last executing test programs:

19.628161935s ago: executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r4}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000300)=0x5, 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073fe6084e00458bd8f19680f508195b6a862c"], 0xfe33)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

7.789771975s ago: executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0)

6.318424223s ago: executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000040))

5.451205027s ago: executing program 2:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000001740)={[{@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {}, {@auto_da_alloc_val}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@norecovery}, {@acl}, {@debug}]}, 0x5, 0x57a, &(0x7f0000000a00)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0)
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000080)={[{}, {@part={'part', 0x3d, 0xfffffffffffff4f4}}, {@nls={'nls', 0x3d, 'cp855'}}, {@uid}, {@nobarrier}, {@nobarrier}]}, 0x0, 0x6ce, &(0x7f0000000840)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000100)={0x8, 'hsr0\x00', {'batadv_slave_0\x00'}, 0x2})
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f00000003c0)={0x0, [], [{0x0, 0x0, 0x0, 0x0, 0x1}]})
r1 = fanotify_init(0x200, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x34}], 0x8)
fanotify_mark(r1, 0x101, 0x48001051, r3, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file0\x00', 0x810, &(0x7f0000000200)={[{@ref_verify}, {@nodatacow}, {@commit={'commit', 0x3d, 0x7e}}, {@usebackuproot}, {@ref_verify}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x38, 0x67, 0x30, 0x65, 0x25]}}]}, 0x3, 0x510e, &(0x7f000000a240)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3004000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid}, {@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@discard}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000000f80)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x40000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
connect$pppoe(r0, &(0x7f0000000480)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'dummy0\x00'}}, 0x1e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

4.558814955s ago: executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r4}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000300)=0x5, 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073fe6084e00458bd8f19680f508195b6a862c"], 0xfe33)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

4.065299561s ago: executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

3.903545856s ago: executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x100000001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="15"], 0x15)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000001900)="c4c24af5280f01bb00700000440f20c03508000000440f22c0f20f966a050f20d835080000000f22d8660f1a089a00000000100066b83a010f00d8b80b0000000f23d80f21f835800000e00f23f8660fc775e0", 0x53}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.861742352s ago: executing program 4:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
getpid()
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)

3.586557865s ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}, @IFLA_AF_SPEC={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.539831792s ago: executing program 2:
shutdown(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)

3.311848397s ago: executing program 0:
r0 = syz_open_dev$usbfs(0x0, 0x75, 0x1a1281)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB])
ioctl$AUTOFS_IOC_FAIL(r0, 0x4008550c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socket$inet(0x2, 0x0, 0x0)
ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x3ff, 0x2, 0x200})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
r5 = socket(0x40000000015, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r5, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/108, 0x6c}}], 0x1, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

3.275851803s ago: executing program 4:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e07000000141900", 0x22}], 0x1)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
pipe(&(0x7f00000002c0))
write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x15)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

2.90494657s ago: executing program 4:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de)
close(r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x33, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20)
r2 = getpid()
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000070000006a0a90ff0000000027000000000010009500000000000000181000008639369f554288e121e7e1479594bd86279600e9d86b86badb115d770e9f9373d833487e40631725e39078674dbf4d5c4778d646d325e315751450f0256f7dab30be2630a78d6bc01c55b75ffbead8448a5be71b71e422c0d318fe451d7837af4126e72e4d62", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)={0x35})
syz_pidfd_open(r2, 0x0)
ptrace$pokeuser(0x6, r2, 0x9, 0x7ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3b, r5})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x60, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0)

2.727942928s ago: executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/151, 0x97}], 0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, "076a1400"})
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"})
r1 = syz_open_pts(r0, 0x42)
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c)

2.667867597s ago: executing program 3:
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x0, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa)

2.616514515s ago: executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0xc47, &(0x7f0000000200)=ANY=[@ANYBLOB="636865636b3d737472696374007362736563746f723d3078303030303030303030303030303030332c6d61703d6f66662c6d61703d6e6f726d616c2c696f636861727365743d6370383537416d6f64653d3078303030303030303030303030303030302c63727566742c756e686964652c6d6f64653d3078666666666666666666666666303030312c6f626a5f726f6c653d5c2c5b255d24666f776e65723e6b2625e00b66331da59faf3eeae98b1719fe66ff8a31c2ab0fd7f4ec9b42dcf95ad65b42aa85d91b82932c03070000002bc34a5f7e38c0111ab1ecd03cbac37749bde5c877d500bd5f5070e8b5e30e0d76311709b5fdb1c1c89754b11e775bc637cf33ac316aadc63860145d65ffe9b01b84e1a773f40c83708cb8b9e535d9037d4743fe315a21a7e30c0777e4f16aa68b391e3ba1ae0920a76d4fa694a535a044528447b37a7892a1cbbbebad94c4bf7e643c5aacd4d2807c17b4b477ea076414eb7fede6b87ad2804f000000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00', @ANYRESDEC], 0x1, 0x661, &(0x7f0000001480)="$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")
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000340)=""/148, 0x94)

2.45464127s ago: executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400000000000500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c0002000000080004"], 0x44}}, 0x0)

2.417877756s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f00000001c0)={0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4)
syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0)
statfs(&(0x7f0000000140)='./file0\x00', 0x0)
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x8, 0x6, 0x3}, 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000240)={0x3048}, 0x8, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x27, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, 0x0)

2.38945699s ago: executing program 3:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r4}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000300)=0x5, 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073fe6084e00458bd8f19680f508195b6a862c"], 0xfe33)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

2.353825536s ago: executing program 4:
r0 = socket(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x8, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

