/0x150
[ 1288.411302][T30703]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1288.411323][T30703]  f2fs_write_end_bio+0x1211/0x16e0
[ 1288.411344][T30703]  ? blkg_put+0x22/0x240
[ 1288.411370][T30703]  __submit_merged_bio+0x258/0x6a0
[ 1288.411385][T30703]  ? rcu_is_watching+0x16/0xb0
[ 1288.411405][T30703]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1288.411426][T30703]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1288.411456][T30703]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1288.411473][T30703]  ? is_bpf_text_address+0x292/0x2b0
[ 1288.411512][T30703]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1288.411558][T30703]  ? __pfx_hlock_conflict+0x10/0x10
[ 1288.411573][T30703]  ? __bfs+0x153/0x290
[ 1288.411585][T30703]  ? __pfx_hlock_conflict+0x10/0x10
[ 1288.411612][T30703]  ? lockdep_unlock+0x5c/0xd0
[ 1288.411628][T30703]  ? __lock_acquire+0x14b9/0x2e50
[ 1288.411659][T30703]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1288.411675][T30703]  do_writepages+0x338/0x560
[ 1288.411726][T30703]  ? do_raw_spin_unlock+0x4d/0x200
[ 1288.411747][T30703]  filemap_fdatawrite+0x1e9/0x2f0
[ 1288.411764][T30703]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1288.411808][T30703]  ? do_raw_spin_unlock+0x4d/0x200
[ 1288.411827][T30703]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1288.411855][T30703]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1288.411872][T30703]  ? __lock_acquire+0x6df/0x2e50
[ 1288.411904][T30703]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1288.411958][T30703]  kill_f2fs_super+0x2dd/0x700
[ 1288.411981][T30703]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1288.412006][T30703]  ? call_rcu+0x64d/0x8b0
[ 1288.412020][T30703]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1288.412048][T30703]  deactivate_locked_super+0xbc/0x110
[ 1288.412066][T30703]  cleanup_mnt+0x3d3/0x460
[ 1288.412088][T30703]  task_work_run+0x1d9/0x270
[ 1288.412125][T30703]  ? __pfx_task_work_run+0x10/0x10
[ 1288.412151][T30703]  exit_to_user_mode_loop+0x204/0x770
[ 1288.412165][T30703]  ? rcu_is_watching+0x16/0xb0
[ 1288.412183][T30703]  do_syscall_64+0x328/0x520
[ 1288.412200][T30703]  ? trace_irq_disable+0x3b/0x140
[ 1288.412212][T30703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1288.412228][T30703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1288.412242][T30703] RIP: 0033:0x7f978279f397
[ 1288.412255][T30703] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1288.412266][T30703] RSP: 002b:00007ffe024cd008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1288.412282][T30703] RAX: 0000000000000000 RBX: 00007f97828344bb RCX: 00007f978279f397
[ 1288.412291][T30703] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe024cd0c0
[ 1288.412299][T30703] RBP: 00007ffe024cd0c0 R08: 00007ffe024ce0c0 R09: 00000000ffffffff
[ 1288.412308][T30703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe024ce150
[ 1288.412316][T30703] R13: 00007f97828344bb R14: 000000000013a832 R15: 00007ffe024ce190
[ 1288.412337][T30703]  </TASK>
[ 1288.420307][T16341] loop6: detected capacity change from 0 to 40427
[ 1288.429692][T16341] F2FS-fs: heap/no_heap options were deprecated
[ 1288.430794][T16341] F2FS-fs (loop6): build fault injection rate: 19
[ 1288.430810][T16341] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[ 1288.442585][T16341] F2FS-fs (loop6): invalid crc value
[ 1288.492986][T30703] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1288.543254][T16341] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1288.739799][T16341] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1289.108591][T16341] F2FS-fs (loop6): Stopped filesystem due to reason: 0
[ 1289.161663][T16361] loop4: detected capacity change from 0 to 40427
[ 1289.169684][T16361] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[ 1289.169758][T16361] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1289.175645][T16361] F2FS-fs (loop4): invalid crc value
[ 1289.175911][T16361] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[ 1289.214564][T16361] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1289.233005][T16361] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1289.235496][T16361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1289.242677][T16366] loop3: detected capacity change from 0 to 32768
[ 1289.246941][   T33] audit: type=1800 audit(1790637227.437:186): pid=16361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16463" name="file1" dev="loop4" ino=10 res=0 errno=0
[ 1289.254400][T16366] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[ 1289.260526][T16366] JBD2: Ignoring recovery information on journal