2.344451907s ago: executing program 0:
r0 = memfd_secret(0x0)
ftruncate(r0, 0x5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00000000007ec0"], 0x1c}}, 0x50)
socket(0x10, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e000000", 0x22)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000580)=ANY=[@ANYBLOB="680200000005010400000000000000000000000054020100"/40], 0x268}}, 0x0)
syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioperm(0x0, 0xff, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
kexec_load(0xa72, 0x6, &(0x7f0000000780)=[{&(0x7f0000000240)="67ff7517ad6925d86091bae5e77ea8755e75ea8983aca5b60d19b3b1efbc0e6102fe69459b3f5e36", 0x28, 0x9}, {&(0x7f0000000440)="4ec1f94483611d9fc6d212725ad5e5fea6c6031c33d4d96197fdfff089a1f4990fe12ef3510e52b0b06d00f4269985f6480c3d1432efd04bafe632dcfcac5131a9ea3ccd387376d2adb7e5eedcb65502e7fde8a07f5fd2a19c93f097c93cf8cb155fbef4fb66187b07fc096cda1a98f2ffd62e60ca2a1043ae0c8457676ef6e564aa0ca6e41d97d29fbcffc4d5ca8b64d09b32b3757a301b7fd371dcc8df68778f2f795cbbad73d105543729be318ced775918ea24a828c18a25765e8b4c7a134ab93f10ce00ec3949738d3e75bba987eb9d2183cd8f2b9fc8c3f653cecec68ce6a7f06e130f0e6bcc22bc8e79755deef3060828f199373f731f3866", 0xfc, 0x3, 0x40}, {&(0x7f00000005c0)="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", 0xfb, 0x9, 0xff}, {&(0x7f0000000300)="10d469362f3f8dfea1fcc895d435c4a25966a93c1a7daa41daeed5531fc124e91c37031014a516e90614bd89bb", 0x2d, 0x1, 0x2c6f}, {&(0x7f0000001680)="c03d33b5b4e7f000e058c6a204cedd231195e8d9d9f2c3a7bd26966a56ed3c96a6cceb3c995c95b25d5bf81ff290713d7c02da377aa784481e3e0e84db18699d66d0752d424329aaf705b55e52bf2f749a7a16c5d6c1c6726e0b31a0eac3261750819764b908f1c5d03c14da2692c54d32e31b8189efd5b793f5144fba210afbee6805c59514f539d1488bbb38dca52d00ddef300b21ab24d0fe1873ce514716c34b1408201861d69a000ce8e301d1453ae1efbd4eb77fae12187e38ec4a022ad3af7976c3177b1850293b0a1ff784e573c58df36c20a269226888008ce072833e5c2061c3dd333867ba466d382ebca319aba7cbda8a4a121e807238a6958e33e6a918122398283dc8c822837d4d1d3f636ea592bf752da50932540c5d80f062f8f7e1ed8016a3fbb6bfa24ec53b8026fb79e3717e33696fe2967f935b8cbe9046d09161fc5f8adea2c504015e9ef65f35aa740aeb422d11c19148d6a063cbc90eb159c4051d604d42064fac82ab83f45cc617d7c6968cea26f12fb4c2c21a2f18882fceb3c3bb6314abd13892be02e4280f6d34bd513aaf4049676def0024ed9bdb78e2be0a18e4a8b903ecbd2f4cc6c5291b7c798615fb4ee13707e4f43be94a5cabea979e33fabc65ca3368cda07830c2162ca1d3d880f5ffddc048dd017c70f9c508ba7359cee3d9371571d81859c8ab49854d1e4719c57c2c6b769d002603a77f0290db29918b0235947c9fdc50340455446993c08feead70bb7c1645d0829d9cb56728ab5ce59631f6092615c597bd9a3a532a53be7961017d3d9a8ea0e82062ffa882437e15f88086a7191579b552eb01989ff1138c060aea2640afb79d696028f2db430d6988334da57e87dd5ff78b32b7c9c41e74d870a59abf4229c04703b0345c48e9461f11224533009632f2bfaa75380cd9a12330ad51fc5b69b59e3db078e6fb32b4f5a7b92d1f75bf68b1a04ea3847c86f0d95aedafe3479c475d8dd4846a4ce53763bc5d9aaa426ecc66dd35da6d55c7f0d0b4855573c98fe03688ac41970daac880bb169ced0b025a5f29d02a66982acdfb4c0667b9efdba5dcb3699daef4e11ad2650f6d47e33b07f265ceba0f8a3baa0a3b22df7fc9af00ae7a195ce4ab11b829b78fb200fcb895109108d50992cec56d97bed67baa5421b81e5d178763bb78c0cf39abf93ea84b90eb3c8af39561fe8731261b364cfc23cd640e99c0ddbadbae8a87374480132642fc209d1f814d40bd9491cd95e080d540e40b495ac47bde172735e01be63da3a4b882e39dcb2b80c5b26dae03c44667c354bc0aff16af9ea5248e4c475b911429a929f2a5f7bdc3fccc471df8e88471c276a66b04d1bf8d3f86dc9933d7a3635e34536b115572d767177e20b5d95bf6fc3491f896d06a72c10947445758f19e4e6a45fd7b464df330eeaa17c1dba6ddd242e7db434a40e4d1e80a35b47fb505c0582defb2a943c251da4904a9302e97b3dcfd6ded0946a1753ea4f080f8f97117da1cec3464a11196e9ff6db47c6cb15b194c7c2fd875a7fd830997eed572ff6a3e6c7c5ea02938a42b45d7ab204150cb927b18b3842164331caec5f88781007812cda15a50cb674b69069e7d1503b1c2f76348497c66e472b39eb8e35a783d6f7a37359d183edcdf9464d06fbbce5e05a46005261be024004b5a86c47d799952c4ed5cfc13a3b5a8904bcffbfef8fb74529c0436b36045f74a71c6a5d6477bfcf42e6f30224698fde5209cdb5d98eb660f68b0b4fa9b92e9895cb2204c0c4db6a7aaca056f728ea26f5a43a0c00e90dcfee22bf9aefa439ae91bca8c8043587e21e56c57ca3b1a3fbf97ed7d51c7129295dd983b98e1a67faf75f34717fd9475e8b76ac3b5f91655fa9317b90fd92ff9c31bb3f9df2d21ccac86ed78b6d6ccdb2b43b2145aa671f403ebc286c97a4fb3d4db1a7140bbfb9db4998dbae62833b5994d8ba2ef2f2c9f56fb2e8ea7872f7b916eb24d6b09f41fdb1c079a35ab1342cacd6ddb1741d47b31891962377b315ccd92bf985891feac183f5e0f18065e49422e549a88196856266790d3c0a147fd605eae39b6ee524030c7904f0e243af794f0bb8683f41eda891806a625ab875f083e8834ac005dbf33c63b8219003ca4e9f2057be07a61445638607667b3cfa272b1aae0b40e17b331bca29e31d4373905f18823b671f70fe20713b211f105cf248dea3e17577ba11b58cbc420b42646e601eeeeae6f48bdfdcf2acda20efac907e14d3b2e28bb1f9d3eeb70aaae279a3fc197fa47d25d0f77c347c91e93a90ec20687fd553f7759fe399f423cce3ba8e1c48dc4b4020cd6e6b943bee87edb10b2073b94e890a46a43467b2688199f0a987ea317ee7d9fde1f48d08307e7062c8e47fd4551bf3f5884c877eed537e66fc849f15fc191362af1f0eb7e5068d2f1c55ae2d8bcec4d8505eb5f1754c11959cb02b8fe041e3abb46ce45a552bfe6325add3937ed6766d17841fb601e621b02963edca17288e0f1230336f6507705e105ee19215c047bad9fddfcdef00006948fceadbd846ab7a7ff00b8a0972c4989d50a273b84fc694181a8aceaf98ceefafd93bd0d84af5560c1b834285d0c1b35ae96b5e98a4058d21aafef77d9f0c5a173d1e6bdaebcca2b7ae0dfac7e3b8a267d6aba46f48a6d472a4150c80d7712caf42e5e5138707e36f1ebb6f0094e61d1867a0025a55a81bb4cda015abc7cf4c4c81dcaf08efee69ffe5bff8bffb81362264c78824410494c650dc1865ad3c23170415b58ebc2b34243464f416924ebbb4ae2bb311bbd2eebc37faad2a6841e6c3e51fcd108e88ca480337a069f843cabc87d502407f93d15d84e697a506602b100c7b85179c1e2975b92a332dc4fbee99455d734337134f93182124efdaec1480f5989a13ac55ba1142fb0bd7f37fd67f33d0763acd6aae86f8f50c6c5d224dd7a9190ab2fa2d7f25a874fd19681ebf63985c8690ee16e8826fd3a4d289ab10428b4129564eb85af0a7b26572aa99237521db29bccc56ffce71c7f1081b6748f18058e71b7ec9a504e3ef461b912463657de6d76a8b4119a8ebcb0d7a52f9548d27568af95ee187f8b77a7a369b646fba51559f818491e83dee9cbaa3927525224bd46bf54a11fc110add6e01a03e18538f83eb197621cb17be3898b10a4cdcc7fd7a66f33279415a4063d93518295d1737ae5e462ad53cfeafc5a02203e8ed42a6b943fa1a6d85d5ea8d27062579390f8fd0d0a10b91a6760d381796ac2be863285b598c5699b26e91d0063b6cfa087a3f132458e884a608d7347057f9990c969ab3c0c81e692f1b6b435a386ac047ebab3c97e129574503355e86d34b183823415273af2eed3928b5cf48ac52e7bb6f241d56f9adf98248c07591657313e210600db3606836d6ffc9fbd173dca404a993f40126e212e1bf9fb28edeea70d43ca15ecf125fd14d252c2e50ee3c06544df875ef2efeec1322f7bee81942f57b9cd8cd307b5e3749964bd9549e5c44ecfbdde033b49c2e949036075e3572cced6b49749772116990e9d32d492da7275534680fd4cc9b5e3e0efa561f91046465def3e6b74e3484c512bea875abb33a1b421a2edd94febf33d6a1f2f2c43248904d15456f9cdc4fb5daeaf14ea9d557d0968eeb7d156f4545fa594f0a7e8d53cded8a0c33a2e1a2ccb94077ae689bc445846bad04306bffc6a401f2f8609895d04467305433ff52dcfe2d788c4bdf29b18d80b4a5bab27e805159eabf23986778a107ce31034f580ad543dc5d84e5598315f0e64870db06cddff4d6682e961a8badb2aeb6fb5451388a248cdbf6fda9e47c9927ffbd394863bd08c100da894c58df9f11cc2de759dcbae56d2192a2666aad77f289fcd25df5bb5e4ce16ff5a5366d44b50bb27e3123788f7c22ff69e6326b5210df22b32b027cb4e0979c26fba48c8ae2f933ae2356f579749cbb05641ec73483784bd02cc2a3af694c1820d86c5726761427b6ead03ea40ff4a3025a9c1fc1005ed5ce9757741373b258f6a21fde10f5deaf8eb09f966e327412a7da6af59be8525e781ea17c7ee0a9a2518916ec4dbf972eade1c5b13129092dd9d1a5602537e16fc5a5c8da36350f2877b79ce9e8ea410c4474dd122160161c2d90e1a7c42c172997e560e209b424471df1e02dd9b1ae66e9fa2229234f0ed2eede0636ea5a8fd05299547de8bb50171f25cd25df1cd72e9a6271298c417d53b234bb8cfce60b7a2779a29d3076d2a4a69486daab3b62e233b94dcfb72fb0be03fa5eda6155dbedd56ff0b32b1e5b0d704e12d3ca11233f0400503eab05ced3a27b499cf27a11f81fb1565ea4618ddfa080f0f794650ec67329b30e7d0407a85d0dd43a476a2ab0564b8b16460245776fffb5d5945872704f5f812a915c9159705be687dde5b27a0dccbf89fc8dd378771db95edc432696e34d216014f49c5cec6cdb210b2b4495edd1c877a423ed3b666a1ebab584d4bdaf8b70b3db84eee470584e2bc555ffb0519a6f36512bdea36feb8e6ba3f7df08dc54aea159b82cc00b63865bcaddf20a56b09e242c2bbfa768cf227d673e8e8f333f9781f665073f40c0a35dea84c7999d2ab3cb043b7515cb3ae5b34b3df95ac2324ee6798e0bb7fe29aa87b0e3bc3df8f18932961f5e56d89fa801891851303f0dfa1540070548a754babc0bb9ce5c7767bd690fbbe048200b5ad8aece980941ec7c3bbbd5f430461b2e78ea1e51e12478e5115b5e640d5d937b28ff432ca8f179b41a8278f1af5d925b07e6738b359b41dc360b38f8c85514d8617ac719609d64b238fe8938e8ec95e4fde2549f06b3a5e0d0c9611cbd3548c3f1972f52fb70be107c87a8c6ff960289dfcb146a935506ff84278ddde59690265f1194058e60e120cd78d54e867ddad12a54065657177dd11d92035a8e59125fc40b620c9ffc2c61cf4d254999890e3f57b558ae44250c19cdc6f59d7ef6ddaa8c482b811c0e7a3ce52b2a5792b6acd2b9df62678140231458aaadd519a9de4774396f4aa6282b2abc81a4e23d24eec6825c08f8a3c9938bd2d0901e147e748a99d8d2e868cee88149ba8d0fa28cdb8857beba38cf82e489bca28e7a9ac4dce5d9a45cf0959a62489c310c1c7807ac7ddc7edb20f218e23cef28ed7671ed6076152919a28f35fb80774bda0c9b439ea1dadb8cbf2911e3b3669a8c68e969ed8d7952e11b122076b45dd4d10979cb19830b6bc1dfa9470bd4567ecd1036ff4be82e384d84a9f2d63190e0c8d75e417d180444d40e035b106b1d5b5c5dc5943729bd7d7a9d499448dde6122e5046fb24436aff5ff7ea71c4a415f33a60bff397c8e4dc8a065dcfa5bfe542b5ea1dd745096fd237dbd2a67db09e1109cdc77e451886b1ae6b33d5eed47e00d76de08d202a12522b79a156c64f46d8415c4b0c575c3db0ea982be351157237d7df5ed521d2651e907c758372b385752f92dadd728ec395a8150af1c1daf33aae3668c47f54a6cd508af98723a4eeab8f62f507afadf6f4c00b600003077ce62e362dc6a82c81def76619e6f35480332c222ca6ae675099739601159e2f7f3c9ebcaf0488567797b4c24f8b15880fbc48ee570d3632725e886ad122fb1666cf706c6dd94a53de91b3732ffbcf1c4cd9d9812c6329ee82cb6e34ab780d5969a694353a6b89251c120c8150ff7529a7473edb958fbf25da8a425b68a882312bbeca39f6b28d778409472d6b54cf39d763209b70ae0d941b03e7c63cc3d74b39735f804b925", 0x1000, 0x0, 0x80}, {&(0x7f00000006c0)="5c6f2dcf435745ecb65ddc8959c7c11dae5493baf01866f2ebd27fd2edc77d556c63c8fbe1a80afbc7affc057debfdcb24987a02c6e35fd39552e162a75911fc7e0471be39e0617f6b314a1d036938dcc87d3ce220a0ffd73c4f38bd5d81d0442a4a24131f554b7502502783d0f0d32ceaef82ef6261ad24318f59f4ad1fda739817bfa520ad4984a6ca1d3a1b91bc8b0e5f38b12b14d8f8a73b35fea3f4445f259de5f6f8ce83432a92b8c465816d674c4cb14f4c", 0xb5, 0x7, 0x2}], 0x150000)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
brk(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
dup(r3)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3)

2.231780695s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}, @IFLA_AF_SPEC={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.00423137s ago: executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a", 0x23}], 0x1)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
pipe(&(0x7f00000002c0))
write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x15)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

1.252763466s ago: executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000040))

1.206949783s ago: executing program 3:
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r5, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0)
fcntl$setsig(r1, 0xa, 0x21)
fcntl$setlease(r1, 0x400, 0x1)
fcntl$setlease(r1, 0x400, 0x0)

1.1586564s ago: executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x0, 0x0, @loopback}}]}, 0x190)
syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000"], 0x0)

1.081793082s ago: executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

817.042013ms ago: executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

111.066492ms ago: executing program 2:
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040))

0s ago: executing program 3:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$snddsp(r3, &(0x7f0000000200)="a38d", 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):


[  540.727907][T10595] XFS (loop3): Quotacheck needed: Please wait.
[  540.835962][T10595] XFS (loop3): Quotacheck: Done.
[  541.000620][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  541.143681][ T7243] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  541.379500][ T3569] EXT4-fs (loop4): unmounting filesystem.
[  541.453976][ T7364] XFS (loop3): Unmounting Filesystem
[  541.521573][ T7243] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  541.533260][ T7243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.551261][ T7243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.561736][ T7243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  541.651089][ T7243] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  541.664943][ T7243] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  541.686860][ T7243] usb 2-1: Manufacturer: syz
[  541.704057][ T7243] usb 2-1: config 0 descriptor??
[  541.901225][ T7242] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  542.204927][ T7243] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  542.221782][ T7243] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[  542.261262][ T7242] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  542.363255][T10649] loop3: detected capacity change from 0 to 512
[  542.520191][T10649] EXT4-fs (loop3): corrupt root inode, run e2fsck
[  542.527220][T10649] EXT4-fs (loop3): mount failed
[  543.087481][ T7242] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f
[  543.097078][ T7243] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  543.121259][ T7242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.151660][ T7242] usb 5-1: config 0 descriptor??
[  543.160362][ T3649] usb 2-1: USB disconnect, device number 7
[  543.196984][ T7242] usb 5-1: bad CDC descriptors
[  543.204100][ T7242] usb 5-1: bad CDC descriptors
[  543.218856][ T7242] cdc_acm 5-1:0.0: Control and data interfaces are not separated!
[  543.242815][ T7242] cdc_acm 5-1:0.0: This needs exactly 3 endpoints
[  543.256850][ T7242] cdc_acm: probe of 5-1:0.0 failed with error -22
[  543.396240][ T7243] usb 5-1: USB disconnect, device number 12
[  543.917895][T10656] loop0: detected capacity change from 0 to 128
[  543.926784][T10656] VFS: Found a Xenix FS (block size = 512) on device loop0
[  543.942363][T10656] syz-executor.0: attempt to access beyond end of device
[  543.942363][T10656] loop0: rw=2049, sector=2066843070, nr_sectors = 1 limit=128
[  543.957799][T10656] Buffer I/O error on dev loop0, logical block 2066843070, lost async page write
[  543.967501][T10656] syz-executor.0: attempt to access beyond end of device
[  543.967501][T10656] loop0: rw=2049, sector=8767744, nr_sectors = 1 limit=128
[  543.983223][T10656] Buffer I/O error on dev loop0, logical block 8767744, lost async page write
[  543.992589][T10656] syz-executor.0: attempt to access beyond end of device
[  543.992589][T10656] loop0: rw=2049, sector=13269809, nr_sectors = 1 limit=128
[  544.007125][T10656] Buffer I/O error on dev loop0, logical block 13269809, lost async page write
[  544.017081][T10656] syz-executor.0: attempt to access beyond end of device
[  544.017081][T10656] loop0: rw=2049, sector=1157, nr_sectors = 1 limit=128
[  544.031607][T10656] Buffer I/O error on dev loop0, logical block 1157, lost async page write
[  544.042480][T10656] syz-executor.0: attempt to access beyond end of device
[  544.042480][T10656] loop0: rw=2049, sector=3211264, nr_sectors = 1 limit=128
[  544.058569][T10656] Buffer I/O error on dev loop0, logical block 3211264, lost async page write
[  544.069465][T10656] syz-executor.0: attempt to access beyond end of device
[  544.069465][T10656] loop0: rw=2049, sector=8768635, nr_sectors = 1 limit=128
[  544.083975][T10656] Buffer I/O error on dev loop0, logical block 8768635, lost async page write
[  544.100399][T10656] syz-executor.0: attempt to access beyond end of device
[  544.100399][T10656] loop0: rw=2049, sector=13466417, nr_sectors = 1 limit=128
[  544.115427][T10656] Buffer I/O error on dev loop0, logical block 13466417, lost async page write
[  544.127364][T10656] syz-executor.0: attempt to access beyond end of device
[  544.127364][T10656] loop0: rw=2049, sector=209285, nr_sectors = 1 limit=128
[  544.142462][T10656] Buffer I/O error on dev loop0, logical block 209285, lost async page write
[  544.262924][ T7900] sysv_free_block: trying to free block not in datazone
[  544.273705][ T7900] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  544.320082][T10666] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  544.424025][T10671] 8021q: adding VLAN 0 to HW filter on device bond1
[  544.470245][T10671] bond1 (unregistering): Released all slaves
[  544.880041][T10684] loop1: detected capacity change from 0 to 512
[  545.285480][T10683] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  545.311620][T10693] loop0: detected capacity change from 0 to 512
[  545.674384][T10693] EXT4-fs (loop0): corrupt root inode, run e2fsck
[  545.681612][T10693] EXT4-fs (loop0): mount failed
[  545.716274][T10684] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  545.868500][T10684] ext4 filesystem being mounted at /root/syzkaller-testdir3031401978/syzkaller.bcyR8a/6/file0 supports timestamps until 2038 (0x7fffffff)
[  546.124309][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  546.268296][T10413] EXT4-fs (loop1): unmounting filesystem.
[  546.560960][ T4669] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  546.926638][ T4669] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.946093][ T4669] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f
[  546.985360][ T4669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.010238][ T4669] usb 1-1: config 0 descriptor??
[  547.086088][ T4669] usb 1-1: bad CDC descriptors
[  547.092953][ T4669] usb 1-1: bad CDC descriptors
[  547.098831][ T4669] cdc_acm 1-1:0.0: Control and data interfaces are not separated!
[  547.111358][ T4669] cdc_acm 1-1:0.0: This needs exactly 3 endpoints
[  547.118484][ T4669] cdc_acm: probe of 1-1:0.0 failed with error -22
[  547.154633][T10709] loop3: detected capacity change from 0 to 32768
[  547.186149][T10709] XFS (loop3): Mounting V5 Filesystem
[  547.243891][T10709] XFS (loop3): Ending clean mount
[  547.249400][T10716] overlayfs: failed to resolve './file0': -2
[  547.265791][ T3614] usb 1-1: USB disconnect, device number 16
[  547.272914][T10709] XFS (loop3): Quotacheck needed: Please wait.
[  547.339920][T10709] XFS (loop3): Quotacheck: Done.
[  547.416192][ T7364] XFS (loop3): Unmounting Filesystem
[  547.653471][T10734] loop4: detected capacity change from 0 to 64
[  548.178323][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  548.410857][T10744] loop4: detected capacity change from 0 to 40427
[  548.449758][T10744] F2FS-fs (loop4): Found nat_bits in checkpoint
[  548.522143][T10744] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  548.858125][   T27] audit: type=1800 audit(1718224752.635:331): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0
[  549.489960][T10770] ubi0: attaching mtd0
[  549.499709][T10770] ubi0: scanning is finished
[  549.504543][T10770] ubi0: empty MTD device detected
[  550.173164][T10770] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  550.561374][T10773] overlayfs: overlapping lowerdir path
[  550.824966][T10762] loop0: detected capacity change from 0 to 32768
[  550.869670][T10762] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (10762)
[  550.920441][T10762] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  550.964129][T10762] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  551.002365][T10762] BTRFS info (device loop0): force zlib compression, level 3
[  551.039994][T10762] BTRFS info (device loop0): force clearing of disk cache
[  551.056289][T10783] loop2: detected capacity change from 0 to 64
[  551.074412][T10762] BTRFS info (device loop0): setting nodatasum
[  551.100873][T10762] BTRFS info (device loop0): allowing degraded mounts
[  551.108227][T10762] BTRFS info (device loop0): enabling disk space caching
[  551.156179][T10762] BTRFS info (device loop0): disk space caching is enabled
[  551.354243][T10762] BTRFS info (device loop0): rebuilding free space tree
[  551.419903][T10762] BTRFS info (device loop0): disabling free space tree
[  551.441158][ T4669] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  551.455457][T10762] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  551.517936][T10762] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  551.681549][ T7900] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  551.838665][ T4669] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  551.849759][ T4669] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f
[  551.869763][ T4669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.894913][ T4669] usb 4-1: config 0 descriptor??
[  551.993617][ T4669] usb 4-1: bad CDC descriptors
[  552.028294][ T4669] usb 4-1: bad CDC descriptors
[  552.156346][ T4669] usb 4-1: USB disconnect, device number 10
[  552.719563][T10806] loop2: detected capacity change from 0 to 32768
[  552.728234][ T3569] syz-executor.4: attempt to access beyond end of device
[  552.728234][ T3569] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  552.790940][T10806] XFS (loop2): Mounting V5 Filesystem
[  552.905857][T10806] XFS (loop2): Ending clean mount
[  552.935876][T10806] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  552.963594][T10806] XFS (loop2): Unmount and run xfs_repair
[  552.970414][T10806] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  552.990437][T10806] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  553.004824][T10806] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  553.034912][T10806] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  553.049664][T10806] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  553.079203][T10806] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  553.090637][T10806] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  553.101780][T10806] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  553.110895][T10806] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  553.120195][T10806] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  553.145711][T10806] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573).  Shutting down filesystem.
[  553.211039][T10806] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  553.372870][T10836] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  553.423003][T10838] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  553.435229][T10836] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  553.500117][T10838] CIFS: Unable to determine destination address
[  554.848387][T10848] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  554.884327][T10848] 8021q: adding VLAN 0 to HW filter on device bond1
[  554.905966][T10848] bond1 (unregistering): Released all slaves
[  554.939321][ T7788] XFS (loop2): Unmounting Filesystem
[  555.382454][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  555.491181][ T7242] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  555.559647][T10864] fuse: Bad value for 'fd'
[  555.694425][T10854] loop0: detected capacity change from 0 to 40427
[  555.738651][T10854] F2FS-fs (loop0): invalid crc value
[  555.772427][T10854] F2FS-fs (loop0): Found nat_bits in checkpoint
[  555.789790][T10853] loop1: detected capacity change from 0 to 32768
[  555.814053][T10853] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (10853)
[  555.847854][T10853] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  555.851398][ T7242] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  555.874330][T10853] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  555.886131][T10854] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  555.889175][ T7242] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f
[  555.903979][T10853] BTRFS info (device loop1): setting nodatacow, compression disabled
[  555.915314][T10854] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  555.925148][T10853] BTRFS info (device loop1): turning on flush-on-commit
[  555.925368][ T7242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.940921][T10853] BTRFS info (device loop1): enabling auto defrag
[  555.955985][T10853] BTRFS info (device loop1): max_inline at 0
[  555.964956][   T27] audit: type=1800 audit(1718224759.745:332): pid=10854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0
[  555.967275][T10853] BTRFS info (device loop1): using free space tree
[  555.997210][ T7242] usb 5-1: config 0 descriptor??
[  556.032142][ T7900] syz-executor.0: attempt to access beyond end of device
[  556.032142][ T7900] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  556.054883][ T7242] usb 5-1: bad CDC descriptors
[  556.062222][ T7242] usb 5-1: bad CDC descriptors
[  556.079034][T10853] BTRFS info (device loop1): enabling ssd optimizations
[  556.263747][ T4669] usb 5-1: USB disconnect, device number 13
[  556.422627][T10413] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  556.813837][T10893] loop0: detected capacity change from 0 to 64
[  556.827990][T10894] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  558.384033][T10908] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  558.414859][T10908] 8021q: adding VLAN 0 to HW filter on device bond2
[  558.434909][T10908] bond2 (unregistering): Released all slaves
[  558.684262][T10914] loop3: detected capacity change from 0 to 8192
[  558.791157][T10914] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  558.825295][T10914] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  558.840091][T10914] REISERFS (device loop3): using ordered data mode
[  558.849701][T10914] reiserfs: using flush barriers
[  558.860466][T10914] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  558.942435][T10914] REISERFS (device loop3): checking transaction log (loop3)
[  558.984577][T10927] loop0: detected capacity change from 0 to 256
[  559.026619][T10927] FAT-fs (loop0): Unrecognized mount option "errors=remouHÿÿÿo" or missing value
[  559.355598][T10914] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
[  559.411052][T10914] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  559.460521][T10914] REISERFS (device loop3): Remounting filesystem read-only
[  561.136976][T10939] loop4: detected capacity change from 0 to 512
[  561.667723][T10939] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  561.675124][T10939] EXT4-fs (loop4): mount failed
[  561.696161][T10914] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  561.713849][T10914] REISERFS warning (device loop3):  reiserfs_fill_super: corrupt root inode, run fsck
[  562.017170][T10942] overlayfs: failed to resolve './file1': -2
[  562.247082][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  562.265965][T10948] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  562.501211][T10957] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  562.677479][T10957] 8021q: adding VLAN 0 to HW filter on device bond1
[  562.737821][T10959] bond1 (unregistering): Released all slaves
[  562.767317][T10950] loop2: detected capacity change from 0 to 32768
[  562.810065][T10950] overlayfs: upper fs needs to support d_type.
[  562.817052][T10950] overlayfs: upper fs does not support tmpfile.
[  562.825220][T10950] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  562.858286][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  562.882992][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  562.889378][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  564.361432][T10501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.495859][T10501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.627608][T10501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.776492][T10501] bond0: (slave netdevsim0): Releasing backup interface
[  564.792239][T10501] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.888365][T10991] loop4: detected capacity change from 0 to 512
[  565.185618][T10991] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  565.192532][T10991] EXT4-fs (loop4): mount failed
[  565.577490][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  566.060270][ T3572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  566.083807][ T3572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  566.097109][ T3572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  566.109499][ T3572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  566.117968][ T3572] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  566.165472][ T3572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  567.175534][T11020] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  567.232903][T11020] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  567.243897][T11021] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  567.283972][T11020] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  567.340032][T11020] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  567.513665][T11006] chnl_net:caif_netlink_parms(): no params data found
[  567.618052][T10501] device hsr_slave_0 left promiscuous mode
[  567.631443][T10501] device hsr_slave_1 left promiscuous mode
[  567.658878][T10501] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  567.682778][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0
[  567.703885][T10501] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  567.720090][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1
[  567.749347][T10501] device bridge_slave_1 left promiscuous mode
[  567.761805][T10501] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.782474][T10501] device bridge_slave_0 left promiscuous mode
[  567.794724][T10501] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.814478][T11037] loop0: detected capacity change from 0 to 64
[  567.852794][T10501] device veth1_macvtap left promiscuous mode
[  567.869712][T10501] device veth0_macvtap left promiscuous mode
[  567.890372][T10501] device veth1_vlan left promiscuous mode
[  567.910853][T10501] device veth0_vlan left promiscuous mode
[  568.116060][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  568.273847][T11009] loop4: detected capacity change from 0 to 65536
[  568.321011][ T3572] Bluetooth: hci2: command tx timeout
[  568.337859][T11009] XFS (loop4): Mounting V5 Filesystem
[  568.410036][T11009] XFS (loop4): Ending clean mount
[  568.426128][T11009] XFS (loop4): Quotacheck needed: Please wait.
[  568.533143][T11009] XFS (loop4): Quotacheck: Done.
[  568.626537][T10501] team0 (unregistering): Port device team_slave_1 removed
[  568.661792][T10501] team0 (unregistering): Port device team_slave_0 removed
[  568.752956][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  568.811919][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  568.978951][T10501] bond0 (unregistering): Released all slaves
[  569.276088][T11006] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.293627][T11006] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.311152][T11006] device bridge_slave_0 entered promiscuous mode