[ 1289.268784][T16361] syz.4.16463: attempt to access beyond end of device
[ 1289.268784][T16361] loop4: rw=8423425, sector=53248, nr_sectors = 8 limit=40427
[ 1289.374391][T30703] syz-executor: attempt to access beyond end of device
[ 1289.374391][T30703] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1289.418385][T30703] CPU: 1 UID: 0 PID: 30703 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1289.418430][T30703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1289.418440][T30703] Call Trace:
[ 1289.418447][T30703]  <TASK>
[ 1289.418455][T30703]  dump_stack_lvl+0xe8/0x150
[ 1289.418481][T30703]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1289.418503][T30703]  f2fs_write_end_bio+0x1211/0x16e0
[ 1289.418523][T30703]  ? blkg_put+0x22/0x240
[ 1289.418550][T30703]  __submit_merged_bio+0x258/0x6a0
[ 1289.418566][T30703]  ? rcu_is_watching+0x16/0xb0
[ 1289.418586][T30703]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1289.418608][T30703]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1289.418641][T30703]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1289.418690][T30703]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1289.418763][T30703]  ? update_se+0x90/0x1020
[ 1289.418783][T30703]  ? __pfx_hlock_conflict+0x10/0x10
[ 1289.418797][T30703]  ? __bfs+0x153/0x290
[ 1289.418809][T30703]  ? __pfx_hlock_conflict+0x10/0x10
[ 1289.418837][T30703]  ? lockdep_unlock+0x5c/0xd0
[ 1289.418854][T30703]  ? __lock_acquire+0x14b9/0x2e50
[ 1289.418887][T30703]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1289.418905][T30703]  do_writepages+0x338/0x560
[ 1289.418933][T30703]  ? do_raw_spin_unlock+0x4d/0x200
[ 1289.418954][T30703]  filemap_fdatawrite+0x1e9/0x2f0
[ 1289.418971][T30703]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1289.419017][T30703]  ? do_raw_spin_unlock+0x4d/0x200
[ 1289.419037][T30703]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1289.419067][T30703]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1289.419084][T30703]  ? __lock_acquire+0x6df/0x2e50
[ 1289.419120][T30703]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1289.419176][T30703]  kill_f2fs_super+0x2dd/0x700
[ 1289.419200][T30703]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1289.419226][T30703]  ? call_rcu+0x64d/0x8b0
[ 1289.419241][T30703]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1289.419291][T30703]  deactivate_locked_super+0xbc/0x110
[ 1289.419311][T30703]  cleanup_mnt+0x3d3/0x460
[ 1289.419336][T30703]  task_work_run+0x1d9/0x270
[ 1289.419352][T30703]  ? __pfx_task_work_run+0x10/0x10
[ 1289.419373][T30703]  exit_to_user_mode_loop+0x204/0x770
[ 1289.419387][T30703]  ? rcu_is_watching+0x16/0xb0
[ 1289.419403][T30703]  do_syscall_64+0x328/0x520
[ 1289.419440][T30703]  ? trace_irq_disable+0x3b/0x140
[ 1289.419453][T30703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1289.419469][T30703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1289.419481][T30703] RIP: 0033:0x7f978279f397
[ 1289.419497][T30703] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1289.419509][T30703] RSP: 002b:00007ffe024cd008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1289.419526][T30703] RAX: 0000000000000000 RBX: 00007f97828344bb RCX: 00007f978279f397
[ 1289.419537][T30703] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe024cd0c0
[ 1289.419545][T30703] RBP: 00007ffe024cd0c0 R08: 00007ffe024ce0c0 R09: 00000000ffffffff
[ 1289.419553][T30703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe024ce150
[ 1289.419561][T30703] R13: 00007f97828344bb R14: 000000000013abcf R15: 00007ffe024ce190
[ 1289.419597][T30703]  </TASK>
[ 1289.514856][T30703] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1289.571790][T16366] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1289.839124][T16374] loop6: detected capacity change from 0 to 1024
[ 1289.846396][T16374] hfsplus: found bad thread record in catalog
[ 1289.846493][T16374] hfsplus: failed to load root directory
[ 1290.062857][T21453] ocfs2: Unmounting device (7,3) on (node local)
[ 1290.615086][T16382] loop6: detected capacity change from 0 to 40427
[ 1290.619103][T16382] F2FS-fs: heap/no_heap options were deprecated
[ 1290.624132][T16382] F2FS-fs (loop6): build fault injection rate: 19
[ 1290.624202][T16382] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[ 1290.630914][T16382] F2FS-fs (loop6): invalid crc value
[ 1290.641101][T16382] f2fs_printk: 18 callbacks suppressed