[  569.335015][T11006] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.349788][T11006] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.366366][T11006] device bridge_slave_1 entered promiscuous mode
[  569.448621][T11006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  569.492158][T11006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.524978][ T3569] XFS (loop4): Unmounting Filesystem
[  569.681344][T11006] team0: Port device team_slave_0 added
[  569.729721][T11006] team0: Port device team_slave_1 added
[  569.774458][T11006] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.781688][T11006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.809204][T11006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.843214][T11006] batman_adv: batadv0: Adding interface: batadv_slave_1
[  569.850320][T11006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.876893][T11006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.963245][T11006] device hsr_slave_0 entered promiscuous mode
[  569.992544][T11006] device hsr_slave_1 entered promiscuous mode
[  570.412119][ T3572] Bluetooth: hci2: command tx timeout
[  571.551558][T11095] loop0: detected capacity change from 0 to 64
[  571.690577][T11006] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  571.704111][T11006] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  571.724614][T11006] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  571.738911][T11006] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  571.955742][T11006] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.187846][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  572.196757][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  572.213395][T11006] 8021q: adding VLAN 0 to HW filter on device team0
[  572.681418][ T3579] Bluetooth: hci2: command tx timeout
[  573.062291][ T7238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  573.122359][ T7238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  573.172614][ T7238] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.179775][ T7238] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.394908][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  573.408087][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  573.451581][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  573.481380][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.488562][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  573.541270][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  573.582081][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  573.611064][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  573.658439][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  573.688706][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  573.717715][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  573.747199][T11006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  573.825216][T11006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  573.873871][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  573.883048][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  573.901634][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  573.917075][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  573.937562][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  573.988450][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  574.271016][T11135] loop1: detected capacity change from 0 to 64
[  574.285672][T11136] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'.
[  574.482314][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  574.721450][ T3572] Bluetooth: hci2: command tx timeout
[  574.969474][ T7238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  575.001146][ T7238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  575.046788][T11006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  575.176713][ T7242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  575.193864][ T7242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  575.279403][ T7238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  575.299625][ T7238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  575.329739][T11006] device veth0_vlan entered promiscuous mode
[  575.350368][ T7233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  575.359907][T11159] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0
[  575.361337][ T7233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  575.393973][ T3579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  575.406595][ T3579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  575.415826][ T3579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  575.423934][ T3579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  575.441886][ T3579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  575.445956][T11006] device veth1_vlan entered promiscuous mode
[  575.455778][ T3579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  575.496786][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  575.712951][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  575.735748][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  575.793186][T11006] device veth0_macvtap entered promiscuous mode
[  576.564342][T11006] device veth1_macvtap entered promiscuous mode
[  576.690583][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  576.712459][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  576.738395][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.772598][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.800795][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.841157][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.868675][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.887585][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.901096][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.918045][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.941114][T11006] batman_adv: batadv0: Interface activated: batadv_slave_0
[  576.952989][ T7242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  576.964549][ T7242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  576.975484][T11158] chnl_net:caif_netlink_parms(): no params data found
[  576.987608][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.998387][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.030144][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.041494][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.052910][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.064206][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.074943][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.086550][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.099567][T11006] batman_adv: batadv0: Interface activated: batadv_slave_1
[  577.114957][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  577.133984][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  577.170570][T11006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  577.183297][T11006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  577.192278][T11006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  577.201127][T11006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  577.266265][T10501] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.393828][T10501] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.420916][ T7243] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  577.478422][T10501] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.521152][ T3579] Bluetooth: hci0: command tx timeout
[  577.578398][T11158] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.590311][T11158] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.609713][T11158] device bridge_slave_0 entered promiscuous mode
[  577.632906][T10501] bond0: (slave netdevsim0): Releasing backup interface
[  577.673349][T10501] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.695624][T10496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  577.701293][T11158] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.711080][T10496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  577.726542][T11158] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.742023][T11158] device bridge_slave_1 entered promiscuous mode
[  577.781074][ T7243] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  577.793704][ T7233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  577.808306][ T7243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.836292][ T7243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  577.850382][ T7243] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  577.879009][T11158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.914242][T10496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  577.941113][ T7243] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  577.943974][T11158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.959486][ T7243] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  577.959518][ T7243] usb 4-1: Manufacturer: syz
[  577.974100][T10496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  577.976509][ T7243] usb 4-1: config 0 descriptor??
[  578.027157][T11184] loop0: detected capacity change from 0 to 64
[  578.055264][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  578.151890][T11158] team0: Port device team_slave_0 added
[  578.174159][T11158] team0: Port device team_slave_1 added
[  578.285197][T11158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  578.310611][T11158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.340965][T11158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  578.354419][T11158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  578.368905][T11158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.395205][T11158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.495339][T11158] device hsr_slave_0 entered promiscuous mode
[  578.504856][T11158] device hsr_slave_1 entered promiscuous mode
[  578.511440][ T7243] usbhid 4-1:0.0: can't add hid device: -71
[  578.517584][T11158] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  578.518050][ T7243] usbhid: probe of 4-1:0.0 failed with error -71
[  578.532210][T11158] Cannot create hsr debugfs directory
[  578.559493][ T7243] usb 4-1: USB disconnect, device number 11
[  578.855067][T11201] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  578.989193][T11201] 8021q: adding VLAN 0 to HW filter on device bond1
[  579.023330][T11203] bond1 (unregistering): Released all slaves
[  579.203948][T11210] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  579.519740][T10501] device hsr_slave_0 left promiscuous mode
[  579.519995][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  579.538095][T10501] device hsr_slave_1 left promiscuous mode
[  579.557586][T10501] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  579.580217][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0
[  579.601104][ T3579] Bluetooth: hci0: command tx timeout
[  579.612272][T10501] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  579.619780][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1
[  579.665429][T10501] device bridge_slave_1 left promiscuous mode
[  579.721975][T10501] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.793727][T10501] device bridge_slave_0 left promiscuous mode
[  579.800051][T10501] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.859033][T10501] device veth1_macvtap left promiscuous mode
[  579.872072][T10501] device veth0_macvtap left promiscuous mode
[  579.885288][T10501] device veth1_vlan left promiscuous mode
[  579.905288][T10501] device veth0_vlan left promiscuous mode
[  580.423656][T11217] loop3: detected capacity change from 0 to 32768
[  580.456597][T11217] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (11217)
[  580.503975][T11217] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  580.536664][T11217] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  580.575642][T11217] BTRFS info (device loop3): force zlib compression, level 3
[  580.601847][T11217] BTRFS info (device loop3): force clearing of disk cache
[  580.620296][T11217] BTRFS info (device loop3): setting nodatasum
[  580.641110][T11217] BTRFS info (device loop3): allowing degraded mounts
[  580.658205][T11217] BTRFS info (device loop3): enabling disk space caching
[  580.675593][T11217] BTRFS info (device loop3): disk space caching is enabled
[  580.684072][T10501] team0 (unregistering): Port device team_slave_1 removed
[  580.738347][T10501] team0 (unregistering): Port device team_slave_0 removed
[  580.798185][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.861570][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  580.893979][T11217] BTRFS info (device loop3): rebuilding free space tree
[  580.961702][T11217] BTRFS info (device loop3): disabling free space tree
[  581.001044][T11217] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  581.032763][T11217] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  581.193113][T10501] bond0 (unregistering): Released all slaves
[  581.456893][T11158] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  581.487371][T11158] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  581.513496][T11158] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  581.537896][T11158] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  581.690139][ T3579] Bluetooth: hci0: command tx timeout
[  581.845238][T11158] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.904464][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  581.939081][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  581.952895][T11158] 8021q: adding VLAN 0 to HW filter on device team0
[  582.041647][ T7233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  582.059230][ T7233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  582.113458][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.120645][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.225590][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  582.237291][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  582.248574][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  582.286072][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.293454][ T7243] bridge0: port 2(bridge_slave_1) entered forwarding state
[  582.302493][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  582.565851][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  582.595665][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  582.634770][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  582.661509][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  582.686656][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  582.729570][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  582.769069][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  582.801307][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  582.843498][T11264] overlayfs: failed to resolve './file0': -2
[  582.882786][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  582.939228][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  582.970467][T11158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  582.995183][ T7364] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  583.761517][ T3579] Bluetooth: hci0: command tx timeout
[  583.844319][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  583.853684][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  583.878360][T11158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  584.070199][T11284] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  584.416813][T11275] loop2: detected capacity change from 0 to 32768
[  584.549344][T11275] overlayfs: upper fs needs to support d_type.
[  584.572698][T11275] overlayfs: upper fs does not support tmpfile.
[  584.587521][T11275] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  584.603561][T11275] overlayfs: failed to resolve './file0': -2
[  584.645164][T11298] loop0: detected capacity change from 0 to 256
[  584.680501][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  584.707481][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  584.716869][T11298] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  584.769399][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  584.777588][   T27] audit: type=1800 audit(1718224788.545:333): pid=11298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=1048641 res=0 errno=0
[  584.808901][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  584.831289][T11158] device veth0_vlan entered promiscuous mode
[  584.855782][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  584.867327][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  584.892004][T11158] device veth1_vlan entered promiscuous mode
[  584.997428][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  585.011436][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  585.028859][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  585.056967][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  585.069442][T11158] device veth0_macvtap entered promiscuous mode
[  585.094601][T11158] device veth1_macvtap entered promiscuous mode
[  585.126111][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  585.138780][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.180891][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  585.197204][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.210438][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  585.223300][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.235389][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  585.247916][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.272267][T11158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  585.288551][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  585.301205][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  585.319611][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  585.341997][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  585.362878][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.394507][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.418899][T11292] loop3: detected capacity change from 0 to 32768
[  585.425688][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.437428][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.448776][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.460159][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.483372][T11292] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (11292)
[  585.496305][T11158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  585.522764][T11292] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  585.533749][T11158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  585.544653][T11292] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  585.557948][T11158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  585.567667][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  585.577079][T11292] BTRFS info (device loop3): force zlib compression, level 3
[  585.591194][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  585.605626][T11292] BTRFS info (device loop3): force clearing of disk cache
[  585.620086][T11158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  585.633529][T11292] BTRFS info (device loop3): setting nodatasum
[  585.646456][T11158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  585.656822][T11292] BTRFS info (device loop3): allowing degraded mounts
[  585.664611][T11158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.674064][T11292] BTRFS info (device loop3): enabling disk space caching
[  585.683524][T11158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.692881][T11292] BTRFS info (device loop3): disk space caching is enabled
[  585.972604][ T3684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.986371][ T3684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.000280][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  586.032154][T11303] loop1: detected capacity change from 0 to 32768
[  586.075988][T11292] BTRFS info (device loop3): rebuilding free space tree
[  586.084764][T11303] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (11303)
[  586.093707][T10494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  586.111593][T10494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.128665][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  586.141898][T11292] BTRFS info (device loop3): disabling free space tree
[  586.165918][T11292] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  586.166452][T11331] CIFS: Unable to determine destination address
[  586.191146][T11303] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  586.211715][T11292] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  586.227666][T11303] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  586.257112][T11303] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  586.277804][T11303] BTRFS info (device loop1): use zstd compression, level 3
[  586.285363][T11303] BTRFS info (device loop1): using free space tree
[  586.420471][T11303] BTRFS info (device loop1): enabling ssd optimizations
[  586.437781][T11348] fuse: Bad value for 'group_id'
[  586.451330][T11303] BTRFS info (device loop1): checking UUID tree
[  586.545173][T10494] BTRFS info (device loop1): cannot satisfy tickets, dumping space info
[  586.553635][T10494] BTRFS info (device loop1): space_info DATA+METADATA has 10563584 free, is full
[  586.563169][T10494] BTRFS info (device loop1): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=917504, readonly=0 zone_unusable=0
[  586.581606][T10494] BTRFS info (device loop1): failing ticket with 134217728 bytes
[  586.590413][T11303] BTRFS info (device loop1): space_info DATA+METADATA has 10563584 free, is full
[  586.599905][T11303] BTRFS info (device loop1): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=917504, readonly=0 zone_unusable=0
[  586.613658][T11303] BTRFS info (device loop1): global_block_rsv: size 917504 reserved 917504
[  586.622328][T11303] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  586.630013][T11303] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  586.637732][T11303] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  586.645703][T11303] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0
[  586.807387][T11357] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  587.074508][T10413] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  587.130885][ T4663] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  587.511199][ T4663] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  587.541073][ T4663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  587.585432][ T4663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  587.615629][ T4663] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  587.646221][T11354] loop4: detected capacity change from 0 to 32768
[  587.697424][T11354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (11354)
[  587.730930][ T4663] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  587.752472][ T4663] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  587.791171][ T4663] usb 1-1: Manufacturer: syz
[  587.797634][ T4663] usb 1-1: config 0 descriptor??
[  587.804292][T11354] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  587.827886][T11354] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  587.922845][T11354] BTRFS info (device loop4): setting nodatacow, compression disabled
[  587.951157][T11354] BTRFS info (device loop4): turning on flush-on-commit
[  587.982738][T11354] BTRFS info (device loop4): enabling auto defrag
[  587.996535][T11354] BTRFS info (device loop4): max_inline at 0
[  588.123203][T11354] BTRFS info (device loop4): using free space tree
[  588.933261][ T7364] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  588.977856][T11363] loop2: detected capacity change from 0 to 32768
[  589.042761][T11354] BTRFS info (device loop4): enabling ssd optimizations
[  589.211152][ T4663] usbhid 1-1:0.0: can't add hid device: -71
[  589.217876][ T4663] usbhid: probe of 1-1:0.0 failed with error -71
[  589.240412][ T4663] usb 1-1: USB disconnect, device number 17
[  589.356063][T11387] loop1: detected capacity change from 0 to 64
[  589.492527][T11158] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  590.137486][T11402] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  590.344282][T11406] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  590.527328][T11406] team0: Port device team_slave_0 removed
[  590.840327][T11403] loop0: detected capacity change from 0 to 32768
[  590.891153][T11403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (11403)
[  590.943192][T11403] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  590.983017][T11403] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  591.010898][T11403] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  591.034009][T11403] BTRFS info (device loop0): use zstd compression, level 3
[  591.054250][T11403] BTRFS info (device loop0): using free space tree
[  591.110089][T11409] loop3: detected capacity change from 0 to 32768
[  591.141663][T11409] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (11409)
[  591.183393][T11409] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  591.199807][T11409] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  591.229407][T11409] BTRFS info (device loop3): force zlib compression, level 3
[  591.261408][T11403] BTRFS info (device loop0): enabling ssd optimizations
[  591.270430][T11403] BTRFS info (device loop0): checking UUID tree
[  591.277689][T11409] BTRFS info (device loop3): force clearing of disk cache
[  591.291160][T11409] BTRFS info (device loop3): setting nodatasum
[  591.297537][T11409] BTRFS info (device loop3): allowing degraded mounts
[  591.299112][T11435] loop4: detected capacity change from 0 to 64
[  591.324869][T11409] BTRFS info (device loop3): enabling disk space caching
[  591.334066][ T7232] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  591.368835][T11409] BTRFS info (device loop3): disk space caching is enabled
[  591.379432][ T3684] BTRFS info (device loop0): cannot satisfy tickets, dumping space info
[  591.387959][ T3684] BTRFS info (device loop0): space_info DATA+METADATA has 10563584 free, is full
[  591.397310][ T3684] BTRFS info (device loop0): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=917504, readonly=0 zone_unusable=0
[  591.411296][ T3684] BTRFS info (device loop0): failing ticket with 134217728 bytes
[  591.419764][T11403] BTRFS info (device loop0): space_info DATA+METADATA has 10563584 free, is full
[  591.429091][T11403] BTRFS info (device loop0): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=917504, readonly=0 zone_unusable=0
[  591.442956][T11403] BTRFS info (device loop0): global_block_rsv: size 917504 reserved 917504
[  591.452404][T11403] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0
[  591.460083][T11403] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0
[  591.468312][T11403] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0
[  591.476219][T11403] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0
[  591.511637][T11409] BTRFS info (device loop3): rebuilding free space tree
[  591.536330][T11409] BTRFS info (device loop3): disabling free space tree
[  591.543602][T11409] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  591.559700][T11409] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  591.583062][ T7900] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  591.751214][ T7232] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  591.783490][ T7232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.815806][T11458] fuse: Bad value for 'group_id'
[  591.840090][ T7232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.850143][ T7232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  591.971001][ T7232] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  591.987164][ T7232] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  592.041862][ T7232] usb 3-1: Manufacturer: syz
[  592.073877][ T7232] usb 3-1: config 0 descriptor??
[  592.556768][T11457] loop1: detected capacity change from 0 to 32768
[  592.620980][ T7232] usbhid 3-1:0.0: can't add hid device: -71
[  592.627870][ T7232] usbhid: probe of 3-1:0.0 failed with error -71
[  592.655275][ T7232] usb 3-1: USB disconnect, device number 19
[  592.957421][T11466] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  593.114894][ T7364] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  594.293961][T11479] loop4: detected capacity change from 0 to 64
[  595.278275][T11495] loop0: detected capacity change from 0 to 64
[  595.960324][T11503] loop0: detected capacity change from 0 to 256
[  595.992545][T11503] exfat: Unknown parameter '0xffffffffffffffff'
[  596.036090][T11507] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  596.223019][T11501] loop3: detected capacity change from 0 to 32768
[  596.331344][ T4668] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  597.509309][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  597.578582][ T4668] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  597.589639][ T4668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  597.601663][ T4668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  597.612588][ T4668] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  597.701329][ T4668] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  597.711179][ T4668] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  597.719808][ T4668] usb 3-1: Manufacturer: syz
[  597.726740][ T4668] usb 3-1: config 0 descriptor??
[  599.101075][ T4668] usbhid 3-1:0.0: can't add hid device: -71
[  599.111996][ T4668] usbhid: probe of 3-1:0.0 failed with error -71
[  599.129767][ T4668] usb 3-1: USB disconnect, device number 20
[  599.245628][T11539] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  599.904927][T11557] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  599.917579][T11555] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  600.213423][T11543] loop0: detected capacity change from 0 to 32768
[  602.751582][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  602.796550][T11577] loop2: detected capacity change from 0 to 512
[  603.529171][T11577] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  603.536558][T11577] EXT4-fs (loop2): mount failed
[  605.081953][T11596] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  605.376271][T11583] loop3: detected capacity change from 0 to 40427
[  605.411873][T11583] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  605.430696][T11583] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  605.478361][T11583] F2FS-fs (loop3): invalid crc value
[  605.488351][T11583] F2FS-fs (loop3): Found nat_bits in checkpoint
[  605.573990][T11583] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  605.586187][T11583] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  606.510957][ T8814] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  606.559777][T11603] loop4: detected capacity change from 0 to 32768
[  606.603723][T11603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (11603)
[  606.657290][T11603] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  606.676996][T11603] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  606.688943][T11603] BTRFS info (device loop4): setting nodatacow, compression disabled
[  606.698186][T11603] BTRFS info (device loop4): turning on flush-on-commit
[  606.708689][T11603] BTRFS info (device loop4): enabling auto defrag
[  606.716844][T11603] BTRFS info (device loop4): max_inline at 0
[  606.728777][T11603] BTRFS info (device loop4): using free space tree
[  606.760793][ T8814] usb 1-1: Using ep0 maxpacket: 32
[  606.925909][ T8814] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe
[  606.990893][ T8814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.085254][ T8814] usb 1-1: config 0 descriptor??
[  607.134728][T11603] BTRFS info (device loop4): enabling ssd optimizations
[  607.183023][ T8814] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected
[  607.217591][ T8814] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84
[  607.279889][T11642] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  607.324339][ T8814] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  607.356883][ T8814] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82
[  607.374952][ T8814] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  607.400919][ T8814] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  607.423784][ T8814] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  607.443166][ T8814] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  607.498737][ T8814] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  607.547988][ T8814] usb 1-1: USB disconnect, device number 18
[  607.563584][T11648] loop1: detected capacity change from 0 to 1024
[  607.578727][ T8814] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  607.590938][T11648] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  607.640844][ T8814] keyspan 1-1:0.0: device disconnected
[  607.661535][T11648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  607.736030][T11158] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  608.386230][T11655] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  608.411801][T10413] EXT4-fs (loop1): unmounting filesystem.
[  608.528712][T11644] loop2: detected capacity change from 0 to 40427
[  608.559238][T11644] F2FS-fs (loop2): Wrong segment_count / block_count (64 > 16384)
[  608.578021][T11644] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  608.639551][T11644] F2FS-fs (loop2): Found nat_bits in checkpoint
[  608.836064][T11669] loop1: detected capacity change from 0 to 512
[  608.856449][T11644] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  608.869931][T11669] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  608.894368][T11644] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  608.916110][T11669] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  608.931494][T11669] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 2683928664 (level 1)
[  608.960309][T11669] EXT4-fs (loop1): 1 truncate cleaned up
[  608.975382][T11669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  609.010090][T11669] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz-executor.1: Invalid block bitmap block 3 in block_group 0
[  609.112019][T11006] syz-executor.2: attempt to access beyond end of device
[  609.112019][T11006] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  609.134470][T10413] EXT4-fs (loop1): unmounting filesystem.
[  609.281187][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  609.542003][T11678] loop3: detected capacity change from 0 to 256
[  609.569034][T11678] FAT-fs (loop3): Unrecognized mount option "errors=remouHÿÿÿo" or missing value
[  609.893373][T11687] CIFS: Unable to determine destination address
[  610.119411][T11682] loop4: detected capacity change from 0 to 32768
[  610.159744][T11682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (11682)
[  610.212313][T11682] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  610.238875][T11682] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  610.283483][T11682] BTRFS info (device loop4): setting nodatacow, compression disabled
[  610.308095][T11682] BTRFS info (device loop4): turning on flush-on-commit
[  610.324701][T11682] BTRFS info (device loop4): enabling auto defrag
[  610.339936][T11682] BTRFS info (device loop4): max_inline at 0
[  610.355181][T11682] BTRFS info (device loop4): using free space tree
[  610.587049][T11689] loop0: detected capacity change from 0 to 32768
[  610.665278][T11689] ERROR: (device loop0): diRead: i_ino != di_number
[  610.665278][T11689] 
[  610.690060][T11689] ERROR: (device loop0): remounting filesystem as read-only
[  610.736630][T11682] BTRFS info (device loop4): enabling ssd optimizations
[  610.796527][T11692] loop1: detected capacity change from 0 to 40427
[  610.906313][T11692] F2FS-fs (loop1): Found nat_bits in checkpoint
[  610.978907][T11715] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  610.987735][T11158] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  611.113290][T11692] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  611.676521][   T27] audit: type=1800 audit(1718224815.455:334): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0
[  612.996622][T11748] CIFS: Unable to determine destination address
[  614.846357][T11741] loop0: detected capacity change from 0 to 32768
[  614.941118][T11741] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  614.968720][T11741] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  615.078558][T11741] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  615.131688][T11757] loop2: detected capacity change from 0 to 32768
[  615.149009][ T7232] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  615.166666][ T7232] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  615.181498][T11757] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (11757)
[  615.235391][T11758] loop3: detected capacity change from 0 to 32768
[  615.312603][T11758] ERROR: (device loop3): diRead: i_ino != di_number
[  615.312603][T11758] 
[  615.347829][T11758] ERROR: (device loop3): remounting filesystem as read-only
[  615.367354][T11757] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  615.384783][T11757] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  615.403425][ T7232] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 236ms
[  615.424282][ T7232] gfs2: fsid=syz:syz.0: jid=0: Done
[  615.429553][T11757] BTRFS info (device loop2): setting nodatacow, compression disabled
[  615.431677][T11741] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  615.461227][T11757] BTRFS info (device loop2): turning on flush-on-commit
[  615.471371][T11757] BTRFS info (device loop2): enabling auto defrag
[  615.478059][T11757] BTRFS info (device loop2): max_inline at 0
[  615.492046][T11757] BTRFS info (device loop2): using free space tree
[  615.530494][T11757] BTRFS info (device loop2): enabling ssd optimizations
[  615.723046][T11006] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  616.222046][T10413] syz-executor.1: attempt to access beyond end of device