[ 1290.649858][T16382] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[ 1290.810050][T16382] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[ 1290.844942][T16382] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1290.869960][T16382] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1290.886513][T16382] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[ 1290.896202][T16405] geneve0: entered promiscuous mode
[ 1290.904104][T16405] batman_adv: batadv0: Adding interface: macvlan3
[ 1290.906609][T16405] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1290.917246][T16405] batman_adv: batadv0: Interface activated: macvlan3
[ 1291.148265][T16382] F2FS-fs (loop6): Stopped filesystem due to reason: 0
[ 1291.187856][T22272] net_ratelimit: 35 callbacks suppressed
[ 1291.187944][T22272] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1291.311120][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1291.422118][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1291.532977][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1291.607017][T16421] loop3: detected capacity change from 0 to 40427
[ 1291.612809][T16421] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[ 1291.612855][T16421] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1291.647783][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1291.657072][T16421] F2FS-fs (loop3): invalid crc value
[ 1291.657321][T16421] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[ 1291.758269][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1291.765018][T16421] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1291.799966][T16421] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1291.800030][T16421] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1291.810131][   T33] audit: type=1800 audit(1790637230.007:187): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16486" name="file1" dev="loop3" ino=10 res=0 errno=0
[ 1291.818394][   T33] audit: type=1800 audit(1790637230.007:188): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16486" name="file1" dev="loop3" ino=10 res=0 errno=0
[ 1291.867158][T21453] syz-executor: attempt to access beyond end of device
[ 1291.867158][T21453] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1291.891567][T21453] CPU: 0 UID: 0 PID: 21453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1291.891602][T21453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1291.891614][T21453] Call Trace:
[ 1291.891618][T21453]  <TASK>
[ 1291.891622][T21453]  dump_stack_lvl+0xe8/0x150
[ 1291.891641][T21453]  f2fs_stop_checkpoint+0x3f6/0x5d0
[ 1291.891654][T21453]  f2fs_write_end_bio+0x1211/0x16e0
[ 1291.891668][T21453]  ? blkg_put+0x22/0x240
[ 1291.891684][T21453]  __submit_merged_bio+0x258/0x6a0
[ 1291.891718][T21453]  ? rcu_is_watching+0x16/0xb0
[ 1291.891731][T21453]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1291.891745][T21453]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1291.891763][T21453]  f2fs_write_data_pages+0x2a27/0x36f0
[ 1291.891787][T21453]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1291.891796][T21453]  ? is_bpf_text_address+0x26/0x2b0
[ 1291.891811][T21453]  ? arch_stack_walk+0xfb/0x150
[ 1291.891833][T21453]  ? add_lock_to_list+0xc7/0x100
[ 1291.891844][T21453]  ? lockdep_unlock+0x5c/0xd0
[ 1291.891855][T21453]  ? __lock_acquire+0x14b9/0x2e50
[ 1291.891882][T21453]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1291.891903][T21453]  ? do_raw_spin_unlock+0x4d/0x200
[ 1291.891920][T21453]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1291.891934][T21453]  do_writepages+0x338/0x560
[ 1291.891952][T21453]  ? do_raw_spin_unlock+0x4d/0x200
[ 1291.891964][T21453]  filemap_fdatawrite+0x1e9/0x2f0
[ 1291.891974][T21453]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1291.892015][T21453]  ? do_raw_spin_unlock+0x4d/0x200
[ 1291.892029][T21453]  f2fs_sync_dirty_inodes+0x30e/0x830
[ 1291.892047][T21453]  f2fs_write_checkpoint+0xa3d/0x2710
[ 1291.892058][T21453]  ? __lock_acquire+0x6df/0x2e50
[ 1291.892078][T21453]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1291.892110][T21453]  kill_f2fs_super+0x2dd/0x700
[ 1291.892125][T21453]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1291.892141][T21453]  ? call_rcu+0x64d/0x8b0
[ 1291.892151][T21453]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1291.892168][T21453]  deactivate_locked_super+0xbc/0x110
[ 1291.892181][T21453]  cleanup_mnt+0x3d3/0x460
[ 1291.892196][T21453]  task_work_run+0x1d9/0x270
[ 1291.892208][T21453]  ? __pfx_task_work_run+0x10/0x10
[ 1291.892220][T21453]  exit_to_user_mode_loop+0x204/0x770
[ 1291.892230][T21453]  ? rcu_is_watching+0x16/0xb0