[  616.222046][T10413] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  616.876950][T11806] loop2: detected capacity change from 0 to 32768
[  616.890005][T11806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (11806)
[  616.918411][T11806] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  617.078608][T11806] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  617.088997][T11806] BTRFS info (device loop2): setting nodatacow, compression disabled
[  617.110819][T11806] BTRFS info (device loop2): turning on flush-on-commit
[  617.120883][T11806] BTRFS info (device loop2): enabling auto defrag
[  617.127875][T11806] BTRFS info (device loop2): max_inline at 0
[  617.156935][T11806] BTRFS info (device loop2): using free space tree
[  617.272829][T11816] loop4: detected capacity change from 0 to 4096
[  617.370644][T11824] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  617.393585][T11806] BTRFS info (device loop2): enabling ssd optimizations
[  617.503632][T11816] ntfs3: loop4: failed to convert "0080" to macgreek
[  617.519282][T11816] ntfs3: loop4: failed to convert name for inode 1e.
[  617.557785][T11006] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  618.382509][T11860] loop3: detected capacity change from 0 to 64
[  618.806773][T11851] loop4: detected capacity change from 0 to 32768
[  618.860359][T11851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (11851)
[  618.902466][T11851] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  618.924603][T11851] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  618.949171][T11851] BTRFS info (device loop4): setting nodatacow, compression disabled
[  618.971029][T11851] BTRFS info (device loop4): turning on flush-on-commit
[  618.988752][T11851] BTRFS info (device loop4): enabling auto defrag
[  619.017730][T11851] BTRFS info (device loop4): max_inline at 0
[  619.034731][T11851] BTRFS info (device loop4): using free space tree
[  619.242134][T11851] BTRFS info (device loop4): enabling ssd optimizations
[  619.296873][T11861] loop2: detected capacity change from 0 to 32768
[  619.327734][T11861] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  619.340871][T11861] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  619.363109][T11861] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  619.373998][ T7232] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  619.382004][ T7232] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  619.448484][ T7232] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 66ms
[  619.456191][ T7232] gfs2: fsid=syz:syz.0: jid=0: Done
[  619.457185][T11158] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  619.472457][T11861] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  619.655805][T11895] overlayfs: failed to resolve './file1': -2
[  622.622964][T11926] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  622.820293][T11933] overlayfs: failed to resolve './file1': -2
[  623.140298][T11942] fuse: Unknown parameter 'group_i00000000000000000000'
[  623.289901][T11947] CIFS: Unable to determine destination address
[  623.564326][T11951] tipc: Can't bind to reserved service type 0
[  623.589002][T11940] loop0: detected capacity change from 0 to 32768
[  623.627965][T11940] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  623.636361][T11940] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  623.650441][T11940] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  623.659392][ T3649] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  623.666374][ T3649] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  623.735045][ T3649] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms
[  623.743163][ T3649] gfs2: fsid=syz:syz.0: jid=0: Done
[  623.749929][T11940] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  624.341684][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  624.365076][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  625.531747][T11968] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  625.575708][T11969] loop1: detected capacity change from 0 to 256
[  625.653088][T11969] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  625.802398][T11969] FAT-fs (loop1): Filesystem has been set read-only
[  625.809484][T11969] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  625.821063][T11969] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  625.894749][   T27] audit: type=1800 audit(1718224829.675:335): pid=11969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=1048645 res=0 errno=0
[  626.287149][T11984] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  626.387221][T11976] loop4: detected capacity change from 0 to 32768
[  626.427657][T11976] overlayfs: upper fs needs to support d_type.
[  626.434154][T11976] overlayfs: upper fs does not support tmpfile.
[  626.441645][T11976] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  626.454488][T11976] overlayfs: failed to resolve './file0': -2
[  627.453738][T12005] loop2: detected capacity change from 0 to 256
[  627.524973][T12005] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  627.535586][T12005] FAT-fs (loop2): Filesystem has been set read-only
[  627.542358][T12005] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  627.552881][T12005] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  627.564813][   T27] audit: type=1800 audit(1718224831.345:336): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="loop2" ino=1048646 res=0 errno=0
[  627.587315][T12005] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  628.665618][T12035] fuse: Unknown parameter 'group_id00000000000000000000'
[  629.736986][T12056] loop4: detected capacity change from 0 to 512
[  630.560607][T12056] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  630.567738][T12056] EXT4-fs (loop4): mount failed
[  632.444522][T12077] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  632.515618][T12076] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  632.778164][ T3572] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  632.788322][ T3572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  632.800237][ T3572] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  632.811476][ T3572] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  632.821665][ T3572] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  632.828974][ T3572] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  633.372643][T12080] chnl_net:caif_netlink_parms(): no params data found
[  633.423376][T12097] loop2: detected capacity change from 0 to 64
[  633.577285][T12101] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  633.686534][T12080] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.821802][T12080] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.845885][T12080] device bridge_slave_0 entered promiscuous mode
[  633.856924][T12080] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.864527][T12080] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.875934][T12080] device bridge_slave_1 entered promiscuous mode
[  633.929630][T12105] EXT4-fs warning (device sda1): ext4_group_extend:1870: can't shrink FS - resize aborted
[  633.988223][T12080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  634.018478][T12080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.163038][T12080] team0: Port device team_slave_0 added
[  634.190142][T12080] team0: Port device team_slave_1 added
[  634.341703][T12080] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.347660][T12084] loop0: detected capacity change from 0 to 32768
[  634.361605][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.428316][T12080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.471218][T12080] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.478205][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.558812][T12080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.649714][T12084] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  634.686611][T12084] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  634.786227][T12117] loop2: detected capacity change from 0 to 512
[  634.882665][ T3572] Bluetooth: hci1: command tx timeout
[  635.053478][T12084] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[  635.128333][T12117] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  635.135192][T12117] EXT4-fs (loop2): mount failed
[  635.299352][ T7243] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  635.419938][ T7243] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  635.520053][T12122] futex_wake_op: syz-executor.1 tries to shift op by 144; fix this program
[  635.722408][T12122] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  635.738404][   T27] audit: type=1804 audit(1718224839.505:337): pid=12124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3031401978/syzkaller.bcyR8a/85/.log" dev="sda1" ino=1951 res=1 errno=0
[  635.811699][ T7243] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 391ms
[  635.819962][ T7243] gfs2: fsid=syz:syz.0: jid=0: Done
[  635.841052][T12084] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  635.856186][T12080] device hsr_slave_0 entered promiscuous mode
[  635.872592][T12084] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  635.883234][T12080] device hsr_slave_1 entered promiscuous mode
[  635.941160][T12080] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  635.950849][T12080] Cannot create hsr debugfs directory
[  636.322532][T12080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.458082][T12080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.580666][T12080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.674503][T12080] bond0: (slave netdevsim0): Releasing backup interface
[  636.686344][T12080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  636.900572][T12127] 9pnet_fd: Insufficient options for proto=fd
[  636.961060][ T3579] Bluetooth: hci1: command tx timeout
[  636.965691][T12130] loop1: detected capacity change from 0 to 64
[  636.970038][T12080] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  636.986314][T12080] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  636.996418][T12080] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  637.046241][T12080] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  637.390281][T12080] 8021q: adding VLAN 0 to HW filter on device bond0
[  637.417898][ T7232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  637.428327][ T7232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  637.442540][T12080] 8021q: adding VLAN 0 to HW filter on device team0
[  638.463937][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  638.488786][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  638.525093][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.532311][ T4669] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.543503][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  638.557269][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  638.567203][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.574406][ T4669] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.615596][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  638.623929][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  638.685588][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  638.698725][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  638.709259][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  638.718729][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  638.728364][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  638.758160][T12080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  638.784944][T12080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  638.797612][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  638.808345][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  638.818063][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  638.827732][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  638.848304][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  638.875381][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  638.989943][T12152] loop4: detected capacity change from 0 to 164
[  639.040919][ T3579] Bluetooth: hci1: command tx timeout
[  639.041190][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  639.055435][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  639.082051][T12152] Unable to read rock-ridge attributes
[  639.105633][ T3631] device hsr_slave_0 left promiscuous mode
[  639.115330][ T3631] device hsr_slave_1 left promiscuous mode
[  639.120328][T12152] Unable to read rock-ridge attributes
[  639.129582][ T3631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  639.140965][ T3631] batman_adv: batadv0: Removing interface: batadv_slave_0
[  639.160336][ T3631] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  639.179837][ T3631] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.200271][ T3631] device bridge_slave_1 left promiscuous mode
[  639.209697][ T3631] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.230436][ T3631] device bridge_slave_0 left promiscuous mode
[  639.281406][ T3631] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.307338][ T3631] device veth1_macvtap left promiscuous mode
[  639.326068][ T3631] device veth0_macvtap left promiscuous mode
[  639.341362][ T3631] device veth1_vlan left promiscuous mode
[  639.347313][ T3631] device veth0_vlan left promiscuous mode
[  639.582555][T12163] loop1: detected capacity change from 0 to 512
[  640.967748][ T3579] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  640.977922][ T3579] Bluetooth: hci0: Injecting HCI hardware error event
[  641.000662][ T3572] Bluetooth: hci0: hardware error 0x00
[  641.120989][ T3578] Bluetooth: hci1: command tx timeout
[  641.286594][ T3631] bond2 (unregistering): Released all slaves
[  641.314262][T12163] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  641.321216][T12163] EXT4-fs (loop1): mount failed
[  641.353421][ T3631] bond1 (unregistering): Released all slaves
[  641.475961][ T3631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  641.491877][ T3631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  641.665517][ T3631] bond0 (unregistering): Released all slaves
[  641.678702][T12171] 9pnet_fd: Insufficient options for proto=fd
[  641.688113][ T3578] Bluetooth: hci3: unexpected event for opcode 0x2019
[  641.768037][T12080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  641.861955][T12080] device veth0_vlan entered promiscuous mode
[  641.908106][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  641.936243][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  641.959972][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  641.978954][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  641.999762][T12178] loop1: detected capacity change from 0 to 128
[  642.020637][T12080] device veth1_vlan entered promiscuous mode
[  642.047970][ T7232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  642.063348][ T7232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  642.094160][ T7232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  642.105167][ T7232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  642.118474][T12080] device veth0_macvtap entered promiscuous mode
[  642.152358][T12080] device veth1_macvtap entered promiscuous mode
[  642.177121][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  642.188835][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  642.223121][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  642.250813][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  642.261540][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  642.272808][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  642.295981][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  642.496089][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  642.725268][T12080] batman_adv: batadv0: Interface activated: batadv_slave_0
[  642.895529][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  642.911637][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  642.956162][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  642.987852][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  643.025551][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.058977][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.060027][ T3572] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  643.086934][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.098241][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.109000][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.119534][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.129512][T12080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.140086][T12080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.196625][T12080] batman_adv: batadv0: Interface activated: batadv_slave_1
[  643.215899][T12080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  643.234617][T12080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  643.253124][T12080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  643.264689][T12080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  643.289419][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  643.299737][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  643.429275][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.451518][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.637388][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.644062][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  643.670017][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.922115][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  644.703532][T12200] loop2: detected capacity change from 0 to 164
[  644.780973][T12200] Unable to read rock-ridge attributes
[  644.826513][T12206] loop4: detected capacity change from 0 to 256
[  645.069040][T12211] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  645.210810][ T8814] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  645.581248][ T8814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  645.602318][ T8814] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f
[  645.655582][ T8814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.696820][ T8814] usb 2-1: config 0 descriptor??
[  645.759036][ T8814] usb 2-1: bad CDC descriptors
[  645.764730][ T3572] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  645.774353][ T3572] Bluetooth: hci3: Injecting HCI hardware error event
[  645.784803][ T3578] Bluetooth: hci3: hardware error 0x00
[  645.807074][ T8814] usb 2-1: bad CDC descriptors
[  645.818541][ T8814] cdc_acm 2-1:0.0: Control and data interfaces are not separated!
[  645.827159][ T8814] cdc_acm 2-1:0.0: This needs exactly 3 endpoints
[  645.836996][ T8814] cdc_acm: probe of 2-1:0.0 failed with error -22
[  646.053360][T12232] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  646.273670][ T4669] usb 2-1: USB disconnect, device number 8
[  646.831436][T12244] loop3: detected capacity change from 0 to 164
[  646.831761][T12240] loop2: detected capacity change from 0 to 2048