[ 1291.892240][T21453]  do_syscall_64+0x328/0x520
[ 1291.892251][T21453]  ? trace_irq_disable+0x3b/0x140
[ 1291.892259][T21453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1291.892270][T21453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1291.892278][T21453] RIP: 0033:0x7f6f2519f397
[ 1291.892287][T21453] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1291.892294][T21453] RSP: 002b:00007ffd6690f5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1291.892304][T21453] RAX: 0000000000000000 RBX: 00007f6f252344bb RCX: 00007f6f2519f397
[ 1291.892310][T21453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6690f690
[ 1291.892315][T21453] RBP: 00007ffd6690f690 R08: 00007ffd66910690 R09: 00000000ffffffff
[ 1291.892321][T21453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd66910720
[ 1291.892326][T21453] R13: 00007f6f252344bb R14: 000000000013b5b4 R15: 00007ffd66910760
[ 1291.892339][T21453]  </TASK>
[ 1291.896932][T21453] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1292.062006][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1292.270675][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1292.452681][T16453] loop3: detected capacity change from 0 to 32768
[ 1292.453743][T16453] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16496 (16453)
[ 1292.477020][T16453] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1292.477073][T16453] BTRFS info (device loop3): using blake2b checksum algorithm
[ 1292.519422][T16453] BTRFS info (device loop3): enabling ssd optimizations
[ 1292.519488][T16453] BTRFS info (device loop3): turning on async discard
[ 1292.520154][T16453] BTRFS info (device loop3): enabling free space tree
[ 1292.520171][T16453] BTRFS info (device loop3): use zstd compression, level 3
[ 1292.750142][   T33] audit: type=1800 audit(1790637230.947:189): pid=16453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16496" name="file1" dev="loop3" ino=260 res=0 errno=0
[ 1292.898538][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1292.939989][T21453] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1293.018732][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1293.721613][T16499] siw: device registration error -23
[ 1293.805803][T16505] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 1294.018943][T16511] loop3: detected capacity change from 0 to 32768
[ 1294.022383][T16511] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16513 (16511)
[ 1294.047322][T16511] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1294.048288][T16511] BTRFS info (device loop3): using blake2b checksum algorithm
[ 1294.093388][T16511] BTRFS info (device loop3): enabling ssd optimizations
[ 1294.093441][T16511] BTRFS info (device loop3): turning on async discard
[ 1294.093474][T16511] BTRFS info (device loop3): enabling free space tree
[ 1294.093484][T16511] BTRFS info (device loop3): use zstd compression, level 3
[ 1294.527221][T16545] tun0: tun_chr_ioctl cmd 1074025675
[ 1294.527271][T16545] tun0: persist enabled
[ 1294.530843][T16545] tun0: tun_chr_ioctl cmd 1074025675
[ 1294.530854][T16545] tun0: persist disabled
[ 1294.761967][T21453] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1295.821901][T16576] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 1295.846118][T16580] loop4: detected capacity change from 0 to 256
[ 1296.059606][T16590] loop4: detected capacity change from 0 to 1024
[ 1296.060486][T16590] EXT4-fs: Ignoring removed bh option
[ 1296.088374][T16590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1296.160956][T30703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1296.219392][T10025] net_ratelimit: 27 callbacks suppressed
[ 1296.219619][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1296.277100][T16601] sctp: [Deprecated]: syz.3.16547 (pid 16601) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1296.277100][T16601] Use struct sctp_sack_info instead
[ 1296.304860][T16603] loop6: detected capacity change from 0 to 1024
[ 1296.312265][T16603] EXT4-fs: Ignoring removed orlov option
[ 1296.328019][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1296.349791][T16603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1296.444570][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1296.465196][ T7263] EXT4-fs error (device loop6): ext4_free_inode:356: comm syz-executor: bit already cleared for inode 13
[ 1296.554466][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1296.565872][ T7263] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem
[ 1296.572976][ T7263] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem
[ 1296.601410][ T7263] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem
[ 1296.605300][ T7263] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem
[ 1296.623292][ T7263] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem
[ 1296.626844][ T7263] EXT4-fs error (device loop6): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 14 (inode size 256)
[ 1296.631184][ T7263] EXT4-fs error (device loop6): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 14 (inode size 256)
[ 1296.677631][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1296.707130][T16619] netlink: 128 bytes leftover after parsing attributes in process `syz.4.16555'.
[ 1296.798209][T16620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16555'.
[ 1296.798271][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16555'.
[ 1296.821779][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16555'.
[ 1296.847962][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1296.970594][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1296.988139][   T33] audit: type=1800 audit(1790637235.177:190): pid=16620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.16555" name="memory.events" dev="tmpfs" ino=11997 res=0 errno=0
[ 1297.004082][ T7263] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1297.280484][T10025] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1297.285404][T10025] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1297.318388][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1297.361978][T16626] loop4: detected capacity change from 0 to 4096
[ 1297.380521][T16626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1297.429323][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1297.509986][T30953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1297.524060][T30953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1297.527290][T30953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1297.533856][T30953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1297.539040][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1297.550527][T30953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1297.677136][ T4994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1297.687134][T10025] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1297.692150][T10025] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1297.692449][ T4994] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1297.700955][ T4994] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1297.709551][ T4994] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1297.730817][T16635] loop3: detected capacity change from 0 to 1024
[ 1297.731549][T16635] EXT4-fs: Ignoring removed bh option
[ 1297.741220][ T4994] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1297.767064][T16635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1297.964839][T21453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1298.312883][T30703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1298.391038][T10025] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1298.391124][T10025] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1298.621174][T10025] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1298.621252][T10025] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.412804][T16664] loop3: detected capacity change from 0 to 1024
[ 1299.413852][T16664] EXT4-fs: Ignoring removed bh option
[ 1299.446091][T16664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1299.555367][T21453] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1299.780766][ T4994] Bluetooth: hci1: command tx timeout
[ 1299.856074][T10025] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface
[ 1299.859096][T10025] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 6a:1b:0e:be:c3:f2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1300.088827][T10025] 
[ 1300.089622][T10025] ======================================================
[ 1300.091855][T10025] WARNING: possible circular locking dependency detected
[ 1300.094076][T10025] syzkaller #0 Not tainted
[ 1300.095628][T10025] ------------------------------------------------------
[ 1300.098040][T10025] kworker/u8:5/10025 is trying to acquire lock:
[ 1300.099920][T10025] ffff8881a9e30e70 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: ipvlan_uninit+0x147/0x290
[ 1300.103133][T10025] 
[ 1300.103133][T10025] but task is already holding lock:
[ 1300.105610][T10025] ffff888177c328c0 (&port->pnodes_lock){+.+.}-{4:4}, at: ipvlan_device_event+0x489/0xfb0
[ 1300.108937][T10025] 
[ 1300.108937][T10025] which lock already depends on the new lock.
[ 1300.108937][T10025] 
[ 1300.112244][T10025] 
[ 1300.112244][T10025] the existing dependency chain (in reverse order) is:
[ 1300.115203][T10025] 
[ 1300.115203][T10025] -> #1 (&port->pnodes_lock){+.+.}-{4:4}:
[ 1300.117733][T10025]        __mutex_lock+0x19d/0x1550
[ 1300.119655][T10025]        ipvlan_device_event+0x489/0xfb0
[ 1300.121589][T10025]        notifier_call_chain+0x1a5/0x3d0
[ 1300.123386][T10025]        call_netdevice_notifiers+0x90/0xd0
[ 1300.125346][T10025]        xdp_set_features_flag+0x1a0/0x2a0
[ 1300.127277][T10025]        bond_xdp_set_features+0x277/0x320
[ 1300.129280][T10025]        __bond_release_one+0xeb3/0x11c0
[ 1300.131091][T10025]        do_set_master+0x332/0x720
[ 1300.132693][T10025]        do_setlink+0xe7b/0x4670
[ 1300.134299][T10025]        rtnl_newlink+0x146f/0x1c30
[ 1300.135967][T10025]        rtnetlink_rcv_msg+0x802/0xc00
[ 1300.137644][T10025]        netlink_rcv_skb+0x226/0x4a0
[ 1300.139318][T10025]        netlink_unicast+0x7bd/0x940
[ 1300.141074][T10025]        netlink_sendmsg+0x813/0xb40
[ 1300.142757][T10025]        sock_sendmsg_nosec+0x13a/0x180
[ 1300.144478][T10025]        ____sys_sendmsg+0x54e/0x850
[ 1300.146129][T10025]        ___sys_sendmsg+0x2a5/0x360
[ 1300.147755][T10025]        __x64_sys_sendmsg+0x1b1/0x290
[ 1300.149429][T10025]        do_syscall_64+0x166/0x520
[ 1300.151033][T10025]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1300.153023][T10025] 
[ 1300.153023][T10025] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}:
[ 1300.155582][T10025]        __lock_acquire+0x15ff/0x2e50
[ 1300.157259][T10025]        lock_acquire+0x115/0x350
[ 1300.158815][T10025]        __mutex_lock+0x19d/0x1550
[ 1300.160417][T10025]        ipvlan_uninit+0x147/0x290
[ 1300.162170][T10025]        unregister_netdevice_many_notify+0x1acd/0x2140
[ 1300.164344][T10025]        ipvlan_device_event+0xf1f/0xfb0
[ 1300.166121][T10025]        notifier_call_chain+0x1a5/0x3d0
[ 1300.167998][T10025]        unregister_netdevice_many_notify+0x17f9/0x2140
[ 1300.170144][T10025]        ops_undo_list+0x391/0x8d0
[ 1300.171884][T10025]        cleanup_net+0x572/0x810
[ 1300.173442][T10025]        process_scheduled_works+0xc3d/0x1630
[ 1300.175328][T10025]        worker_thread+0xa47/0xfb0
[ 1300.176938][T10025]        kthread+0x38b/0x480
[ 1300.178385][T10025]        ret_from_fork+0x514/0xb70
[ 1300.180039][T10025]        ret_from_fork_asm+0x1a/0x30
[ 1300.181743][T10025] 
[ 1300.181743][T10025] other info that might help us debug this:
[ 1300.181743][T10025] 
[ 1300.184937][T10025]  Possible unsafe locking scenario:
[ 1300.184937][T10025] 
[ 1300.187275][T10025]        CPU0                    CPU1
[ 1300.189006][T10025]        ----                    ----
[ 1300.190692][T10025]   lock(&port->pnodes_lock);
[ 1300.192173][T10025]                                lock(&dev_instance_lock_key#2);
[ 1300.194899][T10025]                                lock(&port->pnodes_lock);
[ 1300.197583][T10025]   lock(&dev_instance_lock_key#2);
[ 1300.199247][T10025] 
[ 1300.199247][T10025]  *** DEADLOCK ***
[ 1300.199247][T10025] 
[ 1300.201910][T10025] locks held by kworker/u8:5/10025: 5, last CPU#0:
[ 1300.204142][T10025]  #0: ffff8881012d5940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1300.207500][T10025]  #1: ffffc900087e7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1300.210731][T10025]  #2: ffffffff90242488 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[ 1300.213508][T10025]  #3: ffffffff90250d00 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0