[  646.871572][T12244] Unable to read rock-ridge attributes
[  648.187055][ T3578] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  648.504063][T12240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  648.604391][T12240] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set
[  648.698243][T12240] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117
[  648.748946][T12240] EXT4-fs (loop2): This should not happen!! Data will be lost
[  648.748946][T12240] 
[  648.817285][T12252] loop1: detected capacity change from 0 to 256
[  648.854398][T11006] EXT4-fs (loop2): unmounting filesystem.
[  648.969877][T12261] 9pnet_fd: Insufficient options for proto=fd
[  649.272886][T12274] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  649.404381][T12277] 8021q: adding VLAN 0 to HW filter on device bond2
[  649.439851][T12274] bond2 (unregistering): Released all slaves
[  649.538347][T12282] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  649.696385][T12285] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  650.040825][  T152] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  650.305742][T12293] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  650.320997][  T152] usb 5-1: Using ep0 maxpacket: 32
[  650.540014][T12293] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  650.572148][  T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  651.382187][  T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  651.392164][  T152] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  651.401331][  T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.415109][  T152] usb 5-1: config 0 descriptor??
[  651.463518][  T152] hub 5-1:0.0: USB hub found
[  651.612860][T12306] loop3: detected capacity change from 0 to 164
[  651.675283][T12305] loop1: detected capacity change from 0 to 2048
[  651.680975][T12306] Unable to read rock-ridge attributes
[  651.721021][  T152] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  651.781707][T12305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  651.829034][T12305] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set
[  651.847957][T12305] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117
[  651.864673][  T152] usbhid 5-1:0.0: can't add hid device: -71
[  651.873725][  T152] usbhid: probe of 5-1:0.0 failed with error -71
[  651.892176][T12305] EXT4-fs (loop1): This should not happen!! Data will be lost
[  651.892176][T12305] 
[  651.931654][  T152] usb 5-1: USB disconnect, device number 14
[  651.996642][T10413] EXT4-fs (loop1): unmounting filesystem.
[  652.003772][ T3572] Bluetooth: hci4: command 0x0406 tx timeout
[  652.167910][T12318] 9pnet_fd: Insufficient options for proto=fd
[  652.500416][T12329] loop4: detected capacity change from 0 to 256
[  654.668129][T12317] loop0: detected capacity change from 0 to 40427
[  654.703105][T12317] F2FS-fs (loop0): Unrecognized mount option "errors=remount-ro" or missing value
[  654.813456][T12341] overlayfs: missing 'lowerdir'
[  655.380890][ T3632] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  655.453262][T12356] fuse: Bad value for 'fd'
[  655.498501][T12358] loop3: detected capacity change from 0 to 512
[  655.565222][T12358] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  655.611469][ T3632] usb 5-1: device descriptor read/64, error -71
[  655.644043][T12360] 9pnet_fd: Insufficient options for proto=fd
[  655.900806][ T3632] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  655.925793][T12345] loop2: detected capacity change from 0 to 32768
[  656.111021][ T3632] usb 5-1: device descriptor read/64, error -71
[  656.321735][ T3578] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  656.334188][ T3578] Bluetooth: hci1: Injecting HCI hardware error event
[  656.348453][ T3572] Bluetooth: hci1: hardware error 0x00
[  656.932610][ T3632] usb usb5-port1: attempt power cycle
[  657.265381][T12380] overlayfs: missing 'lowerdir'
[  657.518588][ T3632] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  658.422207][ T3632] usb 5-1: device descriptor read/8, error -71
[  658.450982][  T154] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  658.560984][ T3572] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  658.640996][  T154] usb 4-1: device descriptor read/64, error -71
[  658.651618][T12392] loop0: detected capacity change from 0 to 2048
[  658.711112][T12392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  658.850584][ T7900] EXT4-fs (loop0): unmounting filesystem.
[  658.910793][  T154] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  659.066477][T12403] 9pnet_fd: Insufficient options for proto=fd
[  659.211060][  T154] usb 4-1: device descriptor read/64, error -71
[  659.345109][  T154] usb usb4-port1: attempt power cycle
[  659.860861][  T154] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  660.016395][  T154] usb 4-1: device descriptor read/8, error -71
[  660.388414][T12418] loop2: detected capacity change from 0 to 1024
[  660.411690][T12418] EXT4-fs: Ignoring removed i_version option
[  660.513263][T12425] overlayfs: missing 'lowerdir'
[  660.584306][T12418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  661.549894][T12439] 9pnet_fd: Insufficient options for proto=fd
[  661.621052][ T3632] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  661.765704][T11006] EXT4-fs (loop2): unmounting filesystem.
[  661.820938][ T3632] usb 5-1: device descriptor read/64, error -71
[  661.826056][ T3631] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.878030][T12443] loop3: detected capacity change from 0 to 1024
[  661.915364][T12443] EXT4-fs: Ignoring removed orlov option
[  661.921634][ T3631] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.945326][T12443] EXT4-fs (loop3): Test dummy encryption mode enabled
[  662.141460][T12443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  662.165138][ T3631] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.191024][ T3632] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  662.501934][ T3632] usb 5-1: device descriptor read/64, error -71
[  662.651643][ T3632] usb usb5-port1: attempt power cycle
[  662.835431][ T3631] bond0: (slave netdevsim0): Releasing backup interface
[  662.887523][ T3631] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.997787][T12080] EXT4-fs (loop3): unmounting filesystem.
[  663.124708][ T3632] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  663.232236][ T3632] usb 5-1: device descriptor read/8, error -71
[  663.310902][ T8970] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  663.354309][ T3578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  663.368229][ T3578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  663.378148][ T3578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  663.389290][ T3578] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  663.400612][ T3578] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  663.408913][ T3578] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  663.531398][ T3632] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  663.718955][ T8970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  663.736737][ T8970] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  663.800907][ T3632] usb 5-1: device not accepting address 22, error -71
[  663.809750][ T3632] usb usb5-port1: unable to enumerate USB device
[  663.821146][ T8970] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  663.833924][ T8970] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  663.848155][ T8970] usb 2-1: Manufacturer: syz
[  663.863846][ T8970] usb 2-1: config 0 descriptor??
[  663.903877][T12470] loop0: detected capacity change from 0 to 1024
[  663.941765][T12470] EXT4-fs: Ignoring removed i_version option
[  663.955144][T12460] chnl_net:caif_netlink_parms(): no params data found
[  664.000470][T12470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  664.330002][T12472] loop4: detected capacity change from 0 to 32768
[  664.509434][ T3631] device hsr_slave_0 left promiscuous mode
[  664.519565][ T3631] device hsr_slave_1 left promiscuous mode
[  664.547814][ T3631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  664.557723][ T3631] batman_adv: batadv0: Removing interface: batadv_slave_0
[  664.578110][ T3631] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  664.587475][ T3631] batman_adv: batadv0: Removing interface: batadv_slave_1
[  664.616817][ T3631] device bridge_slave_1 left promiscuous mode
[  664.623359][ T3631] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.644061][ T3631] device bridge_slave_0 left promiscuous mode
[  664.650352][ T3631] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.659985][ T7900] EXT4-fs (loop0): unmounting filesystem.
[  664.707727][ T3631] device veth1_macvtap left promiscuous mode
[  664.720801][ T3631] device veth0_macvtap left promiscuous mode
[  664.740719][ T3631] device veth1_vlan left promiscuous mode
[  664.758090][ T3631] device veth0_vlan left promiscuous mode
[  665.522699][ T3572] Bluetooth: hci2: command tx timeout
[  666.010090][  T154] usb 2-1: USB disconnect, device number 9
[  666.324674][ T3631] team0 (unregistering): Port device team_slave_1 removed
[  666.384648][ T3631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  666.441575][ T3631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  666.518025][ T3578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  666.529989][ T3578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  666.538735][ T3578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  666.548575][ T3578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  666.557077][ T3578] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  666.566407][ T3578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  666.685775][ T3631] bond0 (unregistering): Released all slaves
[  666.777613][T12460] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.786713][T12460] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.796643][T12460] device bridge_slave_0 entered promiscuous mode
[  666.818780][T12460] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.833036][T12460] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.842164][T12460] device bridge_slave_1 entered promiscuous mode
[  666.998733][T12460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.019487][T12460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.106262][T12460] team0: Port device team_slave_0 added
[  667.121025][T12460] team0: Port device team_slave_1 added
[  667.213497][T12460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.220517][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.252868][T12517] loop4: detected capacity change from 0 to 64
[  667.280094][T12460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.337209][T12460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.344728][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.389051][T12460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.535611][T12504] chnl_net:caif_netlink_parms(): no params data found
[  667.617720][T12522] loop1: detected capacity change from 0 to 512
[  667.627295][ T3578] Bluetooth: hci2: command tx timeout
[  667.873629][T12460] device hsr_slave_0 entered promiscuous mode
[  667.939194][T12460] device hsr_slave_1 entered promiscuous mode
[  668.366539][T12522] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  668.373272][T12522] EXT4-fs (loop1): mount failed
[  668.546970][T12504] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.570648][T12504] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.604540][T12504] device bridge_slave_0 entered promiscuous mode
[  668.651202][ T3578] Bluetooth: hci3: command tx timeout
[  668.672689][T12504] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.681562][ T4669] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  668.694287][T12504] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.710058][T12504] device bridge_slave_1 entered promiscuous mode
[  668.792956][T12504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.893677][T12504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.940856][ T4669] usb 4-1: Using ep0 maxpacket: 32
[  668.975528][T12504] team0: Port device team_slave_0 added
[  668.997780][T12504] team0: Port device team_slave_1 added
[  669.071499][ T4669] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping
[  669.084308][ T4669] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  669.115029][ T4669] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  669.137752][ T4669] usb 4-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00
[  669.152840][ T4669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.174955][ T4669] usb 4-1: config 0 descriptor??
[  669.184027][T12504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  669.210214][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  669.237100][T12504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  669.261205][T12504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  669.268283][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  669.294816][T12504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  669.557617][ T7232] usb 4-1: USB disconnect, device number 16
[  669.680953][ T3572] Bluetooth: hci2: command tx timeout
[  669.995784][T12504] device hsr_slave_0 entered promiscuous mode
[  670.046716][T12504] device hsr_slave_1 entered promiscuous mode
[  670.080967][T12504] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  670.160373][T12504] Cannot create hsr debugfs directory
[  670.220846][ T4669] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  670.384333][T12460] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  670.424080][T12460] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  670.450439][T12460] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  670.465865][T12543] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  670.480264][T12543] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  670.483384][T12460] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  670.527503][T12543] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  670.631326][ T4669] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  670.632448][T12504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.656098][ T4669] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  670.730962][ T3578] Bluetooth: hci3: command tx timeout
[  670.759478][ T4669] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  670.773205][T12504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.782213][ T4669] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  670.816927][ T4669] usb 5-1: Manufacturer: syz
[  670.827752][ T4669] usb 5-1: config 0 descriptor??
[  670.844784][T12504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.027841][T12460] 8021q: adding VLAN 0 to HW filter on device bond0
[  671.162634][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  671.284036][T12504] bond0: (slave netdevsim0): Releasing backup interface
[  671.451943][T12504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.760873][ T3578] Bluetooth: hci2: command tx timeout
[  671.778497][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  671.787950][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  671.832893][T12460] 8021q: adding VLAN 0 to HW filter on device team0
[  671.876987][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  671.902798][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  671.934623][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.941888][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state
[  672.026275][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  672.038137][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  672.047725][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  672.057576][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state
[  672.064775][ T8814] bridge0: port 2(bridge_slave_1) entered forwarding state
[  672.072870][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  672.082191][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  672.117091][T12550] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  672.126869][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  672.166262][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  672.193225][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  672.210139][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  672.220376][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  672.271797][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  672.289431][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  672.327665][T12460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  672.355930][T12460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  672.356260][T12550] siw: device registration error -19
[  672.373689][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  672.389723][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  672.631994][T12504] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  672.655397][T12504] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  672.687758][T12504] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  672.708342][T12504] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  672.801201][ T3578] Bluetooth: hci3: command tx timeout
[  672.846517][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  672.861284][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  672.894463][T12460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  672.902291][ T3632] usb 5-1: USB disconnect, device number 23
[  672.953776][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  672.964774][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  672.983174][T12504] 8021q: adding VLAN 0 to HW filter on device bond0
[  673.009830][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  673.021001][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  673.035252][T12460] device veth0_vlan entered promiscuous mode
[  673.133584][T12460] device veth1_vlan entered promiscuous mode
[  673.242368][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  673.250496][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  673.258545][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  673.267726][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  673.380566][T12580] loop3: detected capacity change from 0 to 512
[  674.902846][ T3578] Bluetooth: hci3: command tx timeout
[  675.055472][T12504] 8021q: adding VLAN 0 to HW filter on device team0
[  675.171752][T12580] EXT4-fs (loop3): corrupt root inode, run e2fsck
[  675.178280][T12580] EXT4-fs (loop3): mount failed
[  675.274017][T12460] device veth0_macvtap entered promiscuous mode
[  675.284658][T12460] device veth1_macvtap entered promiscuous mode