[ 1300.216255][T10025]  #4: ffff888177c328c0 (&port->pnodes_lock){+.+.}-{4:4}, at: ipvlan_device_event+0x489/0xfb0
[ 1300.219343][T10025] 
[ 1300.219343][T10025] stack backtrace:
[ 1300.221171][T10025] CPU: 0 UID: 0 PID: 10025 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[ 1300.224094][T10025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1300.227476][T10025] Workqueue: netns cleanup_net
[ 1300.229247][T10025] Call Trace:
[ 1300.230310][T10025]  <TASK>
[ 1300.231242][T10025]  dump_stack_lvl+0xe8/0x150
[ 1300.232693][T10025]  print_circular_bug+0x2e2/0x300
[ 1300.234474][T10025]  check_noncircular+0x12f/0x150
[ 1300.236412][T10025]  __lock_acquire+0x15ff/0x2e50
[ 1300.238321][T10025]  ? __lock_acquire+0x6df/0x2e50
[ 1300.240223][T10025]  ? ret_from_fork_asm+0x1a/0x30
[ 1300.242019][T10025]  ? unwind_next_frame+0x8f/0x2550
[ 1300.243906][T10025]  lock_acquire+0x115/0x350
[ 1300.245750][T10025]  ? ipvlan_uninit+0x147/0x290
[ 1300.247669][T10025]  __mutex_lock+0x19d/0x1550
[ 1300.249459][T10025]  ? ipvlan_uninit+0x147/0x290
[ 1300.251105][T10025]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1300.252977][T10025]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1300.254829][T10025]  ? ref_tracker_alloc+0x2d7/0x4b0
[ 1300.256560][T10025]  ? ipvlan_uninit+0x147/0x290
[ 1300.258240][T10025]  ? __pfx___mutex_lock+0x10/0x10
[ 1300.260249][T10025]  ? notifier_call_chain+0x1a5/0x3d0
[ 1300.262122][T10025]  ? cleanup_net+0x572/0x810
[ 1300.263630][T10025]  ? process_scheduled_works+0xc3d/0x1630
[ 1300.265785][T10025]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1300.267989][T10025]  ipvlan_uninit+0x147/0x290
[ 1300.269814][T10025]  ? __pfx_ipvlan_uninit+0x10/0x10
[ 1300.271805][T10025]  ? notifier_call_chain+0x3aa/0x3d0
[ 1300.273730][T10025]  ? __pfx_ipvlan_uninit+0x10/0x10
[ 1300.275697][T10025]  unregister_netdevice_many_notify+0x1acd/0x2140
[ 1300.278218][T10025]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1300.280863][T10025]  ? netdev_upper_dev_unlink+0x99/0xe0
[ 1300.282990][T10025]  ? __pfx_netdev_upper_dev_unlink+0x10/0x10
[ 1300.285324][T10025]  ? __ipvlan_link_delete+0x2eb/0x350
[ 1300.287298][T10025]  ipvlan_device_event+0xf1f/0xfb0
[ 1300.288991][T10025]  ? __pfx_bond_netdev_event+0x10/0x10
[ 1300.290694][T10025]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1300.292549][T10025]  ? __pfx_ipvlan_device_event+0x10/0x10
[ 1300.294294][T10025]  ? __local_bh_enable_ip+0xd6/0x140
[ 1300.296026][T10025]  notifier_call_chain+0x1a5/0x3d0
[ 1300.297825][T10025]  unregister_netdevice_many_notify+0x17f9/0x2140
[ 1300.299905][T10025]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1300.302047][T10025]  ? rtnl_is_locked+0x15/0x20
[ 1300.303552][T10025]  ? nexthop_net_exit_rtnl+0x258/0x2a0
[ 1300.305340][T10025]  ops_undo_list+0x391/0x8d0
[ 1300.306875][T10025]  ? __pfx_ops_undo_list+0x10/0x10
[ 1300.308526][T10025]  ? idr_destroy+0x218/0x290
[ 1300.309934][T10025]  ? do_raw_spin_unlock+0x4d/0x200
[ 1300.311499][T10025]  cleanup_net+0x572/0x810
[ 1300.312899][T10025]  ? __pfx_cleanup_net+0x10/0x10
[ 1300.314832][T10025]  ? rcu_is_watching+0x16/0xb0
[ 1300.316616][T10025]  ? process_scheduled_works+0x97a/0x1630
[ 1300.318729][T10025]  process_scheduled_works+0xc3d/0x1630
[ 1300.320861][T10025]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1300.322968][T10025]  ? assign_work+0x3cf/0x5d0
[ 1300.324882][T10025]  worker_thread+0xa47/0xfb0
[ 1300.326520][T10025]  ? __kthread_parkme+0x71/0x1f0
[ 1300.328225][T10025]  kthread+0x38b/0x480
[ 1300.329562][T10025]  ? __pfx_worker_thread+0x10/0x10