[  675.304415][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.316681][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.327207][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.338870][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.354744][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.368114][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.378596][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.389336][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.401520][T12460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  675.415931][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  675.426645][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  675.435845][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  675.444978][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  675.454420][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  675.463218][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  675.472649][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  675.487702][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  675.508542][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.521639][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  675.618075][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.629140][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  675.639663][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.649776][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  675.660430][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.676167][T12460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  675.684636][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  675.694414][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  675.703405][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  675.720859][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  675.730349][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  675.741301][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.748803][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  675.758431][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  675.767253][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  675.775821][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.782968][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  675.806421][T12460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  675.815989][T12460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  675.826427][T12460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  675.836201][T12460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  675.850006][ T7237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  675.883252][ T3631] device hsr_slave_0 left promiscuous mode
[  675.890166][ T3631] device hsr_slave_1 left promiscuous mode
[  675.897487][ T3631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  675.907658][ T3631] batman_adv: batadv0: Removing interface: batadv_slave_0
[  675.916948][ T3631] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  675.924760][ T3631] batman_adv: batadv0: Removing interface: batadv_slave_1
[  675.937025][ T3631] device veth1_macvtap left promiscuous mode
[  675.945367][ T3631] device veth0_macvtap left promiscuous mode
[  676.123568][ T3631] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  676.140888][ T3631] bond1 (unregistering): Released all slaves
[  676.161551][T12592] fuse: Unknown parameter 'group_id00000000000000000000'
[  676.367164][ T3631] team0 (unregistering): Port device team_slave_1 removed
[  676.399998][ T3631] team0 (unregistering): Port device team_slave_0 removed
[  676.421654][ T3631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  676.443731][ T3631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  676.596947][ T3631] bond0 (unregistering): Released all slaves
[  676.720510][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  676.775645][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  677.481902][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  677.495950][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  677.536690][ T7237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  677.549879][ T7237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  677.559485][ T7237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  677.568638][ T7237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  677.600107][T12504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  677.618241][T12504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  677.630589][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  677.641965][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  677.652306][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  677.661120][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  677.669772][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  677.678429][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  677.747547][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.802708][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  677.837149][T10491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.850908][T10491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  677.870214][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  677.904834][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  678.320331][T12615] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  678.950535][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  678.959820][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  678.991649][T12504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  679.083418][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  679.099993][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  679.141551][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  679.161619][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  679.180074][T12504] device veth0_vlan entered promiscuous mode
[  679.193681][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  679.209155][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  679.229033][T12504] device veth1_vlan entered promiscuous mode
[  679.330170][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  679.337999][ T3632] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  679.356122][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  679.369750][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  679.383160][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  679.400023][T12504] device veth0_macvtap entered promiscuous mode
[  679.422138][T12504] device veth1_macvtap entered promiscuous mode
[  679.440614][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.458354][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.468357][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.479440][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.489824][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.500408][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.512819][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.526458][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.539123][T12504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  679.550145][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  679.559436][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  679.570796][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  679.580185][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  679.593177][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.604882][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.616992][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.636305][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.652355][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.668964][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.679361][T12504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.700982][T12504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.717889][T12504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  679.727038][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  679.736744][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  679.750871][ T3632] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  679.773354][T12504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  679.782447][ T3632] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  679.799075][T12504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  679.833065][T12504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  679.843330][T12504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  679.889866][T12626] loop2: detected capacity change from 0 to 1024
[  679.897952][ T3632] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  679.914570][ T3632] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  679.925516][ T3632] usb 2-1: Manufacturer: syz
[  679.947126][T12626] EXT4-fs: quotafile must be on filesystem root
[  679.963079][ T3632] usb 2-1: config 0 descriptor??
[  679.974727][T12625] overlayfs: missing 'lowerdir'
[  680.009790][T10496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.035617][T10496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.063667][T12626] loop2: detected capacity change from 0 to 1024
[  680.088139][ T7231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  680.096631][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.112575][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.146616][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  680.426660][T12637] loop3: detected capacity change from 0 to 164
[  680.475431][T12637] Unable to read rock-ridge attributes
[  680.497745][T12637] Unable to read rock-ridge attributes
[  680.649051][T12640] CIFS: Unable to determine destination address
[  680.784196][T12642] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  681.301368][ T3662] hfsplus: b-tree write err: -5, ino 4
[  682.011923][ T7237] usb 2-1: USB disconnect, device number 10
[  682.322668][T12676] loop0: detected capacity change from 0 to 164
[  682.368897][T12676] Unable to read rock-ridge attributes
[  682.383665][T12676] Unable to read rock-ridge attributes
[  682.497680][T12679] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  683.986927][T12687] loop0: detected capacity change from 0 to 32768
[  684.111108][ T3632] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  684.180453][T12687] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (12687)
[  684.297425][T12709] fuse: Unknown parameter 'use00000000000000000000'
[  684.347711][T12687] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  684.433176][T12687] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  684.520293][T12687] BTRFS info (device loop0): force zlib compression, level 3
[  684.541236][ T3632] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  684.592949][ T3632] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  684.650170][T12687] BTRFS info (device loop0): force clearing of disk cache
[  684.663196][T12687] BTRFS info (device loop0): setting nodatasum
[  684.670957][ T3632] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  684.691751][T12687] BTRFS info (device loop0): allowing degraded mounts
[  684.699592][T12460] 
[  684.702203][T12460] ======================================================
[  684.709228][T12460] WARNING: possible circular locking dependency detected
[  684.716254][T12460] 6.1.93-syzkaller #0 Not tainted
[  684.721283][T12460] ------------------------------------------------------
[  684.728307][T12460] syz-executor.2/12460 is trying to acquire lock:
[  684.734813][T12460] ffff88807ef243f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x213/0x760
[  684.746080][T12460] 
2024/06/12 20:41:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  684.746080][T12460] but task is already holding lock:
[  684.753124][T12687] BTRFS info (device loop0): enabling disk space caching
[  684.753785][T12460] ffff88804acb4030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_unlink+0xe0/0x5f0
[  684.753853][T12460] 
[  684.753853][T12460] which lock already depends on the new lock.
[  684.753853][T12460] 
[  684.753861][T12460] 
[  684.753861][T12460] the existing dependency chain (in reverse order) is:
[  684.753869][T12460] 
[  684.753869][T12460] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}:
[  684.798736][T12460]        lock_acquire+0x1f8/0x5a0
[  684.803798][T12460]        down_read+0xad/0xa30
[  684.808509][T12460]        ext4_bmap+0x4b/0x410
[  684.810955][ T7237] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  684.813193][T12460]        bmap+0xa1/0xd0
[  684.824903][T12460]        jbd2_journal_flush+0x5b5/0xc40
[  684.830477][T12460]        ext4_ioctl+0x3986/0x5f60
[  684.835530][T12460]        __se_sys_ioctl+0xf1/0x160
[  684.840673][T12460]        do_syscall_64+0x3b/0xb0
[  684.847412][T12460]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  684.853864][T12460] 
[  684.853864][T12460] -> #0 (&journal->j_checkpoint_mutex){+.+.}-{3:3}:
[  684.862760][T12460]        validate_chain+0x1661/0x5950
[  684.864193][T12687] BTRFS info (device loop0): disk space caching is enabled
[  684.868155][T12460]        __lock_acquire+0x125b/0x1f80
[  684.880723][T12460]        lock_acquire+0x1f8/0x5a0
[  684.885796][T12460]        mutex_lock_io_nested+0x134/0xab0
[  684.891532][T12460]        __jbd2_log_wait_for_space+0x213/0x760
[  684.897709][T12460]        start_this_handle+0x1040/0x21b0
[  684.903369][T12460]        jbd2__journal_start+0x2d1/0x5c0
[  684.909021][T12460]        __ext4_journal_start_sb+0x19b/0x410
[  684.915022][T12460]        __ext4_unlink+0x412/0xba0
[  684.920132][T12460]        ext4_unlink+0x1d5/0x670
[  684.925067][T12460]        vfs_unlink+0x359/0x5f0
[  684.929918][T12460]        do_unlinkat+0x4a5/0x820
[  684.934858][T12460]        __x64_sys_unlink+0x45/0x50
[  684.940061][T12460]        do_syscall_64+0x3b/0xb0
[  684.945006][T12460]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  684.951430][T12460] 
[  684.951430][T12460] other info that might help us debug this:
[  684.951430][T12460] 
[  684.961742][T12460]  Possible unsafe locking scenario:
[  684.961742][T12460] 
[  684.969277][T12460]        CPU0                    CPU1
[  684.974637][T12460]        ----                    ----
[  684.980087][T12460]   lock(&sb->s_type->i_mutex_key#8);
[  684.985466][T12460]                                lock(&journal->j_checkpoint_mutex);
[  684.993532][T12460]                                lock(&sb->s_type->i_mutex_key#8);
[  685.001426][T12460]   lock(&journal->j_checkpoint_mutex);
[  685.006972][T12460] 
[  685.006972][T12460]  *** DEADLOCK ***
[  685.006972][T12460] 
[  685.015105][T12460] 3 locks held by syz-executor.2/12460:
[  685.020640][T12460]  #0: ffff88807ef20460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  685.029800][T12460]  #1: ffff888028498e08 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x266/0x820
[  685.040084][T12460]  #2: ffff88804acb4030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_unlink+0xe0/0x5f0
[  685.050184][T12460] 
[  685.050184][T12460] stack backtrace:
[  685.056074][T12460] CPU: 1 PID: 12460 Comm: syz-executor.2 Not tainted 6.1.93-syzkaller #0
[  685.064572][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  685.074634][T12460] Call Trace:
[  685.077911][T12460]  <TASK>
[  685.080855][T12460]  dump_stack_lvl+0x1e3/0x2cb
[  685.085547][T12460]  ? nf_tcp_handle_invalid+0x642/0x642
[  685.091021][T12460]  ? print_circular_bug+0x12b/0x1a0
[  685.096220][T12460]  check_noncircular+0x2fa/0x3b0
[  685.101170][T12460]  ? add_chain_block+0x850/0x850
[  685.106125][T12460]  ? lockdep_lock+0x11f/0x2a0
[  685.110811][T12460]  ? _find_first_zero_bit+0xd0/0x100
[  685.116101][T12460]  validate_chain+0x1661/0x5950
[  685.120981][T12460]  ? reacquire_held_locks+0x660/0x660
[  685.126364][T12460]  ? reacquire_held_locks+0x660/0x660
[  685.131746][T12460]  ? reacquire_held_locks+0x660/0x660
[  685.137149][T12460]  ? validate_chain+0x112/0x5950
[  685.142096][T12460]  ? unwind_next_frame+0x1a3f/0x2220
[  685.147382][T12460]  ? deref_stack_reg+0x17c/0x210
[  685.152324][T12460]  ? 0xffffffffa0003b40
[  685.156482][T12460]  ? 0xffffffffa0003b40
[  685.160631][T12460]  ? mark_lock+0x9a/0x340
[  685.164969][T12460]  __lock_acquire+0x125b/0x1f80
[  685.169834][T12460]  lock_acquire+0x1f8/0x5a0
[  685.174357][T12460]  ? __jbd2_log_wait_for_space+0x213/0x760
[  685.180182][T12460]  ? __jbd2_log_wait_for_space+0x213/0x760
[  685.186013][T12460]  ? read_lock_is_recursive+0x10/0x10
[  685.191411][T12460]  ? __might_sleep+0xb0/0xb0
[  685.196009][T12460]  ? __jbd2_log_wait_for_space+0x213/0x760
[  685.201828][T12460]  mutex_lock_io_nested+0x134/0xab0
[  685.207042][T12460]  ? __jbd2_log_wait_for_space+0x213/0x760
[  685.212858][T12460]  ? __jbd2_log_wait_for_space+0x207/0x760
[  685.218672][T12460]  ? __lock_acquire+0x1f80/0x1f80
[  685.223710][T12460]  ? mutex_lock_interruptible_nested+0x20/0x20
[  685.229875][T12460]  __jbd2_log_wait_for_space+0x213/0x760
[  685.235522][T12460]  ? do_raw_write_lock+0x143/0x4e0
[  685.240653][T12460]  ? jbd2_commit_block_csum_verify+0x4f0/0x4f0
[  685.246918][T12460]  ? do_raw_read_unlock+0x70/0x70
[  685.251950][T12460]  start_this_handle+0x1040/0x21b0
[  685.257068][T12460]  ? jbd2__journal_start+0x144/0x5c0
[  685.262370][T12460]  ? jbd2__journal_start+0x5c0/0x5c0
[  685.267667][T12460]  ? __kasan_slab_alloc+0x65/0x70
[  685.272691][T12460]  ? slab_post_alloc_hook+0x71/0x3a0
[  685.277982][T12460]  ? rcu_is_watching+0x11/0xb0
[  685.282745][T12460]  ? jbd2__journal_start+0x144/0x5c0
[  685.288037][T12460]  jbd2__journal_start+0x2d1/0x5c0
[  685.293153][T12460]  __ext4_journal_start_sb+0x19b/0x410
[  685.298621][T12460]  __ext4_unlink+0x412/0xba0
[  685.303218][T12460]  ? __ext4_read_dirblock+0x880/0x880
[  685.308596][T12460]  ? rwsem_write_trylock+0x166/0x210
[  685.313886][T12460]  ? inode_permission+0xf7/0x450
[  685.318824][T12460]  ? clear_nonspinnable+0x60/0x60
[  685.323856][T12460]  ext4_unlink+0x1d5/0x670
[  685.328276][T12460]  vfs_unlink+0x359/0x5f0
[  685.332613][T12460]  do_unlinkat+0x4a5/0x820
[  685.337056][T12460]  ? fsnotify_link_count+0xf0/0xf0
[  685.342182][T12460]  __x64_sys_unlink+0x45/0x50
[  685.346861][T12460]  do_syscall_64+0x3b/0xb0
[  685.351284][T12460]  ? clear_bhb_loop+0x45/0xa0
[  685.355972][T12460]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  685.361871][T12460] RIP: 0033:0x7f24d107c657
[  685.366373][T12460] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  685.386259][T12460] RSP: 002b:00007ffc78be1cb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  685.394674][T12460] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f24d107c657
[  685.402732][T12460] RDX: 00007ffc78be1ce0 RSI: 00007ffc78be1d70 RDI: 00007ffc78be1d70
[  685.410707][T12460] RBP: 00007ffc78be1d70 R08: 0000000000000000 R09: 0000000000000000
[  685.418681][T12460] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc78be2e20
[  685.426648][T12460] R13: 00007f24d10d9636 R14: 00000000000a7045 R15: 0000000000000008
[  685.434625][T12460]  </TASK>
[  685.437700][    C1] vkms_vblank_simulate: vblank timer overrun
[  685.470981][T12687] BTRFS error (device loop0): open_ctree failed
[  685.763610][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  685.769944][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  686.012171][T10494] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0