[ 1300.331231][T10025]  ? __pfx_kthread+0x10/0x10
[ 1300.332719][T10025]  ret_from_fork+0x514/0xb70
[ 1300.334366][T10025]  ? __pfx_ret_from_fork+0x10/0x10
[ 1300.336061][T10025]  ? __switch_to+0xc89/0x1420
[ 1300.337604][T10025]  ? __pfx_kthread+0x10/0x10
[ 1300.339127][T10025]  ret_from_fork_asm+0x1a/0x30
[ 1300.340706][T10025]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1300.364242][T10025] bond0 (unregistering): Released all slaves
[ 1300.368226][T10025] bond1 (unregistering): Released all slaves
[ 1300.373009][T10025] bond2 (unregistering): Released all slaves
[ 1300.389281][T10025] bond3 (unregistering): Released all slaves
[ 1300.396990][T10025] bond4 (unregistering): Released all slaves
[ 1300.412981][T10025] bond5 (unregistering): Released all slaves
[ 1300.424252][T10025] bond6 (unregistering): Released all slaves
[ 1300.438531][T10025] bond7 (unregistering): (slave veth11): Releasing backup interface
[ 1300.443406][T10025] bond7 (unregistering): Released all slaves
[ 1300.452078][T10025] bond8 (unregistering): (slave veth13): Releasing backup interface
[ 1300.457165][T10025] bond8 (unregistering): Released all slaves
[ 1300.465829][T10025] bond9 (unregistering): Released all slaves
[ 1300.471741][T10025] bond10 (unregistering): Released all slaves
[ 1300.602848][T10025] : left promiscuous mode
[ 1300.760789][T10025] tipc: Disabling bearer <udp:syz1>
[ 1300.760900][T10025] tipc: Left network mode
[ 1300.891321][ T5341] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1301.237782][ T5341] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1301.307855][ T5720] net_ratelimit: 10 callbacks suppressed
[ 1301.310579][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1301.375329][T10025] veth1_macvtap: left promiscuous mode
[ 1301.375419][T10025] veth0_macvtap: left promiscuous mode
[ 1301.375471][T10025] veth1_vlan: left promiscuous mode
[ 1301.375515][T10025] veth0_vlan: left promiscuous mode
[ 1301.604363][ T5341] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1301.611851][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1301.728381][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1301.878432][ T5341] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1301.890743][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1301.942701][T10025] IPVS: stop unused estimator thread 0...
[ 1301.997803][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1302.109487][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1302.217968][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1302.330768][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1302.437955][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1302.547651][ T5720] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1305.447645][    C1] openvswitch: cpu_id mismatch with handler threads
[ 1306.418044][T10000] net_ratelimit: 34 callbacks suppressed
[ 1306.418139][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1306.528062][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1306.638099][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1306.747951][T22268] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1306.858205][T22265] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1306.971433][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1307.077951][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1307.188465][T10025] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1307.298135][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1307.417600][T10000] bond7: (slave ip6gretap1): failed to get link speed/duplex
